last executing test programs: 11.339625653s ago: executing program 0 (id=214): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, 0x0, 0x4) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x101400, 0x148) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="2b72646d61200d135ef17821766b855168097d1c312c846d9d314fb46f17eeb74388cac749fd648ec696461adc410db8de0e490821449c27ec00002275e722e53a08b32fbbec8f2fd3cf869a15d054016ab75dd73b6ea3cf906e10eb6b551a5d181905a2ca0a5d98e5d6c010c256bc7f2747f92bbdad5809920ce4141d2711e9f6476808b0fef594a79048cf1b04303e8c690855123bb7ec"], 0x6) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000402, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00005403cb0086dd6003136c00188700fc020000000000000000000000000000ff020000000000000000000000000001520204015120ff03fe8000000000"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x40) 10.742474691s ago: executing program 0 (id=222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 10.631508723s ago: executing program 0 (id=223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) unshare(0x22020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f0000000040)={0xa, 0x7, 0x3ae2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900000036000000000000000005447390fa20530400000029000000390000002c060202000000a31b2dbe0000000000000000000000000220010000000000000000000000000001200100"/96], 0x60}, 0x24044010) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x1, 0x5, 0x4f9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scmi_rx_done\x00', r3, 0x0, 0x100000001}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x32, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) semop(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10.511965774s ago: executing program 0 (id=224): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x41, 0x9ea, &(0x7f0000004100)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r4}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.376280046s ago: executing program 0 (id=226): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x2, 0x3, 0x0, 0xff81, 0x0, 0x3, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffffa}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x4, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@sr0, r5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000ac0)=[{{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x40) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800eeff95030000000000009e000000181100003452bd32c78c2c74a9349d2f4e424f1b4bc0e1add91c0ef7b131098751efb0204e4c6cb361db2a9fa47ef4a4c306160fa8431f358d077923161226bb", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.10018s ago: executing program 0 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) (fail_nth: 4) 10.09977864s ago: executing program 32 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) (fail_nth: 4) 7.340874558s ago: executing program 1 (id=251): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) getpid() capset(0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @remote, 0x4}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="40010000", @ANYRES16=r9, @ANYBLOB="150500000000ffdbdf250300000008000100", @ANYRES32=r10], 0x140}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) sendmsg$nl_route_sched(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=@gettfilter={0x64, 0x2e, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x8, 0x5}, {0xd, 0x7}, {0xffe0, 0x3}}, [{0x8, 0xb, 0x2}, {0x8}, {0x8}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x1}, {0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="458ff90000d5f3b0da5d42", @ANYRES16=r9, @ANYBLOB="000227bd7000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="a800028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000d000502020000000000000100000004020007065700000002000303000000001000098a49000000d921014904000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20020014}, 0x20008800) fsync(0xffffffffffffffff) 6.392633682s ago: executing program 1 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000000107010200000000000000fa010000050900010073797a31000000002c8007800800014000000052391ba6daf2b26cff081fec7e85000d980800014000008000270001400005e70e"], 0x4c}, 0x1, 0x0, 0x0, 0x42}, 0x14800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400"], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16=r2, @ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = msgget(0x3, 0x1) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000840)=""/51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x80181}, {{&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f00000003c0)=""/23, 0x17}, {&(0x7f0000000300)=""/76, 0x4c}], 0x5, &(0x7f0000000500)=""/202, 0xca}}], 0x2, 0x10000, 0x0) 6.232348014s ago: executing program 1 (id=258): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x177d, 0x0) inotify_init() r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, 0x0, 0x10009c7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.189603674s ago: executing program 1 (id=259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_ext_rm_idx\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r8}, 0x18) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 5.492226514s ago: executing program 1 (id=264): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = mq_open(&(0x7f0000000480)='!sel\x87U\xb9\x10\n\xe9[b\xd7\\P\xc1\xde.\x1dml(:\xb7o\xb2O\xcb]0y', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYRES8=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) socket$igmp6(0xa, 0x3, 0x3a) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x8, 0x8, 0xb, 0xfffffffffffffffe, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0xa, 0x0, 0xa, 0xfffffffffffffffe, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r0, r0], &(0x7f00000003c0)=[{0x1, 0x4, 0xc, 0xb}, {0x1, 0x4, 0x8, 0x5}], 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) fgetxattr(r5, &(0x7f0000000580)=@known='com.apple.system.Security\x00', &(0x7f0000000640)=""/100, 0x64) listen(r6, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 5.268039787s ago: executing program 1 (id=265): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e8, &(0x7f0000000900)="$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") 5.267745987s ago: executing program 33 (id=265): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e8, &(0x7f0000000900)="$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") 3.156204976s ago: executing program 2 (id=283): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x6, 0x10}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000000000000500"/20, @ANYRES32=0x1, @ANYBLOB="0084f4e000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xfffffdfd, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_FORBID_SUSPEND(r9, 0x5521) socket$nl_netfilter(0x10, 0x3, 0xc) 2.18077455s ago: executing program 2 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) connect$can_j1939(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.670449487s ago: executing program 3 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2b, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) ioctl$TCSETAF(r1, 0x5408, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r2) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$cgroup_int(r3, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x10001, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000010c0)={0x1, &(0x7f0000001040)=[{0x7fff, 0x6, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001180)={0x0, 0x1, 0xffffffffffffffff, 0x5}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nodiscard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_continue}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 1.421170491s ago: executing program 3 (id=301): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x177d, 0x0) inotify_init() r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, 0x0, 0x10009c7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.382388231s ago: executing program 3 (id=303): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x13, r0, 0x0) 1.356230391s ago: executing program 3 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0xda, 0xa3a9}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x4821ea, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000ed82357461185ff000000000460000000000000095000000000000009c36726a92cb05e542ba5dd0e48ed40653"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x89, &(0x7f0000000180)=""/137, 0x0, 0x23, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080009000b000000", 0x24) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xffffffd9, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000180)=""/70, 0x46}, &(0x7f0000000040), 0x42}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2e, '\x00', r5, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x700, 0x12) 1.255218263s ago: executing program 6 (id=307): msgget(0x3, 0x1) 1.219559803s ago: executing program 6 (id=308): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.218847453s ago: executing program 6 (id=309): r0 = epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000240)={0x60000006}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000300)) writev(r5, &(0x7f0000000a80)=[{&(0x7f0000000000)="1f65489487049bb36bfc6b41a1eb2b243efd8ea383dfe2292e5921e36bc804708e0ed5db0283a1df05cb335a09693fc32ad588af41493642bac04ef34e6d0f3958d27262008f3d4a3874304cb1808aa0f3d36570a28dc4e49de14f2834e26b8f5244743226c46236df56269e623f0a25defbec911e9f8af506ee78d1f7ed1efcbeaf625f578aface", 0x88}, {&(0x7f0000000440)="26c669414e0d78cfef22298755cc15a47712eb5ceb47aafe3a95e33d1c49a4998e84eb72993b81d9882c41201f1d40bcfafdd9e2626fcbc30d25093fdd28da9342939ffe7fe82edf104bd0ce2764cf9d181dbb5cc4d043d04db9b70cbd12f30402ea9601292c5b66fc2661702a50950e858c7728961c2ed9fc16cf58f46470f4972237fb6e1230327cf8533b5344b99759df6747e28bbf1ab0554db4975c5fd95a360ac93e84edf28451e22999e7df866128782b7d95fb376e1dcd3a8e303e57d219216ee1bd2914fbf6fc710868f69eca3605c4e832", 0xd6}, {&(0x7f0000001780)="57bd0ebe3dd03d34dbe935a47d3c75ae46bcb791fcbe45db99bef8f3b62137fd66d38fa4266cd4a48e99791aa653aebe584f0964e7c50323ca6d7a6c82e393161d89c8de8dc18f1fc43a98419b543bfc062d601024246ae2007ebb3c056a65bd55f6253be94c936c7184b9163bb332ec0cf0520ade9ae5cf8e8b5618aecebda10cf1aefb049076bf63d8e77a67fbdb6669060aea694b75212076ef3762a236976cc30077b5f609c4ee1e9aea3a736739864c752a14842aede8d26a38ad537a497d709bf1ee9ffd1d3e583dcecd81ab90f95ade175facbabd0b06322f31d916fde0e2fd78892a02fe7c5123383906304214c6d14bbf5f585a3a5aa98d4705bd9bff92afdc04d43840b5622a02e6c1d2997739e73c185fb4a8fcdf5ac4b352187731e79bbc5c30194e45d98122c93fd078469d164a65746023129dd2d2ec18b5ae4d959942d81811b5a4540d6d40e85336a4e16e65c0ddeac4012fcaeb85108762c069633f664bc2cc220aa39938f1fb845de0ec2c29611d8b59908177c69d138a7607bf2705b5c0ab39cfd964907ebddfca94477a10a90789abbfc32f246535704aa723538f03d9fa0c930f2ab83b2b62d98ce31db771f0069dd18109b6fe818d42c52a9e05a7c7bd8de65153668d63c5194b98ffc08cb71bd99a1d0e129ecf64470617f10a64aea4540d2f5f8a98d53c5e510c4e0e98af8e76a4e73f67120346126dbb36bcb3f77b9235c9bcbe7982b6ef3be5f4969c2d17a7fd44b5c2007128e72cd1449bf1b9ebb2c61ddfb2a5d7695a5a81829ce29241c77056171e01aeee46802b4788bd477944807f90fb0113acabbe9e023876e247bb693d3f9c5680aaf4b2a0ab35fe11c5ad37d44727fbbece1e77fb60feac265c8b1afe5abb6fee6258ed841298fe06ac25d3aa27ca745b6bd9806ba7ec09d88b18b43c5c472494db689272d53ca0c8ccc443005f8460623c9eaab74778f9e6da79c8d015941df98159ffc8cc6a4bde628b57e7bcbde9ea8e7e95d00839ea775548e3feff22232e70b7c8469d90364b1bf3c1158409ed04386b52f0813d8085cf1b43449102c12f42005ec8c145175c9dad108f22b3cf4c89938898cfbae6a1e04dfd6d770f38c2ff278a2cd49394ba6b6fe5cc12366e906b82c64331f156afc4f1e5f54fb8c8a2b84c57d30bad9ee10e92eba98f1e4e44c2b417cceaa7e11881d3ee0ec695b99c133e5b9ba3d670b798a9e56c23006ef0f8e4dbefb90aeaa70da507fc879a3f72efb6ba34579117fb6b360d3dc89a8be835ff6e38ea87f821184af8a597407f23a80073c244bffebe7ddf26227c449a5a39bdd6f833b22664cafb8e2e866f0bc222a602e91e923bc508e51d61080690a25761452bf22e87d738f20dceae59d07361953ebcd5bdf996b12422488f7ddf02f904ff42574698c0f7dbb7f039ea3f5e4edf8ea57f84177b92632b6efccd2e2409cee37c8033351efa6f2e1a4520345c8e4fbd269d7781a42ec69e50d30473fedb4bbf8aec614baf93068cf3deb006d2d77199b84e95a0fb03d2204580e78e05010958a6e1a35c2c57b37a2b10a2219556306f4d889e9e5caab69dabcc4017708c4e234f313f03885e96ee9b2f237297d824b5208baac4d55ad4c3e6ae2d71a9cc4a373dd03a2358c3dc8c245bc9487a2eb62ab6c0a7ce716699ca88a098542bce679f76fabba14679e61d65bed3c4454eec5d822e31c4eb1102d0d556812ed9e09aa163e7cab8985122e4781d77f5f2fa44e658c3f03434fc0b9d359923b43b4ce100e5a9de9684af65617e90b312bb6b8c77d57ef80e64843adc17749a4c7bfdf997d51e796bf2f45a3340031ac7af7d0897b0e6cc1198a95156ead72f0ac2db241fc66087efd6ed12c59e73f633e3b6a3925d1a23ad67a3541b10fcccb53e3e29621bf5ce1b6f164716b2484117d0055fd219ebf9fffad968429cdedfeeab28dfc83f076f3f7faaa82314ba05021697167af8e3c5f96ff7436200d29db4de199e68e711e15989c63fc9129e76d02af5241d42ea6e1b31ebae851c43aa0d0a2e4582155da2c04f4555a8911d5a34676a2a03424d6b723af05f5240662dc3bd292adb178c18d9d29119fe577096f41d8f9acef9f4ffc624ce5e60ad12a85f2af2697cd0dfbb124d7ef4b1347518465d3cc0a344a4a89d1364d588ddc32b0e4c784184aa88a55cd960126862877f5c6e2200e2b5685a3e73d712bc3c4693bc1e11c33389de6da4498ab71f0543a8a26b5719e0f5845a1ea0fb0f5b541c52f92ce8b6e6e9a3b2e3a4425a4555fa3b2a041ecccfe29f0c49add341b6127f7665209ee9db534c2117f969088288bc123c7dfbe60665b689136e4548f9f7182e04de6157a167592e748d75843741b1d8708c4fb356b77db2dc5d5be7854af92c7cd1344ecbfee6479b73e466d996be653f643a9e920bb3fcfe6a06e20075d135cac0b58e79348150f3d0d0defa8164d8c49be2df4b66c150ed33a65400ac85e23fc168c6d89f33185789005b83bb775b238ee11d1f3d78ad2d79e7487d52ccca4415c5db369eff46ee17fa823a46b188705d38d6c3b2dc4c916edb30e8bfe4b5593d09c363ca8021f39095bc8ad9b33c86b762f81bf77a13a2a15428ecb928f8e3ef4d58fe8ad41adecd065c8eeb082f0e64b95f8b65e1b21767de1e72b9ef46b728fdb5a2ee5b0afe3e080782b92d4626e3293699c1205eb9c14ac0f25ab7c7d518a11aac66eda56001800be76cee4c11ba82f3b4bc8a069517e29094330d6616aeb6b2ce4c859822f2a57199cd8c11fc81310667b6f8e54275dc2702b776ad10674403dd9a7bf37ba8132af6bb7ad34b61d730865cfa7bc0eb1432dfcc1f18b6de3a4ac65d481bdab4736f679f23550c35e68509c20d4f4943378677c665856551d363337ddf38fd72ce8fd99aac0131af3fc91d830a7280df764cc3a1747445998814ed50cbb51e2287d9875855d9d3e8d8d8bc58c94645c2eef6699d8213667921dfc9fab38d602096055c62d26f5620aff09da332712e43a28e3a5116167b87a63e09130a3e8b777a4781f9394cb5d928e06b0b499a7ed650c443c94de96538a75dbf782fc4a744786ac5360259332c31821030c00b465c10db5f04bfe778f97169dd576f6eaad87227e68f6f386b357b85946e58ce46f5345b841944f2319b6b0c5ab4d70fdfab7d5eafbfcab22b0b4d4a6894248f61c1f10c210fe97eb2adb97997df8b6e09356f4b7490a58fa406919102430f2579359cf8ba61cc9f264083b184ef09a9c32ea9111d362ba4e9a0f0666fe679dea30354cf04aad076c2e63db9fd9fd4fd4251bd70ce277938102779d47bafa1b9e8c47788860d3a949a3bafb078f07021cf461d71b1e1f8a5a14897401c41a8e00647681357292c16851cfbe68f9de9218828c6ddd5ebd98774b35d6af1e65f9bac66a7620666ae9289bf9d8babeb2c3c2a1492da9df605d4a1c730c2543a8bd166fc6c6523ee2ee6498085300de44b9fd84cb89ec76833cd4c3259fccebf0986d689f6e4e0d5d6276068ea1e74ef79570c4efcb615b1606ad55bd105ce7a1291d12a6c70b967869fcacd26fab0563a8490e2ccd9790f5bfb3935a16d3522e62186ebc6047f81f6bc3e5ab960dd87db31171ea635c64672c8215847eb677cd54b1e9f55abc893e43b0c2da4cd01ead9f486b72d4b8a7f7e1cd89a17c316f71b95e957849d3ded4030174b723f31c3ca7b6d5b34de27aa6247ca81c1b9728540ba6507cd943717665ef775accabdfb7aa552d5d742ae042b5dc6c5e5196a990f6a00fe74897e49601e21fcc74bbabc9b7ebe34402fbb5b3f817b619859e4753171fe180afc78200a6c4ec2a7f9bd08c7ecf2fc02c9c7f55e8506f87123d3405579e37adbf3f0de7eaf54f2706210d9fd95fd50d077dd1a218c0188485529bd8af72d5d133f7f639bc5a27db8917efe3fbad6499432a6bbc1baccfc50362b706180e0a1be2cdd38f7d4f5ab9e7fc5a59091f9f912ac94efb961f1b9e04dce365622274c7a2b4f0a39a4648d64a19f3f8cb4f79cfe056b9246104759780d62257a3bb578c34f5b74fe31c99213aea3a26624ca59a3f82de27ce537a9dc748241e843b00a54ee3ff34a89884e3246a97c2f03e80e18eacb62bb4fffe7db1bb037d91ea8a7a4dcec7e7aee44037ee3b83f9752bbbe6f43b0f88271469ad043fb5c75844235bcc63cf6f0dabd2b12104a549601b81c8abbdd70c5abb4e503c33b65e8cd345b0f5af3f30ce3a101df00c0bd61dea1a957b0dec965f262b25d61497075aafca4b3d7dd8cacab4b9e14f34155fab40bc038b13685373c8dd33f0dcb09d0a5b642aeb821d4a10a3a512d5e1a760f3acd99408594110643074ea76d3ecf2b671af0def3826a161acadcd7553d488d637124038fdcb0740fff3692331cb2d15dde640cb76cf13211dd6d5428639caa0a1d82513d5eb66f38666bff49d089c4ed0f905d227a249eba40f009bafb5e73006257401a35b1bc6be1cf399ac27ec84ea33dbae07daf9ec77da3b4dc068a2b60d5d5f22e5b6b9a53895bc695dad4d480aa405bac30f12999bcb8d90206c5d7e3e07613e3709e3dbb5b7ee485968a0efb0885b0c1d344cfbc2160afc1bfb60a3ba20c9dbd5e1f51d2a9861b4a99d02762dc1632d6f93fe886ef2afe181ee4ee34de3cd36f331d0e270de4f8f86872c7f9cd16bdb0d141f185ff34cdfd1693f6c3a1b80c76ae7f5aa703ac75019e70f0f2b5a88c306413c05b3677b1b8473c6428b8eb68bc0da4f617a313320013c73fbbc0846383f27775178cb8c810325c6ca7a77396b2732dacfe0e2ea47f99c51d8aabdbae2f76568b65e304eac5ee611abde7223df21234868f73213ed8f052819b4ddc828f246e5521f94671d9da4f33c0eaa1422573c3bfe621f5b0170280c5e1d999244ea3599c64e59c0a6a3741f89fd94d38898eacd66042992d5c44ef0988ed346553d6ba28c6098ec48e01c58ef70a206f7b248e93cea3fc7c5ff899d4b3e247e88a3cd90d95d52869d48a3123e3214c59e3ce7bb02e20c06df974946830699a02106524f8cb531ff4424dff737f1557d29b2196eda56b02f80862fe612a1eb112006abb62fba9e2ad35bf004e929c0d586bfac906230d94d9fa28bce761cd6bc24648ba4f42b6b70773560e7c4b7bf8359a082ab403ebcbc6941a020222ea562cb7871437e7503b8dbff5a8ffeb24eb6142417c9a92b48b7129951ac935aec516c05c294e506b4b767c207eb5f2bf506b5f3f997d54578b798e8babac1224f659af17a5d49d54751e14b3ac8be3632bd68304129202cfe5e6dbf4fb2f07303770b2ad2d6716514c5429bab8ef6cdf2d4f9a04922609954228870dca133234c401ed2bc356117158d982ea24faaa88d57544f6d62d96f19cbd44a85eb1cd237cf88ad4f7156de7fac274bf4c7748a77d7d73aea3df534938a48acd5cfb7c04c619a5dff0530e061ac4b7bf6d3a0436bc6f711fbb8d0b82c42d4706e6632ba9cee352aae250f54e0cacf7df16f1c59da1daf66356e25c26aeb070e61d074a6139a906dbf9b0b438b8c8dc2710c5a3dbf7ccda37e1bc3a93c53d2b2fe59bb493b01bc55501d7d10a6643b865fa438120168123645341f1639e4c8a445f39757623d35ed7b5b1090d209cabeaf7535486bba9ccdcc3a3e2ccf8f4b7d9d13736bf125a4cda90787507b9abd53d0fb9162a6d2982e633bcdb379024447b3b533d4862bd73095ab41f4f071b03d7408afed477ea74b1eaa97807226f", 