last executing test programs: 4.680979794s ago: executing program 2 (id=4650): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x9, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x100, 0x880, 0x0, 0x0) 4.437152998s ago: executing program 2 (id=4655): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x40408c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0xdc7, 0x4, 0x9, 0x5, 0x17, "ee0d7c2bda27e8a956df44765e07d311c8a410"}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x106) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10000) 4.380836724s ago: executing program 2 (id=4657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x9, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0xfffffffd, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x80000000, 0x7}, 0x81201, 0x10000, 0xbdf7, 0x9, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffffff6b18808207a5f2"], 0x0) 3.776620454s ago: executing program 2 (id=4667): request_key(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 3.762118115s ago: executing program 2 (id=4670): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(r0, &(0x7f0000000040)="26842eea53ede8502340bdbd857adcc29255ce87626e8cbbfec7845468a438e9a18386241069ab4abe4764c4b764e674b31d231e66fb384c87c0", 0x3a, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x70842, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000003000000000000000200008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xfbe, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x7, 0xa}, 0x10, 0x65db, 0xffffffffffffffff, 0x9, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x2, 0x5, 0x2, 0xe}, {0x5, 0x2, 0xa, 0xc}, {0x5, 0x5, 0x9, 0x2}, {0x2, 0x3, 0x7, 0xc}, {0x2, 0x3, 0x3, 0x1}, {0x2, 0x5, 0xd, 0x7}, {0x1, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x2, 0x8}, {0x3, 0x5, 0x3, 0x9}], 0x10, 0x100}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@map, r5, 0x27, 0x10}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xaf86be13, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000440)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC=r6], 0x27) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@fallback=r2, 0xffffffffffffffff, 0x0, 0x24, 0x0, @void, @void, @void, @value=r6}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup, 0x1e, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@fallback=r2, r3, 0x8, 0x10, 0x0, @void, @value=r3, @void, @void, r9}, 0x20) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r10, 0xffffffffffffffff, 0x0) 3.724241398s ago: executing program 2 (id=4671): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x95d}, 0x94) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000900)="b2fc0511ff2039786071349be0cf8f7708a554e9353c0f8ffc87f3ccd881ca044fe700097a492d69b01b5f56edecc6ff1d9cf6bf726928d69a79a722c01f2b221fa85ce09273fe43cece28ae95b789fe3ba576e42105a5290abcc5769532259e0ea65b78ffc99f80e34bb558eda84f400ed49a54cd29b741af24afde6f65d90aae24b5496130d3126576e91799ce1aa8a76ac9dd2332f63db0672ab1d1ff495513fff7560d8eb34700810b5ea65af0839a44941bc16335b522d7aabdb97df77ce42817ca3a18947b897be6df1bb62af5c2d8c914a195") r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) 2.022175448s ago: executing program 3 (id=4701): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') preadv(r2, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="340000000506010100000000000000000000000a050001"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) r3 = socket$inet6(0xa, 0x3, 0x5) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000180)) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = dup3(r4, r3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000040)={0x6, 'pim6reg\x00', {0x1}, 0x3}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000001c0)={0xc4}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$KDDISABIO(r5, 0x4b37) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaabb08004501e000001f03007000002890780200a318010000e0ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"], 0x4e) unshare(0x22020600) r8 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/cgroup.procs\x00', 0x68001, 0x0) ppoll(&(0x7f00000000c0)=[{r8, 0x61a0}], 0x1, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) lstat(&(0x7f0000001800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r11 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r11, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) 1.917825999s ago: executing program 3 (id=4704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003300"/265], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000840), &(0x7f0000000cc0)=0x8) write$sndseq(r4, &(0x7f0000000180)=[{0x10, 0x0, 0x0, 0x2, @tick, {0x8, 0xff}, {0x10, 0x9}, @addr={0x7, 0xc0}}], 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001a000100000000000000e6ff8080800000000000ffffffff1400010000000000000000000000000000000000140002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840), &(0x7f0000000780)=[0x0], 0x0, 0xad, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x0, 0x0, &(0x7f0000000880), 0x8, 0x16, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r0}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r12 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0200000068a05800"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ed0000004600000085100000fdffff4cfacba3ff8500000053000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xb, &(0x7f0000000280)=""/11, 0x41000, 0x58, '\x00', r1, @fallback=0x3, r4, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x1, 0xd, 0x3}, 0x10, r7, r8, 0x1, &(0x7f0000000b80)=[r13], &(0x7f0000000bc0)=[{0x3, 0x1, 0xf, 0xb}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000150081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 1.561720944s ago: executing program 3 (id=4707): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x24}}, 0x18) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x13, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000145}, 0x20000050) 1.493367931s ago: executing program 1 (id=4709): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.453261295s ago: executing program 1 (id=4711): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x9000, 0x10000, 0xc, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000080)='^', 0x1, 0xfecc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fallocate(r0, 0x0, 0x800bf5, 0x2000403) 1.407509519s ago: executing program 4 (id=4712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x480, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x454, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0xb, 0x6, 0xbe2, 0x7, 0x5, 0x7, 0x1, 0x4, 0x5796, 0x101, 0x3, 0x1, 0x8001, 0x1, 0x8, 0x8, 0xb, 0x7, 0x7, 0x7, 0x1, 0x9, 0x2, 0xc9, 0x4ac6, 0x0, 0x34ea, 0x8, 0x3236, 0x100, 0x9, 0x0, 0x9, 0x7, 0xe67, 0x1, 0x6, 0x1, 0x5, 0x4bb, 0x6, 0x0, 0x8, 0xe, 0x9, 0x2, 0x6, 0x80, 0x429, 0x8, 0x3, 0x62, 0x8, 0x2, 0xff, 0x4, 0x1, 0x2, 0x9, 0x8, 0x5, 0x4, 0x8b7, 0x7, 0x9, 0x1, 0xfffffffa, 0x24ba, 0x5, 0x7ff, 0x10, 0x10000, 0x4, 0x4bf52928, 0x3, 0xb5b, 0x8, 0x0, 0x7f, 0x5f, 0x8, 0x87, 0xfffffffd, 0x44245273, 0x6cf2, 0x8, 0x2, 0x9, 0x1, 0xed19, 0x40, 0x9, 0x2, 0x1007, 0x0, 0x5, 0xfff, 0x9, 0x1, 0x87b, 0x2, 0xdd, 0xc3c4, 0x5, 0x9, 0x0, 0x6, 0x4263, 0x6, 0x1, 0xa5, 0x921, 0xb13b, 0x300, 0x9d4, 0x8aeb, 0x9, 0xffffffff, 0x9, 0xb, 0x5, 0x0, 0x1, 0x7, 0x3, 0x2, 0x9, 0xfff, 0x40, 0x2, 0x80000001, 0x80000001, 0x74, 0x6, 0x8001, 0x9, 0x53c5, 0x8, 0x5c, 0x5, 0x9, 0x5591, 0x8, 0x7, 0x3, 0x7, 0x3ff, 0x81, 0x1, 0x8a, 0x5, 0x9, 0x559, 0x4, 0xa0000000, 0x9, 0xbe, 0x403, 0x4, 0x8000, 0x1, 0x0, 0x1c000, 0x0, 0x7fff, 0xe9, 0x5, 0x2, 0x9, 0xf, 0x6, 0x101, 0x3, 0x1d, 0xfda6, 0x7ff, 0x1, 0x0, 0x2d65, 0x40, 0x7, 0xecb, 0x7, 0xdc5, 0x800, 0x4, 0x6388, 0x50, 0x6, 0x5, 0x30b, 0x954, 0x2, 0x7b1, 0xfffffff8, 0x6, 0x10, 0x2, 0x1, 0x5, 0x7cb, 0x4, 0x2, 0x5, 0xb8, 0x8, 0x0, 0x6, 0xfffffe01, 0x7ff, 0x400, 0x80, 0x4, 0x8, 0x1, 0x30ed, 0x6, 0xffff, 0x0, 0x4, 0x7, 0x7, 0x4, 0x5, 0x9, 0x0, 0x20000004, 0x3, 0x3, 0x2, 0xfffffffd, 0xb11, 0x64d4, 0x8, 0x9, 0xb, 0xa2, 0x76b7353d, 0x5, 0x3, 0x9, 0x8, 0x9, 0x7, 0x259, 0x0, 0x1, 0x80000000, 0x2, 0x40d4, 0x8146, 0x6, 0x3, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000002, 0x6, 0x7, 0x2, {0x4, 0x3, 0x9, 0x8001, 0x0, 0x3}, {0x2, 0x2, 0xe4, 0x7, 0x2}, 0x8001, 0x101, 0x3}}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x20004015}, 0x200c4004) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x4, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x6, &(0x7f00000001c0)=""/6, 0x40f00, 0x4, '\x00', r5, @fallback=0x34, r6, 0x8, &(0x7f00000003c0)={0x1ff, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x4, 0x10000}, 0x10, 0xffffffffffffffff, r1, 0x5, &(0x7f0000000440)=[r0, r0, r0, r0], &(0x7f0000000480)=[{0x2, 0x2, 0x4, 0x7}, {0x2, 0x3, 0x0, 0x9}, {0x5, 0x4, 0xb, 0x5}, {0x4, 0x5, 0xf, 0x9}, {0x0, 0x5, 0xc, 0x1}], 0x10, 0x2}, 0x94) 1.371862494s ago: executing program 3 (id=4713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb66d57fd2a03b07f81e", 0x26}, {&(0x7f0000002280)="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", 0x4d7}], 0x2, &(0x7f0000000740)=[@hopopts={{0xb8, 0x29, 0x36, {0x2f, 0x13, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x5, [0x7f, 0x9, 0x8000000000000001, 0x6, 0x2, 0x7, 0x6]}}, @ra={0x5, 0x2, 0xf}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x3}, @generic={0x80, 0x44, "fa143e1a106b19c70ea0542d6d63da3d5e395944f9b3a32d7d56f9ac88221c36e046c8dd1b3bbdbc12f0ebac42dabfe74668b9390e9dfe93f026f5442cd566c77fb6b13a"}]}}}], 0xb8}}], 0x1, 0x80) 1.333104297s ago: executing program 4 (id=4714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xffffdffb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x6, 0x2, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0x2, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x59, 0x1, {{0xe, 0x4, 0x3, 0x8, 0x38, 0x66, 0x0, 0x2, 0x52, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x24, 0xd7, 0x0, 0x7, [0x1, 0xed29, 0x3000000, 0x3, 0xb, 0xe3c, 0x4, 0x8]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb8, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r11}, 0x10) r12 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[], [], 0x6b}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r15}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='f2fs_lookup_extent_tree_start\x00', r16, 0x0, 0x7}, 0x18) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) sendmsg$FOU_CMD_ADD(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="090200000000000000000100"], 0x38}}, 0x0) 1.331719607s ago: executing program 3 (id=4715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x1fc, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x9, 0x8, 0x9, 0x800000, 0xc51a, 0x8}, {0x7fff, 0x3ac5, 0xfff, 0x9, 0x5, 0x10}], ['\x00']}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000006000)=[{{&(0x7f0000000380)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="ece72520b277b59f74020c34d7420950b6ea6029395890045c96452f33f5247423c0fd725ec75ece2b87e8751f11c00657b4df3fd5b1ab9960b2a83ebab92f6058f5e581e5d6ba4d74186b40776aa9a48c52634f31eb8313058e80d42beed42112dfaa5616757e4859917564021a4b51346d2b603b9c36c49a096a13f787c8323135573022", 0x85}], 0x1, &(0x7f00000005c0), 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000600)="e34d30fe7786568b150a97995edea25c61bf8df539fee9d4cd5395ea9cfc4ebb9d4bf45ad1089b153bbc6ff0733458580a80cc260e673f7293e46f7d56337e6280327631191d9012eab033aa53000c5664a78eaca3f58881f5ee4ff38d5fee9c77c4efec2d857f54314f7520374f10d0780fcb9d266b5f1d5d00a6ed92c30ee2c9906307d0", 0x85}, {&(0x7f00000006c0)="5584bee51b9a257d84160536a7a72fc4066e43b638fbaadaa4920fa2f064e13ce908d496206ecd4c9d366ef162b079e1741552fe65c667a68df4354b5eab7fabb89e31f8f7707f53b2d11b7117b1457c627ff8bcbfdbd5ab42155536fb70ee7efdeb3468264a1c5a94d68c921c7e1b4e5d6a5a06eefefc20db58d97c481e472abb6bd6555288c13fc8757cc6c5700d20f8a31209192417537faab11cbcba6ef6bcb1a7735a87a960561dc0001ce0126ed1906e8827380ef339ad6e85e38c6afe022a2b806c722fba70de1f17d0f9ec9aa371b5860c29859eff883503b6006373923865", 0xe3}, {&(0x7f0000001780)="a0c19e19c423e8c55092669bb4207129c43820fbeb6aeba3f8244ee94e28db2366427bb4b3ffb6ae3ff48e01e4bfb7a24ef40dfceca56389902bc7d26d5a9329912c2f0fee2271059dc38bf86f8bf5ac0b0cc3558abb1fff631712fc9a3fe58ae7191d4293a94e6ae057edc1eee8e3579ab8ab43d678085de1787186f41b7dbc4e3473a0e380bde3e50d90bef28c1d0589f20b3f6fec45c4bdd6078dcab2fcd480e2f696a54e95b35ebf95640f63a7b5d7f32b4b8881544544390eccc525e9c47b2ec8fdf20aad311f71100803dbe086e7e5fd8ce25b0986f30af599c3a0be7f6931fb04e0817fb8be45e4a30432de28f81308a0dc979d268402a53a0b1464af85e75d8d7e6f019fd531c7282201043d1c3e0d9374952c83db8b4fd68c2754ca82ceb9ec22fad12b158b09be66a45c5985e674f2e6cd1c46c12aa5c1ab38bfc4f9b39c9ca98f9beb0a851916c5fab981c508f01efc1ca8f059cf120118a7db067d831b8ef3b0267e1dc118b9e92d02f46db1aa804964051d4d35dbaba70a8208d51ecfb17a7d1f3821e8e7b43c2c172897f2c68342d3e59e1fcf16655412fbeb5127287a31d29cbfa531eb5a8b2f79637a0dd62be203f9145f165dc75d07d327088ac446bd9f339ac2a6b807898400be6fbd431e34ed7a9bb01c5d45712926fde07cbb891ffed924d451754fa0b19fbba04589d580299fc6e37ab0baf856bba067c0888467a207ab477ca6b74425397c0205910eaa3a2a709692e26f9b7d89ae9e725ccd9390763ef1ac1cbd5fb46063bebb7c277205863c2917b6343ed3178c14f5c59309b6c609e1649c5b48b8614562f93bd29f6090fe5e9dbe7e1fb45c59436422b442e4e1f883bf6ac7218ad19f3e9e7f07f9df531fa36cab66e2c4516837e9655e8000134512db36bf6b5eacd1fde21bbc57dd07b063e9ba540fd055a954c702b4a6b4d88262abc786f04abf06f7157cb23550d100d7b82d859971ba607d974f6ad5306eda6b4cd84caf405f6de0b4cd9bbec5fc1413342cad2306414ef2e35e279ff1d060a940da4fd18e2fafefecbc2a7665c396fadcde3f029d851f9d96db2f2315ddfe8579dec01ea00b9393920c1106bbe74be456496bdc2de9b4aacb038419576c49e1a69ae64b7c0371939bff3e289d166949e746df5e1d34c994b9c05ca9f1be45810ebbba671dfb0f9f1c96a22aa7dd4b0b879fa770ad67e72cbf86b941a1ff662f26c5e08024f2789750f7964a6e68bc84d296f6ef7655536ef78ba201ca0b68abac2a110b3e1ed64fabdb4b2b9c47d46fb79de2f72a23a684997ec54bf2c812367d00804fc8511bb244e6ffd14ea5325275acdf2dcc503d8913a470625ccfefc1ef7117b39c662712271899cfda4dbb0f47f880563148348cb0664719defd1efdfae969d93a2ed841b866a1fa8490ef30bfa52f62cc7980d61866eefc132469c8e6366a6f7b00002c74c2bd331d2a3c15e3403bc7f1c7141d58d8c9b03956aaf29d5dd3f0dceb5972edea377194f31c663eec0b0f7179e4ed4e241e3d02c2ebbbbe36e691fdd9d40e1d8f418648b7a2c031c8b31022bd62d028a1fe44325225c8b23ee3cca9296aecbecd30f46b1196f81296615e09d290ebf31e8a26c0ad5a68a090f5aa50d9130fea1efda78807348062e069e422ca32cc153fe502f2a629380c12e59a596f859fbf6b1e25dcf027aff4fc1f34ab22957fd4f928e4b24628f2bc3dcd6afe6c8fdc091a9d4fb57b725b6c5653db04059d1177859999e2205f97460663df03024617a86cbd25208e6107b74ef8392ee483a0436d0c55d307f39bf745967a21d3719653ca9b3ece13fb21f66ccfdc29dc7d987bdf97eea1f79689ee2fef7b265fa8c9ebf3978ead4e69df1e4a80da322bde3cd014892942f49d5d418ebe9a3e2169d0aa799b830099bdc799