last executing test programs: 2m37.957333685s ago: executing program 1 (id=61): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0xfff, 0x4e20, 0x7, 0xa, 0x20, 0x0, 0x2b, 0x0, r1}, {0x10, 0x5, 0x9, 0x40, 0x0, 0x5, 0x5, 0x3}, {0x3, 0x9, 0x8}, 0x8001, 0x6e6bbf, 0x0, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x4, 0x1, 0x1, 0x7, 0x2, 0x80000000}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x24100000, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 2m36.838394194s ago: executing program 1 (id=69): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c0001"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 2m36.796558008s ago: executing program 1 (id=70): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) syz_emit_ethernet(0x12, 0x0, 0x0) 2m36.718841925s ago: executing program 1 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000006d21417a8bd3f9d2c7d73d7593feda243"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x40001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x6bf1c2d5adba8c32}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000100)={0x3, 'ip6gre0\x00', {0x400}, 0x9}) r5 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xa6\xb7Uu\xd3G\xbe\"\xbe\x87\xe7,]nW<:\xaa\xc9\xb8\x83C\x8c\xde$C4o~\xd7\xe5\xe9\xd2\xd9\x1bC)\xbf\xdf\xdb\xa6B\xe0x\xe5\xa3{\x82~\xd5(\xe7\x9c\xa2\xca\x8dnW\xf5\x16\"05\xf4\xadn\xcd\xa9\xe4\xe0/\x80>\xb9\xb3\xb4\xf5\xe2mN\xb4\xa3\x9e\x19{\xbe\xb8sj\xcb\xa4\x17(<\xbed\x17\xb0Dp\xce\xd8\xee0\xff\x98\x01Z8y*0\xfb\x9a\xbe\xb04\xbd\xecj\xad', &(0x7f0000000500)='\x00', 0x0) close(r5) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m36.581346287s ago: executing program 1 (id=77): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0xfff, 0x4e20, 0x7, 0xa, 0x20, 0x0, 0x2b, 0x0, r1}, {0x10, 0x5, 0x9, 0x40, 0x0, 0x5, 0x5, 0x3}, {0x3, 0x9, 0x8}, 0x8001, 0x6e6bbf, 0x0, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x4, 0x1, 0x1, 0x7, 0x2, 0x80000000}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) fstat(0xffffffffffffffff, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(0x0, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x10, 0x7}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 2m36.154921545s ago: executing program 1 (id=82): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getuid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) socket$kcm(0x21, 0x2, 0x2) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 2m36.115199498s ago: executing program 32 (id=82): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getuid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) socket$kcm(0x21, 0x2, 0x2) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 2.866150657s ago: executing program 4 (id=2197): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbec451d7d0b00180001801400020064756d6d7930"], 0x2c}}, 0x20000004) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x10001, 0x3a, 'E', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x46, 0x46, 0x46]}, 0x2d) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320000f00000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e2064010100ea4c9cbc075ff9843bf700000000000000000400040000000000feffffffffffffff00000000000000000000000000010000020001000000"], 0x78}}, 0x0) 2.650555146s ago: executing program 4 (id=2199): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) 2.60940581s ago: executing program 0 (id=2200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000380)=""/60, 0x3c, 0x10140, 0x0, 0xffffffffffffffb3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1d2b8254f68ef833cfa468ee9f09091efe6a5cc63a", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r11, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x41, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x4, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r13, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000740)=[0xffffffffffffffff, r8, r7, r6, r11, r8, r2, r3, r13, r5], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xb, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0xdc35aaeb30e1c95e, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x24, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x1, 0xd, 0x5, 0x5, 0xffffffffffffffff, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xae}, @jmp={0x5, 0x1, 0xa, 0x2, 0x8, 0x18, 0x4}, @jmp={0x5, 0x0, 0x2, 0x7, 0x6, 0x50, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_fd={0x18, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000001c0)=r14, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.401648548s ago: executing program 4 (id=2202): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='rxrpc_rx_lose\x00', r1, 0x0, 0x2}, 0xffffffffffffff77) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000003040)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000002010500000000000000000002feff089ca5d753720d7ef059d1bee836bc419e90e0d9d8196abd1f48a33f3df171b7b4216934b083e827fbe9b4b2d40613"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = syz_clone(0x40008000, &(0x7f0000000300)="c1566b0985912c2e72b2741c0a07c812c8083ce6cb7989a7c81392df504caa3b8286fe8a92ae2aac1d36370232d0958bc35be738b314fc24775dfaffd6499b52cf864dabc236cbc70328e6530f7ed605c4bd656593877e19e7fe0e8f7dbb835e39abc781d3d1120bf4c96fe84dfaf9e9dd", 0x71, &(0x7f0000000180), &(0x7f0000000380), &(0x7f00000003c0)="ab9c6beca50856055b27b853a38699b4c6d684f9017d5db1bc82a60b712b76d2c59eeaa721ce0d59220ea93a8ac7979d4b44487467dfb3c40206c597bfae3b941db8ac") setpriority(0x2, r7, 0xc7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r9 = syz_open_dev$evdev(&(0x7f00000002c0), 0x30556bc4, 0x40900) ioctl$EVIOCGKEYCODE(r9, 0x80084504, &(0x7f0000000440)=""/179) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4081) 2.384399879s ago: executing program 0 (id=2204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x453, 0x4, 0x70bd2d, 0x25dfdbfb, "73b13a37"}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) 2.253065051s ago: executing program 0 (id=2206): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r0, 0x0, 0x0) 2.129685552s ago: executing program 0 (id=2207): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472660d64309c27eadca809e727", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551c000000002000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x88d2d9534c58ef65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='inet_sk_error_report\x00', r6, 0x0, 0x5}, 0x61) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xcfc97f0478796a44, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7006ddf33987c43ee51b0000000000182d4b293d110000bc22", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005d76feff0800000085100000f6ffffff18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000bde7d297694fe22b49c127fbd07da4695d5d0812ccb492e12202b2b5be20eb338f366aced5ec2b1faa6bd7045b15800f047ee750a0cdfdb58bfa7a0c1207f53ecf24823694882fd8880599dfebc0ba0a2e60ebc1b1ced416e19ed7999c0721edaa1e76afde9d656b89cb73b985b07de2c9ae7441c30a5cae5cc8dea2c187341d37ee04b9206490bc52e5a8492ec1"], &(0x7f0000000040)='syzkaller\x00', 0x50, 0xc, &(0x7f0000000180)=""/12, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x4, 0x12, 0xb67}, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f00000006c0), 0x10, 0x10}, 0x94) r9 = mq_open(&(0x7f00000008c0)='3/!$-.\x00', 0x1, 0x0, &(0x7f0000000900)={0xfbfffffffffffff8, 0x4, 0xfff, 0x5a2}) mq_timedsend(r9, &(0x7f0000000a00)="615bcbd4cf079109e4e5e7eb867c384c7fc526ff05b6dfe37ad3c72e8cd6bed602f3c724ff5f512bd58ad88628a6a7a31ab5de2be7fd9f404cdab46e60432f8f95788cbc72eda90839cb55638eff49e906f2b7e156191d9e5f4d6fb2b063f211d85e4140e01eb34bdfdb7f11d6eccfc7bdf8ad76c2922db9b97219bf9967e2a7544ddcb45ddb096e4140e4fc4d5e9a7c6deabfefbd2bda5481e97f56bef8dd7508048f769e4b4093", 0xa8, 0x4, &(0x7f0000000940)={0x0, 0x3938700}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000080)) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000001c0)='writeback_queue_io\x00', r8, 0x0, 0x1b05950a}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r10, {0xe32}}, './file0\x00'}) 1.901295672s ago: executing program 4 (id=2211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) getpeername$inet6(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003060102000000f4000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.818325849s ago: executing program 0 (id=2214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) 1.454770972s ago: executing program 2 (id=2222): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000018a2d00f4500000000000f0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x48) 1.451530172s ago: executing program 2 (id=2223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) (async) r1 = syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d8, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0}, {0x0}]}, 0x4}, 0x1) r4 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) socket(0x2, 0x80805, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r5 = getpid() (rerun: 32) sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r5, 0x9, 0x0, 0x0) (async) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) ptrace(0x10, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="796100000000000000007e00000008000300306b", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) syz_emit_ethernet(0x68, &(0x7f0000000000)={@broadcast, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x8, "074f0c3aad8a"}]}}}}}}}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r10) sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r10) 1.379348938s ago: executing program 5 (id=2224): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0xfff, 0x4e20, 0x7, 0xa, 0x20, 0x0, 0x2b, 0x0, r1}, {0x10, 0x5, 0x9, 0x40, 0x0, 0x5, 0x5, 0x3}, {0x3, 0x9, 0x8}, 0x8001, 0x6e6bbf, 0x0, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x4, 0x1, 0x1, 0x7, 0x2, 0x80000000}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x24100000, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(0x0, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x10, 0x7}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pivot_root(0x0, 0x0) 1.366403989s ago: executing program 2 (id=2225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r7, 0x0, 0xffff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 1.035721809s ago: executing program 3 (id=2226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 998.781032ms ago: executing program 3 (id=2227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 957.033936ms ago: executing program 3 (id=2228): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x95, 0x80003}, 0x100002, 0x0, 0xffffffff, 0x3, 0xf, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) 937.368767ms ago: executing program 3 (id=2229): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x1000000) 873.567563ms ago: executing program 3 (id=2230): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x60044084) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), 0x0}, 0x20) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0x1}, {0xfff3, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) socket$kcm(0x2, 0xa, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01133f010b000000050010000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="03000000024000"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x57f79c41d3bc7994, '\x00', r6}, 0x94) r7 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x86) fchdir(r8) r9 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)="2631be7bb4400e4b2bd31ed62c2b4fcae67d995afbb29faed78062b2ac6f1f9e7f569b40d7dec364e7b2fb214c50c99e51e976", 0xfffffeb2, 0x40) sendfile(r9, r9, 0x0, 0xe3aa6ea) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r10, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x4000e7b, 0x0, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f00000030c0)={0xf, {"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", 0xb7b}}, 0x1006) r13 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101202, 0x60) renameat(r12, &(0x7f0000000200)='./file0\x00', r13, &(0x7f00000001c0)='./file0\x00') 872.031113ms ago: executing program 0 (id=2231): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r4}, 0x20) semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r5, 0x0, 0x0, 0x41, &(0x7f00000001c0)={0x1a, 0x17, 0x4a, 0x52, 0x81, 0x8, @local}, 0x10) 871.150583ms ago: executing program 4 (id=2232): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000001380)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000ac0)=@urb_type_iso={0x0, {0x6, 0x1}, 0x7, 0x45, &(0x7f0000000900)="0ec2b0e30f5312de461f5a1442eda03b97a24c58ddde55e6534b4f21d619e98f8dd8f62437a7ea6a486fc88bd46124d423385882fa6c5cb60165a5a2f4302b4a55d915ea5962e6046d248a8fbec59c0c4ae67a817c0da1dca8a34a43c3a7fe4ff46b9e3e87ff261678e10f96816ccc9af6aa2da1df4e735c341bd01ccf00c4d53669a3482c39ffec498ce83278f9f0c7741f52a40329b36246d8c93372a832735ffce7abecb513cfbe6cae1393d0efab65ee89a08b21c2a5d87c59b24f", 0xbd, 0x4, 0x8, 0x50, 0x5, 0x2, &(0x7f0000000a00)="c3b57954f4d2b23432ddc90dea2cc5b0471df5dabe0b70ef47aad22292b9f7b1126cb7c0b08b2910b861f2355f111ec5cff6a7a3811b473b934b8c7568a53acbb8da4eb51419259daf54b082bcb4b9f4adbc285060dd013982980e4cbe592e089727ba5a4b70385624d32dd4846cbc9d5a87d5967d14ca1d25ed2754d0873635f75bf864dc513872862ee7c1c6f8b4c5be677ea1bd5a3a10f887820650d3e43e956507e392481f8bbb9b9ac2", [{0x6, 0x9, 0x1}, {0x6, 0xff, 0xa001}, {0x1000, 0xa0, 0x3}, {0x3, 0x0, 0x5b1}, {0x4, 0x0, 0x72}, {0x7ff, 0x1, 0x8001}, {0x63, 0x40}, {0x3, 0x4, 0xfffffffe}, {0x8001, 0x8, 0x9}, {0x0, 0x493, 0x3}, {0x1, 0x10, 0x4}, {0x9, 0x4, 0x7ed}, {0x5, 0x8, 0x3}, {0x7681ef9e, 0xe, 0xfffffff7}, {0xe, 0x1, 0x9}, {0x6, 0xa}, {0xffc, 0x0, 0x8}, {0x4, 0x3, 0x2}, {0x400, 0x2, 0x3}, {0x7fff, 0xe87e, 0x3ff}, {0x0, 0x1, 0x7fff}, {0x8, 0x8, 0x9}, {0x7, 0x8, 0x3280}, {0xfffffffe, 0xe29d, 0x4}, {0x7d2e, 0x1, 0x7}, {0x6128aa96, 0x495b4c40, 0x5}, {0x0, 0xffffffff, 0x1}, {0x2, 0x0, 0x7f}, {0x400, 0x0, 0x401}, {0x4, 0x7}, {0x0, 0x80, 0x80000000}, {0x200, 0x10, 0x4}, {0x8, 0xb8, 0x800}, {0xd5, 0x800000, 0xd3}, {0xd2d, 0x5, 0xc43}, {0x4, 0x28, 0x6}, {0x209, 0x91d, 0x1}, {0x9, 0x7}, {0x0, 0x401}, {0x36, 0x6, 0x800}, {0x4e, 0x40, 0x92a}, {0x2, 0x1, 0x10000}, {0x9c, 0x200005, 0x5}, {0x6, 0x4, 0xc659}, {0x4, 0x10002, 0x6}, {0xfffffffc, 0x4, 0x15b9}, {0x2, 0x6, 0xfffffff9}, {0x7, 0x7, 0xbb6}, {0x8, 0x7, 0xffffffd2}, {0x1, 0x200, 0x9}, {0x3, 0x8, 0xd92a}, {0x3ff, 0x6f99, 0xff}, {0x8, 0x5, 0x6}, {0x56a, 0x81, 0x5}, {0x2, 0x5, 0x6}, {0x8, 0x2, 0xfffffffa}, {0x7fffffff, 0x1, 0x36a3}, {0x101, 0x100, 0x8}, {0x2, 0x283c, 0xfffffff7}, {0x6, 0x8, 0x101}, {0x2, 0xa8f6, 0xb8}, {0x7ff, 0x9, 0xffff0001}, {0x5, 0x9, 0x6}, {0x0, 0x1, 0x1}, {0xc191, 0x1, 0x5}, {0x4, 0x7, 0x1}, {0x4, 0x800, 0x43a432ae}, {0x1, 0x7fffffff, 0xc4}, {0x58e, 0x1, 0x8}, {0x5, 0x0, 0x5995}, {0x5, 0x0, 0x6}, {0x3, 0x4d, 0xd9af}, {0x400, 0xf, 0x2}, {0x8, 0x1, 0x9}, {0x2, 0x8, 0x6}, {0x2, 0x10000, 0xffff}, {0x8000, 0x2, 0x8114}, {0x8, 0x1, 0x8}, {0x6, 0x40, 0x1}, {0x7ff, 