0x1000}, {&(0x7f00000005c0)="06d344ad24189e923a1233fb07f486a0fd8b1a5c058736aa58580614560764c9d4657d0cd0542ed769e9e20ec6a6505c53069c74413e3373bef70a8279bd5094201d4b1f46ab4a2c516333ec98b77829ca847702b2b1ce5a1171b5bc05208b48475a5fa0b1401a5b21357c1af0fe6f599d1ca133d4ca9dc89f1bb630c12bdb883be455eef736959add651d40fafc2c7e7738c1ec1c158f5b24e565e3616c754d5b11ede35cc9deb495f7a96a11a398c0", 0xb0}, {&(0x7f0000000180)="abbddc898bb89cd5d3b4b6aeec1a3eaab27330e114aaf31e59b8ea60d8bc5c2221549bc975232c0079e240f0064467db402d86ab35832826ae0c44c3302d128db4c1fc0d87af0babc996a7af8353aff42d26011a8688fdee263623898f946afe1a31282b309509f81ad7fbf0b6a8", 0x6e}, {&(0x7f0000000740)="0eb3b49ec1a9a45a3d11bf5435b493cca7d5e754e0ff2b0b96d371648e88ca9d626d028a85304fe40564e14a3ea9f3c0633c8277c34300f131401529f6ed01708d86a9e4c7f86b7830c46c0390eed8dd1360e3faaf6b6d21a5be5b6bd5a2e2bbd8b4bbf0d6a6357be78098158d72a0c55f16f123a65f2a4a8701e38faa2006a53ec6f8df5173f111db40", 0x8a}, {&(0x7f0000000280)="f8b2c8d9c01fc011bba55adaf7c19f0a0dee", 0x12}, {&(0x7f0000000900)="d6393ff0549eafdcc77490f535768daa129d4f3db85c85e7d0fc8d4f0d3ee7aa9da1462d934432483a3388647e5d6492d9ec27e7c6733850a4fda6a435611298b2be90bc2b4775809f02d8d96a9efa03c4be6954f6e2dd10f4c0c5537c59670cb9a4a59dc3a3f0140aaaccd29bed0cf5e67179f839c89fb84c12917d165040b02f9b743007470e6d14fb6262ffb4121457ac038c53bfc00914", 0x99}, {&(0x7f00000009c0)="5717d901cfbd8af63e07e6b7e113b5114907f7c431013cce0dc180948d40680dfba93242374de3927a34c8f61aae71721724fa0c277ae8e128af383814b832d891e670a9434387da4cc302ff2aad132123b8570d210a50072ff7326688cac172986408f41c41f68dd696594a515ebcac41c3e24f617555f62115ca8a640358e6e32d", 0x82}, {&(0x7f0000000800)="ef036d7eb359b16648344f3c29537606c286ac10f4b0a79595447648db2642466ee3d051d816d0104fb21450f33e9c246b5a668fe0fe236db941828cddcfdb186eb288ad", 0x44}], 0xa) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = memfd_secret(0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r10, r9, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x10000000000000) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x7}, 0x18) lsm_get_self_attr(0x65, &(0x7f0000000680)={0x0, 0x0, 0x87, 0x67, ""/103}, &(0x7f00000002c0)=0x87, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f00000000c0)={0x20002000}) 1.186612894s ago: executing program 5 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 1.185573164s ago: executing program 5 (id=311): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x6, 0x10}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000000000000500"/20, @ANYRES32=0x1, @ANYBLOB="0084f4e000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xfffffdfd, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_FORBID_SUSPEND(r9, 0x5521) socket$nl_netfilter(0x10, 0x3, 0xc) 1.157864524s ago: executing program 6 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800c74a7fa9b24d771c87246a21586389000000070000"], &(0x7f0000000140)='syzkaller\x00', 0x2c97, 0x49, &(0x7f0000000240)=""/73, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0xc, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @empty}], 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x406db8c30f0f6f4, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000080), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d094", 0xe3}, {&(0x7f0000002880)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cbf8fbaaec9647b07d0a4965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee425367bc33b71054226beb00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43ad50629f689703d478abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90b60b01f880c3acedd4a54014844ed9a26675199d5ff9b391c1dec077b5099cf9ae", 0xd5}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f20", 0xb4}, {&(0x7f0000000040)="4068745fc2177d980c898fbe9e90775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec95bd4d519a9db1971eaeda9288222aa8d3a9", 0x3f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb306c7f77c8a00000000000000d037280699ca67e7143e46e0267c79", 0x46}, {&(0x7f0000002700)="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", 0x143}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.092198005s ago: executing program 2 (id=313): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x500, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.091964925s ago: executing program 2 (id=314): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5}, 0x1c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) 909.709158ms ago: executing program 4 (id=315): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(0x0, 0x16b5, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x13, r0, 0x0) 893.279638ms ago: executing program 4 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 868.931388ms ago: executing program 4 (id=317): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x0, 0xe}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}]}}]}, 0x3c}}, 0x44050) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x1006) 802.415169ms ago: executing program 4 (id=318): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x158) request_key(&(0x7f0000000580)='ceph\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='writeback_bdi_register\x00', 0xfffffffffffffffb) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000640)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040084) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='writeback_bdi_register\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/127) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) clock_adjtime(0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r4) socket(0x1d, 0x2, 0x6) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000008030000000000000000000a0000090600024088f500000900010073797a300000000005000300840000002c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) signalfd(r1, &(0x7f0000000000)={[0x1]}, 0x8) 709.34006ms ago: executing program 4 (id=319): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 691.474861ms ago: executing program 4 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000140)={0x2, 0x3, 0x0, 0xff81, 0x0, 0x3, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x3) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffffa}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x4, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@sr0, r6, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000ac0)=[{{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x40) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800eeff95030000000000009e000000181100003452bd32c78c2c74a9349d2f4e424f1b4bc0e1add91c0ef7b131098751efb0204e4c6cb361db2a9fa47ef4a4c306160fa8431f358d077923161226bb", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 409.429374ms ago: executing program 3 (id=321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 391.381895ms ago: executing program 3 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000140)={0x2, 0x3, 0x0, 0xff81, 0x0, 0x3, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x3) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffffa}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x4, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@sr0, r6, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000ac0)=[{{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x40) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800eeff95030000000000009e000000181100003452bd32c78c2c74a9349d2f4e424f1b4bc0e1add91c0ef7b131098751efb0204e4c6cb361db2a9fa47ef4a4c306160fa8431f358d077923161226bb", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 321.108806ms ago: executing program 5 (id=323): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 267.061537ms ago: executing program 6 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000000107010200000000000000fa010000050900010073797a31000000002c8007800800014000000052391ba6daf2b26cff081fec7e85000d980800014000008000270001400005e70e"], 0x4c}, 0x1, 0x0, 0x0, 0x42}, 0x14800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400"], 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16=r2, @ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000840)=""/51) 266.331306ms ago: executing program 5 (id=325): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00'}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x200, 0x82c06c559fd1055e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f2, &(0x7f0000000b00)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYRES64=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) clock_gettime(0x6, &(0x7f0000000700)={0x0, 0x0}) select(0x40, &(0x7f0000000580)={0x80000001, 0xfffffffffffff801, 0x8, 0x6547800000000, 0x1, 0x4990139a, 0x7, 0xa0}, &(0x7f0000000600)={0x200000010001, 0xdf, 0x9, 0x6, 0x81, 0xb, 0x3, 0x636b0000000000}, &(0x7f0000000100)={0xd13, 0x2, 0x2, 0x9, 0x0, 0x2, 0x7fff, 0x7}, &(0x7f00000006c0)={r4, r5/1000+60000}) fdatasync(r3) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x80000000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 265.661557ms ago: executing program 6 (id=326): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x6, 0x10}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_open_dev$vcsn(&(0x7f0000000040), 0x200000000000005, 0x48400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000000000000500"/19, @ANYRES32=0x1, @ANYBLOB="0084f4e000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xfffffdfd, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_FORBID_SUSPEND(r9, 0x5521) socket$nl_netfilter(0x10, 0x3, 0xc) 235.024757ms ago: executing program 2 (id=327): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(0x0, 0x16b5, 0x1) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x13, r0, 0x0) 176.373467ms ago: executing program 2 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000140)={0x2, 0x3, 0x0, 0xff81, 0x0, 0x3, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x3) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffffa}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x4, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@sr0, r6, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000ac0)=[{{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x40) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800eeff95030000000000009e000000181100003452bd32c78c2c74a9349d2f4e424f1b4bc0e1add91c0ef7b131098751efb0204e4c6cb361db2a9fa47ef4a4c306160fa8431f358d077923161226bb", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 137.259838ms ago: executing program 5 (id=329): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000900)="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", 0x45c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='mem_connect\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) statfs(&(0x7f0000000080)='./file0\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x25c}}, 0x0) 0s ago: executing program 5 (id=330): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x158) request_key(&(0x7f0000000580)='ceph\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='writeback_bdi_register\x00', 0xfffffffffffffffb) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000640)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040084) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='writeback_bdi_register\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/127) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) clock_adjtime(0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r4) socket(0x1d, 0x2, 0x6) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000008030000000000000000000a0000090600024088f500000900010073797a300000000005000300840000002c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x2d, 0x85, 0x50}, 0x2c) signalfd(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): de: none. [ 35.435028][ T3480] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 35.452624][ T3490] loop3: detected capacity change from 0 to 1024 [ 35.473293][ T3490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.482801][ T3490] EXT4-fs: Mount option(s) incompatible with ext2 [ 35.484490][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.539478][ T3492] pim6reg: entered allmulticast mode [ 35.545347][ T3490] loop3: detected capacity change from 0 to 512 [ 35.594544][ T3492] pim6reg: left allmulticast mode [ 35.607230][ T3498] kernel profiling enabled (shift: 17) [ 35.650069][ T148] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 35.659550][ T148] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 35.677458][ T3505] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 35.690758][ T3500] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 35.808445][ T3517] loop0: detected capacity change from 0 to 512 [ 35.823621][ T3517] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.26: iget: bad extended attribute block 1 [ 35.864829][ T3517] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.26: couldn't read orphan inode 15 (err -117) [ 35.881392][ T3517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.895164][ T3522] loop4: detected capacity change from 0 to 512 [ 35.900231][ T3516] Zero length message leads to an empty skb [ 35.923498][ T3516] loop2: detected capacity change from 0 to 512 [ 35.932377][ T3517] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 35.952065][ T3524] pim6reg: entered allmulticast mode [ 35.958256][ T3522] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.25: iget: bad extended attribute block 1 [ 35.978237][ T3524] pim6reg: left allmulticast mode [ 35.978994][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.991789][ T3522] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.25: couldn't read orphan inode 15 (err -117) [ 36.007472][ T3522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.035456][ T3516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.044163][ T3522] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 36.048492][ T3516] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.095192][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.174108][ T3516] pimreg: entered allmulticast mode [ 36.184060][ T3515] pimreg: left allmulticast mode [ 36.254003][ T3538] loop0: detected capacity change from 0 to 128 [ 36.263622][ T3516] syz.2.27 (3516) used greatest stack depth: 10840 bytes left [ 36.281483][ T3538] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.303772][ T3538] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.318367][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.352012][ T3538] Invalid ELF header magic: != ELF [ 36.581849][ C0] hrtimer: interrupt took 37098 ns [ 36.801504][ T3554] loop1: detected capacity change from 0 to 1024 [ 36.848542][ T3554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.087892][ T3554] syz.1.39 (3554) used greatest stack depth: 10632 bytes left [ 37.117064][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.303955][ T3576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'. [ 37.513891][ T3583] loop2: detected capacity change from 0 to 1024 [ 37.546683][ T3585] netlink: 'syz.4.48': attribute type 39 has an invalid length. [ 37.887590][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 37.912566][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 37.925426][ T3587] loop4: detected capacity change from 0 to 4096 [ 37.932443][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 37.939012][ T3591] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.964366][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.964459][ T3591] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 37.967704][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 37.988061][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 37.988421][ T3583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.994859][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 38.013288][ T3587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.013492][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 38.032151][ T3583] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.070726][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 38.077354][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 38.084149][ T3591] dummy0 speed is unknown, defaulting to 1000 [ 38.099289][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.124068][ T3598] pim6reg: entered allmulticast mode [ 38.134865][ T3598] pim6reg: left allmulticast mode [ 38.249423][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 38.249460][ T29] audit: type=1400 audit(1745899413.653:488): avc: denied { append } for pid=3596 comm="syz.0.50" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.254622][ T3600] loop2: detected capacity change from 0 to 1024 [ 38.256298][ T29] audit: type=1326 audit(1745899413.663:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1511de969 code=0x7ffc0000 [ 38.308130][ T29] audit: type=1326 audit(1745899413.663:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1511de969 code=0x7ffc0000 [ 38.387196][ T3600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.407478][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.420030][ T29] audit: type=1400 audit(1745899413.693:491): avc: denied { mounton } for pid=3599 comm="syz.2.52" path="/12/file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.442431][ T29] audit: type=1326 audit(1745899413.743:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1511de969 code=0x7ffc0000 [ 38.465962][ T29] audit: type=1326 audit(1745899413.743:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1511de969 code=0x7ffc0000 [ 38.490035][ T29] audit: type=1326 audit(1745899413.743:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1511de969 code=0x7ffc0000 [ 38.513385][ T29] audit: type=1326 audit(1745899413.743:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1511de969 code=0x7ffc0000 [ 38.536553][ T29] audit: type=1400 audit(1745899413.743:496): avc: denied { create } for pid=3596 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.558780][ T29] audit: type=1326 audit(1745899413.743:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1511de969 code=0x7ffc0000 [ 38.584192][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.639758][ T3626] FAULT_INJECTION: forcing a failure. [ 38.639758][ T3626] name failslab, interval 1, probability 0, space 0, times 0 [ 38.651364][ T3624] loop2: detected capacity change from 0 to 128 [ 38.652524][ T3626] CPU: 0 UID: 0 PID: 3626 Comm: syz.1.58 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 38.652629][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 38.652646][ T3626] Call Trace: [ 38.652655][ T3626] [ 38.652665][ T3626] __dump_stack+0x1d/0x30 [ 38.652709][ T3626] dump_stack_lvl+0xe8/0x140 [ 38.652734][ T3626] dump_stack+0x15/0x1b [ 38.652755][ T3626] should_fail_ex+0x265/0x280 [ 38.652871][ T3626] should_failslab+0x8c/0xb0 [ 38.653014][ T3626] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 38.653042][ T3626] ? cond_bools_copy+0x30/0x80 [ 38.653068][ T3626] ? __pfx_cond_bools_destroy+0x10/0x10 [ 38.653191][ T3626] kmemdup_noprof+0x2b/0x70 [ 38.653255][ T3626] ? __pfx_cond_bools_destroy+0x10/0x10 [ 38.653288][ T3626] cond_bools_copy+0x30/0x80 [ 38.653312][ T3626] ? __pfx_cond_bools_destroy+0x10/0x10 [ 38.653336][ T3626] hashtab_duplicate+0x11b/0x360 [ 38.653370][ T3626] ? __pfx_cond_bools_copy+0x10/0x10 [ 38.653428][ T3626] cond_policydb_dup+0xd2/0x4e0 [ 38.653457][ T3626] security_set_bools+0xa0/0x340 [ 38.653500][ T3626] sel_commit_bools_write+0x1ea/0x270 [ 38.653526][ T3626] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 38.653553][ T3626] vfs_write+0x266/0x8d0 [ 38.653664][ T3626] ? __rcu_read_unlock+0x4f/0x70 [ 38.653691][ T3626] ? __fget_files+0x184/0x1c0 [ 38.653745][ T3626] __x64_sys_pwrite64+0xfd/0x150 [ 38.653781][ T3626] x64_sys_call+0xe45/0x2fb0 [ 38.653808][ T3626] do_syscall_64+0xd0/0x1a0 [ 38.653891][ T3626] ? clear_bhb_loop+0x25/0x80 [ 38.653997][ T3626] ? clear_bhb_loop+0x25/0x80 [ 38.654029][ T3626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.654057][ T3626] RIP: 0033:0x7f18dbc4e969 [ 38.654087][ T3626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.654110][ T3626] RSP: 002b:00007f18da2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 38.654133][ T3626] RAX: ffffffffffffffda RBX: 00007f18dbe75fa0 RCX: 00007f18dbc4e969 [ 38.654149][ T3626] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 38.654164][ T3626] RBP: 00007f18da2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.654180][ T3626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.654242][ T3626] R13: 0000000000000000 R14: 00007f18dbe75fa0 R15: 00007fffb21d2388 [ 38.654266][ T3626] [ 38.719670][ T3630] loop1: detected capacity change from 0 to 512 [ 38.925315][ T3630] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.934639][ T3630] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 38.981673][ T3630] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 38.991599][ T3633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 39.000560][ T3633] netlink: 108 bytes leftover after parsing attributes in process `syz.2.60'. [ 39.004428][ T3630] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 39.004482][ T3630] System zones: 0-2, 18-18, 34-34 [ 39.004810][ T3630] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 39.005118][ T3630] EXT4-fs (loop1): 1 truncate cleaned up [ 39.005550][ T3630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.012195][ T3633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 39.073784][ T3633] netlink: 108 bytes leftover after parsing attributes in process `syz.2.60'. [ 39.075952][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.082711][ T3633] netlink: 84 bytes leftover after parsing attributes in process `syz.2.60'. [ 39.176649][ T3640] loop0: detected capacity change from 0 to 128 [ 39.188557][ T3644] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 39.196033][ T3644] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 39.204656][ T3644] vhci_hcd vhci_hcd.0: Device attached [ 39.212281][ T3642] tipc: Started in network mode [ 39.217685][ T3642] tipc: Node identity ac14140f, cluster identity 4711 [ 39.225626][ T3642] tipc: New replicast peer: 255.255.255.255 [ 39.232171][ T3642] tipc: Enabled bearer , priority 10 [ 39.239597][ T3648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.258037][ T3640] syz.0.62: attempt to access beyond end of device [ 39.258037][ T3640] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 39.283476][ T3640] syz.0.62: attempt to access beyond end of device [ 39.283476][ T3640] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 39.297392][ T3646] vhci_hcd: connection closed [ 39.297780][ T31] vhci_hcd: stop threads [ 39.307004][ T31] vhci_hcd: release socket [ 39.311581][ T31] vhci_hcd: disconnect device [ 39.321518][ T3650] loop4: detected capacity change from 0 to 128 [ 39.334072][ T3640] syz.0.62: attempt to access beyond end of device [ 39.334072][ T3640] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.347404][ T3651] syz.0.62: attempt to access beyond end of device [ 39.347404][ T3651] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.362350][ T3651] syz.0.62: attempt to access beyond end of device [ 39.362350][ T3651] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.377180][ T3640] syz.0.62: attempt to access beyond end of device [ 39.377180][ T3640] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.394336][ T3640] syz.0.62: attempt to access beyond end of device [ 39.394336][ T3640] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.408489][ T3640] syz.0.62: attempt to access beyond end of device [ 39.408489][ T3640] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.423591][ T3651] syz.0.62: attempt to access beyond end of device [ 39.423591][ T3651] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.437831][ T3640] syz.0.62: attempt to access beyond end of device [ 39.437831][ T3640] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 39.491075][ T3653] capability: warning: `syz.1.61' uses deprecated v2 capabilities in a way that may be insecure [ 39.536735][ T3645] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 39.544638][ T3645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.61'. [ 39.564920][ T3645] dummy0: entered promiscuous mode [ 39.581635][ T3645] bridge0: port 3(dummy0) entered blocking state [ 39.588244][ T3645] bridge0: port 3(dummy0) entered disabled state [ 39.660525][ T3645] dummy0: entered allmulticast mode [ 39.666750][ T3645] bridge0: port 3(dummy0) entered blocking state [ 39.673409][ T3645] bridge0: port 3(dummy0) entered forwarding state [ 40.040010][ T3660] loop3: detected capacity change from 0 to 128 [ 40.056657][ T3658] syz_tun: entered allmulticast mode [ 40.068133][ T3658] syz_tun: left allmulticast mode [ 40.193783][ T3666] syz.2.69 uses obsolete (PF_INET,SOCK_PACKET) [ 40.288796][ T3672] loop2: detected capacity change from 0 to 512 [ 40.317982][ T3672] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.328633][ T3672] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 40.349966][ T36] tipc: Node number set to 2886997007 [ 40.361232][ T3672] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 40.394268][ T3676] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 40.437766][ T3672] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 40.471243][ T3672] System zones: 0-2, 18-18, 34-34 [ 40.489206][ T3672] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 40.507315][ T3672] EXT4-fs (loop2): 1 truncate cleaned up [ 40.513909][ T3672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.566825][ T3680] pim6reg: entered allmulticast mode [ 40.608919][ T3680] pim6reg: left allmulticast mode [ 40.619556][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.662964][ T3683] netlink: 'syz.2.75': attribute type 39 has an invalid length. [ 40.737623][ T3686] loop2: detected capacity change from 0 to 4096 [ 40.757297][ T3686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.872693][ T3690] pim6reg: entered allmulticast mode [ 40.892751][ T3690] pim6reg: left allmulticast mode [ 40.985771][ T3696] loop0: detected capacity change from 0 to 512 [ 41.004278][ T3696] EXT4-fs (loop0): failed to initialize system zone (-117) [ 41.011660][ T3696] EXT4-fs (loop0): mount failed [ 41.040876][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.049864][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.426351][ T3704] loop1: detected capacity change from 0 to 1024 [ 41.457550][ T3706] loop4: detected capacity change from 0 to 128 [ 41.464834][ T3704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.477339][ T3704] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.503405][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.507465][ T3704] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 41.528262][ T3704] EXT4-fs (loop1): Remounting filesystem read-only [ 41.535342][ T55] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 41.598932][ T3704] syz.1.82 (3704) used greatest stack depth: 9096 bytes left [ 41.611745][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.638769][ T3714] netlink: 'syz.2.87': attribute type 39 has an invalid length. [ 41.728922][ T3714] loop2: detected capacity change from 0 to 4096 [ 41.768556][ T3744] FAULT_INJECTION: forcing a failure. [ 41.768556][ T3744] name failslab, interval 1, probability 0, space 0, times 0 [ 41.781297][ T3744] CPU: 1 UID: 0 PID: 3744 Comm: syz.3.88 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 41.781339][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 41.781477][ T3744] Call Trace: [ 41.781484][ T3744] [ 41.781492][ T3744] __dump_stack+0x1d/0x30 [ 41.781514][ T3744] dump_stack_lvl+0xe8/0x140 [ 41.781538][ T3744] dump_stack+0x15/0x1b [ 41.781559][ T3744] should_fail_ex+0x265/0x280 [ 41.781661][ T3744] should_failslab+0x8c/0xb0 [ 41.781688][ T3744] __kmalloc_cache_node_noprof+0x54/0x320 [ 41.781771][ T3744] ? __get_vm_area_node+0x106/0x1c0 [ 41.781800][ T3744] __get_vm_area_node+0x106/0x1c0 [ 41.781854][ T3744] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 41.781881][ T3744] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 41.781928][ T3744] ? avc_has_perm_noaudit+0x1b1/0x200 [ 41.782027][ T3744] ? selinux_capable+0x1f9/0x270 [ 41.782055][ T3744] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 41.782089][ T3744] __vmalloc_noprof+0x5f/0x70 [ 41.782115][ T3744] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 41.782159][ T3744] bpf_prog_alloc_no_stats+0x47/0x390 [ 41.782186][ T3744] ? bpf_prog_alloc+0x2a/0x150 [ 41.782220][ T3744] bpf_prog_alloc+0x3c/0x150 [ 41.782293][ T3744] bpf_prog_load+0x514/0x1070 [ 41.782417][ T3744] ? security_bpf+0x2b/0x90 [ 41.782444][ T3744] __sys_bpf+0x51d/0x790 [ 41.782483][ T3744] __x64_sys_bpf+0x41/0x50 [ 41.782513][ T3744] x64_sys_call+0x2478/0x2fb0 [ 41.782592][ T3744] do_syscall_64+0xd0/0x1a0 [ 41.782613][ T3744] ? clear_bhb_loop+0x25/0x80 [ 41.782737][ T3744] ? clear_bhb_loop+0x25/0x80 [ 41.782756][ T3744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.782821][ T3744] RIP: 0033:0x7f5a4175e969 [ 41.782838][ T3744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.782855][ T3744] RSP: 002b:00007f5a3fdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.782872][ T3744] RAX: ffffffffffffffda RBX: 00007f5a41985fa0 RCX: 00007f5a4175e969 [ 41.782883][ T3744] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 41.782895][ T3744] RBP: 00007f5a3fdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.782941][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.782956][ T3744] R13: 0000000000000000 R14: 00007f5a41985fa0 R15: 00007ffc4f8b4ce8 [ 41.782979][ T3744] [ 41.782988][ T3744] syz.3.88: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 42.048090][ T3744] CPU: 1 UID: 0 PID: 3744 Comm: syz.3.88 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 42.048125][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.048138][ T3744] Call Trace: [ 42.048147][ T3744] [ 42.048157][ T3744] __dump_stack+0x1d/0x30 [ 42.048200][ T3744] dump_stack_lvl+0xe8/0x140 [ 42.048222][ T3744] dump_stack+0x15/0x1b [ 42.048243][ T3744] warn_alloc+0x12b/0x1a0 [ 42.048269][ T3744] ? __get_vm_area_node+0x106/0x1c0 [ 42.048299][ T3744] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 42.048436][ T3744] ? avc_has_perm_noaudit+0x1b1/0x200 [ 42.048481][ T3744] ? selinux_capable+0x1f9/0x270 [ 42.048509][ T3744] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 42.048678][ T3744] __vmalloc_noprof+0x5f/0x70 [ 42.048756][ T3744] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 42.048784][ T3744] bpf_prog_alloc_no_stats+0x47/0x390 [ 42.048811][ T3744] ? bpf_prog_alloc+0x2a/0x150 [ 42.048931][ T3744] bpf_prog_alloc+0x3c/0x150 [ 42.048966][ T3744] bpf_prog_load+0x514/0x1070 [ 42.049033][ T3744] ? security_bpf+0x2b/0x90 [ 42.049060][ T3744] __sys_bpf+0x51d/0x790 [ 42.049096][ T3744] __x64_sys_bpf+0x41/0x50 [ 42.049136][ T3744] x64_sys_call+0x2478/0x2fb0 [ 42.049183][ T3744] do_syscall_64+0xd0/0x1a0 [ 42.049209][ T3744] ? clear_bhb_loop+0x25/0x80 [ 42.049372][ T3744] ? clear_bhb_loop+0x25/0x80 [ 42.049398][ T3744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.049460][ T3744] RIP: 0033:0x7f5a4175e969 [ 42.049553][ T3744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.049575][ T3744] RSP: 002b:00007f5a3fdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.049596][ T3744] RAX: ffffffffffffffda RBX: 00007f5a41985fa0 RCX: 00007f5a4175e969 [ 42.049608][ T3744] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 42.049692][ T3744] RBP: 00007f5a3fdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.049703][ T3744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.049715][ T3744] R13: 0000000000000000 R14: 00007f5a41985fa0 R15: 00007ffc4f8b4ce8 [ 42.049736][ T3744] [ 42.049754][ T3744] Mem-Info: [ 42.209186][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.225870][ T3744] active_anon:25073 inactive_anon:0 isolated_anon:0 [ 42.225870][ T3744] active_file:6333 inactive_file:11316 isolated_file:0 [ 42.225870][ T3744] unevictable:0 dirty:1538 writeback:0 [ 42.225870][ T3744] slab_reclaimable:2837 slab_unreclaimable:28662 [ 42.225870][ T3744] mapped:28468 shmem:19971 pagetables:926 [ 42.225870][ T3744] sec_pagetables:0 bounce:0 [ 42.225870][ T3744] kernel_misc_reclaimable:0 [ 