fe3883171d766aea4db25764473d1b9ef2e6541cb551f5dc39a7ba2c7d377b121e1a10b65ed335f042e78860b5f33d92f8e1dd617a652beb3247273d2af741ae80ef12de196dcdcf47c8ef66cd88423b1c4787df32694f63b76a8de03db2b0d7b3829202409c442579adbf2542204e75d57c432724b9e6776b43974c6ecafb88b32c44bf52da8667ab1b685b1e271e867e6191fadb5549ecc3b135e0b690173528fe8e02a987df966eb8afed32c5de08379ec18b4a96c786423e5afa05596947d77363ca5f5d843ac32df80ebdd5eb920d1f6b4251eea5b015ae723b5d07dd826e8621c45bec582f330d768bcb4b64c88823bb080a6c96a2710f0eba32245d0270f08b14bff781369876aea86962a3fe046db4841749eb2da780d081a15c215cdab9d81b30d3a9cea5e9e110d76fd5d9e50ef7fc0fd0c11f27b47b7c7c1b32299e0852564568b4500a6f4aea28e5b5789512ecebb3288b5c10cd10a6098dba0bee2d6a44420291f062fc9ce0050664eeba802cbc6c2d5a12566d18d1bb3a33e4d6338616b710ad0401920445a7d66b8b7d5e7c1dd261c4a56553a36f8f9e89feef63845c2ca76a89d2c6a3db0aef9c2a1ac357fe8749464ab49394a015e2b9db286c49e320ca6bc0af27f0a123f816a6154172cf593b669ed713e27480194241e6e92371e062662a49ae90929bf44de4e64d8a240a7394c4ed582d04edd303b3c1c1529f8babaf04afc6e316adcd1ca399eb125e85554a4bd2d744c2a48a580fcee1969101afc5cac49522c8172a4a504b56e038c4fabf9d653397307ab68e1f59bf4022da4ba0d6a951f77019d95cc0e7394774bf15122dec8e70e3a7f07fb3b1192909621e12d90f673258e4252cacf2424a1f9537decb981c281a1781188209cb368a8fa21d9cfadecdcdc4f8cd2cc5b395017be3fbdf4c29cf2e3ce985eb7a903d968b9f300b6d54ba71f8d2d9a6467643b6c57b0b22f45fa6e08ebac650acadc6989acc6fc0f774b9d7c163578e576c936e9d0641d70446745f6c1e80c9d35900c4a9e0a312b93f6e009b9f9fc1a277e3fec62a4f29db7f8f4622b32a76e2744f34abea09027d9d4660cacbdc3b51824d9d365331f24309c1e86f1715f316fdb571bb09900e78cae502988f1d662f3a24e87fa660da7837d17fcff4adb9d76c1b3c241c29f2aadbbf627cde7e164315c84b8e71ee11e6b70b299576dccdb1724d076b404caba39a36d9454aef8321669d41534d4bba59dfe9d3b505810666ca5e7bf33f0583b47a2c008aec5afd9100c7455a51c24551755a4ae9f6226c341809da6a3033064f9613f813f1611bfd677cf0bf16fc41d97efbc3ffb2dec8d3b0bb85b9576c6d1e903face7f2a981d0d86a33c5f4dfc52d10457511f4472dc1de824b7e4a0b4269088b1b36d7aafe275076d3266e8509655daffe9f259d8e2427d310a630b321ef7e5b9936bfdd453a3a72d77df235be96113d5c4283a604a89b656d67a114e01a34abe4e186bd2a3589cc0fad21a767215b3e651bdbd0034f52ab044be6d1aa8808ca6d741cd89306629126afb8e1164bd8e0ac367f9140d896b454f73e769dd8c9ceb9f7b11a76b9c4d0d25db68c1e82e85dda649e5abd64b8f79ff1181710507ca700fe0056cc5d47022375b2dc6bb74baaa6b6190cb4bdd223a291fa276b9648e5742446b709a57c8cc9f07c5d2094bf7abae992a512342771de0ed2ef0ba80bd7e0e82b5fd00b1ed051bd9822058947ab562dff74b24c0763fad5e391d9a4fbde0a6ddf200de156e0fe2e7a2a576c3936c704bbc3248e64e601735779f35d1fcea7d178cbe40567de998cb253a780965fe954fc0f89f200d20da3ecb22d334fe8ffbf9a11fe703c090374a97819268e931703614f9083364e76f0503361a7905cda04ba9c737b3251712e9a10ad2a184fed209e93bb0855973c10b9bb5eb49138aa7812bbe3c22533eaa82831b9a799b23ed00ca530736f358bdbedc405e867ebf66a810489f788a0774651f3904722fc77f5acb92e397883273f9fa4874777ae2785352f50c9851eb213800c0e23a2727aeb0114687bf283f80a3d2801bacb98c005d815c679d268c42c598d49eb91df8ce66932c69b6a99c391c21cd77fb647364388fd05b3144dbd4b9729e34eff46c800904b5526eb314a2e62807aee80314ab966d6c18c0a55a6186f98537159e2cd5ab0409f94c1ed97f1f8207138c04246dcfe7edf625d33980182b2e03d78c4faf307c8d3ddf287874d7febe222b2aac9efad5f77e1fa0974e4755a99be578ffbffa249c19a4e43f7a1e2bc002c86b285acfee3cdf67b2c152e45775270f2ed7b2d1e16637e28939b8cbc084bed527e93c48e36daba407ee3ad8354e66127cd07d13b8453dca28dec5d18fc7c9911907194ce3fbf91ca9e32df21b5f05f2724e4a6167508e67eda15f1891ee4d7f15c692c0577cd2c4cc5e0ae975baaea18a6fd5e60957a7e707259dd4469ddc69292de8c3c36900d9e8d0e766e2ed4232a5dfe4f503cbad7d7b6deb77303c02b34736a0eb799f1d1b2b422c68c821439693b1adc5f790be8fde96379087b405f4839cbf9ba804bbd6512aa3014feaab9e417704650b1cbe6c557097c935b56dc1c8232d91415a92abdf1b60178d7581b587aaf85b3d1eedcc8fb7dcb5e69b7b88cff6074ca864f2878e8cfa9f4893d968c700782bb88d6cec888d001e172aaa258f1ad153f1d87a0872b074405d62fda816a81f4141fba1108b66e34e1e5fc77bd01d2c26eaeff862d13bc866dc52794e9feb110278a48152807afec9b806a8198d29cf762fa372e1a69823d2243c67e892f2c75d136eb3c62d8a1ce739c4312d50e107e62e98c031fe7b8abd0d4b100c20a878a456b700890c5ccad1bf5754bd251e2337fa00640f689ca5fc48126629dae5e6b232015e455aabe5fee8d3de0d22940f3f226f2de51c215bc065266d23ed51f342b801cb55628a46d4ceb7e60011a5af9435664df3383a2a1a576aa5522e483c2256a3b945c071f1982f2c6d84da233155c745ef9316e14ed63b1db119b5a5910b5691b101610d9c8ca66c2fdd9d24c05009beb3301618a53b4c1b0236653e5b5dd13fa7a280e798730e7f8e1844b5a2e548b00b41b7d9ae48e7ba35306b901740b2f494ec925b59e436df1ad476fabaff3f480c4423d36f463edf05c6f1300bb0ec67860c1b6f53f456e3119fc1cf3bbacacf12bbb4686242359fd6bdfdcdf4b03b6c62f900b45d0a84d6ec290339e56ca05fc3ba7c3a5ee630b559c6fb6f8f9a88787841a0b7a537ea85817be06da64e3f04d61a9365955bb99785586cf87a1886ca56350aba05a26e418f9641c615c6abb8dbb43649f129b200fa8bdff69ab36fd2e3c96123b16a465a1dec88cf33b5c163cee497fceac9b972c2f13687f938f675d5be294e71d68a410244b6653149100268023c040eec67420a6144a199cb6cc82b08b0bdd1dae0a9dcca6992dfacb873eb76bde10f25f8803515c33d10d004368c8b09848f84d46333052672dcbfb5b58c23799cfaa2880047d1d4ef26737cac2494c133f17670e8f494d1d2940d89566ff8bc9fbfb157548b2837e1108db66bdf9e2297a680a1fd1bb6cb19e4dfa033df3434d92b396cfe157c14143c5e0121b244256af416ecd8ded6f0cae5af3e0b5a2ee9c489d964427e247eb7cac9bce2caf3a4a04ccf2ffab4d64964eea8b156fc44a0956712fd7e4db03eca6a7c7dbc41e800f12ba07116ce1faa032e84c3d3d24c66072ff97cac73f8d27f8165b71fb929908dfbd39d977fe59545b71b98146ae1ef851ee6fce764ef96b9b7f94aeb67da9c72e8dda", 0x1000}, {&(0x7f0000000900)="c06f445cf31babb6342dac82945960bfb12a5c5264071b9abf8bf793e4256150f3", 0x21}, {&(0x7f0000000940)="815e3c9937c485acaa2957cf8aac77e235176c6ed211619911ea7dde506953f30222fec4aad766f3d81832f69c", 0x2d}, {&(0x7f0000000980)="53d3108e0e05", 0x6}, {&(0x7f0000000b00)="0d57cdfedeac6693db1ad8767d0e08e3ad73d7746d26aa7d43520618f9ebd520877c29c76df037ba60d65e61784b132e5e29fd016fc8bc216b407759e4db8e0cc75d24fe3ba728598cfae8f5c06f2726f06a8a2a44e251a0514500d090dafebe9d9a750ea24370acc4166be126fe76c65daedc98f29adb6fd3c1582f41b4f0a8f0e28646688cdb06a8d3a4c8f25e9a56b22ffdcde0f5e4dd5ee5965abe5378d288c7db6b5ac7053b2269f9e149d9caade9ed92212a1a7a5a215742c96f4350e73637294ca465b969a1f5641a8d37932a115575b87323d895dfba1f2d1ee1ee50ba4d", 0xe2}, {&(0x7f0000000c00)="c009e35c988f2e13ff280d32919228690609bf84d389d088f415fe76e5d890c92d9f8e928b7c6d1ff8afb4e55eb300cfebada9fba4ca71bf765c4f17dec53ea2392106d50589a0e7a4145625049a77b9d428027da92371a08fb321bea7771b2aafa152876bcc4054dff003557ae1a21043828f1785dd1270287947f7abd63cc892dc55dd44894d624370cea0f55cb652672383c8e858c191676c43534b1de8464d8dbb2576b0f478df4b34cfd32971c21427aa33580defcdbf509902ff93941ccb80fa4d2330a0b0308250b763cbc812028fe1ff40ea09f403e1db19cae7", 0xde}, {&(0x7f0000002780)="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", 0x1000}], 0x9, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0xc0, 0x8002}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)="209aa4a3b0052bef87e826c8b7c7583297a49b0cde756c4b4c758c9033a8c718d1f7fc7e64ec7906ce1a0747bc3ec92c6fec4dd7962790f9c5541b5d5e1b21ba9f101f92388da6c44ba23faa1a1f3fe1215d0aa013df2105d8cda121dff3144af4b244b29a15e7de1053b755b762529be10e5bd11bb917eb981a35aa675b715e5c6b882d91ea481c3a6e676213f2e0f9edaf03cc1729f8666c2f0239c83239cc800c50", 0xa3}, {&(0x7f00000015c0)="e055086d2f9590136857e0b343e8", 0xe}, {&(0x7f0000001600)="a31a3d4d59dce139880d2f122abc90c7f91d3d83602cc3bcd5484391db73f11be2cb9c1c7e4b0623e4f2428b2feea91575ee24a93529fb27b96f03f62aeb716ca764dc2bc47cbbcf165e7f9545d1f0b5d5ddc038b36816a3410ecb5eab1132fc713ffd90457c263b697eef5c422f815ecca4c0272b0c46c981a75348165192cffac4ac88d3187d9629ace9f0542a3f3d4fc0fe7584836e", 0x97}], 0x3, &(0x7f00000042c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x800}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004340)="ecb9f4b828ab4ccfd1a10a806d0006ae15efab5dc88253faf9d6b92381ba6d82eeb9afef73b792f249a02b9cb9c0f09fa91a389e4ab8d0e2705a", 0x3a}, {&(0x7f0000004380)="cdc76f6d1f66d612fac9b37482d7d9667a8ea033174adb16e5479679db22df8bc056a80cd6019a0b42ccac85bc12d3", 0x2f}, {&(0x7f00000043c0)}, {&(0x7f0000004740)="ddf45406e6961615ac84911bf7b92f8b26caa5bc29367a7cf4380af345747a1f9e73c807306fd6df242a5e5b5889b5792a5fae55498175a9a416b8d4eb18a3aec2319ad58c2211211594b915f452fcc72f23eba6172340e4a5c7bea3b5119abfbfd1cb73f021eea601264f5c856135c060f470dabc1fb0c6ad48666d4eadcae4864db87503f8d4d3aafafda750cba01de5572638cddd0632fda6", 0x9a}, {&(0x7f0000004800)="e99a197cb18e71eeddaa44922662389d232c61f5ce41bac5de29e780cf9970de17b817b4d6a9e2bb881d341298431e9c1c6426d6", 0x34}, {&(0x7f0000004840)="386627424b894c0d8dff23d536091821c6285f85b5d34aa5771fe6af3e854594d5a4d8a95d81ab2f807ed4191dca1bb39614c3d64ee2ce5929e35c9617741d01efd6ea4054ead3511a6c3eb3fa01f9b58dfc0828f4e7df845ea4f7fe04ec17c3742d1d491e980b7bd7fbe2886c9c335d5ca0a7cf3752573a0bc9b7cfd6582be3140ba804b86a3758e7215ea5b24c3c038f5c8ad22a4d6af274bb90cea6a5a430a9bb67f8ff84b138f0", 0xa9}, {&(0x7f0000004900)="24c18bad9ecbaedfa070e0c7bc450ea9e47acb80b5095451a127d41af9b0a052aa2f02c14b219785d567eeff02e0b58beb02f1ac937db6d82e827bc2359550e6054f7e11a9c37d91f8e5b017a4328a9d784a265ecd1618818e9fabc265dd2182c401a67f84aed3069ef880b2477ab9178e5fb464f097c9690622d451548d0e91", 0x80}, {&(0x7f0000004980)="988ece7b92cddf3c", 0x8}], 0x8, &(0x7f0000004a40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}], 0x60, 0x1}}, {{&(0x7f0000004ac0)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000004b40)="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", 0x1000}, {&(0x7f0000005b40)="73fae1f69bef24c6f0487db11653f001a593551946adf768cbc5de60775e97dc32eff879993fda3eeb37de2f318d8bab26c31641a65c2d85ea045e69d893ab55adc165edf533b5281bf2f2ed47fcc3640fafa8cdbc1f8f4714bbe0fd19923a11535b23228abfd04aab88cf96d2ed057b978c5d397fd34e5af0c115d7b35ddde8e33e8425b16cb8666946e21389a7271f2511ba1fab761f90a09c79c41b7d5c0cfbdf169172cb73b77bb6aa96a2949236ed584330f17e3169e789a3ff0f24e9242357f30a2b2b", 0xc6}, {&(0x7f0000005c40)="d3bb645e40b5f495273b8ae9b35e36a9d80d813c1f593764da410871160f6158fcf0f9c0d6a28786426079f6dc439082a0676fd3a075", 0x36}], 0x3, &(0x7f0000005ec0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108, 0x20008805}}], 0x5, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r9, 0xc0404806, &(0x7f0000000440)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r11, 0x0, 0x2}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r12) 1.31178947s ago: executing program 1 (id=4716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x30, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x48000) sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$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") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000740)="e32a", 0x2}], 0x1) 1.20722537s ago: executing program 1 (id=4717): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000340)="10", 0x1, 0x8004, &(0x7f00000003c0)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.111211679s ago: executing program 4 (id=4719): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f454be00c3bccb3926e9fc9b4693700ecd67aebfcc1fe378e80d1baa12dc67dbfd86883a96ba6ae0ce1f428794748e084132b03a66d29669823c3c52b1cb49462bf2", 0x6e}, {&(0x7f0000001180)="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", 0x4d3}], 0x2}}], 0x2, 0xc044) write$binfmt_misc(r0, 0x0, 0x0) (fail_nth: 1) 1.0049843s ago: executing program 4 (id=4721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003300"/265], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000840), &(0x7f0000000cc0)=0x8) write$sndseq(r3, &(0x7f0000000180)=[{0x10, 0x0, 0x0, 0x2, @tick, {0x8, 0xff}, {0x10, 0x9}, @addr={0x7, 0xc0}}], 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r4, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001a000100000000000000e6ff8080800000000000ffffffff1400010000000000000000000000000000000000140002"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840), &(0x7f0000000780)=[0x0], 0x0, 0xad, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000740), &(0x7f0000000880), 0x8, 0x16, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0200000068a05800"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000150081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 934.740217ms ago: executing program 0 (id=4722): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 738.324657ms ago: executing program 0 (id=4723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000400000000100000020"], 0x50) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000000c0)='%2,\x00', &(0x7f0000000100)='GPL\x00', &(0x7f0000000140)='percpu_alloc_percpu\x00', &(0x7f0000000180)='%\xd2#\\+\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='%\x00', &(0x7f0000000240)='\x00', &(0x7f00000002c0)='.\\{:(.