0x10001, 0x9}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r4, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380"], 0x150}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) 434.789192ms ago: executing program 5 (id=2233): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000018a2d00f4500000000000f0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x48) 224.778671ms ago: executing program 5 (id=2234): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) 188.699423ms ago: executing program 2 (id=2235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 188.200844ms ago: executing program 5 (id=2236): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x50, 0x1, 0xff, 0x6}]}) 152.115736ms ago: executing program 3 (id=2237): r0 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0xfff, 0x4e20, 0x7, 0xa, 0x20, 0x0, 0x2b, 0x0, r0}, {0x10, 0x5, 0x9, 0x40, 0x0, 0x5, 0x5, 0x3}, {0x3, 0x9, 0x8}, 0x8001, 0x6e6bbf, 0x0, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x4, 0x1, 0x1, 0x7, 0x2, 0x80000000}}, 0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) fstat(r1, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(0x0, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x10, 0x7}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 149.425417ms ago: executing program 2 (id=2238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 95.593152ms ago: executing program 5 (id=2239): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000009c0)=0xe8) quotactl$Q_SETQUOTA(0x80000000c0001400, &(0x7f00000007c0)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000940)={0x7f, 0x6, 0xa, 0x8, 0x7ea7, 0xffff, 0x7, 0x93, 0x65}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_winnt}, {@utf8}, {@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@numtail}, {@shortname_mixed}, {@uni_xlate}], [{@euid_lt={'euid<', r1}}, {@uid_eq={'uid', 0x3d, r1}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, 'nonumtail=0'}}, {@fowner_lt={'fowner<', r1}}, {@appraise}, {@euid_lt={'euid<', r1}}]}, 0x1, 0x283, &(0x7f00000005c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 63.894395ms ago: executing program 2 (id=2240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}]}]}, 0x28}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7fffffff, '\x00', r10, r9, 0x0, 0x4, 0x3}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000400), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x3, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x400001, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffc, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x2009, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x80000100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x87c, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x46, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x100, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x7}, {0x473, 0x8, 0x5, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x8, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x5, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x1, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x104, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8001, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8081, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) 1.36611ms ago: executing program 5 (id=2241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) 0s ago: executing program 4 (id=2242): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r0, 0x308000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000180)={0xd}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x2, &(0x7f0000000300)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2113}], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x8, 0x6, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000007c0)=[r2, r2, r1, r2, r1], 0x0, 0x10, 0x9}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000018140116"], 0x20}, 0x1, 0x0, 0x0, 0x4000844}, 0x44810) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000480)={0xe819, 0x0, 0x1, 0x1, 0x3, 0x0, [{0x8, 0x35d, 0xf, '\x00', 0x9}, {0x3, 0xb37, 0xffffffff, '\x00', 0x2000}, {0x62a, 0x0, 0xa}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000000000055090100000001009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000ad3ec8ee985d9336b556ce947eede793083238b9cce3b3b6ab697efcc6f7152020a729d7a104e1548d0c059b394e265a7b6c4d31bef80a79f85540abbfd7af01df30d3f47f98db2e9817d1dc3d827c9d7138d0"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$usbmon(&(0x7f0000a6a000/0x2000)=nil, 0x2000, 0x2, 0x8010, 0xffffffffffffffff, 0xf44) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): imit=128 [ 131.567989][ T7827] syz.0.1276: attempt to access beyond end of device [ 131.567989][ T7827] loop0: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 131.581687][ T7827] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 131.602257][ T7827] syz.0.1276: attempt to access beyond end of device [ 131.602257][ T7827] loop0: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 131.616001][ T7827] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 131.667756][ T7827] syz.0.1276: attempt to access beyond end of device [ 131.667756][ T7827] loop0: rw=2049, sector=178, nr_sectors = 48 limit=128 [ 131.706495][ T7827] syz.0.1276: attempt to access beyond end of device [ 131.706495][ T7827] loop0: rw=2049, sector=226, nr_sectors = 6 limit=128 [ 131.753274][ T7827] syz.0.1276: attempt to access beyond end of device [ 131.753274][ T7827] loop0: rw=8390657, sector=230, nr_sectors = 2 limit=128 [ 131.766988][ T7827] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 131.779301][ T7827] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 131.789877][ T7827] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 131.812895][ T7827] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 131.821975][ T7827] Buffer I/O error on dev loop0, logical block 123, lost async page write [ 131.831110][ T7827] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 131.984437][ T7850] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1282'. [ 132.077271][ T7856] loop2: detected capacity change from 0 to 512 [ 132.124492][ T7856] EXT4-fs (loop2): too many log groups per flexible block group [ 132.139327][ T7856] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 132.164898][ T7856] EXT4-fs (loop2): mount failed [ 132.306586][ T7881] loop0: detected capacity change from 0 to 128 [ 132.320472][ T7881] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.335514][ T7881] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.411560][ T3320] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 132.420106][ T3320] FAT-fs (loop0): Filesystem has been set read-only [ 132.457339][ T3320] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.467370][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 132.467383][ T29] audit: type=1400 audit(1767519344.833:9096): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 132.519624][ T7896] loop0: detected capacity change from 0 to 128 [ 132.530898][ T29] audit: type=1107 audit(1767519344.903:9097): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='s±:' [ 132.696808][ T7906] loop2: detected capacity change from 0 to 512 [ 132.703563][ T29] audit: type=1326 audit(1767519345.073:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 132.727384][ T29] audit: type=1326 audit(1767519345.103:9099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 132.750655][ T7906] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1302: bad orphan inode 15 [ 132.751135][ T29] audit: type=1326 audit(1767519345.123:9100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 132.787435][ T29] audit: type=1326 audit(1767519345.153:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 132.810904][ T29] audit: type=1326 audit(1767519345.153:9102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 132.836513][ T7906] ext4_test_bit(bit=14, block=5) = 0 [ 132.842691][ T7906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.851962][ T29] audit: type=1326 audit(1767519345.183:9103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 132.878625][ T29] audit: type=1326 audit(1767519345.183:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 132.902093][ T29] audit: type=1326 audit(1767519345.203:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7872 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 132.949229][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.073780][ T7919] loop4: detected capacity change from 0 to 1024 [ 133.091511][ T7919] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.114142][ T7919] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1305: bad orphan inode 134217728 [ 133.142739][ T7919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.340903][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.512090][ T7944] loop4: detected capacity change from 0 to 128 [ 134.311062][ T7944] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.327655][ T7944] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.367329][ T2873] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.716722][ T7993] __nla_validate_parse: 3 callbacks suppressed [ 134.716738][ T7993] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1324'. [ 134.824643][ T8004] loop0: detected capacity change from 0 to 512 [ 134.894440][ T8004] EXT4-fs (loop0): too many log groups per flexible block group [ 134.922736][ T8004] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 134.937413][ T8004] EXT4-fs (loop0): mount failed [ 135.113008][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'. [ 135.261612][ T8029] loop0: detected capacity change from 0 to 512 [ 135.293090][ T8029] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1336: bad orphan inode 15 [ 135.305698][ T8029] ext4_test_bit(bit=14, block=5) = 0 [ 135.329008][ T8029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.375749][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.984666][ T8065] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1348'. [ 136.058709][ T8072] loop2: detected capacity change from 0 to 512 [ 136.081754][ T8072] EXT4-fs (loop2): too many log groups per flexible block group [ 136.099742][ T8072] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 136.109792][ T8072] EXT4-fs (loop2): mount failed [ 136.216628][ T8083] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1356'. [ 136.268095][ T8088] FAULT_INJECTION: forcing a failure. [ 136.268095][ T8088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.281278][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.2.1357 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.281304][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.281314][ T8088] Call Trace: [ 136.281320][ T8088] [ 136.281327][ T8088] __dump_stack+0x1d/0x30 [ 136.281380][ T8088] dump_stack_lvl+0x95/0xd0 [ 136.281413][ T8088] dump_stack+0x15/0x1b [ 136.281433][ T8088] should_fail_ex+0x265/0x280 [ 136.281457][ T8088] should_fail+0xb/0x20 [ 136.281516][ T8088] should_fail_usercopy+0x1a/0x20 [ 136.281536][ T8088] strncpy_from_user+0x27/0x260 [ 136.281567][ T8088] getname_flags+0xae/0x3b0 [ 136.281628][ T8088] __x64_sys_linkat+0x73/0xa0 [ 136.281720][ T8088] x64_sys_call+0x2ad0/0x3000 [ 136.281776][ T8088] do_syscall_64+0xca/0x2b0 [ 136.281807][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.281909][ T8088] RIP: 0033:0x7f4f5a05f749 [ 136.282003][ T8088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.282020][ T8088] RSP: 002b:00007f4f58abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 136.282052][ T8088] RAX: ffffffffffffffda RBX: 00007f4f5a2b5fa0 RCX: 00007f4f5a05f749 [ 136.282063][ T8088] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 136.282074][ T8088] RBP: 00007f4f58abf090 R08: 0000000000001000 R09: 0000000000000000 [ 136.282085][ T8088] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 136.282095][ T8088] R13: 00007f4f5a2b6038 R14: 00007f4f5a2b5fa0 R15: 00007ffe56448b88 [ 136.282113][ T8088] [ 136.587898][ T8101] loop5: detected capacity change from 0 to 512 [ 136.596611][ T8098] loop2: detected capacity change from 0 to 128 [ 136.620446][ T8098] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.632728][ T8098] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.642764][ T8101] EXT4-fs (loop5): too many log groups per flexible block group [ 136.652967][ T8101] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 136.659794][ T8101] EXT4-fs (loop5): mount failed [ 136.804232][ T8123] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1370'. [ 136.839128][ T8126] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1371'. [ 136.873701][ T8123] bio_check_eod: 36 callbacks suppressed [ 136.873714][ T8123] syz.0.1370: attempt to access beyond end of device [ 136.873714][ T8123] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 136.893066][ T8123] syz.0.1370: attempt to access beyond end of device [ 136.893066][ T8123] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 136.903850][ T8129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.911845][ T8123] syz.0.1370: attempt to access beyond end of device [ 136.911845][ T8123] loop0: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 136.926797][ T8123] buffer_io_error: 18 callbacks suppressed [ 136.926810][ T8123] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 136.942445][ T8123] syz.0.1370: attempt to access beyond end of device [ 136.942445][ T8123] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 136.956187][ T8123] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 136.965651][ T8123] syz.0.1370: attempt to access beyond end of device [ 136.965651][ T8123] loop0: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 136.981403][ T8129] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1372: bg 0: block 5: invalid block bitmap [ 136.988074][ T8123] syz.0.1370: attempt to access beyond end of device [ 136.988074][ T8123] loop0: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 137.007908][ T8123] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 137.016529][ T8129] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 137.026271][ T8129] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1372: invalid indirect mapped block 3 (level 2) [ 137.039816][ T8123] syz.0.1370: attempt to access beyond end of device [ 137.039816][ T8123] loop0: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 137.053535][ T8123] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 137.062951][ T8123] syz.0.1370: attempt to access beyond end of device [ 137.062951][ T8123] loop0: rw=2049, sector=178, nr_sectors = 48 limit=128 [ 137.070341][ T8129] EXT4-fs (loop2): 2 truncates cleaned up [ 137.076916][ T8123] syz.0.1370: attempt to access beyond end of device [ 137.076916][ T8123] loop0: rw=2049, sector=226, nr_sectors = 6 limit=128 [ 137.082592][ T8129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.108429][ T8123] syz.0.1370: attempt to access beyond end of device [ 137.108429][ T8123] loop0: rw=8390657, sector=230, nr_sectors = 2 limit=128 [ 137.122103][ T8123] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 137.122819][ T8129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.130645][ T8123] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 137.154570][ T8123] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 137.168988][ T8123] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 137.178285][ T8123] Buffer I/O error on dev loop0, logical block 123, lost async page write [ 137.188479][ T8123] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 137.470756][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 137.470854][ T29] audit: type=1326 audit(1767519349.843:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f5a092005 code=0x7ffc0000 [ 137.504439][ T29] audit: type=1326 audit(1767519349.873:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f5a092005 code=0x7ffc0000 [ 137.528084][ T29] audit: type=1326 audit(1767519349.893:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4f5a092005 code=0x7ffc0000 [ 137.551521][ T29] audit: type=1326 audit(1767519349.913:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.5.