42.225870][ T3744] free:1835242 free_pcp:1504 free_cma:0 [ 42.225939][ T3744] Node 0 active_anon:100292kB inactive_anon:0kB active_file:25332kB inactive_file:45264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113872kB dirty:6152kB writeback:0kB shmem:79884kB writeback_tmp:0kB kernel_stack:3872kB pagetables:3704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 42.374646][ T3744] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 42.402411][ T3744] lowmem_reserve[]: 0 2884 7863 7863 [ 42.408108][ T3744] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 42.441162][ T3744] lowmem_reserve[]: 0 0 4978 4978 [ 42.446349][ T3744] Node 0 Normal free:4335636kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:100292kB inactive_anon:0kB active_file:25332kB inactive_file:45264kB unevictable:0kB writepending:6152kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:2016kB local_pcp:808kB free_cma:0kB [ 42.477495][ T3744] lowmem_reserve[]: 0 0 0 0 [ 42.482252][ T3744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 42.497230][ T3744] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 42.514379][ T3744] Node 0 Normal: 5*4kB (ME) 4*8kB (E) 5*16kB (UE) 42*32kB (UME) 34*64kB (ME) 20*128kB (UME) 13*256kB (ME) 17*512kB (UME) 12*1024kB (ME) 6*2048kB (ME) 1047*4096kB (M) = 4331332kB [ 42.533717][ T3744] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 42.543469][ T3744] 37649 total pagecache pages [ 42.548319][ T3744] 0 pages in swap cache [ 42.553003][ T3744] Free swap = 124996kB [ 42.557360][ T3744] Total swap = 124996kB [ 42.561659][ T3744] 2097051 pages RAM [ 42.565587][ T3744] 0 pages HighMem/MovableOnly [ 42.570416][ T3744] 80258 pages reserved [ 42.575303][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.702917][ T3787] loop7: detected capacity change from 0 to 16384 [ 42.752340][ T3789] loop1: detected capacity change from 0 to 128 [ 42.763070][ T3791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.93'. [ 42.863069][ T3801] loop3: detected capacity change from 0 to 128 [ 42.895954][ T3801] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 42.953398][ T3804] loop7: detected capacity change from 16384 to 16383 [ 42.953977][ T3808] pim6reg: entered allmulticast mode [ 42.981667][ T3807] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 42.992779][ T3808] pim6reg: left allmulticast mode [ 43.157615][ T3815] pim6reg: entered allmulticast mode [ 43.184543][ T3815] pim6reg: left allmulticast mode [ 43.217117][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 43.230984][ T3802] serio: Serial port ptm0 [ 43.282920][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 43.282938][ T29] audit: type=1326 audit(1745899418.693:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ca1e969 code=0x7ffc0000 [ 43.315643][ T29] audit: type=1326 audit(1745899418.723:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ca1e969 code=0x7ffc0000 [ 43.361489][ T29] audit: type=1400 audit(1745899418.773:896): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.382163][ T3715] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 43.397972][ T29] audit: type=1400 audit(1745899418.793:897): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.422403][ T29] audit: type=1400 audit(1745899418.793:898): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.446665][ T29] audit: type=1400 audit(1745899418.793:899): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.472173][ T29] audit: type=1326 audit(1745899418.803:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.2.102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa3ca1e969 code=0x0 [ 43.504098][ T29] audit: type=1326 audit(1745899418.913:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ca1e969 code=0x7ffc0000 [ 43.527504][ T29] audit: type=1326 audit(1745899418.913:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ca1e969 code=0x7ffc0000 [ 43.551038][ T29] audit: type=1326 audit(1745899418.913:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3817 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3ca1e969 code=0x7ffc0000 [ 43.584472][ T3821] pim6reg: entered allmulticast mode [ 43.596068][ T3821] pim6reg: left allmulticast mode [ 43.621381][ T3824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3824 comm=syz.3.101 [ 43.634038][ T3824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 43.640784][ T3826] loop0: detected capacity change from 0 to 512 [ 43.661649][ T3826] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.103: Failed to acquire dquot type 0 [ 43.673078][ T3826] EXT4-fs (loop0): Remounting filesystem read-only [ 43.679662][ T3826] EXT4-fs (loop0): 1 orphan inode deleted [ 43.686100][ T3826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.699146][ T3826] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.736826][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.813290][ T3836] loop1: detected capacity change from 0 to 128 [ 43.821233][ T3836] vfat: Unknown parameter 'trans' [ 43.998638][ T3842] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 44.263132][ T3844] FAULT_INJECTION: forcing a failure. [ 44.263132][ T3844] name failslab, interval 1, probability 0, space 0, times 0 [ 44.276507][ T3844] CPU: 0 UID: 0 PID: 3844 Comm: syz.2.108 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 44.276538][ T3844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.276553][ T3844] Call Trace: [ 44.276561][ T3844] [ 44.276570][ T3844] __dump_stack+0x1d/0x30 [ 44.276592][ T3844] dump_stack_lvl+0xe8/0x140 [ 44.276609][ T3844] dump_stack+0x15/0x1b [ 44.276624][ T3844] should_fail_ex+0x265/0x280 [ 44.276654][ T3844] should_failslab+0x8c/0xb0 [ 44.276691][ T3844] kmem_cache_alloc_noprof+0x50/0x310 [ 44.276729][ T3844] ? mas_alloc_nodes+0x265/0x520 [ 44.276770][ T3844] mas_alloc_nodes+0x265/0x520 [ 44.276794][ T3844] mas_preallocate+0x456/0x680 [ 44.276817][ T3844] mmap_region+0x966/0x1470 [ 44.276872][ T3844] do_mmap+0x9de/0xc20 [ 44.276898][ T3844] vm_mmap_pgoff+0x17a/0x2e0 [ 44.276925][ T3844] ksys_mmap_pgoff+0xc2/0x310 [ 44.276955][ T3844] ? __x64_sys_mmap+0x49/0x70 [ 44.276980][ T3844] x64_sys_call+0x1602/0x2fb0 [ 44.277001][ T3844] do_syscall_64+0xd0/0x1a0 [ 44.277020][ T3844] ? clear_bhb_loop+0x25/0x80 [ 44.277043][ T3844] ? clear_bhb_loop+0x25/0x80 [ 44.277068][ T3844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.277088][ T3844] RIP: 0033:0x7ffa3ca1e9a3 [ 44.277102][ T3844] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 44.277118][ T3844] RSP: 002b:00007ffa3b086e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 44.277135][ T3844] RAX: ffffffffffffffda RBX: 000000000000071a RCX: 00007ffa3ca1e9a3 [ 44.277150][ T3844] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 44.277165][ T3844] RBP: 0000200000000f42 R08: 00000000ffffffff R09: 0000000000000000 [ 44.277202][ T3844] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 44.277219][ T3844] R13: 00007ffa3b086ef0 R14: 00007ffa3b086eb0 R15: 0000200000000280 [ 44.277237][ T3844] [ 44.588799][ T3833] 9pnet_fd: p9_fd_create_tcp (3833): problem connecting socket to 127.0.0.1 [ 44.736694][ T3855] loop1: detected capacity change from 0 to 1024 [ 44.790656][ T3855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.832268][ T3855] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.858823][ T3860] loop4: detected capacity change from 0 to 1024 [ 44.887849][ T3860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.930780][ T3860] EXT4-fs: Mount option(s) incompatible with ext2 [ 44.959289][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.108674][ T3867] loop4: detected capacity change from 0 to 512 [ 45.137895][ T3867] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 45.155626][ T3867] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.165832][ T3867] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.117: invalid indirect mapped block 256 (level 2) [ 45.202673][ T3867] EXT4-fs (loop4): 2 truncates cleaned up [ 45.259452][ T3867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.386915][ T3867] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 13: comm syz.4.117: lblock 0 mapped to illegal pblock 13 (length 1) [ 45.403162][ T3867] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 13: comm syz.4.117: lblock 0 mapped to illegal pblock 13 (length 1) [ 45.463515][ T3867] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 13: comm syz.4.117: lblock 0 mapped to illegal pblock 13 (length 1) [ 45.492109][ T3867] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 13: comm syz.4.117: lblock 0 mapped to illegal pblock 13 (length 1) [ 45.530305][ T3874] FAULT_INJECTION: forcing a failure. [ 45.530305][ T3874] name failslab, interval 1, probability 0, space 0, times 0 [ 45.544540][ T3874] CPU: 0 UID: 0 PID: 3874 Comm: syz.3.119 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 45.544573][ T3874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 45.544591][ T3874] Call Trace: [ 45.544597][ T3874] [ 45.544606][ T3874] __dump_stack+0x1d/0x30 [ 45.544706][ T3874] dump_stack_lvl+0xe8/0x140 [ 45.544730][ T3874] dump_stack+0x15/0x1b [ 45.544751][ T3874] should_fail_ex+0x265/0x280 [ 45.544791][ T3874] should_failslab+0x8c/0xb0 [ 45.544913][ T3874] kmem_cache_alloc_node_noprof+0x57/0x320 [ 45.545014][ T3874] ? __alloc_skb+0x101/0x320 [ 45.545109][ T3874] ? __rtnl_unlock+0x95/0xb0 [ 45.545357][ T3874] __alloc_skb+0x101/0x320 [ 45.545389][ T3874] netlink_ack+0xfd/0x500 [ 45.545424][ T3874] netlink_rcv_skb+0x192/0x220 [ 45.545502][ T3874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 45.545535][ T3874] rtnetlink_rcv+0x1c/0x30 [ 45.545586][ T3874] netlink_unicast+0x59e/0x670 [ 45.545857][ T3874] netlink_sendmsg+0x58b/0x6b0 [ 45.545961][ T3874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.546038][ T3874] __sock_sendmsg+0x142/0x180 [ 45.546173][ T3874] ____sys_sendmsg+0x31e/0x4e0 [ 45.546264][ T3874] ___sys_sendmsg+0x17b/0x1d0 [ 45.546302][ T3874] __x64_sys_sendmsg+0xd4/0x160 [ 45.546362][ T3874] x64_sys_call+0x2999/0x2fb0 [ 45.546390][ T3874] do_syscall_64+0xd0/0x1a0 [ 45.546469][ T3874] ? clear_bhb_loop+0x25/0x80 [ 45.546497][ T3874] ? clear_bhb_loop+0x25/0x80 [ 45.546524][ T3874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.546551][ T3874] RIP: 0033:0x7f5a4175e969 [ 45.546570][ T3874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.546591][ T3874] RSP: 002b:00007f5a3fdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.546623][ T3874] RAX: ffffffffffffffda RBX: 00007f5a41985fa0 RCX: 00007f5a4175e969 [ 45.546638][ T3874] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 45.546717][ T3874] RBP: 00007f5a3fdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.546733][ T3874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.546746][ T3874] R13: 0000000000000000 R14: 00007f5a41985fa0 R15: 00007ffc4f8b4ce8 [ 45.546769][ T3874] [ 45.782476][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.815416][ T3876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3876 comm=syz.2.120 [ 45.842225][ T3876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 45.912422][ T3886] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 45.977400][ T3897] loop4: detected capacity change from 0 to 128 [ 46.010517][ T3897] bio_check_eod: 50129 callbacks suppressed [ 46.010532][ T3897] syz.4.127: attempt to access beyond end of device [ 46.010532][ T3897] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 46.043667][ T3897] syz.4.127: attempt to access beyond end of device [ 46.043667][ T3897] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 46.063503][ T3897] syz.4.127: attempt to access beyond end of device [ 46.063503][ T3897] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.077102][ T3897] syz.4.127: attempt to access beyond end of device [ 46.077102][ T3897] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.093263][ T3897] syz.4.127: attempt to access beyond end of device [ 46.093263][ T3897] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.107498][ T3901] syz.4.127: attempt to access beyond end of device [ 46.107498][ T3901] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.124039][ T3901] syz.4.127: attempt to access beyond end of device [ 46.124039][ T3901] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.137784][ T3897] syz.4.127: attempt to access beyond end of device [ 46.137784][ T3897] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.153759][ T3901] syz.4.127: attempt to access beyond end of device [ 46.153759][ T3901] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.168507][ T3897] syz.4.127: attempt to access beyond end of device [ 46.168507][ T3897] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.381300][ T3908] loop2: detected capacity change from 0 to 128 [ 46.391081][ T3908] vfat: Unknown parameter '18446744073709551615ÿÿÿ01777777777777777777777ÿÿÿÿof˜_' [ 46.615214][ T3911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.624175][ T3911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.725093][ T3913] loop3: detected capacity change from 0 to 512 [ 46.742307][ T3913] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 46.762240][ T3913] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.769478][ T3913] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.132: invalid indirect mapped block 256 (level 2) [ 46.825303][ T3913] EXT4-fs (loop3): 2 truncates cleaned up [ 46.855095][ T3913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.884146][ T3918] loop0: detected capacity change from 0 to 512 [ 46.913420][ T3913] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 13: comm syz.3.132: lblock 0 mapped to illegal pblock 13 (length 1) [ 46.916796][ T3918] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.941817][ T3918] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.964650][ T3913] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 13: comm syz.3.132: lblock 0 mapped to illegal pblock 13 (length 1) [ 46.981162][ T3918] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.006888][ T3918] EXT4-fs (loop0): Remounting filesystem read-only [ 47.017423][ T3913] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 13: comm syz.3.132: lblock 0 mapped to illegal pblock 13 (length 1) [ 47.022943][ T3930] loop4: detected capacity change from 0 to 512 [ 47.034238][ T3918] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.053034][ T3918] EXT4-fs (loop0): 1 truncate cleaned up [ 47.060221][ T3930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.062356][ T3918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.073982][ T3930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.081664][ T3913] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 13: comm syz.3.132: lblock 0 mapped to illegal pblock 13 (length 1) [ 47.105065][ T3935] loop1: detected capacity change from 0 to 164 [ 47.114714][ T3935] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 47.131253][ T3930] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.146247][ T3930] EXT4-fs (loop4): 1 truncate cleaned up [ 47.152509][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.154284][ T3930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.174196][ T3918] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 47.183429][ T3930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.137'. [ 47.205557][ T3930] 0ªX¹¦À: renamed from caif0 [ 47.210467][ T3930] FAULT_INJECTION: forcing a failure. [ 47.210467][ T3930] name failslab, interval 1, probability 0, space 0, times 0 [ 47.223257][ T3930] CPU: 0 UID: 0 PID: 3930 Comm: syz.4.137 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 47.223286][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 47.223427][ T3930] Call Trace: [ 47.223434][ T3930] [ 47.223443][ T3930] __dump_stack+0x1d/0x30 [ 47.223467][ T3930] dump_stack_lvl+0xe8/0x140 [ 47.223487][ T3930] dump_stack+0x15/0x1b [ 47.223541][ T3930] should_fail_ex+0x265/0x280 [ 47.223576][ T3930] should_failslab+0x8c/0xb0 [ 47.223607][ T3930] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 47.223631][ T3930] ? device_rename+0x82/0x180 [ 47.223711][ T3930] kstrdup+0x3e/0xd0 [ 47.223747][ T3930] device_rename+0x82/0x180 [ 47.223772][ T3930] netif_change_name+0x1eb/0x6b0 [ 47.223845][ T3930] ? __rcu_read_unlock+0x4f/0x70 [ 47.223867][ T3930] ? __perf_event_task_sched_in+0xa37/0xaa0 [ 47.223944][ T3930] ? kvm_sched_clock_read+0x11/0x20 [ 47.224038][ T3930] ? perf_cgroup_switch+0x132/0x450 [ 47.224088][ T3930] ? nla_strscpy+0xec/0x120 [ 47.224109][ T3930] do_setlink+0x766/0x27f0 [ 47.224135][ T3930] ? _raw_spin_unlock+0x26/0x50 [ 47.224164][ T3930] ? finish_task_switch+0xad/0x2b0 [ 47.224228][ T3930] ? schedule+0x5f/0xd0 [ 47.224297][ T3930] ? __list_del_entry_valid_or_report+0x65/0x130 [ 47.224382][ T3930] rtnl_setlink+0x311/0x420 [ 47.224500][ T3930] ? security_capable+0x83/0x90 [ 47.224615][ T3930] ? ns_capable+0x7d/0xb0 [ 47.224637][ T3930] ? __pfx_rtnl_setlink+0x10/0x10 [ 47.224662][ T3930] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 47.224692][ T3930] netlink_rcv_skb+0x120/0x220 [ 47.224770][ T3930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.224802][ T3930] rtnetlink_rcv+0x1c/0x30 [ 47.224826][ T3930] netlink_unicast+0x59e/0x670 [ 47.224864][ T3930] netlink_sendmsg+0x58b/0x6b0 [ 47.224915][ T3930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.224994][ T3930] __sock_sendmsg+0x142/0x180 [ 47.225024][ T3930] sock_write_iter+0x165/0x1b0 [ 47.225056][ T3930] do_iter_readv_writev+0x41e/0x4c0 [ 47.225106][ T3930] vfs_writev+0x2c9/0x870 [ 47.225171][ T3930] do_writev+0xe7/0x210 [ 47.225209][ T3930] __x64_sys_writev+0x45/0x50 [ 47.225241][ T3930] x64_sys_call+0x2006/0x2fb0 [ 47.225271][ T3930] do_syscall_64+0xd0/0x1a0 [ 47.225297][ T3930] ? clear_bhb_loop+0x25/0x80 [ 47.225323][ T3930] ? clear_bhb_loop+0x25/0x80 [ 47.225348][ T3930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.225377][ T3930] RIP: 0033:0x7fdbb66fe969 [ 47.225393][ T3930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.225479][ T3930] RSP: 002b:00007fdbb4d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 47.225499][ T3930] RAX: ffffffffffffffda RBX: 00007fdbb6925fa0 RCX: 00007fdbb66fe969 [ 47.225511][ T3930] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 47.225523][ T3930] RBP: 00007fdbb4d67090 R08: 0000000000000000 R09: 0000000000000000 [ 47.225535][ T3930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.225548][ T3930] R13: 0000000000000000 R14: 00007fdbb6925fa0 R15: 00007ffc7522ebf8 [ 47.225661][ T3930] [ 47.229809][ T3939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 47.334564][ T3944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3944 comm=syz.3.138 [ 47.392299][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 47.596262][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.645975][ T3951] loop4: detected capacity change from 0 to 128 [ 47.656457][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.668067][ T3951] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 47.680616][ T3952] syz_tun: entered allmulticast mode [ 47.697102][ T3948] syz_tun: left allmulticast mode [ 47.812445][ T3769] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 47.822892][ T3959] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.143'. [ 47.838073][ T3957] loop1: detected capacity change from 0 to 128 [ 47.865886][ T3769] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 47.876511][ T3959] netlink: zone id is out of range [ 47.887350][ T3959] netlink: zone id is out of range [ 47.893487][ T3959] netlink: zone id is out of range [ 47.899169][ T3959] netlink: zone id is out of range [ 47.905320][ T3959] netlink: zone id is out of range [ 47.910783][ T3959] netlink: zone id is out of range [ 47.916117][ T3959] netlink: zone id is out of range [ 47.922177][ T3959] netlink: zone id is out of range [ 47.927946][ T3959] netlink: zone id is out of range [ 47.934853][ T3959] netlink: zone id is out of range [ 48.001291][ T3963] sctp: [Deprecated]: syz.3.144 (pid 3963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.001291][ T3963] Use struct sctp_sack_info instead [ 48.025901][ T3954] netlink: 'syz.0.141': attribute type 21 has an invalid length. [ 48.034682][ T3954] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 48.043060][ T3954] netlink: 144 bytes leftover after parsing attributes in process `syz.0.141'. [ 48.335716][ T3731] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 48.366243][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 48.366260][ T29] audit: type=1400 audit(1745899423.773:1125): avc: denied { create } for pid=3976 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.487393][ T29] audit: type=1400 audit(1745899423.803:1126): avc: denied { ioctl } for pid=3976 comm="syz.4.147" path="socket:[6278]" dev="sockfs" ino=6278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.512272][ T29] audit: type=1400 audit(1745899423.803:1127): avc: denied { ioctl } for pid=3976 comm="syz.4.147" path="socket:[6279]" dev="sockfs" ino=6279 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.657504][ T3979] dummy0 speed is unknown, defaulting to 1000 [ 48.890944][ T3981] loop1: detected capacity change from 0 to 1024 [ 48.922425][ T3981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.946316][ T3981] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.992601][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.039723][ T3987] dummy0: left allmulticast mode [ 49.045027][ T3987] bridge0: port 3(dummy0) entered disabled state [ 49.059378][ T3987] bridge_slave_0: left allmulticast mode [ 49.065372][ T3987] bridge_slave_0: left promiscuous mode [ 49.071949][ T3987] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.088329][ T3988] FAULT_INJECTION: forcing a failure. [ 49.088329][ T3988] name failslab, interval 1, probability 0, space 0, times 0 [ 49.092558][ T3987] bridge_slave_1: left allmulticast mode [ 49.101148][ T3988] CPU: 1 UID: 0 PID: 3988 Comm: syz.1.150 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 49.101184][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.101200][ T3988] Call Trace: [ 49.101209][ T3988] [ 49.101220][ T3988] __dump_stack+0x1d/0x30 [ 49.101248][ T3988] dump_stack_lvl+0xe8/0x140 [ 49.101311][ T3988] dump_stack+0x15/0x1b [ 49.101329][ T3988] should_fail_ex+0x265/0x280 [ 49.101440][ T3988] ? tty_open+0x81/0xaf0 [ 49.101524][ T3988] should_failslab+0x8c/0xb0 [ 49.101569][ T3988] __kmalloc_cache_noprof+0x4c/0x320 [ 49.101660][ T3988] tty_open+0x81/0xaf0 [ 49.101694][ T3988] ? kobj_lookup+0x276/0x280 [ 49.101727][ T3988] ? __pfx_exact_match+0x10/0x10 [ 49.101764][ T3988] chrdev_open+0x2e8/0x3a0 [ 49.101852][ T3988] do_dentry_open+0x646/0xa20 [ 49.101904][ T3988] ? __pfx_chrdev_open+0x10/0x10 [ 49.102042][ T3988] vfs_open+0x37/0x1e0 [ 49.102091][ T3988] path_openat+0x1c5e/0x2170 [ 49.102129][ T3988] do_filp_open+0x109/0x230 [ 49.102164][ T3988] do_sys_openat2+0xa6/0x110 [ 49.102190][ T3988] __x64_sys_openat+0xf2/0x120 [ 49.102282][ T3988] x64_sys_call+0x1af/0x2fb0 [ 49.102365][ T3988] do_syscall_64+0xd0/0x1a0 [ 49.102393][ T3988] ? clear_bhb_loop+0x25/0x80 [ 49.102420][ T3988] ? clear_bhb_loop+0x25/0x80 [ 49.102448][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.102475][ T3988] RIP: 0033:0x7f18dbc4d2d0 [ 49.102557][ T3988] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 49.102580][ T3988] RSP: 002b:00007f18da295b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 49.102714][ T3988] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f18dbc4d2d0 [ 49.102730][ T3988] RDX: 0000000000000002 RSI: 00007f18da295c10 RDI: 00000000ffffff9c [ 49.102746][ T3988] RBP: 00007f18da295c10 R08: 0000000000000000 R09: 00007f18da295986 [ 49.102761][ T3988] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 49.102840][ T3988] R13: 0000000000000000 R14: 00007f18dbe76080 R15: 00007fffb21d2388 [ 49.102864][ T3988] [ 49.145026][ T3990] SET target dimension over the limit! [ 49.145712][ T3987] bridge_slave_1: left promiscuous mode [ 49.353022][ T3987] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.417331][ T3987] bond0: (slave bond_slave_0): Releasing backup interface [ 49.433584][ T3987] bond0: (slave bond_slave_1): Releasing backup interface [ 49.450575][ T3987] team0: Port device team_slave_0 removed [ 49.475532][ T3987] team0: Port device team_slave_1 removed [ 49.493878][ T3999] loop0: detected capacity change from 0 to 1024 [ 49.502573][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.510055][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.521635][ T3987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.529209][ T3987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.543825][ T3999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.599288][ T3999] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.716407][ T4000] dummy0 speed is unknown, defaulting to 1000 [ 49.888047][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.901356][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 49.929505][ T29] audit: type=1400 audit(1745899425.313:1128): avc: denied { create } for pid=3996 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.952675][ T29] audit: type=1400 audit(1745899425.313:1129): avc: denied { setopt } for pid=3996 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.972583][ T29] audit: type=1400 audit(1745899425.333:1130): avc: denied { connect } for pid=3996 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.991345][ T4014] syzkaller0: entered allmulticast mode [ 49.998034][ T4014] syzkaller0: entered promiscuous mode [ 50.012450][ T29] audit: type=1400 audit(1745899425.403:1131): avc: denied { setopt } for pid=4012 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.089917][ T29] audit: type=1400 audit(1745899425.493:1132): avc: denied { create } for pid=3996 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.112110][ T4014] loop1: detected capacity change from 0 to 512 [ 50.130176][ T29] audit: type=1400 audit(1745899425.533:1133): avc: denied { create } for pid=4004 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.150026][ T29] audit: type=1400 audit(1745899425.533:1134): avc: denied { setopt } for pid=4004 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.188292][ T4014] ext2: Bad value for 'init_itable' [ 50.222016][ T4021] process 'syz.3.160' launched './file1' with NULL argv: empty string added [ 50.304006][ T4027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 50.314777][ T4028] random: crng reseeded on system resumption [ 50.768908][ T4012] syzkaller0: left promiscuous mode [ 50.774415][ T4012] syzkaller0: left allmulticast mode [ 51.241857][ T4050] loop4: detected capacity change from 0 to 1024 [ 51.265665][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.285422][ T4050] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.171: Allocating blocks 385-513 which overlap fs metadata [ 51.306631][ T4050] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 51.319782][ T4050] netlink: 'syz.4.171': attribute type 10 has an invalid length. [ 51.327626][ T4050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.171'. [ 51.339104][ T4050] dummy0: entered promiscuous mode [ 51.345252][ T4050] bridge0: port 3(dummy0) entered blocking state [ 51.351893][ T4050] bridge0: port 3(dummy0) entered disabled state [ 51.359784][ T4050] dummy0: entered allmulticast mode [ 51.367184][ T4050] bridge0: port 3(dummy0) entered blocking state [ 51.373797][ T4050] bridge0: port 3(dummy0) entered forwarding state [ 51.377000][ T4055] netlink: 56 bytes leftover after parsing attributes in process `syz.2.172'. [ 51.398309][ T4056] EXT4-fs (loop4): pa ffff8881006d6070: logic 16, phys. 129, len 24 [ 51.406529][ T4055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 51.406723][ T4056] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 51.449913][ T4055] FAULT_INJECTION: forcing a failure. [ 51.449913][ T4055] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.464053][ T4055] CPU: 0 UID: 0 PID: 4055 Comm: syz.2.172 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 51.464169][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.464181][ T4055] Call Trace: [ 51.464200][ T4055] [ 51.464208][ T4055] __dump_stack+0x1d/0x30 [ 51.464232][ T4055] dump_stack_lvl+0xe8/0x140 [ 51.464250][ T4055] dump_stack+0x15/0x1b [ 51.464265][ T4055] should_fail_ex+0x265/0x280 [ 51.464295][ T4055] should_fail+0xb/0x20 [ 51.464374][ T4055] should_fail_usercopy+0x1a/0x20 [ 51.464397][ T4055] strncpy_from_user+0x25/0x230 [ 51.464425][ T4055] ? kmem_cache_alloc_noprof+0x186/0x310 [ 51.464465][ T4055] ? getname_flags+0x80/0x3b0 [ 51.464653][ T4055] getname_flags+0xae/0x3b0 [ 51.464732][ T4055] __x64_sys_mkdir+0x33/0x50 [ 51.464760][ T4055] x64_sys_call+0x2289/0x2fb0 [ 51.464787][ T4055] do_syscall_64+0xd0/0x1a0 [ 51.464809][ T4055] ? clear_bhb_loop+0x25/0x80 [ 51.464852][ T4055] ? clear_bhb_loop+0x25/0x80 [ 51.464878][ T4055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.464903][ T4055] RIP: 0033:0x7ffa3ca1e969 [ 51.464921][ T4055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.464976][ T4055] RSP: 002b:00007ffa3b087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 51.464999][ T4055] RAX: ffffffffffffffda RBX: 00007ffa3cc45fa0 RCX: 00007ffa3ca1e969 [ 51.465014][ T4055] RDX: 0000000000000000 RSI: 0000000000000022 RDI: 0000200000000000 [ 51.465029][ T4055] RBP: 00007ffa3b087090 R08: 0000000000000000 R09: 0000000000000000 [ 51.465043][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.465058][ T4055] R13: 0000000000000000 R14: 00007ffa3cc45fa0 R15: 00007ffcf6eb68b8 [ 51.465079][ T4055] [ 51.691784][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.783947][ T4059] loop1: detected capacity change from 0 to 1024 [ 51.795076][ T4059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.796101][ T4059] EXT4-fs: Mount option(s) incompatible with ext2 [ 51.814105][ T4066] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.176'. [ 51.871920][ T4070] 9pnet_fd: Insufficient options for proto=fd [ 51.896918][ T4070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.178'. [ 51.939861][ T4076] loop0: detected capacity change from 0 to 128 [ 51.961556][ T4076] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 51.982164][ T3381] IPVS: starting estimator thread 0... [ 51.982461][ T4076] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.013421][ T4085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.181'. [ 52.058743][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.065371][ T4089] loop3: detected capacity change from 0 to 512 [ 52.076447][ T4082] IPVS: using max 2256 ests per chain, 112800 per kthread [ 52.085127][ T4089] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.095428][ T4089] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 52.104721][ T4089] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 52.117109][ T4094] loop0: detected capacity change from 0 to 256 [ 52.121509][ T4089] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 52.132639][ T4089] System zones: 0-2, 18-18, 34-34 [ 52.140210][ T4089] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.156574][ T4089] EXT4-fs (loop3): 1 truncate cleaned up [ 52.165916][ T4089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.193322][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.214769][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 52.224815][ T4096] bridge0: port 3(batadv0) entered disabled state [ 52.232623][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.240731][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.287134][ T4098] loop3: detected capacity change from 0 to 1024 [ 52.294591][ T4098] EXT4-fs: inline encryption not supported [ 52.302183][ T4098] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.314604][ T4098] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.186: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.330128][ T4098] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.186: Failed to acquire dquot type 0 [ 52.342148][ T4098] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.186: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.355784][ T4098] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.186: Invalid inode bitmap blk 0 in block_group 0 [ 52.368536][ T3746] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.383146][ T3746] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:32: Failed to release dquot type 0 [ 52.395007][ T4098] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 52.404242][ T4098] EXT4-fs (loop3): 1 orphan inode deleted [ 52.412509][ T4098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.446809][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.564888][ T4112] pim6reg: entered allmulticast mode [ 52.584525][ T4112] pim6reg: left allmulticast mode [ 52.878154][ T4134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.190'. [ 53.001954][ T4141] loop4: detected capacity change from 0 to 2048 [ 53.037458][ T3293] loop4: p1 < > p4 < > [ 53.062864][ T4141] loop4: p1 < > p4 < > [ 53.136876][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 53.146968][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 53.395665][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 53.395683][ T29] audit: type=1400 audit(1745899428.803:1338): avc: denied { create } for pid=4167 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.474461][ T29] audit: type=1400 audit(1745899428.883:1339): avc: denied { setopt } for pid=4167 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.535239][ T4176] loop4: detected capacity change from 0 to 1024 [ 53.545040][ T29] audit: type=1400 audit(1745899428.953:1340): avc: denied { mounton } for pid=4175 