\a\x00', &(0x7f0000000300)='percpu_alloc_percpu\x00']}, &(0x7f00000004c0)={[&(0x7f00000003c0)='&\x00', &(0x7f0000000400)='&%{)-\\\'\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='GPL\x00']}, 0x400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="000a480000faffffffffb603dd0e0000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0xc) unshare(0x40000000) unshare(0x8040000) 613.737709ms ago: executing program 4 (id=4724): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x24}}, 0x18) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x13, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000145}, 0x20000050) 247.516535ms ago: executing program 1 (id=4725): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f454be00c3bccb3926e9fc9b4693700ecd67aebfcc1fe378e80d1baa12dc67dbfd86883a96ba6ae0ce1f428794748e084132b03a66d29669823c3c52b1cb49462bf2", 0x6e}, {&(0x7f0000001180)="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", 0x4d3}], 0x2}}], 0x2, 0xc044) write$binfmt_misc(r0, 0x0, 0x0) 210.067329ms ago: executing program 0 (id=4726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb66d57fd2a03b07f81e", 0x26}, {&(0x7f0000002280)="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", 0x4d7}], 0x2, &(0x7f0000000740)=[@hopopts={{0xb8, 0x29, 0x36, {0x2f, 0x13, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x5, [0x7f, 0x9, 0x8000000000000001, 0x6, 0x2, 0x8, 0x6]}}, @ra={0x5, 0x2, 0xf}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x3}, @generic={0x80, 0x44, "fa143e1a106b19c70ea0542d6d63da3d5e395944f9b3a32d7d56f9ac88221c36e046c8dd1b3bbdbc12f0ebac42dabfe74668b9390e9dfe93f026f5442cd566c77fb6b13a"}]}}}], 0xb8}}], 0x1, 0x80) 184.459342ms ago: executing program 1 (id=4727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x28020480) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500010006000000"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000090601020000000000000000030000000900020073797a3100400000050001349782eb003000078008000940000000000c00148000000140ac1414bb1800028014000240fe80000000e2ffffffffffffff0000bb"], 0x58}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 181.853752ms ago: executing program 4 (id=4728): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x42940, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="3a8a96922e54ebcce6ae4906f3d2e8e80fb85abbf319f7970f9ab2c1aeda74e853d795994833866523ad845fd0742831c690d8524737e9b5dd8d1bdfec7a01a5e6902ad015b97624fe"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000080900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d4c001280340001800a0001006c696d6974000000240002800c00024000000000000010000c000140000000000000008b0800044000000001140001800a0001006c696d6974000000040002800800034000000110140000001000010000000002000000000584000a", @ANYBLOB="e1ff21f6618052695e4a9543bede1a79f7ff72220e515da2f2c8f2380fcf808268de3aa55de8797ea87f58706de2fad97e98708cbff9c8319f782a88fdd565c031dc0e76a239737dc84086731386c9e81f8530fb47a735d2bbcdf3cc2744339378b86b11197603999169c854c13b1d76f15bdb5b25586d3d4128ce02c36c01f522315626248a6c874579c7d7"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0) 172.054073ms ago: executing program 0 (id=4729): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000001000/0x3000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8eb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh]}}}}}}}, 0x0) 99.8341ms ago: executing program 0 (id=4730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffe3e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xec4ba78a, 0x2, 0x100b, 0x8000, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000fc, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 78.321572ms ago: executing program 3 (id=4731): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x8, 0x3000, @vifc_lcl_ifindex=r3, @rand_addr=0x64010100}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', r3, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6d276b17) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xb}, 0x18) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000000b080), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x20) 0s ago: executing program 0 (id=4732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x101, 0x0, 0x86aa}, "b4"}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) kernel console output (not intermixed with test programs): orrupted xattr block 33: bad e_name length [ 310.128207][T21027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 310.142198][T21036] loop0: detected capacity change from 0 to 512 [ 310.156507][T21027] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.4108: corrupted inode contents [ 310.198082][T21027] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #4: comm syz.3.4108: mark_inode_dirty error [ 310.198878][T21036] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 310.222418][T21036] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4111: attempt to clear invalid blocks 2 len 1 [ 310.237598][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.241657][T21036] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 310.261228][T21036] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4111: invalid indirect mapped block 1819239214 (level 0) [ 310.275884][T21036] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4111: invalid indirect mapped block 1819239214 (level 1) [ 310.295678][T21036] EXT4-fs (loop0): 1 truncate cleaned up [ 310.302092][T21036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.371401][T21063] validate_nla: 1 callbacks suppressed [ 310.371419][T21063] netlink: 'syz.3.4118': attribute type 1 has an invalid length. [ 310.384745][T21063] netlink: 'syz.3.4118': attribute type 2 has an invalid length. [ 310.408324][T21036] serio: Serial port ttyS3 [ 310.500712][T14969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.512444][T21068] netlink: 'syz.3.4120': attribute type 15 has an invalid length. [ 310.523457][T21068] vxlan0: entered promiscuous mode [ 310.523475][T21083] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 310.531429][ T312] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.553753][ T312] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.580135][ T312] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.600380][ T312] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.608925][T21092] loop3: detected capacity change from 0 to 128 [ 310.616619][T21092] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 310.632215][T21095] loop0: detected capacity change from 0 to 512 [ 310.649648][T21095] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4124: bg 0: block 248: padding at end of block bitmap is not set [ 310.676101][T21095] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4124: Failed to acquire dquot type 1 [ 310.697732][T21095] EXT4-fs (loop0): 1 truncate cleaned up [ 310.704070][T21095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.731258][T21095] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.751330][T21095] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.4124: deleted inode referenced: 12 [ 310.791273][T14969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.821335][T21112] netlink: 'syz.3.4131': attribute type 39 has an invalid length. [ 310.909485][T21137] loop3: detected capacity change from 0 to 512 [ 310.917296][T21137] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 310.931520][T21137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 310.940100][T21137] System zones: 1-12 [ 310.944342][T21137] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.4140: corrupted in-inode xattr: e_value size too large [ 310.959059][T21137] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4140: couldn't read orphan inode 15 (err -117) [ 310.963773][T21144] FAULT_INJECTION: forcing a failure. [ 310.963773][T21144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.972562][T21137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.984144][T21144] CPU: 0 UID: 0 PID: 21144 Comm: syz.1.4141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 310.984191][T21144] Tainted: [W]=WARN [ 310.984201][T21144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.984219][T21144] Call Trace: [ 310.984231][T21144] [ 310.984242][T21144] __dump_stack+0x1d/0x30 [ 310.984275][T21144] dump_stack_lvl+0xe8/0x140 [ 310.984304][T21144] dump_stack+0x15/0x1b [ 310.984359][T21144] should_fail_ex+0x265/0x280 [ 310.984407][T21144] should_fail+0xb/0x20 [ 310.984516][T21144] should_fail_usercopy+0x1a/0x20 [ 310.984545][T21144] _copy_from_user+0x1c/0xb0 [ 310.984636][T21144] __tun_chr_ioctl+0x147/0x14c0 [ 310.984744][T21144] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 310.984784][T21144] tun_chr_ioctl+0x27/0x40 [ 310.984873][T21144] __se_sys_ioctl+0xce/0x140 [ 310.984905][T21144] __x64_sys_ioctl+0x43/0x50 [ 310.984934][T21144] x64_sys_call+0x1816/0x3000 [ 310.984974][T21144] do_syscall_64+0xd2/0x200 [ 310.985061][T21144] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 310.985100][T21144] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 310.985211][T21144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.985242][T21144] RIP: 0033:0x7f3b688af6c9 [ 310.985263][T21144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.985327][T21144] RSP: 002b:00007f3b6730f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.985354][T21144] RAX: ffffffffffffffda RBX: 00007f3b68b05fa0 RCX: 00007f3b688af6c9 [ 310.985372][T21144] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 310.985390][T21144] RBP: 00007f3b6730f090 R08: 0000000000000000 R09: 0000000000000000 [ 310.985436][T21144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.985471][T21144] R13: 00007f3b68b06038 R14: 00007f3b68b05fa0 R15: 00007fff2662b398 [ 310.985498][T21144] [ 311.193251][T21152] netlink: 'syz.0.4142': attribute type 1 has an invalid length. [ 311.220130][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.272524][T21169] loop1: detected capacity change from 0 to 256 [ 311.279840][T21166] netlink: 'syz.3.4147': attribute type 39 has an invalid length. [ 311.280364][T21169] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.319747][T21178] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.329667][T21178] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.379521][T21187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=21187 comm=syz.1.4151 [ 311.392504][T21187] netlink: 'syz.1.4151': attribute type 1 has an invalid length. [ 311.402049][T21178] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.412018][T21178] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.428817][T21189] __nla_validate_parse: 4 callbacks suppressed [ 311.428836][T21189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4149'. [ 311.457354][T21187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.530129][T21178] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.540172][T21178] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.617511][T21229] lo speed is unknown, defaulting to 1000 [ 311.640578][T21178] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.650495][T21178] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.663318][T21229] lo speed is unknown, defaulting to 1000 [ 311.669546][T21229] lo speed is unknown, defaulting to 1000 [ 311.760659][ T37] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.768948][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.786266][ T37] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.794696][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.813568][ T37] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.821986][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.831412][ T37] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.839670][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.012401][T21284] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4160'. [ 312.157114][T21290] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4163'. [ 312.287098][T21298] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 312.294968][T21298] netlink: 'syz.2.4163': attribute type 2 has an invalid length. [ 312.438689][ T3380] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 312.518669][ T3380] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.655882][T21306] lo speed is unknown, defaulting to 1000 [ 312.669096][ T29] kauditd_printk_skb: 790 callbacks suppressed [ 312.669114][ T29] audit: type=1400 audit(1763280179.805:14575): avc: denied { audit_write } for pid=21315 comm="syz.1.4170" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 312.674808][T21317] loop1: detected capacity change from 0 to 1024 [ 312.679811][ T29] audit: type=1107 audit(1763280179.805:14576): pid=21315 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 312.697307][T21317] EXT4-fs: Ignoring removed orlov option [ 312.728430][ T29] audit: type=1400 audit(1763280179.835:14577): avc: denied { mounton } for pid=21315 comm="syz.1.4170" path="/57/file1" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 312.756560][T21306] lo speed is unknown, defaulting to 1000 [ 312.762836][T21306] lo speed is unknown, defaulting to 1000 [ 312.771193][T21317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.800844][ T29] audit: type=1400 audit(1763280179.915:14578): avc: denied { mount } for pid=21315 comm="syz.1.4170" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 312.869414][ T29] audit: type=1400 audit(1763280180.005:14579): avc: denied { create } for pid=21346 comm="syz.3.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 312.891196][ T29] audit: type=1400 audit(1763280180.025:14580): avc: denied { cpu } for pid=21346 comm="syz.3.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 312.927338][T21347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.988481][ T29] audit: type=1400 audit(1763280180.125:14581): avc: denied { create } for pid=21348 comm="syz.3.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.112046][ T29] audit: type=1400 audit(1763280180.175:14582): avc: denied { create } for pid=21350 comm="syz.0.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.131983][ T29] audit: type=1326 audit(1763280180.235:14583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.2.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 313.155743][ T29] audit: type=1326 audit(1763280180.235:14584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.2.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 313.534746][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.682345][T21375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.741244][T21375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.831069][T21375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.881127][T21375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.000347][ T312] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.012839][ T312] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.049024][ T312] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.088029][ T312] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.207075][T21402] FAULT_INJECTION: forcing a failure. [ 314.207075][T21402] name failslab, interval 1, probability 0, space 0, times 0 [ 314.219815][T21402] CPU: 1 UID: 0 PID: 21402 Comm: syz.0.4183 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 314.219857][T21402] Tainted: [W]=WARN [ 314.219865][T21402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.219941][T21402] Call Trace: [ 314.219947][T21402] [ 314.219954][T21402] __dump_stack+0x1d/0x30 [ 314.220036][T21402] dump_stack_lvl+0xe8/0x140 [ 314.220064][T21402] dump_stack+0x15/0x1b [ 314.220159][T21402] should_fail_ex+0x265/0x280 [ 314.220204][T21402] should_failslab+0x8c/0xb0 [ 314.220289][T21402] __kmalloc_noprof+0xa5/0x570 [ 314.220327][T21402] ? process_preds+0x30a/0x2bb0 [ 314.220363][T21402] process_preds+0x30a/0x2bb0 [ 314.220414][T21402] ? terminate_walk+0x27f/0x2a0 [ 314.220455][T21402] ? path_openat+0x1bf8/0x2170 [ 314.220484][T21402] ? avc_has_perm_noaudit+0x1b1/0x200 [ 314.220542][T21402] ? should_fail_ex+0xdb/0x280 [ 314.220575][T21402] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 314.220606][T21402] ? should_failslab+0x8c/0xb0 [ 314.220724][T21402] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 314.220767][T21402] ftrace_profile_set_filter+0xff/0x1b0 [ 314.220817][T21402] perf_ioctl+0x7b3/0x12e0 [ 314.220874][T21402] ? ioctl_has_perm+0x289/0x2a0 [ 314.220915][T21402] ? do_vfs_ioctl+0x866/0xe10 [ 314.220943][T21402] ? selinux_file_ioctl+0x308/0x3a0 [ 314.220982][T21402] ? __fget_files+0x184/0x1c0 [ 314.221092][T21402] ? __pfx_perf_ioctl+0x10/0x10 [ 314.221122][T21402] __se_sys_ioctl+0xce/0x140 [ 314.221207][T21402] __x64_sys_ioctl+0x43/0x50 [ 314.221287][T21402] x64_sys_call+0x1816/0x3000 [ 314.221312][T21402] do_syscall_64+0xd2/0x200 [ 314.221337][T21402] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 314.221419][T21402] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 