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 137.574907][ T29] audit: type=1326 audit(1767519349.913:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.5.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 137.598351][ T29] audit: type=1326 audit(1767519349.913:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.5.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 137.621792][ T29] audit: type=1326 audit(1767519349.913:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.5.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 137.645203][ T29] audit: type=1326 audit(1767519349.923:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.5.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 137.668717][ T29] audit: type=1326 audit(1767519349.923:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.5.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 137.692110][ T29] audit: type=1326 audit(1767519349.923:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.5.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 137.811001][ T8153] set_capacity_and_notify: 2 callbacks suppressed [ 137.811014][ T8153] loop0: detected capacity change from 0 to 2048 [ 137.832571][ T8153] EXT4-fs (loop0): failed to initialize system zone (-117) [ 137.839871][ T8153] EXT4-fs (loop0): mount failed [ 137.865537][ T8153] loop0: detected capacity change from 0 to 2048 [ 137.913052][ T5397] Alternate GPT is invalid, using primary GPT. [ 137.919421][ T5397] loop0: p2 p3 p7 [ 137.933612][ T8153] Alternate GPT is invalid, using primary GPT. [ 137.940039][ T8153] loop0: p2 p3 p7 [ 138.064246][ T5397] udevd[5397]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 138.065354][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 138.151337][ T8172] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8172 comm=syz.0.1385 [ 138.191526][ T8174] loop4: detected capacity change from 0 to 128 [ 138.228766][ T8174] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1386'. [ 138.347905][ T8184] loop0: detected capacity change from 0 to 128 [ 138.368630][ T8184] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.390313][ T8184] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.447803][ T8195] loop0: detected capacity change from 0 to 512 [ 138.466777][ T8195] EXT4-fs (loop0): too many log groups per flexible block group [ 138.475658][ T8195] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 138.482675][ T8195] EXT4-fs (loop0): mount failed [ 138.567141][ T8205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8205 comm=syz.4.1398 [ 138.607683][ T8208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8208 comm=syz.5.1396 [ 138.620226][ T8208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8208 comm=syz.5.1396 [ 138.682437][ T8213] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5124 sclass=netlink_audit_socket pid=8213 comm=syz.5.1396 [ 138.702510][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1399'. [ 139.423563][ T8237] loop2: detected capacity change from 0 to 128 [ 139.486450][ T8237] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1409'. [ 139.805282][ T8257] loop5: detected capacity change from 0 to 512 [ 139.860525][ T8257] EXT4-fs (loop5): too many log groups per flexible block group [ 139.868234][ T8257] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 139.906489][ T8257] EXT4-fs (loop5): mount failed [ 139.945822][ T8261] loop2: detected capacity change from 0 to 512 [ 140.006997][ T8261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.067213][ T8261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.087843][ T8261] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.179687][ T8261] tipc: Enabling of bearer rejected, already enabled [ 140.224110][ T8261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1417'. [ 140.271980][ T8274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8274 comm=syz.5.1420 [ 140.304977][ T8261] tipc: Enabling of bearer rejected, already enabled [ 140.308529][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 140.323984][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.324016][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.324085][ T3316] Call Trace: [ 140.324094][ T3316] [ 140.324156][ T3316] __dump_stack+0x1d/0x30 [ 140.324184][ T3316] dump_stack_lvl+0x95/0xd0 [ 140.324206][ T3316] dump_stack+0x15/0x1b [ 140.324390][ T3316] dump_header+0x81/0x240 [ 140.324414][ T3316] oom_kill_process+0x295/0x350 [ 140.324439][ T3316] out_of_memory+0x97b/0xb80 [ 140.324495][ T3316] try_charge_memcg+0x610/0xa10 [ 140.324608][ T3316] charge_memcg+0x51/0xc0 [ 140.324641][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 140.324788][ T3316] __read_swap_cache_async+0x17b/0x2d0 [ 140.324817][ T3316] swap_cluster_readahead+0x362/0x3c0 [ 140.324851][ T3316] swapin_readahead+0xde/0x820 [ 140.324940][ T3316] ? next_uptodate_folio+0x81c/0x890 [ 140.325079][ T3316] ? percpu_counter_add_batch+0xb6/0x130 [ 140.325105][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 140.325142][ T3316] ? swap_cache_get_folio+0x277/0x280 [ 140.325202][ T3316] do_swap_page+0x2b4/0x21e0 [ 140.325314][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 140.325372][ T3316] handle_mm_fault+0x9d8/0x2c60 [ 140.325412][ T3316] do_user_addr_fault+0x630/0x1080 [ 140.325449][ T3316] exc_page_fault+0x62/0xa0 [ 140.325474][ T3316] asm_exc_page_fault+0x26/0x30 [ 140.325571][ T3316] RIP: 0033:0x7f71c4935fd7 [ 140.325591][ T3316] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24 [ 140.325614][ T3316] RSP: 002b:00007fffac444dc0 EFLAGS: 00010202 [ 140.325633][ T3316] RAX: 0000001b33e24000 RBX: 000000000000030b RCX: 0000000000021ef8 [ 140.325647][ T3316] RDX: 000000000a936aed RSI: 00007fffac444e50 RDI: 0000000000000007 [ 140.325661][ T3316] RBP: 00007fffac444dfc R08: 000000002857fa94 R09: 7fffffffffffffff [ 140.325676][ T3316] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 140.325695][ T3316] R13: 00000000000927c0 R14: 0000000000021f77 R15: 00007fffac444e50 [ 140.325716][ T3316] [ 140.325726][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 984 [ 140.540720][ T3316] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0 [ 140.548616][ T3316] kmem: usage 300552kB, limit 9007199254740988kB, failcnt 0 [ 140.556002][ T3316] Memory cgroup stats for /syz4: [ 140.556546][ T3316] cache 0 [ 140.564480][ T3316] rss 6807552 [ 140.567841][ T3316] shmem 0 [ 140.570808][ T3316] mapped_file 0 [ 140.574285][ T3316] dirty 0 [ 140.577252][ T3316] writeback 0 [ 140.580560][ T3316] workingset_refault_anon 45527 [ 140.585409][ T3316] workingset_refault_file 1031 [ 140.590163][ T3316] swap 294912 [ 140.593671][ T3316] swapcached 0 [ 140.597032][ T3316] pgpgin 361802 [ 140.600534][ T3316] pgpgout 360140 [ 140.604081][ T3316] pgfault 284513 [ 140.607615][ T3316] pgmajfault 7195 [ 140.611284][ T3316] inactive_anon 0 [ 140.614971][ T3316] active_anon 0 [ 140.618425][ T3316] inactive_file 6807552 [ 140.621221][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.622604][ T3316] active_file 0 [ 140.634940][ T3316] unevictable 0 [ 140.638398][ T3316] hierarchical_memory_limit 314572800 [ 140.643806][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 140.649946][ T3316] total_cache 0 [ 140.653499][ T3316] total_rss 6807552 [ 140.657295][ T3316] total_shmem 0 [ 140.660857][ T3316] total_mapped_file 0 [ 140.664831][ T3316] total_dirty 0 [ 140.668280][ T3316] total_writeback 0 [ 140.672166][ T3316] total_workingset_refault_anon 45527 [ 140.677532][ T3316] total_workingset_refault_file 1031 [ 140.682837][ T3316] total_swap 294912 [ 140.686708][ T3316] total_swapcached 0 [ 140.690608][ T3316] total_pgpgin 361802 [ 140.694573][ T3316] total_pgpgout 360140 [ 140.698626][ T3316] total_pgfault 284513 [ 140.702708][ T3316] total_pgmajfault 7195 [ 140.706848][ T3316] total_inactive_anon 0 [ 140.711018][ T3316] total_active_anon 0 [ 140.715061][ T3316] total_inactive_file 6807552 [ 140.719769][ T3316] total_active_file 0 [ 140.723767][ T3316] total_unevictable 0 [ 140.727796][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1400,pid=8215,uid=0 [ 140.742485][ T3316] Memory cgroup out of memory: Killed process 8215 (syz.4.1400) total-vm:93968kB, anon-rss:7792kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 140.903062][ T8282] loop0: detected capacity change from 0 to 512 [ 140.956504][ T8282] EXT4-fs (loop0): too many log groups per flexible block group [ 141.002497][ T8282] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 141.060941][ T8282] EXT4-fs (loop0): mount failed [ 141.375394][ T8306] loop5: detected capacity change from 0 to 128 [ 141.417234][ T8306] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1427'. [ 141.801060][ T8316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.864631][ T8316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.887779][ T8316] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.971214][ T8316] tipc: Enabled bearer , priority 10 [ 141.990961][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1431'. [ 142.032530][ T8316] tipc: Enabling of bearer rejected, already enabled [ 142.072888][ T8328] netlink: 'syz.0.1435': attribute type 2 has an invalid length. [ 142.082007][ T8328] program syz.0.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.097985][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.531212][ T8354] EXT4-fs (loop0): too many log groups per flexible block group [ 142.560339][ T8354] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 142.591744][ T8354] EXT4-fs (loop0): mount failed [ 142.770021][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 142.770035][ T29] audit: type=1400 audit(1767519355.133:10503): avc: denied { read write } for pid=8364 comm="syz.4.1446" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 142.799931][ T29] audit: type=1400 audit(1767519355.133:10504): avc: denied { open } for pid=8364 comm="syz.4.1446" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 142.831229][ T29] audit: type=1326 audit(1767519355.143:10505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.3.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 142.854739][ T29] audit: type=1326 audit(1767519355.143:10506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.3.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 142.856452][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 142.878263][ T29] audit: type=1326 audit(1767519355.173:10507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.3.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 142.920395][ T29] audit: type=1400 audit(1767519355.223:10508): avc: denied { ioctl } for pid=8364 comm="syz.4.1446" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 142.945460][ T29] audit: type=1326 audit(1767519355.283:10509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.3.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 142.970208][ T29] audit: type=1400 audit(1767519355.343:10510): avc: denied { ioctl } for pid=8364 comm="syz.4.1446" path="socket:[21048]" dev="sockfs" ino=21048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.074266][ T29] audit: type=1326 audit(1767519355.443:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 143.098703][ T29] audit: type=1326 audit(1767519355.473:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 143.129758][ T8376] netlink: 'syz.4.1449': attribute type 2 has an invalid length. [ 143.242624][ T8388] set_capacity_and_notify: 2 callbacks suppressed [ 143.242641][ T8388] loop4: detected capacity change from 0 to 512 [ 143.279531][ T8388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.321633][ T8388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.323685][ T8387] tipc: Enabling of bearer rejected, already enabled [ 143.343453][ T8388] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.462006][ T8388] tipc: Enabling of bearer rejected, already enabled [ 143.472781][ T8387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1455'. [ 143.519158][ T8388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1454'. [ 143.563384][ T8387] tipc: Enabling of bearer rejected, already enabled [ 143.580863][ T8388] tipc: Enabling of bearer rejected, already enabled [ 143.590961][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 143.649611][ T8404] loop0: detected capacity change from 0 to 512 [ 143.660100][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.694768][ T8404] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.733779][ T8404] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 143.752919][ T8411] loop4: detected capacity change from 0 to 1024 [ 143.774828][ T8411] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 143.785846][ T8411] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 143.786102][ T8404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1458: bg 0: block 248: padding at end of block bitmap is not set [ 143.814183][ T8411] JBD2: no valid journal superblock found [ 143.819966][ T8411] EXT4-fs (loop4): Could not load journal inode [ 143.831078][ T8404] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1458: Failed to acquire dquot type 1 [ 143.843851][ T8404] EXT4-fs (loop0): 1 truncate cleaned up [ 143.851080][ T8404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 143.880135][ T8411] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 143.899659][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 143.960916][ T8423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8423 comm=syz.5.1466 [ 144.010995][ T8430] loop5: detected capacity change from 0 to 512 [ 144.031548][ T8432] loop0: detected capacity change from 0 to 512 [ 144.050032][ T8432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.071599][ T8430] EXT4-fs (loop5): too many log groups per flexible block group [ 144.099328][ T8430] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 144.114382][ T8436] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 144.131880][ T8430] EXT4-fs (loop5): mount failed [ 144.137517][ T8432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.186841][ T8432] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.199321][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 144.208321][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 144.248652][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 144.272795][ T8432] tipc: Enabling of bearer rejected, already enabled [ 144.276449][ T8446] loop5: detected capacity change from 0 to 512 [ 144.314082][ T8446] EXT4-fs (loop5): too many log groups per flexible block group [ 144.343202][ T8432] tipc: Enabling of bearer rejected, already enabled [ 144.366174][ T8446] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 144.401016][ T8454] loop4: detected capacity change from 0 to 512 [ 144.427748][ T8446] EXT4-fs (loop5): mount failed [ 144.438480][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.448812][ T8454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.518029][ T8454] EXT4-fs error (device loop4): __ext4_iget:5426: inode #2: block 65535: comm syz.4.1475: invalid block [ 144.530879][ T8454] EXT4-fs (loop4): get root inode failed [ 144.536914][ T8454] EXT4-fs (loop4): mount failed [ 144.692035][ T8475] netlink: 'syz.2.1481': attribute type 2 has an invalid length. [ 145.253132][ T8503] loop5: detected capacity change from 0 to 512 [ 145.291092][ T8503] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1493: bad orphan inode 15 [ 145.327740][ T8503] ext4_test_bit(bit=14, block=5) = 0 [ 145.333794][ T8503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.408097][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.421928][ T8509] loop2: detected capacity change from 0 to 1024 [ 145.431022][ T8509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.468649][ T8509] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1494: bad orphan inode 134217728 [ 145.516377][ T8509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.617183][ T8522] FAULT_INJECTION: forcing a failure. [ 145.617183][ T8522] name failslab, interval 1, probability 0, space 0, times 0 [ 145.617940][ T8525] loop4: detected capacity change from 0 to 128 [ 145.629988][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.0.1500 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.630080][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.630092][ T8522] Call Trace: [ 145.630107][ T8522] [ 145.630116][ T8522] __dump_stack+0x1d/0x30 [ 145.630140][ T8522] dump_stack_lvl+0x95/0xd0 [ 145.630161][ T8522] dump_stack+0x15/0x1b [ 145.630269][ T8522] should_fail_ex+0x265/0x280 [ 145.630317][ T8522] should_failslab+0x8c/0xb0 [ 145.630338][ T8522] ? crypto_alg_mod_lookup+0xe4/0x490 [ 145.630366][ T8522] __kmalloc_cache_noprof+0x65/0x4c0 [ 145.630389][ T8522] ? __request_module+0x1c4/0x3e0 [ 145.630428][ T8522] ? crypto_alg_mod_lookup+0xe4/0x490 [ 145.630460][ T8522] __request_module+0x1c4/0x3e0 [ 145.630480][ T8522] ? fixup_exception+0x742/0xcf0 [ 145.630587][ T8522] ? crypto_alg_lookup+0x310/0x360 [ 145.630649][ T8522] crypto_alg_mod_lookup+0xe4/0x490 [ 145.630677][ T8522] crypto_find_alg+0x61/0x70 [ 145.630704][ T8522] crypto_type_has_alg+0x28/0x60 [ 145.630794][ T8522] crypto_has_ahash+0x27/0x40 [ 145.630834][ T8522] xfrm_aalg_get_byname+0x10a/0x170 [ 145.630861][ T8522] xfrm_add_sa+0x1447/0x25b0 [ 145.630891][ T8522] xfrm_user_rcv_msg+0x566/0x660 [ 145.630920][ T8522] ? __kfree_skb+0x109/0x150 [ 145.631001][ T8522] ? nlmon_xmit+0x4f/0x60 [ 145.631020][ T8522] ? consume_skb+0x49/0x150 [ 145.631054][ T8522] netlink_rcv_skb+0x123/0x220 [ 145.631095][ T8522] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 145.631133][ T8522] xfrm_netlink_rcv+0x48/0x60 [ 145.631160][ T8522] netlink_unicast+0x5c0/0x690 [ 145.631247][ T8522] netlink_sendmsg+0x58b/0x6b0 [ 145.631278][ T8522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.631372][ T8522] __sock_sendmsg+0x145/0x180 [ 145.631391][ T8522] ____sys_sendmsg+0x31e/0x4a0 [ 145.631432][ T8522] ___sys_sendmsg+0x17b/0x1d0 [ 145.631472][ T8522] __x64_sys_sendmsg+0xd4/0x160 [ 145.631501][ T8522] x64_sys_call+0x17ba/0x3000 [ 145.631542][ T8522] do_syscall_64+0xca/0x2b0 [ 145.631573][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.631593][ T8522] RIP: 0033:0x7f3f2187f749 [ 145.631612][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.631629][ T8522] RSP: 002b:00007f3f202df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.631800][ T8522] RAX: ffffffffffffffda RBX: 00007f3f21ad5fa0 RCX: 00007f3f2187f749 [ 145.631811][ T8522] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 145.631824][ T8522] RBP: 00007f3f202df090 R08: 0000000000000000 R09: 0000000000000000 [ 145.631837][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.631848][ T8522] R13: 00007f3f21ad6038 R14: 00007f3f21ad5fa0 R15: 00007fffe4617218 [ 145.631867][ T8522] [ 145.743921][ T8529] tipc: Enabling of bearer rejected, already enabled [ 145.918519][ T8530] __nla_validate_parse: 6 callbacks suppressed [ 145.918531][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1501'. [ 145.933719][ T8530] tipc: Disabling bearer [ 145.938994][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.939509][ T8525] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1499'. [ 146.014799][ T8535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.031854][ T8525] bio_check_eod: 83 callbacks suppressed [ 146.031869][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.031869][ T8525] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 146.050533][ T8545] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1507'. [ 146.057634][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.057634][ T8525] loop4: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 146.061208][ T8535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.073962][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.073962][ T8525] loop4: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 146.099430][ T8525] buffer_io_error: 46 callbacks suppressed [ 146.099443][ T8525] Buffer I/O error on dev loop4, logical block 75, lost async page write [ 146.123797][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.123797][ T8525] loop4: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 146.137512][ T8525] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 146.147909][ T8535] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.162199][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.162199][ T8525] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 146.170584][ T8551] netlink: 'syz.0.1510': attribute type 2 has an invalid length. [ 146.186078][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.186078][ T8525] loop4: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 146.199922][ T8525] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 146.218237][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.218237][ T8525] loop4: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 146.231988][ T8525] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 146.241586][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.241586][ T8525] loop4: rw=2049, sector=178, nr_sectors = 48 limit=128 [ 146.243876][ T8535] tipc: Enabling of bearer rejected, already enabled [ 146.255500][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.255500][ T8525] loop4: rw=2049, sector=226, nr_sectors = 6 limit=128 [ 146.276580][ T8525] syz.4.1499: attempt to access beyond end of device [ 146.276580][ T8525] loop4: rw=8390657, sector=230, nr_sectors = 2 limit=128 [ 146.290428][ T8525] Buffer I/O error on dev loop4, logical block 115, lost async page write [ 146.299080][ T8525] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 146.302126][ T8535] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1504'. [ 146.322745][ T8535] tipc: Enabling of bearer rejected, already enabled [ 146.325431][ T8525] Buffer I/O error on dev loop4, logical block 119, lost async page write [ 146.359097][ T8525] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 146.368485][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.403741][ T8525] Buffer I/O error on dev loop4, logical block 123, lost async page write [ 146.443790][ T8525] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 146.476770][ T8565] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.508207][ T8565] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1513: bad orphan inode 134217728 [ 146.549557][ T8565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.639467][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.661058][ T8577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1521'. [ 146.741930][ T8579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.780324][ T8579] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.815572][ T8588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.840307][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.863654][ T8588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.917541][ T8588] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.931625][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1526'. [ 146.986527][ T8588] tipc: Enabling of bearer rejected, already enabled [ 147.040710][ T8601] netlink: 'syz.3.1527': attribute type 2 has an invalid length. [ 147.051638][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1523'. [ 147.091885][ T8588] tipc: Enabling of bearer rejected, already enabled [ 147.132549][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.194464][ T8607] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1530'. [ 147.238919][ T8616] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.253918][ T8616] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1529: bad orphan inode 134217728 [ 147.265455][ T8616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.318667][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.437988][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1538'. [ 147.512537][ T8633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8633 comm=syz.3.1539 [ 147.879039][ T8650] netlink: 'syz.2.1545': attribute type 2 has an invalid length. [ 147.965844][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 147.965860][ T29] audit: type=1326 audit(1767519360.333:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 147.995690][ T29] audit: type=1326 audit(1767519360.333:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.019274][ T29] audit: type=1326 audit(1767519360.333:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.042764][ T29] audit: type=1326 audit(1767519360.333:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.066244][ T29] audit: type=1326 audit(1767519360.333:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.070326][ T8654] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.089805][ T29] audit: type=1326 audit(1767519360.333:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.089866][ T29] audit: type=1326 audit(1767519360.333:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.145656][ T29] audit: type=1326 audit(1767519360.333:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.157220][ T8652] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.169167][ T29] audit: type=1326 audit(1767519360.333:11141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.169214][ T29] audit: type=1326 audit(1767519360.333:11142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.4.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 148.264933][ T8654] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1547: bad orphan inode 134217728 [ 148.296897][ T8654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.334074][ T8652] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.391289][ T2441] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.477779][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.633098][ T8687] set_capacity_and_notify: 8 callbacks suppressed [ 148.633114][ T8687] loop2: detected capacity change from 0 to 512 [ 148.682899][ T8687] EXT4-fs (loop2): too many log groups per flexible block group [ 148.700387][ T8687] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 148.714089][ T8687] EXT4-fs (loop2): mount failed [ 148.882766][ T8702] loop2: detected capacity change from 0 to 512 [ 148.905671][ T8702] EXT4-fs (loop2): too many log groups per flexible block group [ 148.924147][ T8702] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 148.941909][ T8702] EXT4-fs (loop2): mount failed [ 149.027029][ T8714] netlink: 'syz.2.1564': attribute type 2 has an invalid length. [ 149.384069][ T8735] FAULT_INJECTION: forcing a failure. [ 149.384069][ T8735] name failslab, interval 1, probability 0, space 0, times 0 [ 149.396827][ T8735] CPU: 1 UID: 0 PID: 8735 Comm: syz.5.1570 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.396853][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.396928][ T8735] Call Trace: [ 149.396934][ T8735] [ 149.396941][ T8735] __dump_stack+0x1d/0x30 [ 149.396999][ T8735] dump_stack_lvl+0x95/0xd0 [ 149.397020][ T8735] dump_stack+0x15/0x1b [ 149.397038][ T8735] should_fail_ex+0x265/0x280 [ 149.397125][ T8735] should_failslab+0x8c/0xb0 [ 149.397147][ T8735] __kmalloc_cache_noprof+0x65/0x4c0 [ 149.397170][ T8735] ? sctp_stream_init_ext+0x39/0x130 [ 149.397193][ T8735] sctp_stream_init_ext+0x39/0x130 [ 149.397214][ T8735] sctp_sendmsg_to_asoc+0xe75/0xf20 [ 149.397259][ T8735] ? sctp_assoc_add_peer+0x9f6/0xac0 [ 149.397291][ T8735] ? sctp_connect_new_asoc+0x29c/0x3a0 [ 149.397390][ T8735] sctp_sendmsg+0x1263/0x18d0 [ 149.397418][ T8735] ? selinux_socket_sendmsg+0xd1/0x1b0 [ 149.397444][ T8735] ? __pfx_sctp_sendmsg+0x10/0x10 [ 149.397469][ T8735] inet_sendmsg+0xc5/0xd0 [ 149.397519][ T8735] __sock_sendmsg+0x102/0x180 [ 149.397600][ T8735] __sys_sendto+0x268/0x330 [ 149.397704][ T8735] __x64_sys_sendto+0x76/0x90 [ 149.397757][ T8735] x64_sys_call+0x29a7/0x3000 [ 149.397777][ T8735] do_syscall_64+0xca/0x2b0 [ 149.397810][ T8735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.397833][ T8735] RIP: 0033:0x7ff2c8d4f749 [ 149.397889][ T8735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.397907][ T8735] RSP: 002b:00007ff2c77af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 149.397927][ T8735] RAX: ffffffffffffffda RBX: 00007ff2c8fa5fa0 RCX: 00007ff2c8d4f749 [ 149.397986][ T8735] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 149.397999][ T8735] RBP: 00007ff2c77af090 R08: 0000200000000040 R09: 000000000000001c [ 149.398010][ T8735] R10: 00000000000400e0 R11: 0000000000000246 R12: 0000000000000001 [ 149.398022][ T8735] R13: 00007ff2c8fa6038 R14: 00007ff2c8fa5fa0 R15: 00007fff56287588 [ 149.398043][ T8735] [ 149.746729][ T8746] loop5: detected capacity change from 0 to 128 [ 149.761384][ T8746] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.786709][ T8746] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.864272][ T6002] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.229212][ T8776] tipc: Enabling of bearer rejected, already enabled [ 150.254715][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1586'. [ 150.289221][ T8776] tipc: Enabling of bearer rejected, already enabled [ 150.402883][ T8789] loop2: detected capacity change from 0 to 128 [ 150.430469][ T8789] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.470548][ T8789] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.523648][ T6002] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.476950][ T8825] loop0: detected capacity change from 0 to 128 [ 151.576038][ T8825] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1601'. [ 151.630403][ T8834] loop5: detected capacity change from 0 to 128 [ 151.632492][ T8825] bio_check_eod: 36 callbacks suppressed [ 151.632505][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.632505][ T8825] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 151.645013][ T8834] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.670425][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.670425][ T8825] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 151.685110][ T8834] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.694660][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.694660][ T8825] loop0: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 151.708461][ T8825] buffer_io_error: 18 callbacks suppressed [ 151.708472][ T8825] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 151.723709][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.723709][ T8825] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 151.737379][ T8825] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 151.763979][ T53] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.796132][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.796132][ T8825] loop0: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 151.829174][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.829174][ T8825] loop0: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 151.842935][ T8825] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 151.878637][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.878637][ T8825] loop0: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 151.892335][ T8825] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 151.940539][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.940539][ T8825] loop0: rw=2049, sector=178, nr_sectors = 48 limit=128 [ 151.995119][ T8825] syz.0.1601: attempt to access beyond end of device [ 151.995119][ T8825] loop0: rw=2049, sector=226, nr_sectors = 6 limit=128 [ 152.048260][ T8825] syz.0.1601: attempt to access beyond end of device [ 152.048260][ T8825] loop0: rw=8390657, sector=230, nr_sectors = 2 limit=128 [ 152.061969][ T8825] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 152.088899][ T8825] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 152.114349][ T8825] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 152.147211][ T8825] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 152.174942][ T8825] Buffer I/O error on dev loop0, logical block 123, lost async page write [ 152.205955][ T8825] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 152.571174][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1616'. [ 152.609662][ T8879] loop0: detected capacity change from 0 to 512 [ 152.631281][ T8879] EXT4-fs (loop0): too many log groups per flexible block group [ 152.641460][ T8879] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 152.649377][ T8879] EXT4-fs (loop0): mount failed [ 152.733431][ T8883] loop0: detected capacity change from 0 to 128 [ 152.767846][ T8883] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.802554][ T8883] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.818035][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'. [ 152.830312][ T42] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.855413][ T8891] loop4: detected capacity change from 0 to 512 [ 152.894402][ T8891] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1621: bad orphan inode 15 [ 152.939065][ T8891] ext4_test_bit(bit=14, block=5) = 0 [ 152.967654][ T8891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.025908][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 153.058310][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.087798][ T8909] syz_tun: entered promiscuous mode [ 153.115516][ T8909] syz_tun: refused to change device tx_queue_len [ 153.124094][ T8921] loop4: detected capacity change from 0 to 512 [ 153.164097][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 153.164110][ T29] audit: type=1326 audit(1767519365.533:11770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.180686][ T8921] EXT4-fs (loop4): too many log groups per flexible block group [ 153.201731][ T29] audit: type=1326 audit(1767519365.533:11771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.225367][ T8921] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 153.225386][ T29] audit: type=1326 audit(1767519365.533:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.240241][ T8921] EXT4-fs (loop4): mount failed [ 153.255812][ T29] audit: type=1326 audit(1767519365.533:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.284268][ T29] audit: type=1326 audit(1767519365.533:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.307749][ T29] audit: type=1326 audit(1767519365.533:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.331443][ T29] audit: type=1326 audit(1767519365.533:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.354954][ T29] audit: type=1326 audit(1767519365.533:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.378521][ T29] audit: type=1326 audit(1767519365.533:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.402065][ T29] audit: type=1326 audit(1767519365.533:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8922 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 153.485855][ T8907] bridge0: entered promiscuous mode [ 153.499400][ T8907] macvtap1: entered promiscuous mode [ 153.504838][ T8907] macvtap1: entered allmulticast mode [ 153.510251][ T8907] bridge0: entered allmulticast mode [ 153.521289][ T8907] bridge0: port 3(macvtap1) entered blocking state [ 153.527862][ T8907] bridge0: port 3(macvtap1) entered disabled state [ 153.536764][ T8907] bridge0: left allmulticast mode [ 153.541976][ T8907] bridge0: left promiscuous mode [ 153.901503][ T8947] FAULT_INJECTION: forcing a failure. [ 153.901503][ T8947] name failslab, interval 1, probability 0, space 0, times 0 [ 153.914238][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.2.1637 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.914265][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.914276][ T8947] Call Trace: [ 153.914282][ T8947] [ 153.914289][ T8947] __dump_stack+0x1d/0x30 [ 153.914336][ T8947] dump_stack_lvl+0x95/0xd0 [ 153.914358][ T8947] dump_stack+0x15/0x1b [ 153.914378][ T8947] should_fail_ex+0x265/0x280 [ 153.914401][ T8947] should_failslab+0x8c/0xb0 [ 153.914421][ T8947] __kmalloc_cache_noprof+0x65/0x4c0 [ 153.914524][ T8947] ? audit_log_d_path+0x8d/0x150 [ 153.914548][ T8947] audit_log_d_path+0x8d/0x150 [ 153.914569][ T8947] audit_log_d_path_exe+0x42/0x70 [ 153.914588][ T8947] audit_log_task+0x1e9/0x250 [ 153.914685][ T8947] ? kstrtouint+0x76/0xc0 [ 153.914705][ T8947] audit_seccomp+0x61/0x100 [ 153.914730][ T8947] ? __seccomp_filter+0x832/0x1260 [ 153.914783][ T8947] __seccomp_filter+0x843/0x1260 [ 153.914930][ T8947] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 153.914960][ T8947] ? vfs_write+0x7e8/0x960 [ 153.914989][ T8947] ? __rcu_read_unlock+0x4f/0x70 [ 153.915006][ T8947] ? __fget_files+0x184/0x1c0 [ 153.915035][ T8947] __secure_computing+0x82/0x150 [ 153.915057][ T8947] syscall_trace_enter+0xcf/0x1e0 [ 153.915077][ T8947] do_syscall_64+0xa4/0x2b0 [ 153.915106][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.915183][ T8947] RIP: 0033:0x7f4f5a05f749 [ 153.915228][ T8947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.915242][ T8947] RSP: 002b:00007f4f58abf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 153.915297][ T8947] RAX: ffffffffffffffda RBX: 00007f4f5a2b5fa0 RCX: 00007f4f5a05f749 [ 153.915311][ T8947] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 153.915324][ T8947] RBP: 00007f4f58abf090 R08: 0000000000000000 R09: 0000000000000000 [ 153.915335][ T8947] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 153.915346][ T8947] R13: 00007f4f5a2b6038 R14: 00007f4f5a2b5fa0 R15: 00007ffe56448b88 [ 153.915361][ T8947] [ 154.190141][ T8952] loop2: detected capacity change from 0 to 1024 [ 154.207335][ T8952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.240479][ T8952] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1640: bad orphan inode 134217728 [ 154.253822][ T8952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.279755][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.328028][ T8963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8963 comm=syz.2.1641 [ 154.391556][ T8967] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1644'. [ 154.609155][ T8975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8975 comm=syz.2.1646 [ 155.142907][ T9013] loop0: detected capacity change from 0 to 512 [ 155.191210][ T9013] EXT4-fs (loop0): too many log groups per flexible block group [ 155.198981][ T9013] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 155.206020][ T9013] EXT4-fs (loop0): mount failed [ 155.426651][ T9023] tipc: Bearer : already 2 bearers with priority 10 [ 155.434192][ T9023] tipc: Bearer : trying with adjusted priority [ 155.441279][ T9023] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 155.678263][ T9035] loop4: detected capacity change from 0 to 512 [ 155.707501][ T9035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.760604][ T9035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.778726][ T9035] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.816228][ T9051] loop5: detected capacity change from 0 to 1024 [ 155.835137][ T9051] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.848363][ T9035] tipc: Enabling of bearer rejected, already enabled [ 155.856539][ T9051] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1670: bad orphan inode 134217728 [ 155.872860][ T9035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1664'. [ 155.876393][ T9051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.911867][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.921810][ T9035] tipc: Enabling of bearer rejected, already enabled [ 155.974494][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.334919][ T9087] loop0: detected capacity change from 0 to 512 [ 156.352782][ T9087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.392129][ T9087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.435104][ T9087] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.527699][ T9103] loop2: detected capacity change from 0 to 1024 [ 156.536790][ T9103] EXT4-fs: Ignoring removed orlov option [ 156.543480][ T9087] tipc: Enabled bearer , priority 10 [ 156.573176][ T9103] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0002] [ 156.585522][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 156.635823][ T9103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.658760][ T9087] tipc: Enabling of bearer rejected, already enabled [ 156.748537][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.822013][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.892058][ T9119] loop2: detected capacity change from 0 to 512 [ 156.941291][ T9119] EXT4-fs (loop2): too many log groups per flexible block group [ 156.964791][ T9119] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 156.972655][ T9132] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1695'. [ 156.990314][ T9119] EXT4-fs (loop2): mount failed [ 158.215634][ T9175] loop0: detected capacity change from 0 to 512 [ 158.237434][ T9175] EXT4-fs (loop0): too many log groups per flexible block group [ 158.245384][ T9175] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 158.252607][ T9175] EXT4-fs (loop0): mount failed [ 158.439780][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 158.439865][ T29] audit: type=1107 audit(1767519370.803:12426): pid=9187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='s±:' [ 158.495626][ T9192] loop0: detected capacity change from 0 to 128 [ 158.528044][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 158.761688][ T29] audit: type=1326 audit(1767519371.133:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 158.785432][ T29] audit: type=1326 audit(1767519371.153:12428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c4a5f749 code=0x7ffc0000 [ 158.813506][ T29] audit: type=1326 audit(1767519371.183:12429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 158.840406][ T29] audit: type=1107 audit(1767519371.213:12430): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='s±:' [ 158.854091][ T29] audit: type=1326 audit(1767519371.213:12431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 158.877651][ T29] audit: type=1326 audit(1767519371.213:12432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 158.901267][ T29] audit: type=1326 audit(1767519371.213:12433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 158.924799][ T29] audit: type=1326 audit(1767519371.213:12434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 158.948309][ T29] audit: type=1326 audit(1767519371.213:12435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f71c4a92005 code=0x7ffc0000 [ 159.533176][ T9248] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 159.563043][ T9248] SELinux: failed to load policy [ 159.780986][ T9254] FAULT_INJECTION: forcing a failure. [ 159.780986][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 159.793672][ T9254] CPU: 1 UID: 0 PID: 9254 Comm: syz.5.1737 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.793701][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.793714][ T9254] Call Trace: [ 159.793721][ T9254] [ 159.793787][ T9254] __dump_stack+0x1d/0x30 [ 159.793863][ T9254] dump_stack_lvl+0x95/0xd0 [ 159.794064][ T9254] dump_stack+0x15/0x1b [ 159.794127][ T9254] should_fail_ex+0x265/0x280 [ 159.794152][ T9254] should_failslab+0x8c/0xb0 [ 159.794221][ T9254] kmem_cache_alloc_noprof+0x69/0x4b0 [ 159.794244][ T9254] ? audit_log_start+0x342/0x720 [ 159.794265][ T9254] ? __account_obj_stock+0x211/0x350 [ 159.794288][ T9254] audit_log_start+0x342/0x720 [ 159.794307][ T9254] ? obj_cgroup_charge_account+0x122/0x1a0 [ 159.794404][ T9254] ? should_fail_ex+0xdb/0x280 [ 159.794462][ T9254] audit_seccomp+0x48/0x100 [ 159.794492][ T9254] ? __seccomp_filter+0x832/0x1260 [ 159.794519][ T9254] __seccomp_filter+0x843/0x1260 [ 159.794547][ T9254] ? errseq_sample+0x2f/0x40 [ 159.794652][ T9254] ? file_init_path+0x278/0x2a0 [ 159.794679][ T9254] ? alloc_file_pseudo+0x129/0x160 [ 159.794786][ T9254] __secure_computing+0x82/0x150 [ 159.794812][ T9254] syscall_trace_enter+0xcf/0x1e0 [ 159.794836][ T9254] do_syscall_64+0xa4/0x2b0 [ 159.794904][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.794925][ T9254] RIP: 0033:0x7ff2c8d4e15c [ 159.794942][ T9254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.795015][ T9254] RSP: 002b:00007ff2c77af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.795034][ T9254] RAX: ffffffffffffffda RBX: 00007ff2c8fa5fa0 RCX: 00007ff2c8d4e15c [ 159.795046][ T9254] RDX: 000000000000000f RSI: 00007ff2c77af0a0 RDI: 0000000000000006 [ 159.795060][ T9254] RBP: 00007ff2c77af090 R08: 0000000000000000 R09: 0000000000000000 [ 159.795073][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.795086][ T9254] R13: 00007ff2c8fa6038 R14: 00007ff2c8fa5fa0 R15: 00007fff56287588 [ 159.795174][ T9254] [ 160.338913][ T9281] loop0: detected capacity change from 0 to 128 [ 160.371143][ T9281] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.410579][ T9281] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.456580][ T69] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.464754][ T9283] tipc: Enabling of bearer rejected, already enabled [ 160.500530][ T9289] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9289 comm=syz.0.1749 [ 160.521544][ T9283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1747'. [ 160.540825][ T9283] tipc: Enabling of bearer rejected, already enabled [ 160.601614][ T9295] netlink: 'syz.0.1750': attribute type 7 has an invalid length. [ 161.144957][ T9322] loop5: detected capacity change from 0 to 512 [ 161.185430][ T9322] EXT4-fs (loop5): too many log groups per flexible block group [ 161.222415][ T9322] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 161.262199][ T9322] EXT4-fs (loop5): mount failed [ 161.322920][ T9331] loop5: detected capacity change from 0 to 512 [ 161.357451][ T9331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.417380][ T9331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.474308][ T9331] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.571429][ T9331] tipc: Enabling of bearer rejected, already enabled [ 161.591218][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1761'. [ 161.612450][ T9331] tipc: Enabling of bearer rejected, already enabled [ 161.646147][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.741855][ T9363] loop5: detected capacity change from 0 to 512 [ 161.796025][ T9363] EXT4-fs (loop5): too many log groups per flexible block group [ 161.830798][ T9363] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 161.837827][ T9363] EXT4-fs (loop5): mount failed [ 162.251336][ T9391] loop2: detected capacity change from 0 to 512 [ 162.279407][ T9391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.331366][ T9391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.355806][ T9391] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.425080][ T9391] tipc: Enabling of bearer rejected, already enabled [ 162.455758][ T9391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'. [ 162.526588][ T9391] tipc: Enabling of bearer rejected, already enabled [ 162.615691][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.909233][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1786'. [ 163.068255][ T9441] SELinux: failed to load policy [ 163.133516][ T9449] loop2: detected capacity change from 0 to 512 [ 163.156127][ T9449] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1800: Failed to acquire dquot type 1 [ 163.178041][ T9449] EXT4-fs (loop2): 1 truncate cleaned up [ 163.188207][ T9449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.201510][ T9449] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.253214][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.292129][ T9455] loop2: detected capacity change from 0 to 1024 [ 163.309380][ T9455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.325831][ T9455] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1801: bad orphan inode 134217728 [ 163.349588][ T9455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.409274][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.530815][ T9464] loop2: detected capacity change from 0 to 512 [ 163.562702][ T9464] EXT4-fs (loop2): too many log groups per flexible block group [ 163.570550][ T9464] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 163.577420][ T9464] EXT4-fs (loop2): mount failed [ 163.585414][ T9472] loop0: detected capacity change from 0 to 128 [ 163.592785][ T9472] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.606956][ T29] kauditd_printk_skb: 615 callbacks suppressed [ 163.606969][ T29] audit: type=1326 audit(1767519375.973:13047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5a05f749 code=0x7ffc0000 [ 163.637137][ T29] audit: type=1326 audit(1767519376.003:13048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5a05f749 code=0x7ffc0000 [ 163.685429][ T9472] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.758786][ T42] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.758877][ T9475] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1807'. [ 163.809793][ T29] audit: type=1326 audit(1767519376.173:13049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 163.834538][ T29] audit: type=1326 audit(1767519376.173:13050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 163.858055][ T29] audit: type=1326 audit(1767519376.173:13051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 163.881604][ T29] audit: type=1326 audit(1767519376.173:13052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff8ffbb2005 code=0x7ffc0000 [ 163.905160][ T29] audit: type=1326 audit(1767519376.183:13053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff8ffbb2005 code=0x7ffc0000 [ 163.928633][ T29] audit: type=1326 audit(1767519376.183:13054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff8ffbb2005 code=0x7ffc0000 [ 163.952156][ T29] audit: type=1326 audit(1767519376.183:13055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff8ffbb2005 code=0x7ffc0000 [ 163.975628][ T29] audit: type=1326 audit(1767519376.183:13056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.3.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff8ffbb2005 code=0x7ffc0000 [ 164.007393][ T9475] hsr_slave_0: left promiscuous mode [ 164.038565][ T9475] hsr_slave_1: left promiscuous mode [ 164.189181][ T9494] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1813'. [ 164.203923][ T9496] loop2: detected capacity change from 0 to 1024 [ 164.250269][ T9496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.278292][ T9499] FAULT_INJECTION: forcing a failure. [ 164.278292][ T9499] name failslab, interval 1, probability 0, space 0, times 0 [ 164.291427][ T9499] CPU: 1 UID: 0 PID: 9499 Comm: syz.5.1815 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.291462][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.291474][ T9499] Call Trace: [ 164.291481][ T9499] [ 164.291489][ T9499] __dump_stack+0x1d/0x30 [ 164.291537][ T9499] dump_stack_lvl+0x95/0xd0 [ 164.291559][ T9499] dump_stack+0x15/0x1b [ 164.291616][ T9499] should_fail_ex+0x265/0x280 [ 164.291639][ T9499] should_failslab+0x8c/0xb0 [ 164.291663][ T9499] kmem_cache_alloc_noprof+0x69/0x4b0 [ 164.291721][ T9499] ? security_inode_alloc+0x37/0x100 [ 164.291744][ T9499] security_inode_alloc+0x37/0x100 [ 164.291769][ T9499] inode_init_always_gfp+0x4b7/0x500 [ 164.291810][ T9499] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 164.291840][ T9499] alloc_inode+0x58/0x170 [ 164.291861][ T9499] new_inode+0x1d/0xe0 [ 164.291883][ T9499] hugetlbfs_get_inode+0x7b/0x370 [ 164.291968][ T9499] ? mutex_unlock+0x4f/0x90 [ 164.291996][ T9499] hugetlb_file_setup+0x192/0x3d0 [ 164.292025][ T9499] ksys_mmap_pgoff+0x157/0x310 [ 164.292048][ T9499] x64_sys_call+0x16bb/0x3000 [ 164.292083][ T9499] do_syscall_64+0xca/0x2b0 [ 164.292190][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.292212][ T9499] RIP: 0033:0x7ff2c8d4f749 [ 164.292228][ T9499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.292245][ T9499] RSP: 002b:00007ff2c77af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 164.292304][ T9499] RAX: ffffffffffffffda RBX: 00007ff2c8fa5fa0 RCX: 00007ff2c8d4f749 [ 164.292318][ T9499] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 164.292331][ T9499] RBP: 00007ff2c77af090 R08: ffffffffffffffff R09: 0000000000000000 [ 164.292344][ T9499] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 164.292357][ T9499] R13: 00007ff2c8fa6038 R14: 00007ff2c8fa5fa0 R15: 00007fff56287588 [ 164.292374][ T9499] [ 164.506980][ T9496] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1814: bad orphan inode 134217728 [ 164.596403][ T9496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.720308][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.780642][ T9515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9515 comm=syz.2.1820 [ 165.095437][ T9540] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.148984][ T9540] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1830: bad orphan inode 134217728 [ 165.180875][ T9540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.253562][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.419281][ T9563] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 165.419281][ T9563] program syz.2.1837 not setting count and/or reply_len properly [ 165.611041][ T9578] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9578 comm=syz.5.1842 [ 165.723689][ T9591] set_capacity_and_notify: 1 callbacks suppressed [ 165.723705][ T9591] loop5: detected capacity change from 0 to 512 [ 165.761586][ T9591] EXT4-fs (loop5): too many log groups per flexible block group [ 165.771649][ T9591] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 165.781498][ T9591] EXT4-fs (loop5): mount failed [ 165.853125][ T9602] tipc: Enabling of bearer rejected, already enabled [ 165.876923][ T9602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1850'. [ 165.900740][ T9602] tipc: Enabling of bearer rejected, already enabled [ 165.938620][ T9614] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1855'. [ 166.095820][ T9625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9625 comm=syz.5.1859 [ 166.187634][ T9627] syz.3.1858 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 166.311581][ T9634] netlink: 'syz.3.1863': attribute type 13 has an invalid length. [ 166.362806][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1863'. [ 166.417885][ T9634] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 166.510441][ T9637] loop2: detected capacity change from 0 to 512 [ 166.528325][ T9637] EXT4-fs (loop2): too many log groups per flexible block group [ 166.547031][ T9637] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 166.560258][ T9637] EXT4-fs (loop2): mount failed [ 166.594467][ T9643] loop5: detected capacity change from 0 to 512 [ 166.602216][ T9643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.657917][ T9643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.675704][ T9643] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.688627][ T9651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1868'. [ 166.771109][ T9643] tipc: Enabling of bearer rejected, already enabled [ 166.779728][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1866'. [ 166.791020][ T9643] tipc: Enabling of bearer rejected, already enabled [ 166.808865][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.868897][ T9664] loop2: detected capacity change from 0 to 512 [ 166.897569][ T9664] EXT4-fs (loop2): too many log groups per flexible block group [ 166.905286][ T9664] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 166.912370][ T9664] EXT4-fs (loop2): mount failed [ 167.278011][ T9687] tipc: Enabling of bearer rejected, already enabled [ 167.292194][ T9687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1883'. [ 167.323392][ T9687] tipc: Enabling of bearer rejected, already enabled [ 167.562472][ T9699] loop4: detected capacity change from 0 to 512 [ 167.602114][ T9699] EXT4-fs (loop4): too many log groups per flexible block group [ 167.648369][ T9699] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 167.675598][ T9699] EXT4-fs (loop4): mount failed [ 167.725082][ T9717] loop5: detected capacity change from 0 to 128 [ 167.757387][ T9717] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.769603][ T9717] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.816696][ T9726] loop2: detected capacity change from 0 to 1024 [ 167.827812][ T6002] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.872795][ T9726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.887982][ T9726] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1897: bad orphan inode 134217728 [ 167.989102][ T9726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.021268][ T9734] tipc: Enabling of bearer rejected, already enabled [ 168.052983][ T9734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1899'. [ 168.064464][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.111411][ T9734] tipc: Enabling of bearer rejected, already enabled [ 168.610364][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 168.610403][ T29] audit: type=1326 audit(1767519380.983:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.666046][ T29] audit: type=1326 audit(1767519381.033:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.700316][ T29] audit: type=1326 audit(1767519381.063:13692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.723966][ T29] audit: type=1326 audit(1767519381.063:13693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.747512][ T29] audit: type=1326 audit(1767519381.063:13694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.771083][ T29] audit: type=1326 audit(1767519381.063:13695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.794626][ T29] audit: type=1326 audit(1767519381.063:13696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.818244][ T29] audit: type=1326 audit(1767519381.063:13697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.841761][ T29] audit: type=1326 audit(1767519381.063:13698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 168.865278][ T29] audit: type=1326 audit(1767519381.063:13699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.5.