comm="syz.4.202" path="/44/file1" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.570474][ T29] audit: type=1400 audit(1745899428.983:1341): avc: denied { map } for pid=4165 comm="syz.3.199" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.584922][ T4176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.595603][ T29] audit: type=1400 audit(1745899428.983:1342): avc: denied { read write } for pid=4165 comm="syz.3.199" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.608353][ T4176] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.634849][ T29] audit: type=1400 audit(1745899428.983:1343): avc: denied { create } for pid=4165 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.663004][ T29] audit: type=1400 audit(1745899428.983:1344): avc: denied { write } for pid=4165 comm="syz.3.199" path="socket:[5703]" dev="sockfs" ino=5703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.687304][ T29] audit: type=1400 audit(1745899429.023:1345): avc: denied { mount } for pid=4175 comm="syz.4.202" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.710950][ T29] audit: type=1400 audit(1745899429.073:1346): avc: denied { write } for pid=4175 comm="syz.4.202" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.732887][ T29] audit: type=1400 audit(1745899429.073:1347): avc: denied { add_name } for pid=4175 comm="syz.4.202" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.756318][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.793356][ T4181] loop4: detected capacity change from 0 to 128 [ 53.818801][ T4181] bio_check_eod: 38584 callbacks suppressed [ 53.818817][ T4181] syz.4.203: attempt to access beyond end of device [ 53.818817][ T4181] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 53.844504][ T4181] syz.4.203: attempt to access beyond end of device [ 53.844504][ T4181] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 53.858341][ T4181] syz.4.203: attempt to access beyond end of device [ 53.858341][ T4181] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.871744][ T4181] syz.4.203: attempt to access beyond end of device [ 53.871744][ T4181] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.885497][ T4181] syz.4.203: attempt to access beyond end of device [ 53.885497][ T4181] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.898970][ T4182] syz.4.203: attempt to access beyond end of device [ 53.898970][ T4182] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.912130][ T4181] syz.4.203: attempt to access beyond end of device [ 53.912130][ T4181] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.926241][ T4181] syz.4.203: attempt to access beyond end of device [ 53.926241][ T4181] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.939797][ T4182] syz.4.203: attempt to access beyond end of device [ 53.939797][ T4182] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.953220][ T4181] syz.4.203: attempt to access beyond end of device [ 53.953220][ T4181] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.987153][ T4186] pim6reg: entered allmulticast mode [ 53.998962][ T4186] pim6reg: left allmulticast mode [ 54.326033][ T4190] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 54.348850][ T4190] netlink: 'syz.3.205': attribute type 13 has an invalid length. [ 54.381578][ T4190] bridge0: port 3(batadv0) entered blocking state [ 54.388312][ T4190] bridge0: port 3(batadv0) entered listening state [ 54.395003][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.402291][ T4190] bridge0: port 2(bridge_slave_1) entered listening state [ 54.409664][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.416788][ T4190] bridge0: port 1(bridge_slave_0) entered listening state [ 54.444772][ T4190] net_ratelimit: 1057 callbacks suppressed [ 54.444782][ T4190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.468336][ T3382] dummy0 speed is unknown, defaulting to 1000 [ 54.498976][ T4194] loop0: detected capacity change from 0 to 1024 [ 54.557301][ T4194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.574184][ T4194] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.593856][ T4200] loop3: detected capacity change from 0 to 2048 [ 54.622816][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.634257][ T4200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.652060][ T4200] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.677884][ T4204] loop0: detected capacity change from 0 to 1024 [ 54.702987][ T4204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.715404][ T4206] loop4: detected capacity change from 0 to 512 [ 54.728147][ T4206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.730024][ T4204] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.736817][ T4206] EXT4-fs (loop4): bad geometry: block count 204800 exceeds size of device (64 blocks) [ 54.786156][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.803985][ T4206] loop4: detected capacity change from 0 to 512 [ 54.863404][ T4206] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 54.878143][ T4213] loop2: detected capacity change from 0 to 512 [ 54.890130][ T4206] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 54.906510][ T4213] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.915334][ T4206] EXT4-fs (loop4): 1 truncate cleaned up [ 54.915668][ T4213] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 54.923648][ T4206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.954425][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.961084][ T4215] loop0: detected capacity change from 0 to 512 [ 54.970728][ T4213] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 54.991377][ T4213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 55.012261][ T4213] System zones: 0-2, 18-18, 34-34 [ 55.017880][ T4215] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 55.026810][ T4222] netlink: 'syz.4.216': attribute type 29 has an invalid length. [ 55.034745][ T4222] netlink: 'syz.4.216': attribute type 3 has an invalid length. [ 55.035621][ T4213] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.042654][ T4222] netlink: 132 bytes leftover after parsing attributes in process `syz.4.216'. [ 55.058764][ T4215] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.098145][ T4213] EXT4-fs (loop2): 1 truncate cleaned up [ 55.098233][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.104626][ T4213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.132877][ T4215] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.214: invalid indirect mapped block 256 (level 2) [ 55.147581][ T4215] EXT4-fs (loop0): 2 truncates cleaned up [ 55.178052][ T4215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.201373][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.254962][ T4233] loop4: detected capacity change from 0 to 128 [ 55.268785][ T4233] vfat: Unknown parameter 'trans' [ 55.283773][ T4215] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 13: comm syz.0.214: lblock 0 mapped to illegal pblock 13 (length 1) [ 55.305483][ T4215] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 13: comm syz.0.214: lblock 0 mapped to illegal pblock 13 (length 1) [ 55.324906][ T4215] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 13: comm syz.0.214: lblock 0 mapped to illegal pblock 13 (length 1) [ 55.357843][ T4215] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 13: comm syz.0.214: lblock 0 mapped to illegal pblock 13 (length 1) [ 55.405082][ T4238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4238 comm=syz.3.220 [ 55.435492][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 55.435912][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.492660][ T4242] pim6reg: entered allmulticast mode [ 55.542144][ T4242] pim6reg: left allmulticast mode [ 55.703054][ T4250] loop0: detected capacity change from 0 to 4096 [ 55.744215][ T4250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.784538][ T4250] dummy0 speed is unknown, defaulting to 1000 [ 56.011324][ T4228] 9pnet_fd: p9_fd_create_tcp (4228): problem connecting socket to 127.0.0.1 [ 56.011484][ T4255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.034361][ T3768] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.094624][ T3768] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.175807][ T3768] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.224358][ T3768] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.262869][ T4278] loop3: detected capacity change from 0 to 128 [ 56.284154][ T4264] dummy0 speed is unknown, defaulting to 1000 [ 56.386607][ T3768] bridge_slave_1: left allmulticast mode [ 56.392362][ T3768] bridge_slave_1: left promiscuous mode [ 56.398120][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.427589][ T3768] bridge_slave_0: left allmulticast mode [ 56.433487][ T3768] bridge_slave_0: left promiscuous mode [ 56.439369][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.496014][ T4289] netlink: 138872 bytes leftover after parsing attributes in process `syz.2.237'. [ 56.505534][ T4289] netlink: zone id is out of range [ 56.510926][ T4289] netlink: zone id is out of range [ 56.516222][ T4289] netlink: zone id is out of range [ 56.521424][ T4289] netlink: zone id is out of range [ 56.526668][ T4289] netlink: zone id is out of range [ 56.531858][ T4289] netlink: zone id is out of range [ 56.536981][ T4289] netlink: zone id is out of range [ 56.542225][ T4289] netlink: zone id is out of range [ 56.547397][ T4289] netlink: zone id is out of range [ 56.578323][ T4291] loop2: detected capacity change from 0 to 512 [ 56.588927][ T4291] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.599787][ T4291] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.611786][ T4291] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.238: invalid indirect mapped block 256 (level 2) [ 56.615560][ T3768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.638960][ T4291] EXT4-fs (loop2): 2 truncates cleaned up [ 56.639000][ T3768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.652493][ T4291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.666897][ T3768] bond0 (unregistering): Released all slaves [ 56.728731][ T4291] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 13: comm syz.2.238: lblock 0 mapped to illegal pblock 13 (length 1) [ 56.748020][ T3768] hsr_slave_0: left promiscuous mode [ 56.756423][ T3768] hsr_slave_1: left promiscuous mode [ 56.764309][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.772010][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.781500][ T4291] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 13: comm syz.2.238: lblock 0 mapped to illegal pblock 13 (length 1) [ 56.797493][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.804987][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.815377][ T4291] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 13: comm syz.2.238: lblock 0 mapped to illegal pblock 13 (length 1) [ 56.830841][ T3768] veth1_macvtap: left promiscuous mode [ 56.838328][ T4291] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 13: comm syz.2.238: lblock 0 mapped to illegal pblock 13 (length 1) [ 56.840826][ T3768] veth0_macvtap: left promiscuous mode [ 56.879038][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.888537][ T3768] veth1_vlan: left promiscuous mode [ 56.903945][ T3768] veth0_vlan: left promiscuous mode [ 57.034463][ T4315] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.240'. [ 57.063046][ T3768] team0 (unregistering): Port device team_slave_1 removed [ 57.104245][ T3768] team0 (unregistering): Port device team_slave_0 removed [ 57.189703][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 57.276490][ T4320] loop4: detected capacity change from 0 to 1024 [ 57.304753][ T4320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.354659][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 57.364160][ T4320] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.421901][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.429020][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.448753][ T4264] bridge_slave_0: entered allmulticast mode [ 57.455359][ T4264] bridge_slave_0: entered promiscuous mode [ 57.466080][ T4337] bridge0: entered promiscuous mode [ 57.472418][ T4337] macvlan2: entered promiscuous mode [ 57.479469][ T4337] bridge0: port 3(macvlan2) entered blocking state [ 57.486231][ T4337] bridge0: port 3(macvlan2) entered disabled state [ 57.486790][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.492953][ T4337] macvlan2: entered allmulticast mode [ 57.508133][ T4337] bridge0: entered allmulticast mode [ 57.518608][ T4337] macvlan2: left allmulticast mode [ 57.523891][ T4337] bridge0: left allmulticast mode [ 57.539726][ T4337] bridge0: left promiscuous mode [ 57.553737][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.561221][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.573271][ T4264] bridge_slave_1: entered allmulticast mode [ 57.580018][ T4264] bridge_slave_1: entered promiscuous mode [ 57.636253][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.677081][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.703762][ T4355] loop2: detected capacity change from 0 to 512 [ 57.722398][ T4264] team0: Port device team_slave_0 added [ 57.735958][ T4355] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 57.756762][ T4264] team0: Port device team_slave_1 added [ 57.775011][ T4355] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.795531][ T4355] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.246: invalid indirect mapped block 256 (level 2) [ 57.819734][ T4355] EXT4-fs (loop2): 2 truncates cleaned up [ 57.826927][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.833962][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.860091][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.874379][ T4355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.893094][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.900123][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.926129][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.950336][ T4370] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 13: comm syz.2.246: lblock 0 mapped to illegal pblock 13 (length 1) [ 57.970619][ T4355] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 13: comm syz.2.246: lblock 0 mapped to illegal pblock 13 (length 1) [ 57.987105][ T4355] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 13: comm syz.2.246: lblock 0 mapped to illegal pblock 13 (length 1) [ 58.005169][ T4264] hsr_slave_0: entered promiscuous mode [ 58.012152][ T4355] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 13: comm syz.2.246: lblock 0 mapped to illegal pblock 13 (length 1) [ 58.026713][ T4264] hsr_slave_1: entered promiscuous mode [ 58.033008][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.041436][ T4264] Cannot create hsr debugfs directory [ 58.074078][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.222132][ T4387] netlink: 196 bytes leftover after parsing attributes in process `syz.3.248'. [ 58.239937][ T4264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.272069][ T4264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.306237][ T4264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.334325][ T4264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.396262][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.408647][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.424014][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.431191][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.469118][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.476260][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.485827][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 58.485841][ T29] audit: type=1326 audit(1745899433.893:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb66f5927 code=0x7ffc0000 [ 58.515608][ T29] audit: type=1326 audit(1745899433.893:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb669ab39 code=0x7ffc0000 [ 58.539317][ T29] audit: type=1326 audit(1745899433.893:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb66f5927 code=0x7ffc0000 [ 58.562997][ T29] audit: type=1326 audit(1745899433.893:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb669ab39 code=0x7ffc0000 [ 58.587074][ T29] audit: type=1326 audit(1745899433.893:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb66fe969 code=0x7ffc0000 [ 58.619547][ T4395] FAULT_INJECTION: forcing a failure. [ 58.619547][ T4395] name failslab, interval 1, probability 0, space 0, times 0 [ 58.631353][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.632565][ T4395] CPU: 0 UID: 0 PID: 4395 Comm: syz.4.250 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 58.632600][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.632617][ T4395] Call Trace: [ 58.632623][ T4395] [ 58.632632][ T4395] __dump_stack+0x1d/0x30 [ 58.632659][ T4395] dump_stack_lvl+0xe8/0x140 [ 58.632712][ T4395] dump_stack+0x15/0x1b [ 58.632734][ T4395] should_fail_ex+0x265/0x280 [ 58.632775][ T4395] should_failslab+0x8c/0xb0 [ 58.632855][ T4395] kmem_cache_alloc_node_noprof+0x57/0x320 [ 58.632901][ T4395] ? __alloc_skb+0x101/0x320 [ 58.632966][ T4395] __alloc_skb+0x101/0x320 [ 58.633007][ T4395] ? audit_log_start+0x365/0x6c0 [ 58.633081][ T4395] audit_log_start+0x380/0x6c0 [ 58.633188][ T4395] audit_seccomp+0x48/0x100 [ 58.633218][ T4395] ? __seccomp_filter+0x68c/0x10d0 [ 58.633278][ T4395] __seccomp_filter+0x69d/0x10d0 [ 58.633314][ T4395] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 58.633410][ T4395] ? vfs_write+0x75e/0x8d0 [ 58.633440][ T4395] ? __rcu_read_unlock+0x4f/0x70 [ 58.633473][ T4395] ? __fget_files+0x184/0x1c0 [ 58.633511][ T4395] __secure_computing+0x82/0x150 [ 58.633597][ T4395] syscall_trace_enter+0xcf/0x1e0 [ 58.633652][ T4395] do_syscall_64+0xaa/0x1a0 [ 58.633681][ T4395] ? clear_bhb_loop+0x25/0x80 [ 58.633765][ T4395] ? clear_bhb_loop+0x25/0x80 [ 58.633807][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.633837][ T4395] RIP: 0033:0x7fdbb66fe969 [ 58.633856][ T4395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.633885][ T4395] RSP: 002b:00007fdbb4d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.633970][ T4395] RAX: ffffffffffffffda RBX: 00007fdbb6925fa0 RCX: 00007fdbb66fe969 [ 58.633986][ T4395] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 58.634002][ T4395] RBP: 00007fdbb4d67090 R08: 0000000000000000 R09: 0000000000000000 [ 58.634017][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.634032][ T4395] R13: 0000000000000000 R14: 00007fdbb6925fa0 R15: 00007ffc7522ebf8 [ 58.634062][ T4395] [ 58.634078][ T4395] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 58.642812][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.655389][ T4395] audit: out of memory in audit_log_start [ 58.885142][ T4401] loop1: detected capacity change from 0 to 512 [ 58.887058][ T29] audit: type=1326 audit(1745899434.023:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb66fe969 code=0x7ffc0000 [ 58.915051][ T29] audit: type=1326 audit(1745899434.023:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdbb66fe969 code=0x7ffc0000 [ 58.938672][ T29] audit: type=1326 audit(1745899434.023:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb66fe969 code=0x7ffc0000 [ 58.977215][ T4401] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.010907][ T4401] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.251: bad orphan inode 13 [ 59.016652][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.034208][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.042230][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.050289][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.058065][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.066019][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.073864][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.081768][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.089757][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.097642][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.105472][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.113295][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.116599][ T4401] ext4_test_bit(bit=12, block=18) = 1 [ 59.121110][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.126488][ T4401] is_bad_inode(inode)=0 [ 59.134244][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.138400][ T4401] NEXT_ORPHAN(inode)=2130706432 [ 59.146314][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.151125][ T4401] max_ino=32 [ 59.151138][ T4401] i_nlink=1 [ 59.151824][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.160213][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.188941][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.196828][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.204675][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.212478][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220375][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220405][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220433][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220476][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220502][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220526][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220547][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220567][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220597][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220701][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220728][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220755][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220780][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220809][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220834][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220857][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220935][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220963][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.220992][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221019][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221047][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221105][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221133][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221158][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221181][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221204][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221229][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221277][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221305][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221333][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221360][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221389][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221426][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.221454][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 59.278166][ T4401] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 59.301980][ T10] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.08 Device [syz0] on syz0 [ 59.315347][ T4419] netlink: 292 bytes leftover after parsing attributes in process `syz.1.251'. [ 59.328057][ T4411] 9pnet_fd: Insufficient options for proto=fd [ 59.401865][ T4425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.253'. [ 59.488114][ T4401] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.251: bg 0: block 248: padding at end of block bitmap is not set [ 59.497975][ T4430] loop2: detected capacity change from 0 to 512 [ 59.499373][ T23] IPVS: starting estimator thread 0... [ 59.513002][ T4430] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.545689][ T4401] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.251: Failed to acquire dquot type 1 [ 59.578460][ T4430] bio_check_eod: 37144 callbacks suppressed [ 59.578477][ T4430] syz.2.255: attempt to access beyond end of device [ 59.578477][ T4430] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 59.598108][ T4401] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.608262][ T4264] veth0_vlan: entered promiscuous mode [ 59.613320][ T4430] EXT4-fs (loop2): unable to read superblock [ 59.628766][ T4430] netlink: 356 bytes leftover after parsing attributes in process `syz.2.255'. [ 59.638064][ T4430] netlink: 356 bytes leftover after parsing attributes in process `syz.2.255'. [ 59.649936][ T4429] IPVS: using max 2016 ests per chain, 100800 per kthread [ 59.652957][ T4264] veth1_vlan: entered promiscuous mode [ 59.692655][ T4437] loop4: detected capacity change from 0 to 512 [ 59.704700][ T4264] veth0_macvtap: entered promiscuous mode [ 59.711976][ T4430] tipc: Started in network mode [ 59.717239][ T4430] tipc: Node identity d2232df7440e, cluster identity 4711 [ 59.724528][ T4430] tipc: Enabled bearer , priority 0 [ 59.732065][ T4437] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.732964][ T4264] veth1_macvtap: entered promiscuous mode [ 59.751331][ T4431] loop2: detected capacity change from 0 to 512 [ 59.763895][ T4437] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.765412][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.781157][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.784271][ T4437] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.256: invalid indirect mapped block 256 (level 2) [ 59.791128][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.810228][ T4431] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 59.814945][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.816196][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.825787][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.835644][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.860143][ T4431] EXT4-fs: failed to create workqueue [ 59.861426][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.866724][ T4431] EXT4-fs (loop2): mount failed [ 59.876619][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.892405][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.902535][ T4437] EXT4-fs (loop4): 2 truncates cleaned up [ 59.903081][ T4437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.946220][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.972483][ T4431] tipc: Resetting bearer [ 59.995956][ T4431] tipc: Disabling bearer [ 60.016512][ T4264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.025604][ T4264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.034363][ T4264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.043229][ T4264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.061738][ T4450] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 13: comm syz.4.256: lblock 0 mapped to illegal pblock 13 (length 1) [ 60.076635][ T4449] loop1: detected capacity change from 0 to 1024 [ 60.091911][ T4437] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 13: comm syz.4.256: lblock 0 mapped to illegal pblock 13 (length 1) [ 60.106578][ T4449] EXT4-fs: inline encryption not supported [ 60.117649][ T4449] EXT4-fs: Ignoring removed nobh option [ 60.123453][ T4449] EXT4-fs: Ignoring removed bh option [ 60.133143][ T4437] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 13: comm syz.4.256: lblock 0 mapped to illegal pblock 13 (length 1) [ 60.149027][ T4437] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 13: comm syz.4.256: lblock 0 mapped to illegal pblock 13 (length 1) [ 60.211642][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.234885][ T4449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.266127][ T4461] netlink: 'syz.5.262': attribute type 39 has an invalid length. [ 60.347178][ T4468] dummy0 speed is unknown, defaulting to 1000 [ 60.576718][ T4467] loop5: detected capacity change from 0 to 4096 [ 60.987892][ T3728] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.004993][ T4479] loop2: detected capacity change from 0 to 256 [ 61.034855][ T3728] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.093044][ T3728] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.128006][ T4475] dummy0 speed is unknown, defaulting to 1000 [ 61.154872][ T3728] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.207193][ T4491] loop3: detected capacity change from 0 to 512 [ 61.234842][ T4491] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.266433][ T4491] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.293977][ T4491] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.270: invalid indirect mapped block 256 (level 2) [ 61.309636][ T4488] loop2: detected capacity change from 0 to 128 [ 61.323380][ T4491] EXT4-fs (loop3): 2 truncates cleaned up [ 61.328779][ T4496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4496 comm=syz.4.269 [ 61.343383][ T4488] vfat: Unknown parameter '18446744073709551615ÿÿÿ01777777777777777777777ÿÿÿÿof˜_' [ 61.355407][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 61.384933][ T4499] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 13: comm syz.3.270: lblock 0 mapped to illegal pblock 13 (length 1) [ 61.399579][ T4499] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 13: comm syz.3.270: lblock 0 mapped to illegal pblock 13 (length 1) [ 61.415540][ T4499] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 13: comm syz.3.270: lblock 0 mapped to illegal pblock 13 (length 1) [ 61.434052][ T4499] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 13: comm syz.3.270: lblock 0 mapped to illegal pblock 13 (length 1) [ 61.477441][ T4503] loop2: detected capacity change from 0 to 512 [ 61.488351][ T4503] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.271: iget: bad extended attribute block 1 [ 61.501248][ T4503] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.271: couldn't read orphan inode 15 (err -117) [ 61.514918][ T4503] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 61.531213][ T3728] bond0 (unregistering): Released all slaves [ 61.557419][ T4475] chnl_net:caif_netlink_parms(): no params data found [ 61.601305][ T3728] hsr_slave_0: left promiscuous mode [ 61.611130][ T3728] hsr_slave_1: left promiscuous mode [ 61.621129][ T3728] veth1_macvtap: left promiscuous mode [ 61.627506][ T3728] veth0_macvtap: left promiscuous mode [ 61.629861][ T4513] loop2: detected capacity change from 0 to 256 [ 61.634303][ T3728] veth1_vlan: left promiscuous mode [ 61.646173][ T4513] FAULT_INJECTION: forcing a failure. [ 61.646173][ T4513] name failslab, interval 1, probability 0, space 0, times 0 [ 61.647790][ T3728] veth0_vlan: left promiscuous mode [ 61.658914][ T4513] CPU: 0 UID: 0 PID: 4513 Comm: syz.2.275 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 61.659044][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 61.659060][ T4513] Call Trace: [ 61.659068][ T4513] [ 61.659077][ T4513] __dump_stack+0x1d/0x30 [ 61.659104][ T4513] dump_stack_lvl+0xe8/0x140 [ 61.659167][ T4513] dump_stack+0x15/0x1b [ 61.659189][ T4513] should_fail_ex+0x265/0x280 [ 61.659235][ T4513] should_failslab+0x8c/0xb0 [ 61.659271][ T4513] kmem_cache_alloc_node_noprof+0x57/0x320 [ 61.659408][ T4513] ? __alloc_skb+0x101/0x320 [ 61.659447][ T4513] __alloc_skb+0x101/0x320 [ 61.659482][ T4513] ? audit_log_start+0x365/0x6c0 [ 61.659520][ T4513] audit_log_start+0x380/0x6c0 [ 61.659692][ T4513] audit_seccomp+0x48/0x100 [ 61.659723][ T4513] ? __seccomp_filter+0x68c/0x10d0 [ 61.659749][ T4513] __seccomp_filter+0x69d/0x10d0 [ 61.659779][ T4513] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 61.659812][ T4513] ? vfs_write+0x75e/0x8d0 [ 61.659899][ T4513] ? __rcu_read_unlock+0x4f/0x70 [ 61.659926][ T4513] ? __fget_files+0x184/0x1c0 [ 61.659994][ T4513] __secure_computing+0x82/0x150 [ 61.660026][ T4513] syscall_trace_enter+0xcf/0x1e0 [ 61.660054][ T4513] do_syscall_64+0xaa/0x1a0 [ 61.660081][ T4513] ? clear_bhb_loop+0x25/0x80 [ 61.660152][ T4513] ? clear_bhb_loop+0x25/0x80 [ 61.660187][ T4513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.660263][ T4513] RIP: 0033:0x7ffa3ca1e969 [ 61.660282][ T4513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.660306][ T4513] RSP: 002b:00007ffa3b087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 61.660385][ T4513] RAX: ffffffffffffffda RBX: 00007ffa3cc45fa0 RCX: 00007ffa3ca1e969 [ 61.660402][ T4513] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000180 [ 61.660417][ T4513] RBP: 00007ffa3b087090 R08: 0000000000000000 R09: 0000000000000000 [ 61.660432][ T4513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.660525][ T4513] R13: 0000000000000000 R14: 00007ffa3cc45fa0 R15: 00007ffcf6eb68b8 [ 61.660548][ T4513] [ 62.003909][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.011110][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.018410][ T4475] bridge_slave_0: entered allmulticast mode [ 62.026717][ T4475] bridge_slave_0: entered promiscuous mode [ 62.037068][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.044430][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.053638][ T4475] bridge_slave_1: entered allmulticast mode [ 62.060749][ T4475] bridge_slave_1: entered promiscuous mode [ 62.089443][ T4475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.098809][ T4520] dummy0 speed is unknown, defaulting to 1000 [ 62.101956][ T4475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.145868][ T4475] team0: Port device team_slave_0 added [ 62.153232][ T4475] team0: Port device team_slave_1 added [ 62.194020][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.201099][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.227238][ T4475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.239845][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.246954][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.273502][ T4475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.307665][ T4526] loop4: detected capacity change from 0 to 1024 [ 62.308746][ T4475] hsr_slave_0: entered promiscuous mode [ 62.321429][ T4475] hsr_slave_1: entered promiscuous mode [ 62.327446][ T4475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.337561][ T4526] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.345451][ T4475] Cannot create hsr debugfs directory [ 62.386357][ T4526] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 62.394375][ T4526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 62.405102][ T4526] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.423960][ T4526] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 62.434019][ T4526] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.277: mark_inode_dirty error [ 62.447736][ T4526] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.277: Invalid block bitmap block 3 in block_group 0 [ 62.465108][ T4526] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.277: Invalid block bitmap block 3 in block_group 0 [ 62.479813][ T4526] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.277: Invalid block bitmap block 3 in block_group 0 [ 62.553629][ T4526] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 62.591356][ T4531] pim6reg: entered allmulticast mode [ 62.596855][ T4526] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.277: mark_inode_dirty error [ 62.631119][ T4531] pim6reg: left allmulticast mode [ 62.636600][ T4526] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm syz.4.277: lblock 6 mapped to illegal pblock 1 (length 1) [ 62.660682][ T4526] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.277: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.688496][ T4526] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.277: Failed to acquire dquot type 0 [ 62.705225][ T4536] loop3: detected capacity change from 0 to 512 [ 62.718959][ T4526] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 49: comm syz.4.277: lblock 1 mapped to illegal pblock 49 (length 1) [ 62.751754][ T4536] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.754391][ T4475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.760975][ T4536] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 62.777217][ T4526] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.277: Failed to acquire dquot type 0 [ 62.787460][ T4536] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 62.798162][ T4526] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 62.798298][ T4536] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 62.816942][ T4536] System zones: 0-2, 18-18, 34-35 [ 62.825246][ T4526] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #15: comm syz.4.277: mark_inode_dirty error [ 62.843629][ T4475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 62.851550][ T4536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 62.860711][ T4526] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 62.874628][ T4526] EXT4-fs (loop4): 1 orphan inode deleted [ 62.880340][ T4538] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 62.880492][ T4475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 62.902808][ T4475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 62.931020][ T4526] syz.4.277 (4526) used greatest stack depth: 8872 bytes left [ 62.952468][ T4540] loop4: detected capacity change from 0 to 512 [ 62.967257][ T4540] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.976468][ T4540] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 62.999293][ T4540] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 63.006897][ T4542] loop3: detected capacity change from 0 to 512 [ 63.010707][ T4540] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 63.026210][ T4475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.035391][ T4540] System zones: 0-2, 18-18, 34-35 [ 63.045248][ T4475] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.054700][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.061894][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.077390][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.083899][ T4540] FAULT_INJECTION: forcing a failure. [ 63.083899][ T4540] name failslab, interval 1, probability 0, space 0, times 0 [ 63.084575][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.097137][ T4540] CPU: 1 UID: 0 PID: 4540 Comm: syz.4.282 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 63.097215][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.097302][ T4540] Call Trace: [ 63.097309][ T4540] [ 63.097320][ T4540] __dump_stack+0x1d/0x30 [ 63.097401][ T4540] dump_stack_lvl+0xe8/0x140 [ 63.097426][ T4540] dump_stack+0x15/0x1b [ 63.097447][ T4540] should_fail_ex+0x265/0x280 [ 63.097488][ T4540] should_failslab+0x8c/0xb0 [ 63.097591][ T4540] __kvmalloc_node_noprof+0x126/0x4d0 [ 63.097617][ T4540] ? __nf_hook_entries_try_shrink+0x260/0x450 [ 63.097658][ T4540] __nf_hook_entries_try_shrink+0x260/0x450 [ 63.097700][ T4540] __nf_unregister_net_hook+0x2d1/0x3b0 [ 63.097754][ T4540] nf_unregister_net_hooks+0xab/0xe0 [ 63.097868][ T4540] nf_ct_netns_do_put+0x1c6/0x260 [ 63.097912][ T4540] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 63.097999][ T4540] nf_ct_netns_put+0xea/0x1f0 [ 63.098033][ T4540] nft_connlimit_destroy+0x3b/0x70 [ 63.098100][ T4540] __nft_release_table+0x30a/0xa20 [ 63.098142][ T4540] nft_rcv_nl_event+0x334/0x3d0 [ 63.098183][ T4540] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 63.098218][ T4540] blocking_notifier_call_chain+0x98/0x1f0 [ 63.098384][ T4540] netlink_release+0xaa9/0xf20 [ 63.098429][ T4540] sock_close+0x68/0x150 [ 63.098504][ T4540] ? __pfx_sock_close+0x10/0x10 [ 63.098532][ T4540] __fput+0x298/0x650 [ 63.098558][ T4540] fput_close_sync+0x6e/0x120 [ 63.098583][ T4540] __x64_sys_close+0x56/0xf0 [ 63.098610][ T4540] x64_sys_call+0x2747/0x2fb0 [ 63.098714][ T4540] do_syscall_64+0xd0/0x1a0 [ 63.098743][ T4540] ? clear_bhb_loop+0x25/0x80 [ 63.098769][ T4540] ? clear_bhb_loop+0x25/0x80 [ 63.098798][ T4540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.098830][ T4540] RIP: 0033:0x7fdbb66fe969 [ 63.098851][ T4540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.098956][ T4540] RSP: 002b:00007fdbb4d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 63.098980][ T4540] RAX: ffffffffffffffda RBX: 00007fdbb6925fa0 RCX: 00007fdbb66fe969 [ 63.098996][ T4540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 63.099011][ T4540] RBP: 00007fdbb4d67090 R08: 0000000000000000 R09: 0000000000000000 [ 63.099026][ T4540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.099041][ T4540] R13: 0000000000000000 R14: 00007fdbb6925fa0 R15: 00007ffc7522ebf8 [ 63.099070][ T4540] [ 63.100150][ T4542] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.281: iget: bad extended attribute block 1 [ 63.153698][ T4475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.180712][ T4542] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.281: couldn't read orphan inode 15 (err -117) [ 63.247465][ T4475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.403694][ T4542] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 63.424339][ T4553] pim6reg: entered allmulticast mode [ 63.471824][ T4547] pim6reg: left allmulticast mode [ 63.490277][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 63.490294][ T29] audit: type=1400 audit(1745899438.903:1984): avc: denied { sqpoll } for pid=4560 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.518523][ T29] audit: type=1400 audit(1745899438.903:1985): avc: denied { create } for pid=4560 comm="syz.4.286" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.539995][ T29] audit: type=1400 audit(1745899438.933:1986): avc: denied { create } for pid=4562 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.541774][ T4559] loop5: detected capacity change from 0 to 1024 [ 63.559645][ T29] audit: type=1400 audit(1745899438.933:1987): avc: denied { create } for pid=4560 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.586247][ T29] audit: type=1400 audit(1745899438.933:1988): avc: denied { connect } for pid=4562 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.606065][ T29] audit: type=1326 audit(1745899438.933:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbb66fe969 code=0x0 [ 63.624536][ T4559] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.639605][ T29] audit: type=1400 audit(1745899438.933:1990): avc: denied { create } for pid=4562 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.659101][ T29] audit: type=1400 audit(1745899438.933:1991): avc: denied { append } for pid=4544 comm="syz.2.283" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.682031][ T29] audit: type=1400 audit(1745899438.983:1992): avc: denied { create } for pid=4544 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.702713][ T29] audit: type=1400 audit(1745899438.983:1993): avc: denied { mounton } for pid=4558 comm="syz.5.285" path="/3/file1" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.728367][ T4572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4572 comm=syz.4.286 [ 63.743251][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 63.748063][ T4475] veth0_vlan: entered promiscuous mode [ 63.779803][ T4475] veth1_vlan: entered promiscuous mode [ 63.794818][ T4475] veth0_macvtap: entered promiscuous mode [ 63.802312][ T4475] veth1_macvtap: entered promiscuous mode [ 63.813722][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.824441][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.834506][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.844955][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.855698][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.866156][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.877181][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.888436][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.899021][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.908998][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.919705][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.929655][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.940114][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.950617][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.959275][ T4475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.968140][ T4475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.977017][ T4475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.985998][ T4475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.029435][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 64.063102][ T4588] loop6: detected capacity change from 0 to 1024 [ 64.082284][ T4588] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.147793][ T4594] loop6: detected capacity change from 0 to 1024 [ 64.171685][ T4594] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.212699][ T4599] loop6: detected capacity change from 0 to 512 [ 64.220438][ T4599] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 64.230055][ T4599] EXT4-fs (loop6): invalid journal inode [ 64.235915][ T4599] EXT4-fs (loop6): can't get journal size [ 64.242268][ T4599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 64.250333][ T4599] System zones: 1-12, 13-13 [ 64.255240][ T4599] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.292: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 64.272218][ T4599] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.292: couldn't read orphan inode 15 (err -117) [ 64.387447][ T4603] loop3: detected capacity change from 0 to 128 [ 64.414731][ T4603] syz.3.293: attempt to access beyond end of device [ 64.414731][ T4603] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 64.521562][ T4610] pim6reg: entered allmulticast mode [ 64.557003][ T4610] pim6reg: left allmulticast mode [ 64.570645][ T4614] loop3: detected capacity change from 0 to 1024 [ 64.580119][ T4614] EXT4-fs: inline encryption not supported [ 64.590486][ T4614] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.615929][ T4614] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 1: comm syz.3.298: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.632072][ T4614] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.298: Failed to acquire dquot type 0 [ 64.656405][ T4614] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.298: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.670231][ T4614] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.298: Invalid inode bitmap blk 0 in block_group 0 [ 64.683998][ T148] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.703060][ T4614] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 64.712198][ T148] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 64.724339][ T4614] EXT4-fs (loop3): 1 orphan inode deleted [ 64.749090][ T4620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.759524][ T4620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.828976][ T4625] loop6: detected capacity change from 0 to 1024 [ 64.850311][ T4625] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.906041][ T4635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4635 comm=syz.3.304 [ 64.919014][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 65.085487][ T4655] pim6reg: entered allmulticast mode [ 65.108427][ T4655] pim6reg: left allmulticast mode [ 65.156655][ T4659] loop2: detected capacity change from 0 to 128 [ 65.163336][ T4659] vfat: Unknown parameter 'trans' [ 65.347406][ T4665] loop4: detected capacity change from 0 to 1024 [ 65.373073][ T4665] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.459220][ T4669] 9pnet_fd: Insufficient options for proto=fd [ 65.466055][ T4669] net_ratelimit: 2098 callbacks suppressed [ 65.466067][ T4669] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 65.886479][ T4680] loop5: detected capacity change from 0 to 1024 [ 65.942171][ T4657] 9pnet_fd: p9_fd_create_tcp (4657): problem connecting socket to 127.0.0.1 [ 65.978624][ T4689] loop5: detected capacity change from 0 to 128 [ 66.017012][ T4692] pim6reg: entered allmulticast mode [ 66.028427][ T4689] syz.5.325: attempt to access beyond end of device [ 66.028427][ T4689] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 66.036425][ T4692] pim6reg: left allmulticast mode [ 66.092676][ T4696] loop5: detected capacity change from 0 to 128 [ 66.169743][ T4700] 9pnet_fd: Insufficient options for proto=fd [ 66.176574][ T4700] netlink: 40 bytes leftover after parsing attributes in process `syz.5.330'. [ 66.237254][ T4700] ================================================================== [ 66.237396][ T3381] IPVS: starting estimator thread 0... [ 66.245385][ T4700] BUG: KCSAN: data-race in ip_vs_add_service / ip_vs_out_hook [ 66.245425][ T4700] [ 66.245432][ T4700] write to 0xffff888118ad3804 of 4 bytes by task 4702 on cpu 1: [ 66.268288][ T4700] ip_vs_add_service+0xa18/0xa70 [ 66.273242][ T4700] do_ip_vs_set_ctl+0x6ec/0x8c0 [ 66.278108][ T4700] nf_setsockopt+0x196/0x1b0 [ 66.282720][ T4700] ip_setsockopt+0x102/0x110 [ 66.287331][ T4700] udp_setsockopt+0x99/0xb0 [ 66.291888][ T4700] sock_common_setsockopt+0x66/0x80 [ 66.297147][ T4700] __sys_setsockopt+0x181/0x200 [ 66.302039][ T4700] __x64_sys_setsockopt+0x64/0x80 [ 66.307077][ T4700] x64_sys_call+0x2bd5/0x2fb0 [ 66.311762][ T4700] do_syscall_64+0xd0/0x1a0 [ 66.316287][ T4700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.322182][ T4700] [ 66.324544][ T4700] read to 0xffff888118ad3804 of 4 bytes by task 4700 on cpu 0: [ 66.332089][ T4700] ip_vs_out_hook+0x1c1/0x920 [ 66.336791][ T4700] nf_hook_slow+0x75/0x180 [ 66.341243][ T4700] __ip_local_out+0x2cb/0x2f0 [ 66.345954][ T4700] ip_send_skb+0x32/0x140 [ 66.350311][ T4700] udp_send_skb+0x6e3/0xa40 [ 66.354883][ T4700] udp_sendmsg+0x1044/0x13a0 [ 66.359504][ T4700] inet_sendmsg+0xac/0xd0 [ 66.363855][ T4700] __sock_sendmsg+0x102/0x180 [ 66.368550][ T4700] ____sys_sendmsg+0x345/0x4e0 [ 66.373339][ T4700] ___sys_sendmsg+0x17b/0x1d0 [ 66.378024][ T4700] __sys_sendmmsg+0x178/0x300 [ 66.382707][ T4700] __x64_sys_sendmmsg+0x57/0x70 [ 66.387662][ T4700] x64_sys_call+0x2f2f/0x2fb0 [ 66.392353][ T4700] do_syscall_64+0xd0/0x1a0 [ 66.396872][ T4700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.402777][ T4700] [ 66.405103][ T4700] value changed: 0x00000000 -> 0x00000001 [ 66.410823][ T4700] [ 66.413152][ T4700] Reported by Kernel Concurrency Sanitizer on: [ 66.419329][ T4700] CPU: 0 UID: 0 PID: 4700 Comm: syz.5.330 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 66.431666][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.441731][ T4700] ================================================================== [ 66.449909][ T4703] IPVS: using max 2064 ests per chain, 103200 per kthread [ 66.450383][ T4700] IPVS: ovf: UDP 224.0.0.2:0 - no destination available