314.221544][T21402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.221572][T21402] RIP: 0033:0x7f4a0e01f6c9 [ 314.221592][T21402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.221615][T21402] RSP: 002b:00007f4a0ca87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.221744][T21402] RAX: ffffffffffffffda RBX: 00007f4a0e275fa0 RCX: 00007f4a0e01f6c9 [ 314.221760][T21402] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000003 [ 314.221774][T21402] RBP: 00007f4a0ca87090 R08: 0000000000000000 R09: 0000000000000000 [ 314.221786][T21402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.221798][T21402] R13: 00007f4a0e276038 R14: 00007f4a0e275fa0 R15: 00007ffdb43eb258 [ 314.221818][T21402] [ 314.527360][T21404] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4184'. [ 314.537907][T21404] netlink: 'syz.4.4184': attribute type 1 has an invalid length. [ 314.618271][T21406] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4185'. [ 314.713144][T21412] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4188'. [ 314.757662][T21416] loop2: detected capacity change from 0 to 512 [ 314.808130][T21416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.921627][T21416] ext4 filesystem being mounted at /216/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.964473][T21416] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4189: corrupted inode contents [ 314.983443][T21416] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #4: comm syz.2.4189: mark_inode_dirty error [ 315.000896][T21416] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4189: corrupted inode contents [ 315.013296][T21416] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.4189: mark_inode_dirty error [ 315.026090][T21416] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4189: Failed to acquire dquot type 1 [ 315.046786][T21416] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4189: corrupted xattr block 33: bad e_name length [ 315.072955][T21416] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 315.086615][T21416] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4189: corrupted xattr block 33: bad e_name length [ 315.102946][T21416] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 315.112362][T21416] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4189: corrupted xattr block 33: bad e_name length [ 315.126075][T21416] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 315.135442][T21416] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4189: corrupted inode contents [ 315.147414][T21416] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #4: comm syz.2.4189: mark_inode_dirty error [ 315.174407][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.197157][T21432] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4191'. [ 315.272220][T21432] SELinux: policydb version 0 does not match my version range 15-35 [ 315.280680][T21432] SELinux: failed to load policy [ 315.441438][T21445] loop1: detected capacity change from 0 to 1024 [ 315.455101][T21445] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 315.472216][T21445] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 315.480169][T21449] loop2: detected capacity change from 0 to 512 [ 315.487025][T21445] EXT4-fs (loop1): orphan cleanup on readonly fs [ 315.493823][T21445] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 315.508453][T21445] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 315.508753][T21449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.515831][T21445] EXT4-fs (loop1): 1 truncate cleaned up [ 315.527609][T21449] ext4 filesystem being mounted at /222/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.533996][T21445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.548301][T21449] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4197: corrupted inode contents [ 315.568216][T21449] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #4: comm syz.2.4197: mark_inode_dirty error [ 315.579979][T21449] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4197: corrupted inode contents [ 315.585424][T21445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.595172][T21449] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.4197: mark_inode_dirty error [ 315.602936][T21445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.614516][T21449] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4197: Failed to acquire dquot type 1 [ 315.629253][T21455] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4197: corrupted xattr block 33: bad e_name length [ 315.644032][T21455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 315.679431][T21455] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4197: corrupted xattr block 33: bad e_name length [ 315.693327][T21455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 315.702924][T21455] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4197: corrupted xattr block 33: bad e_name length [ 315.717001][T21455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 315.726161][T21455] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4197: corrupted inode contents [ 315.738314][T21455] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #4: comm syz.2.4197: mark_inode_dirty error [ 315.815343][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.835847][T21466] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4200'. [ 315.946147][T21471] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.108977][T21471] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.169254][T21471] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.229522][T21471] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.267073][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.314649][ T312] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.343879][T21497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.344871][ T312] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.388106][ T312] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.396608][T21497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.405863][ T312] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.408707][T21506] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4208'. [ 316.432048][T21477] loop3: detected capacity change from 0 to 8192 [ 316.455018][T21506] validate_nla: 4 callbacks suppressed [ 316.455038][T21506] netlink: 'syz.1.4208': attribute type 1 has an invalid length. [ 316.752553][T21526] loop1: detected capacity change from 0 to 128 [ 316.786410][T21526] bio_check_eod: 26 callbacks suppressed [ 316.786430][T21526] syz.1.4211: attempt to access beyond end of device [ 316.786430][T21526] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 316.819199][T21526] syz.1.4211: attempt to access beyond end of device [ 316.819199][T21526] loop1: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 316.836396][T21526] syz.1.4211: attempt to access beyond end of device [ 316.836396][T21526] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 316.877788][T21526] syz.1.4211: attempt to access beyond end of device [ 316.877788][T21526] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 316.912024][T21526] syz.1.4211: attempt to access beyond end of device [ 316.912024][T21526] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 316.956149][T21526] syz.1.4211: attempt to access beyond end of device [ 316.956149][T21526] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 317.016871][T21526] syz.1.4211: attempt to access beyond end of device [ 317.016871][T21526] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 317.046820][T21526] syz.1.4211: attempt to access beyond end of device [ 317.046820][T21526] loop1: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 317.411034][T21552] SELinux: policydb version 0 does not match my version range 15-35 [ 317.436881][T21552] SELinux: failed to load policy [ 317.775941][T21563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.786857][T21563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.848098][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 317.848126][ T29] audit: type=1400 audit(1763280184.945:14939): avc: denied { create } for pid=21557 comm="syz.1.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.879276][T21563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.889780][T21563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.915196][T21561] SELinux: policydb version 0 does not match my version range 15-35 [ 317.952665][T21563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.963015][T21563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.988407][T21561] SELinux: failed to load policy [ 318.021297][T21563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.032070][T21563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.095801][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.104093][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.126813][ T37] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.130926][ T29] audit: type=1326 audit(1763280185.225:14940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a0e01f6c9 code=0x7ffc0000 [ 318.135132][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.158803][ T29] audit: type=1326 audit(1763280185.255:14941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e01f6c9 code=0x7ffc0000 [ 318.173719][ T37] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.190492][ T29] audit: type=1326 audit(1763280185.255:14942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e01f6c9 code=0x7ffc0000 [ 318.198711][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.211248][ T37] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.239711][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.249110][ T29] audit: type=1326 audit(1763280185.305:14943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a0e01f6c9 code=0x7ffc0000 [ 318.272807][ T29] audit: type=1326 audit(1763280185.365:14944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21534 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 318.296411][ T29] audit: type=1326 audit(1763280185.375:14945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21534 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 318.339930][ T29] audit: type=1326 audit(1763280185.445:14946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21534 comm="syz.4.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 318.363535][ T29] audit: type=1400 audit(1763280185.455:14948): avc: denied { tracepoint } for pid=21511 comm="syz.0.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 318.383512][ T29] audit: type=1326 audit(1763280185.455:14949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e01f6c9 code=0x7ffc0000 [ 318.763108][T21606] SELinux: policydb version 0 does not match my version range 15-35 [ 318.788464][T21606] SELinux: failed to load policy [ 319.209102][T21633] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4238'. [ 319.229059][T21633] netlink: 'syz.3.4238': attribute type 1 has an invalid length. [ 319.236898][T21633] netlink: 'syz.3.4238': attribute type 2 has an invalid length. [ 319.458530][T21644] loop3: detected capacity change from 0 to 1024 [ 319.471094][T21644] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.518722][T21644] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 319.535402][T21644] EXT4-fs (loop3): orphan cleanup on readonly fs [ 319.559662][T21644] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 319.574237][T21644] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 319.619917][T21644] EXT4-fs (loop3): 1 truncate cleaned up [ 319.626266][T21644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.661102][T21651] netlink: 'syz.0.4245': attribute type 13 has an invalid length. [ 319.693750][T21644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.725109][T21644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.790032][T21651] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.797406][T21651] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.891557][T21651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.911128][T21651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.976230][ T1036] lo speed is unknown, defaulting to 1000 [ 319.982075][ T1036] sz1: Port: 1 Link DOWN [ 319.987104][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.995497][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.011100][ T1036] lo speed is unknown, defaulting to 1000 [ 320.017022][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.035374][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.139440][T21669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4251'. [ 320.152956][T21669] IPVS: Error connecting to the multicast addr [ 320.185535][T21671] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4252'. [ 320.244093][T21673] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4253'. [ 320.265065][T21671] SELinux: policydb version 0 does not match my version range 15-35 [ 320.273674][T21671] SELinux: failed to load policy [ 320.298465][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.332624][T21684] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4255'. [ 320.344177][T21684] netlink: 'syz.3.4255': attribute type 1 has an invalid length. [ 320.351978][T21684] netlink: 'syz.3.4255': attribute type 2 has an invalid length. [ 320.372250][T21686] FAULT_INJECTION: forcing a failure. [ 320.372250][T21686] name failslab, interval 1, probability 0, space 0, times 0 [ 320.385164][T21686] CPU: 1 UID: 0 PID: 21686 Comm: syz.1.4258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.385204][T21686] Tainted: [W]=WARN [ 320.385230][T21686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.385244][T21686] Call Trace: [ 320.385250][T21686] [ 320.385257][T21686] __dump_stack+0x1d/0x30 [ 320.385280][T21686] dump_stack_lvl+0xe8/0x140 [ 320.385301][T21686] dump_stack+0x15/0x1b [ 320.385323][T21686] should_fail_ex+0x265/0x280 [ 320.385419][T21686] should_failslab+0x8c/0xb0 [ 320.385450][T21686] __kmalloc_noprof+0xa5/0x570 [ 320.385514][T21686] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 320.385545][T21686] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 320.385630][T21686] ? xas_load+0x413/0x430 [ 320.385654][T21686] genl_family_rcv_msg_doit+0x48/0x1b0 [ 320.385687][T21686] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 320.385737][T21686] ? genl_get_cmd+0x639/0x660 [ 320.385762][T21686] genl_rcv_msg+0x422/0x460 [ 320.385786][T21686] ? __pfx_hwsim_get_radio_nl+0x10/0x10 [ 320.385893][T21686] netlink_rcv_skb+0x123/0x220 [ 320.385951][T21686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.385992][T21686] genl_rcv+0x28/0x40 [ 320.386019][T21686] netlink_unicast+0x5c0/0x690 [ 320.386096][T21686] netlink_sendmsg+0x58b/0x6b0 [ 