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 169.036051][ T9777] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.100917][ T9780] loop0: detected capacity change from 0 to 256 [ 169.111392][ T9777] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.123862][ T9780] FAT-fs (loop0): bogus number of FAT sectors [ 169.129998][ T9780] FAT-fs (loop0): Can't find a valid FAT filesystem [ 169.164133][ T9777] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.283151][ T9777] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.314060][ T9791] loop4: detected capacity change from 0 to 1024 [ 169.370266][ T9791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.435565][ T9791] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1918: bad orphan inode 134217728 [ 169.481888][ T2441] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.511839][ T9791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.563483][ T2441] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.572775][ T2441] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.581582][ T2441] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.780107][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.812178][ T9807] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1923'. [ 169.890952][ T9810] loop4: detected capacity change from 0 to 128 [ 169.914846][ T9810] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1922'. [ 169.960306][ T9810] bio_check_eod: 13 callbacks suppressed [ 169.960320][ T9810] syz.4.1922: attempt to access beyond end of device [ 169.960320][ T9810] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 170.109666][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.109666][ T9810] loop4: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 170.140638][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.140638][ T9810] loop4: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 170.154360][ T9810] buffer_io_error: 4 callbacks suppressed [ 170.154372][ T9810] Buffer I/O error on dev loop4, logical block 75, lost async page write [ 170.279071][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.279071][ T9810] loop4: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 170.292797][ T9810] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 170.369974][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.369974][ T9810] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 170.424794][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.424794][ T9810] loop4: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 170.438535][ T9810] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 170.533784][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.533784][ T9810] loop4: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 170.547498][ T9810] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 170.625483][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.625483][ T9810] loop4: rw=2049, sector=178, nr_sectors = 48 limit=128 [ 170.682236][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.682236][ T9810] loop4: rw=2049, sector=226, nr_sectors = 6 limit=128 [ 170.721814][ T9810] syz.4.1922: attempt to access beyond end of device [ 170.721814][ T9810] loop4: rw=8390657, sector=230, nr_sectors = 2 limit=128 [ 170.735581][ T9810] Buffer I/O error on dev loop4, logical block 115, lost async page write [ 170.745719][ T9810] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 170.760788][ T9810] Buffer I/O error on dev loop4, logical block 119, lost async page write [ 170.769313][ T9810] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 170.782127][ T9810] Buffer I/O error on dev loop4, logical block 123, lost async page write [ 170.790975][ T9810] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 171.020050][ T9829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9829 comm=syz.5.1931 [ 171.199609][ T9841] loop5: detected capacity change from 0 to 512 [ 171.261917][ T9841] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1936: bad orphan inode 15 [ 171.349524][ T9841] ext4_test_bit(bit=14, block=5) = 0 [ 171.460587][ T9841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.130683][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.169589][ T9861] loop2: detected capacity change from 0 to 128 [ 172.180785][ T9863] loop4: detected capacity change from 0 to 128 [ 172.229136][ T9861] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.243776][ T9863] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1941'. [ 172.279367][ T9861] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.302253][ T69] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.325945][ T9871] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1945'. [ 172.943895][ T9925] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1959'. [ 173.889750][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 173.889765][ T29] audit: type=1400 audit(1767519386.253:13772): avc: denied { create } for pid=9975 comm="syz.2.1979" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.917585][ T29] audit: type=1400 audit(1767519386.283:13773): avc: denied { read } for pid=9975 comm="syz.2.1979" name="file0" dev="tmpfs" ino=2171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.940225][ T29] audit: type=1400 audit(1767519386.283:13774): avc: denied { open } for pid=9975 comm="syz.2.1979" path="/406/file0" dev="tmpfs" ino=2171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.964259][ T29] audit: type=1400 audit(1767519386.293:13775): avc: denied { ioctl } for pid=9975 comm="syz.2.1979" path="/406/file0" dev="tmpfs" ino=2171 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.386417][ T29] audit: type=1326 audit(1767519386.753:13776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 174.410761][ T29] audit: type=1326 audit(1767519386.773:13777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 174.434835][ T29] audit: type=1326 audit(1767519386.773:13778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 174.459541][ T29] audit: type=1326 audit(1767519386.823:13779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 174.483064][ T29] audit: type=1326 audit(1767519386.823:13780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8ffb7f749 code=0x7ffc0000 [ 174.506545][ T29] audit: type=1326 audit(1767519386.823:13781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.3.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff8ffbb2005 code=0x7ffc0000 [ 174.768252][T10001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10001 comm=syz.3.1986 [ 175.460522][T10049] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2003'. [ 175.776966][T10071] loop0: detected capacity change from 0 to 1024 [ 175.795706][T10071] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.819084][T10071] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2008: bad orphan inode 134217728 [ 175.847627][T10071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.879300][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.036777][T10080] loop0: detected capacity change from 0 to 512 [ 176.075635][T10080] EXT4-fs (loop0): too many log groups per flexible block group [ 176.095175][T10080] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 176.108552][T10080] EXT4-fs (loop0): mount failed [ 176.321343][T10090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10090 comm=syz.4.2013 [ 176.380813][T10094] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2015'. [ 176.471458][T10098] loop0: detected capacity change from 0 to 512 [ 176.494296][T10103] loop2: detected capacity change from 0 to 128 [ 176.501646][T10098] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2018: bad orphan inode 15 [ 176.519543][T10103] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.531600][T10098] ext4_test_bit(bit=14, block=5) = 0 [ 176.537267][T10098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.549815][T10103] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.578924][ T6002] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.597502][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.629067][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'. [ 177.289570][T10146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10146 comm=syz.4.2028 [ 177.377714][T10148] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2029'. [ 177.438153][T10152] loop4: detected capacity change from 0 to 1024 [ 177.467317][T10156] loop0: detected capacity change from 0 to 128 [ 177.481142][T10152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 177.496038][T10156] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.519011][T10156] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.520429][T10152] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2031: bad orphan inode 134217728 [ 177.539364][T10152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.568410][ T6002] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.646335][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.880272][T10181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2042'. [ 178.202916][T10196] loop5: detected capacity change from 0 to 1024 [ 178.225647][T10196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.241469][T10196] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2047: bad orphan inode 134217728 [ 178.261016][T10196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.320335][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.094452][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 179.094469][ T29] audit: type=1326 audit(1767519391.013:14485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.124286][ T29] audit: type=1326 audit(1767519391.013:14486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.147907][ T29] audit: type=1326 audit(1767519391.013:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2c8d82005 code=0x7ffc0000 [ 179.171543][ T29] audit: type=1326 audit(1767519391.023:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.195116][ T29] audit: type=1326 audit(1767519391.023:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.218668][ T29] audit: type=1326 audit(1767519391.023:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.242148][ T29] audit: type=1326 audit(1767519391.023:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.265761][ T29] audit: type=1326 audit(1767519391.023:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.289330][ T29] audit: type=1326 audit(1767519391.023:14493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.313227][ T29] audit: type=1326 audit(1767519391.023:14494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10208 comm="syz.5.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2c8d4f749 code=0x7ffc0000 [ 179.536159][T10239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10239 comm=syz.5.2056 [ 179.771825][T10254] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2063'. [ 179.863562][T10264] loop4: detected capacity change from 0 to 512 [ 179.896496][T10264] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2068: bad orphan inode 15 [ 179.926886][T10264] ext4_test_bit(bit=14, block=5) = 0 [ 179.964987][T10264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.065456][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.280416][T10295] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2079'. [ 180.414192][T10305] loop4: detected capacity change from 0 to 512 [ 180.464816][T10305] EXT4-fs (loop4): too many log groups per flexible block group [ 180.494753][T10305] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 180.543839][T10305] EXT4-fs (loop4): mount failed [ 180.673391][T10318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10318 comm=syz.3.2087 [ 180.863725][T10328] netlink: 'syz.3.2091': attribute type 13 has an invalid length. [ 180.936720][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2091'. [ 180.976665][T10328] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 181.047606][T10336] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2093'. [ 181.610945][T10354] loop2: detected capacity change from 0 to 512 [ 181.677257][T10354] EXT4-fs (loop2): too many log groups per flexible block group [ 181.697206][T10354] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 181.724354][T10354] EXT4-fs (loop2): mount failed [ 181.746900][T10360] FAULT_INJECTION: forcing a failure. [ 181.746900][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 181.759613][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.4.2101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.759636][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.759648][T10360] Call Trace: [ 181.759655][T10360] [ 181.759662][T10360] __dump_stack+0x1d/0x30 [ 181.759684][T10360] dump_stack_lvl+0x95/0xd0 [ 181.759703][T10360] dump_stack+0x15/0x1b [ 181.759787][T10360] should_fail_ex+0x265/0x280 [ 181.759811][T10360] should_failslab+0x8c/0xb0 [ 181.759908][T10360] kmem_cache_alloc_noprof+0x69/0x4b0 [ 181.759931][T10360] ? skb_clone+0x151/0x1f0 [ 181.759955][T10360] skb_clone+0x151/0x1f0 [ 181.759977][T10360] __netlink_deliver_tap+0x2c9/0x500 [ 181.760047][T10360] netlink_unicast+0x66b/0x690 [ 181.760085][T10360] netlink_sendmsg+0x58b/0x6b0 [ 181.760112][T10360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.760141][T10360] __sock_sendmsg+0x145/0x180 [ 181.760200][T10360] ____sys_sendmsg+0x31e/0x4a0 [ 181.760230][T10360] ___sys_sendmsg+0x17b/0x1d0 [ 181.760264][T10360] __x64_sys_sendmsg+0xd4/0x160 [ 181.760302][T10360] x64_sys_call+0x17ba/0x3000 [ 181.760327][T10360] do_syscall_64+0xca/0x2b0 [ 181.760386][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.760404][T10360] RIP: 0033:0x7f71c4a5f749 [ 181.760468][T10360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.760527][T10360] RSP: 002b:00007f71c34bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.760543][T10360] RAX: ffffffffffffffda RBX: 00007f71c4cb5fa0 RCX: 00007f71c4a5f749 [ 181.760554][T10360] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 181.760581][T10360] RBP: 00007f71c34bf090 R08: 0000000000000000 R09: 0000000000000000 [ 181.760594][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.760607][T10360] R13: 00007f71c4cb6038 R14: 00007f71c4cb5fa0 R15: 00007fffac444a38 [ 181.760626][T10360] [ 183.314024][T10406] wireguard0: entered promiscuous mode [ 183.319512][T10406] wireguard0: entered allmulticast mode [ 183.493427][T10421] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2119'. [ 184.555430][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 184.555445][ T29] audit: type=1326 audit(1767519396.923:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2187f749 code=0x7ffc0000 [ 184.590023][ T29] audit: type=1326 audit(1767519396.923:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f218b2005 code=0x7ffc0000 [ 184.613613][ T29] audit: type=1326 audit(1767519396.923:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2187f749 code=0x7ffc0000 [ 184.637242][ T29] audit: type=1326 audit(1767519396.923:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f218b2005 code=0x7ffc0000 [ 184.660902][ T29] audit: type=1326 audit(1767519396.923:14886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f218b2005 code=0x7ffc0000 [ 184.684607][ T29] audit: type=1326 audit(1767519396.923:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f218b2005 code=0x7ffc0000 [ 184.708210][ T29] audit: type=1326 audit(1767519396.933:14888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f218b2005 code=0x7ffc0000 [ 184.731820][ T29] audit: type=1326 