320.386120][T21686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.386146][T21686] __sock_sendmsg+0x145/0x180 [ 320.386180][T21686] ____sys_sendmsg+0x31e/0x4e0 [ 320.386206][T21686] ___sys_sendmsg+0x17b/0x1d0 [ 320.386246][T21686] __x64_sys_sendmsg+0xd4/0x160 [ 320.386289][T21686] x64_sys_call+0x191e/0x3000 [ 320.386314][T21686] do_syscall_64+0xd2/0x200 [ 320.386334][T21686] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.386421][T21686] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 320.386465][T21686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.386493][T21686] RIP: 0033:0x7f3b688af6c9 [ 320.386571][T21686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.386595][T21686] RSP: 002b:00007f3b6730f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.386620][T21686] RAX: ffffffffffffffda RBX: 00007f3b68b05fa0 RCX: 00007f3b688af6c9 [ 320.386633][T21686] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 320.386648][T21686] RBP: 00007f3b6730f090 R08: 0000000000000000 R09: 0000000000000000 [ 320.386743][T21686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.386761][T21686] R13: 00007f3b68b06038 R14: 00007f3b68b05fa0 R15: 00007fff2662b398 [ 320.386784][T21686] [ 320.662449][T21690] loop3: detected capacity change from 0 to 256 [ 320.663532][T21692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4260'. [ 320.669262][T21690] vfat: Bad value for 'tz' [ 320.755201][T21699] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.879936][T21699] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.939828][T21699] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.999185][T21699] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.036356][T21712] loop2: detected capacity change from 0 to 512 [ 321.081343][T16422] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.092685][T16422] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.104361][T21712] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 321.112015][T16422] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.139406][T21712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 321.189706][T21712] System zones: 1-12 [ 321.199810][T21729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4263'. [ 321.203802][T16422] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.230219][T21712] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.4262: corrupted in-inode xattr: e_value size too large [ 321.250427][T21712] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4262: couldn't read orphan inode 15 (err -117) [ 321.264276][T21712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.265227][T21735] loop1: detected capacity change from 0 to 512 [ 321.307519][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.329718][T21735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.350674][T21748] loop2: detected capacity change from 0 to 1024 [ 321.357675][T21735] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.371338][T21748] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 321.386541][T21735] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4267: corrupted xattr block 33: bad e_name length [ 321.401408][T21752] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4270'. [ 321.411257][T21735] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 321.411512][T21752] netlink: 'syz.3.4270': attribute type 1 has an invalid length. [ 321.423522][T21735] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4267: corrupted xattr block 33: bad e_name length [ 321.428676][T21752] netlink: 'syz.3.4270': attribute type 2 has an invalid length. [ 321.450147][T21748] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 321.458194][T21748] EXT4-fs (loop2): orphan cleanup on readonly fs [ 321.464861][T21748] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 321.479365][T21748] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 321.485927][T21735] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 321.495296][T21735] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4267: corrupted xattr block 33: bad e_name length [ 321.525579][T21735] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 321.535426][T21748] EXT4-fs (loop2): 1 truncate cleaned up [ 321.541852][T21748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.554754][T21735] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.4267: corrupted inode contents [ 321.566862][T21735] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.4267: mark_inode_dirty error [ 321.579080][T21735] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.4267: corrupted inode contents [ 321.596896][T21735] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.4267: mark_inode_dirty error [ 321.609003][T21735] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4267: Failed to acquire dquot type 1 [ 321.634988][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.681812][T21758] loop3: detected capacity change from 0 to 512 [ 321.701915][T21758] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 321.702304][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.720920][T21758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 321.743493][T21758] System zones: 1-12 [ 321.745217][T21762] FAULT_INJECTION: forcing a failure. [ 321.745217][T21762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.774001][T21762] CPU: 1 UID: 0 PID: 21762 Comm: syz.1.4271 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 321.774099][T21762] Tainted: [W]=WARN [ 321.774107][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.774119][T21762] Call Trace: [ 321.774125][T21762] [ 321.774132][T21762] __dump_stack+0x1d/0x30 [ 321.774159][T21762] dump_stack_lvl+0xe8/0x140 [ 321.774185][T21762] dump_stack+0x15/0x1b [ 321.774209][T21762] should_fail_ex+0x265/0x280 [ 321.774308][T21762] should_fail+0xb/0x20 [ 321.774346][T21762] should_fail_usercopy+0x1a/0x20 [ 321.774409][T21762] strncpy_from_user+0x25/0x230 [ 321.774560][T21762] getname_flags+0xae/0x3b0 [ 321.774663][T21762] user_path_at+0x28/0x130 [ 321.774686][T21762] do_fchownat+0xb0/0x210 [ 321.774799][T21762] __x64_sys_fchownat+0x64/0x80 [ 321.774835][T21762] x64_sys_call+0x255e/0x3000 [ 321.774857][T21762] do_syscall_64+0xd2/0x200 [ 321.774910][T21762] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 321.774971][T21762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.774997][T21762] RIP: 0033:0x7f3b688af6c9 [ 321.775012][T21762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.775031][T21762] RSP: 002b:00007f3b6730f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 321.775109][T21762] RAX: ffffffffffffffda RBX: 00007f3b68b05fa0 RCX: 00007f3b688af6c9 [ 321.775125][T21762] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 321.775137][T21762] RBP: 00007f3b6730f090 R08: 0000000000001000 R09: 0000000000000000 [ 321.775150][T21762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.775162][T21762] R13: 00007f3b68b06038 R14: 00007f3b68b05fa0 R15: 00007fff2662b398 [ 321.775253][T21762] [ 321.776017][T21758] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.4272: corrupted in-inode xattr: e_value size too large [ 321.970467][T21758] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4272: couldn't read orphan inode 15 (err -117) [ 321.993063][T21758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.034629][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.131682][T21787] loop0: detected capacity change from 0 to 512 [ 322.176137][T21787] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 322.184649][T21789] veth1_to_batadv: entered promiscuous mode [ 322.211736][T21787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 322.219962][T21787] System zones: 1-12 [ 322.224314][T21787] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.4279: corrupted in-inode xattr: e_value size too large [ 322.238920][T21787] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.4279: couldn't read orphan inode 15 (err -117) [ 322.251665][T21787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.272217][T21784] loop1: detected capacity change from 0 to 1024 [ 322.297715][T14969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.325449][T21784] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 322.326279][T21804] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4282'. [ 322.327917][T21804] netlink: 'syz.2.4282': attribute type 1 has an invalid length. [ 322.352952][T21804] netlink: 'syz.2.4282': attribute type 2 has an invalid length. [ 322.356691][T21784] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.387598][T21811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4280'. [ 322.406061][T21784] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 322.428345][T21784] EXT4-fs (loop1): orphan cleanup on readonly fs [ 322.443666][T21784] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.4277: Inode bitmap for bg 0 marked uninitialized [ 322.482618][T21784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.533602][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.566686][T21837] loop1: detected capacity change from 0 to 512 [ 322.574166][T21837] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 322.584396][T21827] lo speed is unknown, defaulting to 1000 [ 322.591346][T21837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 322.599723][T21837] System zones: 1-12 [ 322.604137][T21837] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.4291: corrupted in-inode xattr: e_value size too large [ 322.619015][T21837] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4291: couldn't read orphan inode 15 (err -117) [ 322.633802][T21837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.641070][T21827] lo speed is unknown, defaulting to 1000 [ 322.652534][T21827] lo speed is unknown, defaulting to 1000 [ 322.666060][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.690088][T21850] xt_hashlimit: max too large, truncated to 1048576 [ 322.697544][T21850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.708573][T21850] loop1: detected capacity change from 0 to 256 [ 322.885713][T21882] netlink: 'syz.2.4296': attribute type 1 has an invalid length. [ 322.893655][T21882] netlink: 'syz.2.4296': attribute type 2 has an invalid length. [ 322.956585][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 322.956640][ T29] audit: type=1400 audit(1763280190.085:15383): avc: denied { execute } for pid=21885 comm="syz.1.4297" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.997310][ T29] audit: type=1400 audit(1763280190.095:15384): avc: denied { execute_no_trans } for pid=21885 comm="syz.1.4297" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 323.036652][ T29] audit: type=1326 audit(1763280190.165:15385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21892 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 323.047694][T21891] netlink: 'syz.1.4300': attribute type 1 has an invalid length. [ 323.060922][ T29] audit: type=1326 audit(1763280190.175:15386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21892 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 323.068188][T21891] netlink: 'syz.1.4300': attribute type 2 has an invalid length. [ 323.133072][ T29] audit: type=1326 audit(1763280190.205:15387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21892 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 323.156887][ T29] audit: type=1326 audit(1763280190.205:15388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21892 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 323.180555][ T29] audit: type=1326 audit(1763280190.205:15389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21892 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 323.204197][ T29] audit: type=1326 audit(1763280190.205:15390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21892 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 323.227853][ T29] audit: type=1326 audit(1763280190.205:15391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21892 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 323.251557][ T29] audit: type=1326 audit(1763280190.225:15392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21892 comm="syz.2.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 323.356676][T21903] lo speed is unknown, defaulting to 1000 [ 323.409456][T21921] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 323.416082][T21921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.423839][T21921] vhci_hcd vhci_hcd.0: Device attached [ 323.448232][T21903] lo speed is unknown, defaulting to 1000 [ 323.463042][T21903] lo speed is unknown, defaulting to 1000 [ 323.473133][T21926] netlink: 'syz.2.4312': attribute type 1 has an invalid length. [ 323.480973][T21926] netlink: 'syz.2.4312': attribute type 2 has an invalid length. [ 323.508214][ T3388] IPVS: starting estimator thread 0... [ 323.529392][T21921] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 323.538986][T21933] loop1: detected capacity change from 0 to 1024 [ 323.560032][T21935] netlink: 'syz.4.4316': attribute type 4 has an invalid length. [ 323.568740][T21933] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.584047][T21938] loop2: detected capacity change from 0 to 1024 [ 323.588118][T21933] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 323.598446][T21931] IPVS: using max 2016 ests per chain, 100800 per kthread [ 323.599696][T21938] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.632078][T21933] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.651288][T21933] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 323.652757][T21938] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 323.665863][T21933] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 323.687204][T21933] EXT4-fs (loop1): 1 truncate cleaned up [ 323.693395][T21933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.709978][T21938] EXT4-fs (loop2): orphan cleanup on readonly fs [ 323.716838][T21938] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 323.731408][T21938] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 323.738677][T21938] EXT4-fs (loop2): 1 truncate cleaned up [ 323.745181][T21938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.777108][T21938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.785734][T21938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.839719][T21971] loop0: detected capacity change from 0 to 1024 [ 323.850242][T21971] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.867345][T21971] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 323.885905][T21971] EXT4-fs (loop0): orphan cleanup on readonly fs [ 323.906162][T21971] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 323.920734][T21971] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 323.967673][T21971] EXT4-fs (loop0): 1 truncate cleaned up [ 323.973964][T21971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.031100][T14969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.224261][T21991] __nla_validate_parse: 3 callbacks suppressed [ 324.224331][T21991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4326'. [ 324.400352][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.440053][T22009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4332'. [ 324.457054][T22007] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4330'. [ 324.477367][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.551804][T22007] SELinux: policydb version 0 does not match my version range 15-35 [ 324.560404][T22007] SELinux: failed to load policy [ 324.614459][T22025] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4339'. [ 324.645239][T22025] netlink: 'syz.4.4339': attribute type 1 has an invalid length. [ 324.692513][T22033] loop1: detected capacity change from 0 to 1024 [ 324.700668][T22033] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.721355][T22033] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 324.735106][T22033] EXT4-fs (loop1): orphan cleanup on readonly fs [ 324.746108][T22033] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 324.761329][T22033] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 324.799843][T22033] EXT4-fs (loop1): 1 truncate cleaned up [ 324.806154][T22033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.818778][T21922] vhci_hcd: connection closed [ 324.820530][T16422] vhci_hcd: stop threads [ 324.829663][T16422] vhci_hcd: release socket [ 324.834126][T16422] vhci_hcd: disconnect device [ 324.840649][T22038] SELinux: policydb version 0 does not match my version range 15-35 [ 324.859234][T22038] SELinux: failed to load policy [ 324.911145][T22044] loop2: detected capacity change from 0 to 512 [ 324.919955][T22044] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 324.937098][T22044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 324.950179][T22044] System zones: 1-12 [ 324.957107][T22044] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.4344: corrupted in-inode xattr: e_value size too large [ 324.971553][T22044] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4344: couldn't read orphan inode 15 (err -117) [ 325.098268][T22044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.143788][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.168966][T22056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4348'. [ 325.240265][T22063] loop0: detected capacity change from 0 to 512 [ 325.248786][T22056] SELinux: policydb version 0 does not match my version range 15-35 [ 325.257324][T22056] SELinux: failed to load policy [ 325.270472][T22063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.303987][T22063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.322808][T22070] loop2: detected capacity change from 0 to 512 [ 325.333762][T22070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 325.393196][T22078] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4355'. [ 325.402708][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.454880][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.565512][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4361'. [ 325.707806][T22111] loop2: detected capacity change from 0 to 512 [ 325.748746][T22111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.775613][T22111] ext4 filesystem being mounted at /259/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.801355][T22111] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4363: corrupted xattr block 33: bad e_name length [ 325.831371][T22111] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 325.855314][T22111] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4363: corrupted xattr block 33: bad e_name length [ 325.894767][T22111] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 325.918644][T22111] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4363: corrupted xattr block 33: bad e_name length [ 325.932340][T22111] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 325.941840][T22111] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4363: corrupted inode contents [ 325.963508][T22111] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #4: comm syz.2.4363: mark_inode_dirty error [ 326.039992][T22111] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4363: corrupted inode contents [ 326.110087][T22111] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.4363: mark_inode_dirty error [ 326.225515][T22111] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4363: Failed to acquire dquot type 1 [ 326.303084][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.380326][T22130] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.429713][T22130] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.469454][T22130] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.519315][T22130] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.680810][ T312] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.693214][ T312] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.730608][ T312] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.735102][T22154] program syz.2.4369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.748645][ T312] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.893934][T22157] 9pnet: Could not find request transport: 0xffffffffffffffff [ 326.909660][T22162] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4373'. [ 327.213262][T22184] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4381'. [ 327.400850][T22190] validate_nla: 4 callbacks suppressed [ 327.400867][T22190] netlink: 'syz.0.4381': attribute type 1 has an invalid length. [ 327.414226][T22190] netlink: 'syz.0.4381': attribute type 2 has an invalid length. [ 327.474601][T22194] ip6gretap0: entered promiscuous mode [ 327.493287][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4383'. [ 327.521886][T22194] ip6gretap0 (unregistering): left promiscuous mode [ 327.596273][T22197] netlink: 'syz.4.4383': attribute type 3 has an invalid length. [ 327.815633][T22199] loop3: detected capacity change from 0 to 1024 [ 327.839291][T22199] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.867103][T22199] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 327.887969][T22199] EXT4-fs (loop3): orphan cleanup on readonly fs [ 327.903121][T22199] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 327.917709][T22199] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 327.933546][T22199] EXT4-fs (loop3): 1 truncate cleaned up [ 327.948406][T22199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.980264][T22199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.998483][T22199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.409002][T22215] netlink: 'syz.0.4387': attribute type 1 has an invalid length. [ 328.416852][T22215] netlink: 'syz.0.4387': attribute type 2 has an invalid length. [ 328.425246][T22213] netlink: 'syz.2.4388': attribute type 39 has an invalid length. [ 328.452282][T22218] loop2: detected capacity change from 0 to 512 [ 328.470500][T22218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.483450][T22218] ext4 filesystem being mounted at /263/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.497267][T22218] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4389: corrupted xattr block 33: bad e_name length [ 328.507030][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 328.507052][ T29] audit: type=1326 audit(1763280195.645:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 328.511080][T22218] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 328.517311][ T29] audit: type=1326 audit(1763280195.655:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 328.540719][T22218] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4389: corrupted xattr block 33: bad e_name length [ 328.587843][ T29] audit: type=1326 audit(1763280195.685:15668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 328.611752][ T29] audit: type=1326 audit(1763280195.685:15669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 328.611883][T22218] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 328.635598][ T29] audit: type=1326 audit(1763280195.685:15670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22225 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 328.648163][T22218] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.4389: corrupted xattr block 33: bad e_name length [ 328.682366][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.691869][T22218] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 328.703462][T22218] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4389: corrupted inode contents [ 328.736953][T22218] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #4: comm syz.2.4389: mark_inode_dirty error [ 328.748668][T22218] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4389: corrupted inode contents [ 328.761105][T22238] netlink: 'syz.3.4395': attribute type 1 has an invalid length. [ 328.768957][T22238] netlink: 'syz.3.4395': attribute type 2 has an invalid length. [ 328.777041][T22218] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.4389: mark_inode_dirty error [ 328.802711][T22240] netlink: 'syz.3.4396': attribute type 1 has an invalid length. [ 328.810622][T22240] netlink: 'syz.3.4396': attribute type 2 has an invalid length. [ 328.818679][T22218] Quota error (device loop2): write_blk: dquota write failed [ 328.826092][T22218] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 328.835229][T22218] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 328.845265][T22218] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4389: Failed to acquire dquot type 1 [ 328.919258][T22250] tmpfs: Unknown parameter 'nr' [ 328.926644][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.974524][T22248] SELinux: policydb version 0 does not match my version range 15-35 [ 328.987171][T22248] SELinux: failed to load policy [ 329.042232][T22256] pimreg: entered allmulticast mode [ 329.060463][ T29] audit: type=1400 audit(1763280196.195:15671): avc: denied { ioctl } for pid=22255 comm="syz.1.4401" path="socket:[63546]" dev="sockfs" ino=63546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.167116][T22271] loop0: detected capacity change from 0 to 512 [ 329.174296][T22271] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 329.184822][T22271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 329.193574][ T29] audit: type=1400 audit(1763280196.295:15672): avc: denied { create } for pid=22269 comm="-" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 329.195730][T22271] System zones: 1-12 [ 329.221123][T22271] EXT4-fs (loop0): orphan cleanup on readonly fs [ 329.233872][T22271] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm -: invalid indirect mapped block 12 (level 1) [ 329.249848][T22277] __nla_validate_parse: 5 callbacks suppressed [ 329.249868][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4407'. [ 329.272215][T22271] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm -: invalid indirect mapped block 2 (level 2) [ 329.285644][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4407'. [ 329.306689][ T3388] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 329.317264][ T3388] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.319547][T22271] EXT4-fs (loop0): 1 truncate cleaned up [ 329.336560][T22280] loop3: detected capacity change from 0 to 512 [ 329.350656][T22271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 329.363983][T22280] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 329.386287][T22280] EXT4-fs (loop3): invalid journal inode [ 329.392161][T22280] EXT4-fs (loop3): can't get journal size [ 329.408991][T22280] EXT4-fs (loop3): 1 truncate cleaned up [ 329.415237][T22280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.551585][T22294] loop1: detected capacity change from 0 to 512 [ 329.559175][T14969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 329.566068][T22294] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 329.578295][T22294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 329.586417][T22294] System zones: 1-12 [ 329.590755][T22294] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.4410: corrupted in-inode xattr: e_value size too large [ 329.591744][T22300] loop0: detected capacity change from 0 to 512 [ 329.611450][T22294] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4410: couldn't read orphan inode 15 (err -117) [ 329.624355][T22294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.628622][T22300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.674945][T22300] ext4 filesystem being mounted at /256/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.686490][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.733062][T22300] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.4411: corrupted inode contents [ 329.745427][T22300] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #4: comm syz.0.4411: mark_inode_dirty error [ 329.758481][T22300] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.4411: corrupted inode contents [ 329.770823][T22300] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.4411: mark_inode_dirty error [ 329.782762][T22300] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4411: Failed to acquire dquot type 1 [ 329.795736][T22308] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.4411: corrupted xattr block 33: bad e_name length [ 329.810142][T22308] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 329.819409][T22308] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.4411: corrupted xattr block 33: bad e_name length [ 329.834814][T22308] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 329.852372][T22308] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.4411: corrupted xattr block 33: bad e_name length [ 329.866462][T22308] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 329.969867][T22313] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4413'. [ 329.980340][T22308] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.4411: corrupted inode contents [ 330.003357][T22308] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #4: comm syz.0.4411: mark_inode_dirty error [ 330.045865][T22317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4412'. [ 330.078362][T14969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.241229][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.597171][T22350] SELinux: policydb version 0 does not match my version range 15-35 [ 330.629492][T22350] SELinux: failed to load policy [ 330.681173][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4425'. [ 330.826813][T22360] 9pnet_virtio: no channels available for device syz [ 331.176274][T22368] ip6t_srh: unknown srh match flags 4000 [ 331.214401][T22374] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4434'. [ 331.299580][T22377] SELinux: policydb version 0 does not match my version range 15-35 [ 331.308335][T22377] SELinux: failed to load policy [ 331.356233][T22387] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4439'. [ 331.503841][T22394] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4441'. [ 333.084198][T22416] SELinux: policydb version 0 does not match my version range 15-35 [ 333.136816][T22416] SELinux: failed to load policy [ 333.161008][T22423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4451'. [ 333.168395][T22422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4450'. [ 333.617921][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 333.617940][ T29] audit: type=1326 audit(1763280200.545:16103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22428 comm="syz.2.