audit(1767519396.933:14889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f218b2005 code=0x7ffc0000 [ 184.755513][ T29] audit: type=1326 audit(1767519396.933:14890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f218b2005 code=0x7ffc0000 [ 184.779170][ T29] audit: type=1326 audit(1767519396.933:14891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f218b2005 code=0x7ffc0000 [ 184.953320][T10458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2131'. [ 185.204499][T10473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10473 comm=syz.0.2137 [ 186.513750][T10538] loop4: detected capacity change from 0 to 512 [ 186.573832][T10538] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.2153: EA inode hash validation failed [ 186.601829][T10538] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2153: corrupted inode contents [ 186.637496][T10538] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.2153: mark_inode_dirty error [ 186.660449][T10538] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.2153: corrupted inode contents [ 186.680502][T10538] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.2153: mark_inode_dirty error [ 186.693019][T10538] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.2153: mark inode dirty (error -117) [ 186.723428][T10538] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 186.734190][T10538] EXT4-fs (loop4): 1 orphan inode deleted [ 186.740955][T10538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.844382][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.105352][T10560] loop2: detected capacity change from 0 to 128 [ 187.183793][T10558] loop0: detected capacity change from 0 to 1024 [ 187.194265][T10560] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2162'. [ 187.231522][T10558] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 187.241426][T10558] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 187.272239][T10560] bio_check_eod: 36 callbacks suppressed [ 187.272252][T10560] syz.2.2162: attempt to access beyond end of device [ 187.272252][T10560] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 187.312842][T10567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10567 comm=syz.4.2166 [ 187.330265][T10558] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 187.333369][T10560] syz.2.2162: attempt to access beyond end of device [ 187.333369][T10560] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 187.387439][T10558] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: inode #5: comm syz.0.2161: unexpected bad inode w/o EXT4_IGET_BAD [ 187.396674][T10560] syz.2.2162: attempt to access beyond end of device [ 187.396674][T10560] loop2: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 187.414321][T10560] buffer_io_error: 18 callbacks suppressed [ 187.414359][T10560] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 187.465296][T10558] EXT4-fs (loop0): no journal found [ 187.470566][T10558] EXT4-fs (loop0): can't get journal size [ 187.470699][T10560] syz.2.2162: attempt to access beyond end of device [ 187.470699][T10560] loop2: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 187.489946][T10560] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 187.500914][T10560] syz.2.2162: attempt to access beyond end of device [ 187.500914][T10560] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 187.515222][T10573] FAULT_INJECTION: forcing a failure. [ 187.515222][T10573] name failslab, interval 1, probability 0, space 0, times 0 [ 187.515840][T10558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.527937][T10573] CPU: 1 UID: 0 PID: 10573 Comm: syz.4.2168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.527963][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.527974][T10573] Call Trace: [ 187.527982][T10573] [ 187.527990][T10573] __dump_stack+0x1d/0x30 [ 187.528015][T10573] dump_stack_lvl+0x95/0xd0 [ 187.528072][T10573] dump_stack+0x15/0x1b [ 187.528090][T10573] should_fail_ex+0x265/0x280 [ 187.528140][T10573] should_failslab+0x8c/0xb0 [ 187.528225][T10573] __kmalloc_noprof+0xb9/0x5a0 [ 187.528248][T10573] ? security_prepare_creds+0x52/0x120 [ 187.528276][T10573] security_prepare_creds+0x52/0x120 [ 187.528303][T10573] prepare_creds+0x37f/0x550 [ 187.528345][T10573] selinux_lsm_setattr+0x1a4/0x660 [ 187.528420][T10573] selinux_setprocattr+0x4f/0x70 [ 187.528442][T10573] security_setprocattr+0x1a7/0x1d0 [ 187.528462][T10573] proc_pid_attr_write+0x1eb/0x220 [ 187.528527][T10573] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 187.528552][T10573] vfs_write+0x269/0x960 [ 187.528569][T10573] ? __rcu_read_unlock+0x4f/0x70 [ 187.528596][T10573] ? __fget_files+0x184/0x1c0 [ 187.528631][T10573] ? mutex_lock+0x58/0x90 [ 187.528656][T10573] ksys_write+0xda/0x1a0 [ 187.528677][T10573] __x64_sys_write+0x40/0x50 [ 187.528714][T10573] x64_sys_call+0x2847/0x3000 [ 187.528737][T10573] do_syscall_64+0xca/0x2b0 [ 187.528769][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.528790][T10573] RIP: 0033:0x7f71c4a5f749 [ 187.528806][T10573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.528880][T10573] RSP: 002b:00007f71c34bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.528900][T10573] RAX: ffffffffffffffda RBX: 00007f71c4cb5fa0 RCX: 00007f71c4a5f749 [ 187.528960][T10573] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003 [ 187.528973][T10573] RBP: 00007f71c34bf090 R08: 0000000000000000 R09: 0000000000000000 [ 187.528986][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.528999][T10573] R13: 00007f71c4cb6038 R14: 00007f71c4cb5fa0 R15: 00007fffac444a38 [ 187.529089][T10573] [ 187.576813][T10560] syz.2.2162: attempt to access beyond end of device [ 187.576813][T10560] loop2: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 187.588664][T10558] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 16: comm syz.0.2161: path /410/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 187.593444][T10560] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 187.845545][T10560] syz.2.2162: attempt to access beyond end of device [ 187.845545][T10560] loop2: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 187.859361][T10560] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 187.868212][T10560] syz.2.2162: attempt to access beyond end of device [ 187.868212][T10560] loop2: rw=2049, sector=178, nr_sectors = 48 limit=128 [ 187.868649][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.882236][T10560] syz.2.2162: attempt to access beyond end of device [ 187.882236][T10560] loop2: rw=2049, sector=226, nr_sectors = 6 limit=128 [ 187.904506][T10560] syz.2.2162: attempt to access beyond end of device [ 187.904506][T10560] loop2: rw=8390657, sector=230, nr_sectors = 2 limit=128 [ 187.918198][T10560] Buffer I/O error on dev loop2, logical block 115, lost async page write [ 187.928473][T10560] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 187.948621][T10560] Buffer I/O error on dev loop2, logical block 119, lost async page write [ 187.970225][T10560] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 187.979276][T10560] Buffer I/O error on dev loop2, logical block 123, lost async page write [ 188.010260][T10560] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 188.028581][T10579] loop5: detected capacity change from 0 to 512 [ 188.074716][T10579] EXT4-fs (loop5): too many log groups per flexible block group [ 188.087147][T10579] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 188.100431][T10579] EXT4-fs (loop5): mount failed [ 188.197645][T10587] loop5: detected capacity change from 0 to 512 [ 188.302666][T10587] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2174: bad orphan inode 15 [ 188.349453][T10587] ext4_test_bit(bit=14, block=5) = 0 [ 188.372702][T10587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.476556][ T3762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.559839][T10608] loop5: detected capacity change from 0 to 512 [ 188.611439][T10608] EXT4-fs (loop5): too many log groups per flexible block group [ 188.642335][T10608] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 188.654460][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2180'. [ 188.683868][T10608] EXT4-fs (loop5): mount failed [ 188.694680][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2180'. [ 189.326119][T10619] loop5: detected capacity change from 0 to 512 [ 189.344113][T10619] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2182: bad orphan inode 11862016 [ 189.355338][T10619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 189.371100][T10619] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.398541][T10619] cgroup2: Unknown parameter 'memory_hugZ¯ ‡@† iüF£T…ÆäÞetlb_acco~nting' [ 189.683039][T10665] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10665 comm=syz.0.2198 [ 189.732976][T10667] loop4: detected capacity change from 0 to 512 [ 189.746420][T10619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 189.755803][T10667] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2199: bad orphan inode 15 [ 189.770041][T10667] ext4_test_bit(bit=14, block=5) = 0 [ 189.773252][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 189.773266][ T29] audit: type=1400 audit(1767519402.133:15323): avc: denied { create } for pid=10670 comm="syz.0.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.777800][T10667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.786820][ T29] audit: type=1400 audit(1767519402.153:15324): avc: denied { write } for pid=10670 comm="syz.0.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.869625][ T29] audit: type=1400 audit(1767519402.233:15325): avc: denied { read } for pid=10670 comm="syz.0.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.907078][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.969917][ T29] audit: type=1400 audit(1767519402.333:15326): avc: denied { bind } for pid=10676 comm="syz.4.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.026724][ T29] audit: type=1400 audit(1767519402.393:15327): avc: denied { setopt } for pid=10676 comm="syz.4.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.041093][T10680] loop2: detected capacity change from 0 to 512 [ 190.066178][ T29] audit: type=1107 audit(1767519402.433:15328): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='s±:' [ 190.088077][T10680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.115479][ T29] audit: type=1400 audit(1767519402.483:15329): avc: denied { setopt } for pid=10676 comm="syz.4.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.136423][ T29] audit: type=1400 audit(1767519402.503:15330): avc: denied { create } for pid=10685 comm="syz.0.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.161416][ T29] audit: type=1400 audit(1767519402.523:15331): avc: denied { connect } for pid=10685 comm="syz.0.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.171371][T10680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.171669][T10680] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.177215][ T29] audit: type=1400 audit(1767519402.543:15332): avc: denied { watch } for pid=10678 comm="syz.2.2205" path="/439/bus" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.242180][T10680] tipc: Enabling of bearer rejected, already enabled [ 190.243324][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2205'. [ 190.245463][T10680] tipc: Enabling of bearer rejected, already enabled [ 190.251960][T10693] 9p: Bad value for 'wfdno' [ 190.296877][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.593940][T10729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2215'. [ 190.669188][T10739] netlink: 'syz.3.2217': attribute type 13 has an invalid length. [ 190.671235][T10729] loop2: detected capacity change from 0 to 8192 [ 190.741039][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'. [ 190.750347][T10741] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 191.083083][T10760] tipc: Resetting bearer [ 191.211149][T10760] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.322339][T10764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 191.362909][T10766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2227'. [ 191.560071][T10776] loop4: detected capacity change from 0 to 128 [ 191.595718][T10760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.643595][T10760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.031500][T10760] tipc: Resetting bearer [ 192.058592][T10761] netem: change failed [ 192.063460][T10776] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2232'. [ 192.072601][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.081762][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.102989][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.112452][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.238387][T10795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2238'. [ 192.265175][T10798] loop5: detected capacity change from 0 to 256 [ 192.278395][T10798] vfat: Unknown parameter 'euid<00000000000000000000' [ 192.309185][T10800] loop2: detected capacity change from 0 to 512 [ 192.339363][T10800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.366098][ T5397] ================================================================== [ 192.374212][ T5397] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 192.381332][ T5397] [ 192.383648][ T5397] write to 0xffff888100b9c6c4 of 4 bytes by task 3298 on cpu 0: [ 192.391270][ T5397] shmem_symlink+0x387/0x3b0 [ 192.395881][ T5397] vfs_symlink+0x1b4/0x1f0 [ 192.400297][ T5397] do_symlinkat+0xf0/0x470 [ 192.404713][ T5397] __x64_sys_symlink+0x50/0x60 [ 192.409473][ T5397] x64_sys_call+0x24a9/0x3000 [ 192.414146][ T5397] do_syscall_64+0xca/0x2b0 [ 192.418651][ T5397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.424631][ T5397] [ 192.426947][ T5397] read to 0xffff888100b9c6c4 of 4 bytes by task 5397 on cpu 1: [ 192.434658][ T5397] fill_mg_cmtime+0x5b/0x260 [ 192.439255][ T5397] generic_fillattr+0x24a/0x340 [ 192.444109][ T5397] shmem_getattr+0x181/0x200 [ 192.448704][ T5397] vfs_getattr_nosec+0x146/0x1e0 [ 192.453642][ T5397] vfs_statx+0x113/0x390 [ 192.457885][ T5397] vfs_fstatat+0x115/0x170 [ 192.462300][ T5397] __se_sys_newfstatat+0x55/0x260 [ 192.467330][ T5397] __x64_sys_newfstatat+0x55/0x70 [ 192.472357][ T5397] x64_sys_call+0x111f/0x3000 [ 192.477034][ T5397] do_syscall_64+0xca/0x2b0 [ 192.481547][ T5397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.487436][ T5397] [ 192.489752][ T5397] value changed: 0x2c159593 -> 0x2c48ef99 [ 192.495465][ T5397] [ 192.497779][ T5397] Reported by Kernel Concurrency Sanitizer on: [ 192.503919][ T5397] CPU: 1 UID: 0 PID: 5397 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 192.513194][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.523259][ T5397] ================================================================== [ 192.532061][T10800] EXT4-fs (loop2): 1 truncate cleaned up [ 192.539729][T10800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.569902][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.