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 333.647945][ T29] audit: type=1326 audit(1763280200.545:16104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22428 comm="syz.2.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 333.671569][ T29] audit: type=1400 audit(1763280200.545:16105): avc: denied { setopt } for pid=22432 comm="syz.0.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 333.691265][ T29] audit: type=1326 audit(1763280200.605:16106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22428 comm="syz.2.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 333.714888][ T29] audit: type=1326 audit(1763280200.605:16107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22428 comm="syz.2.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 333.738628][ T29] audit: type=1326 audit(1763280200.705:16108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22435 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 333.762269][ T29] audit: type=1326 audit(1763280200.705:16109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22435 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 333.785933][ T29] audit: type=1326 audit(1763280200.705:16110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22435 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 333.809541][ T29] audit: type=1326 audit(1763280200.705:16111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22435 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 333.833318][ T29] audit: type=1326 audit(1763280200.705:16112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22435 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 333.901294][T22440] validate_nla: 3 callbacks suppressed [ 333.901310][T22440] netlink: 'syz.2.4458': attribute type 39 has an invalid length. [ 333.989833][T22451] FAULT_INJECTION: forcing a failure. [ 333.989833][T22451] name failslab, interval 1, probability 0, space 0, times 0 [ 334.002695][T22451] CPU: 0 UID: 0 PID: 22451 Comm: syz.3.4462 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 334.002737][T22451] Tainted: [W]=WARN [ 334.002745][T22451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.002760][T22451] Call Trace: [ 334.002768][T22451] [ 334.002803][T22451] __dump_stack+0x1d/0x30 [ 334.002825][T22451] dump_stack_lvl+0xe8/0x140 [ 334.002846][T22451] dump_stack+0x15/0x1b [ 334.002862][T22451] should_fail_ex+0x265/0x280 [ 334.002998][T22451] should_failslab+0x8c/0xb0 [ 334.003028][T22451] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 334.003059][T22451] ? __alloc_skb+0x101/0x320 [ 334.003096][T22451] __alloc_skb+0x101/0x320 [ 334.003139][T22451] netlink_dump+0x10d/0x8a0 [ 334.003178][T22451] ? __kfree_skb+0x109/0x150 [ 334.003216][T22451] ? __traceiter_kmem_cache_free+0x38/0x60 [ 334.003256][T22451] netlink_recvmsg+0x420/0x550 [ 334.003288][T22451] ? __pfx_netlink_recvmsg+0x10/0x10 [ 334.003312][T22451] sock_recvmsg+0x139/0x170 [ 334.003344][T22451] ____sys_recvmsg+0xf5/0x280 [ 334.003405][T22451] ___sys_recvmsg+0x11f/0x370 [ 334.003438][T22451] do_recvmmsg+0x1ef/0x540 [ 334.003515][T22451] ? fput+0x8f/0xc0 [ 334.003540][T22451] __x64_sys_recvmmsg+0xe5/0x170 [ 334.003571][T22451] x64_sys_call+0x27aa/0x3000 [ 334.003601][T22451] do_syscall_64+0xd2/0x200 [ 334.003626][T22451] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 334.003766][T22451] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 334.003808][T22451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.003837][T22451] RIP: 0033:0x7f86de6ff6c9 [ 334.003858][T22451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.003955][T22451] RSP: 002b:00007f86dd15f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 334.003980][T22451] RAX: ffffffffffffffda RBX: 00007f86de955fa0 RCX: 00007f86de6ff6c9 [ 334.003996][T22451] RDX: 0000000004000267 RSI: 0000200000007700 RDI: 0000000000000006 [ 334.004013][T22451] RBP: 00007f86dd15f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.004084][T22451] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 334.004136][T22451] R13: 00007f86de956038 R14: 00007f86de955fa0 R15: 00007ffdb34e6418 [ 334.004162][T22451] [ 334.273975][T22462] __nla_validate_parse: 8 callbacks suppressed [ 334.273992][T22462] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4466'. [ 334.306584][T22462] netlink: 'syz.1.4466': attribute type 1 has an invalid length. [ 334.314614][T22462] netlink: 'syz.1.4466': attribute type 2 has an invalid length. [ 334.362100][T22471] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4470'. [ 334.373745][T22471] netlink: 'syz.2.4470': attribute type 1 has an invalid length. [ 334.381542][T22471] netlink: 'syz.2.4470': attribute type 2 has an invalid length. [ 334.456978][T22460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.466406][T22460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.478726][T22460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.528851][T22460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.538111][T22474] netlink: 'syz.1.4471': attribute type 39 has an invalid length. [ 334.561256][T22484] loop0: detected capacity change from 0 to 512 [ 334.589364][T22484] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 334.737799][T22484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 334.774346][T22484] System zones: 1-12 [ 334.834446][T22484] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.4472: corrupted in-inode xattr: e_value size too large [ 334.869643][T22484] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.4472: couldn't read orphan inode 15 (err -117) [ 334.892393][T22489] loop2: detected capacity change from 0 to 8192 [ 334.910564][T22484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.936641][T22494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4475'. [ 334.959336][T22497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4476'. [ 334.973519][T14969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.997605][T22500] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4477'. [ 335.006624][T22500] FAULT_INJECTION: forcing a failure. [ 335.006624][T22500] name failslab, interval 1, probability 0, space 0, times 0 [ 335.019294][T22500] CPU: 1 UID: 0 PID: 22500 Comm: syz.0.4477 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 335.019332][T22500] Tainted: [W]=WARN [ 335.019341][T22500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.019357][T22500] Call Trace: [ 335.019372][T22500] [ 335.019380][T22500] __dump_stack+0x1d/0x30 [ 335.019474][T22500] dump_stack_lvl+0xe8/0x140 [ 335.019497][T22500] dump_stack+0x15/0x1b [ 335.019527][T22500] should_fail_ex+0x265/0x280 [ 335.019572][T22500] should_failslab+0x8c/0xb0 [ 335.019688][T22500] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 335.019729][T22500] ? __alloc_skb+0x101/0x320 [ 335.019770][T22500] __alloc_skb+0x101/0x320 [ 335.019808][T22500] ? __rcu_read_unlock+0x4f/0x70 [ 335.019836][T22500] __neigh_notify+0x5b/0x110 [ 335.019930][T22500] __neigh_update+0x10f4/0x15d0 [ 335.020015][T22500] neigh_add+0x879/0xa70 [ 335.020061][T22500] ? __pfx_neigh_add+0x10/0x10 [ 335.020102][T22500] rtnetlink_rcv_msg+0x65a/0x6d0 [ 335.020132][T22500] ? avc_has_perm_noaudit+0x1b1/0x200 [ 335.020156][T22500] netlink_rcv_skb+0x123/0x220 [ 335.020215][T22500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.020258][T22500] rtnetlink_rcv+0x1c/0x30 [ 335.020291][T22500] netlink_unicast+0x5c0/0x690 [ 335.020393][T22500] netlink_sendmsg+0x58b/0x6b0 [ 335.020420][T22500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.020446][T22500] __sock_sendmsg+0x145/0x180 [ 335.020537][T22500] __sys_sendto+0x268/0x330 [ 335.020588][T22500] __x64_sys_sendto+0x76/0x90 [ 335.020670][T22500] x64_sys_call+0x2d14/0x3000 [ 335.020689][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4478'. [ 335.020699][T22500] do_syscall_64+0xd2/0x200 [ 335.020727][T22500] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 335.020831][T22500] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 335.020932][T22500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.020962][T22500] RIP: 0033:0x7f4a0e01f6c9 [ 335.020985][T22500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.021011][T22500] RSP: 002b:00007f4a0ca87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 335.021038][T22500] RAX: ffffffffffffffda RBX: 00007f4a0e275fa0 RCX: 00007f4a0e01f6c9 [ 335.021120][T22500] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 335.021137][T22500] RBP: 00007f4a0ca87090 R08: 0000000000000000 R09: 0000000000000000 [ 335.021199][T22500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.021292][T22500] R13: 00007f4a0e276038 R14: 00007f4a0e275fa0 R15: 00007ffdb43eb258 [ 335.021318][T22500] [ 335.023439][T22494] SELinux: policydb version 0 does not match my version range 15-35 [ 335.288934][T22494] SELinux: failed to load policy [ 335.334687][T22526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4483'. [ 335.356591][T22528] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4484'. [ 335.440691][T22532] loop1: detected capacity change from 0 to 512 [ 335.478869][T22532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.491760][T22532] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.524966][T22532] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.4486: corrupted inode contents [ 335.576299][T22539] loop0: detected capacity change from 0 to 512 [ 335.589301][T22532] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.4486: mark_inode_dirty error [ 335.617805][T22539] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 335.647662][T22539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 335.676840][T22539] System zones: 1-12 [ 335.687313][T22539] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.4487: corrupted in-inode xattr: e_value size too large [ 335.735440][T22532] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.4486: corrupted inode contents [ 335.752647][T22539] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.4487: couldn't read orphan inode 15 (err -117) [ 335.785907][T22539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.827747][T22532] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4486: mark_inode_dirty error [ 335.841009][T22549] SELinux: policydb version 0 does not match my version range 15-35 [ 335.849277][T22549] SELinux: failed to load policy [ 335.888092][T14969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.008288][T22554] loop2: detected capacity change from 0 to 1024 [ 336.045838][T22541] loop3: detected capacity change from 0 to 32768 [ 336.054941][T22554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 336.210270][T22554] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.226021][T22541] loop3: p1 p3 < > [ 336.291032][T22532] netlink: 'syz.1.4486': attribute type 27 has an invalid length. [ 336.299001][T22532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4486'. [ 336.621463][T22554] lo speed is unknown, defaulting to 1000 [ 336.823675][T22554] lo speed is unknown, defaulting to 1000 [ 336.830059][T22554] lo speed is unknown, defaulting to 1000 [ 336.996321][T22626] 8021q: VLANs not supported on ip6tnl0 [ 337.022588][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 337.033734][T22628] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4496'. [ 337.263614][T22645] loop3: detected capacity change from 0 to 512 [ 337.314980][T22645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.336043][T22534] syz.1.4486 (22534) used greatest stack depth: 7480 bytes left [ 337.344598][T22645] ext4 filesystem being mounted at /317/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.345903][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.365487][T22645] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.4500: corrupted inode contents [ 337.389766][T22645] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #4: comm syz.3.4500: mark_inode_dirty error [ 337.408162][T22649] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4500: corrupted xattr block 33: bad e_name length [ 337.408231][T22645] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.4500: corrupted inode contents [ 337.434145][T22645] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.4500: mark_inode_dirty error [ 337.464502][T22645] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4500: Failed to acquire dquot type 1 [ 337.481591][T22649] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 337.495304][T22649] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4500: corrupted xattr block 33: bad e_name length [ 337.511009][T22649] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 337.520312][T22649] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4500: corrupted xattr block 33: bad e_name length [ 337.535934][T22653] SELinux: policydb version 0 does not match my version range 15-35 [ 337.536946][T22649] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 337.552692][T22653] SELinux: failed to load policy [ 337.560680][T22649] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.4500: corrupted inode contents [ 337.575185][T22649] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #4: comm syz.3.4500: mark_inode_dirty error [ 337.612332][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.639502][T22665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.684914][T22673] FAULT_INJECTION: forcing a failure. [ 337.684914][T22673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.698048][T22673] CPU: 1 UID: 0 PID: 22673 Comm: syz.3.4507 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 337.698162][T22673] Tainted: [W]=WARN [ 337.698171][T22673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.698187][T22673] Call Trace: [ 337.698197][T22673] [ 337.698208][T22673] __dump_stack+0x1d/0x30 [ 337.698280][T22673] dump_stack_lvl+0xe8/0x140 [ 337.698325][T22673] dump_stack+0x15/0x1b [ 337.698342][T22673] should_fail_ex+0x265/0x280 [ 337.698385][T22673] should_fail+0xb/0x20 [ 337.698425][T22673] should_fail_usercopy+0x1a/0x20 [ 337.698560][T22673] strncpy_from_user+0x25/0x230 [ 337.698594][T22673] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 337.698637][T22673] __se_sys_memfd_create+0x1ff/0x590 [ 337.698720][T22673] __x64_sys_memfd_create+0x31/0x40 [ 337.698819][T22673] x64_sys_call+0x2ac2/0x3000 [ 337.698849][T22673] do_syscall_64+0xd2/0x200 [ 337.698875][T22673] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 337.698906][T22673] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 337.699083][T22673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.699112][T22673] RIP: 0033:0x7f86de6ff6c9 [ 337.699128][T22673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.699147][T22673] RSP: 002b:00007f86dd15ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 337.699167][T22673] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007f86de6ff6c9 [ 337.699183][T22673] RDX: 00007f86dd15eef0 RSI: 0000000000000000 RDI: 00007f86de782960 [ 337.699274][T22673] RBP: 0000200000000180 R08: 00007f86dd15ebb7 R09: 00007f86dd15ee40 [ 337.699291][T22673] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 337.699376][T22673] R13: 00007f86dd15eef0 R14: 00007f86dd15eeb0 R15: 0000200000001480 [ 337.699396][T22673] [ 338.259195][T22693] FAULT_INJECTION: forcing a failure. [ 338.259195][T22693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.272413][T22693] CPU: 0 UID: 0 PID: 22693 Comm: syz.1.4516 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 338.272534][T22693] Tainted: [W]=WARN [ 338.272542][T22693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.272562][T22693] Call Trace: [ 338.272570][T22693] [ 338.272580][T22693] __dump_stack+0x1d/0x30 [ 338.272610][T22693] dump_stack_lvl+0xe8/0x140 [ 338.272710][T22693] dump_stack+0x15/0x1b [ 338.272734][T22693] should_fail_ex+0x265/0x280 [ 338.272820][T22693] should_fail+0xb/0x20 [ 338.272859][T22693] should_fail_usercopy+0x1a/0x20 [ 338.272885][T22693] _copy_to_user+0x20/0xa0 [ 338.272986][T22693] copy_siginfo_to_user+0x22/0xb0 [ 338.273015][T22693] x64_setup_rt_frame+0x2b5/0x580 [ 338.273038][T22693] arch_do_signal_or_restart+0x23e/0x440 [ 338.273069][T22693] exit_to_user_mode_loop+0x77/0x110 [ 338.273156][T22693] do_syscall_64+0x1d6/0x200 [ 338.273176][T22693] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 338.273221][T22693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.273300][T22693] RIP: 0033:0x7f3b688adf0e [ 338.273320][T22693] Code: 24 30 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 <0f> 05 48 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 [ 338.273417][T22693] RSP: 002b:00007f3b6730eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 338.273442][T22693] RAX: 0000000000000101 RBX: 0000000000008002 RCX: 00007f3b688adf10 [ 338.273502][T22693] RDX: 0000000000008002 RSI: 00007f3b6730ec10 RDI: 00000000ffffff9c [ 338.273518][T22693] RBP: 00007f3b6730ec10 R08: 0000000000000000 R09: 002367732f766564 [ 338.273534][T22693] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 338.273549][T22693] R13: 00007f3b68b06038 R14: 00007f3b68b05fa0 R15: 00007fff2662b398 [ 338.273571][T22693] [ 338.477776][T22706] netlink: 'syz.1.4520': attribute type 1 has an invalid length. [ 338.485606][T22706] netlink: 'syz.1.4520': attribute type 2 has an invalid length. [ 338.537087][T22711] loop3: detected capacity change from 0 to 1024 [ 338.544534][T22711] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.557643][T22711] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 338.566024][T22711] EXT4-fs (loop3): orphan cleanup on readonly fs [ 338.578784][T22700] SELinux: policydb version 0 does not match my version range 15-35 [ 338.583627][T22711] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 338.586982][T22700] SELinux: failed to load policy [ 338.601472][T22711] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 338.616954][T22711] EXT4-fs (loop3): 1 truncate cleaned up [ 338.637355][T22711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.646772][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 338.646793][ T29] audit: type=1326 audit(1763280205.775:16296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff03f886567 code=0x7ffc0000 [ 338.730419][ T29] audit: type=1326 audit(1763280205.815:16297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff03f82b789 code=0x7ffc0000 [ 338.754099][ T29] audit: type=1326 audit(1763280205.815:16298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 338.777737][ T29] audit: type=1326 audit(1763280205.815:16299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 338.801553][ T29] audit: type=1326 audit(1763280205.815:16300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 338.820767][T22735] loop1: detected capacity change from 0 to 512 [ 338.825558][ T29] audit: type=1326 audit(1763280205.815:16301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 338.855207][ T29] audit: type=1326 audit(1763280205.815:16302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 338.878920][ T29] audit: type=1326 audit(1763280205.815:16303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 338.902592][ T29] audit: type=1326 audit(1763280205.815:16304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 338.926186][ T29] audit: type=1326 audit(1763280205.815:16305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22723 comm="syz.4.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 339.045101][T22754] netlink: 'syz.0.4535': attribute type 39 has an invalid length. [ 339.073564][T22756] netlink: 'syz.2.4536': attribute type 1 has an invalid length. [ 339.081469][T22756] netlink: 'syz.2.4536': attribute type 2 has an invalid length. [ 339.202820][T22767] SELinux: policydb version 0 does not match my version range 15-35 [ 339.211281][T22767] SELinux: failed to load policy [ 339.335811][T22781] __nla_validate_parse: 8 callbacks suppressed [ 339.335830][T22781] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4543'. [ 339.351408][T22778] loop2: detected capacity change from 0 to 1024 [ 339.359704][T22778] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.369931][T22778] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 339.380898][T22778] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 339.466265][T22778] JBD2: no valid journal superblock found [ 339.472091][T22778] EXT4-fs (loop2): Could not load journal inode [ 339.479015][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.517254][T22793] loop3: detected capacity change from 0 to 512 [ 339.526511][T22794] netlink: 'syz.0.4543': attribute type 1 has an invalid length. [ 339.534427][T22794] netlink: 'syz.0.4543': attribute type 2 has an invalid length. [ 339.542638][T22793] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 339.562109][T22793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 339.589518][T22793] System zones: 1-12 [ 339.603687][T22793] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.4544: corrupted in-inode xattr: e_value size too large [ 339.647950][T22793] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4544: couldn't read orphan inode 15 (err -117) [ 339.695289][T22793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.773418][T14438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.014008][T22818] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4551'. [ 340.055172][T22818] netlink: 'syz.2.4551': attribute type 1 has an invalid length. [ 340.063030][T22818] netlink: 'syz.2.4551': attribute type 2 has an invalid length. [ 340.130160][T22826] loop2: detected capacity change from 0 to 512 [ 340.140128][T22829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4556'. [ 340.151145][T22820] SELinux: policydb version 0 does not match my version range 15-35 [ 340.159416][T22820] SELinux: failed to load policy [ 340.160508][T22826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.178054][T22826] ext4 filesystem being mounted at /298/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.190866][T22826] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4555: corrupted inode contents [ 340.213212][T22837] loop1: detected capacity change from 0 to 512 [ 340.221220][T22837] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 340.229512][T22826] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #4: comm syz.2.4555: mark_inode_dirty error [ 340.242245][T22826] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #4: comm syz.2.4555: corrupted inode contents [ 340.246365][T22840] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4558'. [ 340.254224][T22826] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.4555: mark_inode_dirty error [ 340.274781][T22826] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4555: Failed to acquire dquot type 1 [ 340.286538][T22837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002] [ 340.299732][T22837] System zones: 1-12 [ 340.308872][T22837] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.4557: corrupted in-inode xattr: e_value size too large [ 340.347878][T22848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4560'. [ 340.357645][T22848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4560'. [ 340.367421][T22837] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4557: couldn't read orphan inode 15 (err -117) [ 340.399394][T13147] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.399431][T22837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.435121][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.552985][T22858] loop2: detected capacity change from 0 to 512 [ 340.633997][T22848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4560'. [ 340.641928][T22863] loop1: detected capacity change from 0 to 1024 [ 340.650538][T22863] EXT4-fs: Ignoring removed orlov option [ 340.656972][T22863] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 340.691542][T22863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.715702][T22863] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 340.728759][T22872] FAULT_INJECTION: forcing a failure. [ 340.728759][T22872] name failslab, interval 1, probability 0, space 0, times 0 [ 340.741630][T22872] CPU: 1 UID: 0 PID: 22872 Comm: syz.0.4564 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.741707][T22872] Tainted: [W]=WARN [ 340.741715][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 340.741728][T22872] Call Trace: [ 340.741735][T22872] [ 340.741743][T22872] __dump_stack+0x1d/0x30 [ 340.741765][T22872] dump_stack_lvl+0xe8/0x140 [ 340.741788][T22872] dump_stack+0x15/0x1b [ 340.741879][T22872] should_fail_ex+0x265/0x280 [ 340.741914][T22872] should_failslab+0x8c/0xb0 [ 340.741947][T22872] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 340.741978][T22872] ? __alloc_skb+0x101/0x320 [ 340.742041][T22872] __alloc_skb+0x101/0x320 [ 340.742078][T22872] netlink_alloc_large_skb+0xbf/0xf0 [ 340.742118][T22872] netlink_sendmsg+0x3cf/0x6b0 [ 340.742174][T22872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.742194][T22872] __sock_sendmsg+0x145/0x180 [ 340.742225][T22872] ____sys_sendmsg+0x31e/0x4e0 [ 340.742301][T22872] ___sys_sendmsg+0x17b/0x1d0 [ 340.742365][T22872] __x64_sys_sendmsg+0xd4/0x160 [ 340.742395][T22872] x64_sys_call+0x191e/0x3000 [ 340.742420][T22872] do_syscall_64+0xd2/0x200 [ 340.742503][T22872] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 340.742662][T22872] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 340.742696][T22872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.742717][T22872] RIP: 0033:0x7f4a0e01f6c9 [ 340.742733][T22872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.742751][T22872] RSP: 002b:00007f4a0ca87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.742838][T22872] RAX: ffffffffffffffda RBX: 00007f4a0e275fa0 RCX: 00007f4a0e01f6c9 [ 340.742855][T22872] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 340.742887][T22872] RBP: 00007f4a0ca87090 R08: 0000000000000000 R09: 0000000000000000 [ 340.742903][T22872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.742919][T22872] R13: 00007f4a0e276038 R14: 00007f4a0e275fa0 R15: 00007ffdb43eb258 [ 340.742944][T22872] [ 340.977807][T22879] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4566'. [ 340.988463][T22879] netlink: 'syz.4.4566': attribute type 1 has an invalid length. [ 340.988572][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4567'. [ 340.996329][T22879] netlink: 'syz.4.4566': attribute type 2 has an invalid length. [ 341.030559][T19535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.051450][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'. [ 341.070825][T22891] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 341.080420][T22887] IPVS: stopping master sync thread 22891 ... [ 341.095486][T22892] loop0: detected capacity change from 0 to 512 [ 341.117360][T22892] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.4570: error while reading EA inode 32 err=-116 [ 341.133939][T22899] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.137627][T22892] EXT4-fs (loop0): Remounting filesystem read-only [ 341.143872][T22899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.155285][T22892] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 341.170717][T22892] EXT4-fs (loop0): 1 orphan inode deleted [ 341.200760][T22899] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.210749][T22899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.212849][T22892] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 341.230601][T22892] SELinux: failed to load policy [ 341.278552][T22899] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.288521][T22899] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.317712][T22915] FAULT_INJECTION: forcing a failure. [ 341.317712][T22915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.330978][T22915] CPU: 0 UID: 0 PID: 22915 Comm: syz.0.4574 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 341.331014][T22915] Tainted: [W]=WARN [ 341.331020][T22915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.331079][T22915] Call Trace: [ 341.331088][T22915] [ 341.331098][T22915] __dump_stack+0x1d/0x30 [ 341.331126][T22915] dump_stack_lvl+0xe8/0x140 [ 341.331151][T22915] dump_stack+0x15/0x1b [ 341.331173][T22915] should_fail_ex+0x265/0x280 [ 341.331257][T22915] should_fail+0xb/0x20 [ 341.331356][T22915] should_fail_usercopy+0x1a/0x20 [ 341.331375][T22915] strncpy_from_user+0x25/0x230 [ 341.331496][T22915] ? kmem_cache_alloc_noprof+0x242/0x480 [ 341.331564][T22915] ? getname_flags+0x80/0x3b0 [ 341.331592][T22915] getname_flags+0xae/0x3b0 [ 341.331698][T22915] user_path_at+0x28/0x130 [ 341.331716][T22915] __se_sys_mount+0x25b/0x2e0 [ 341.331807][T22915] ? fput+0x8f/0xc0 [ 341.331824][T22915] __x64_sys_mount+0x67/0x80 [ 341.331874][T22915] x64_sys_call+0x2b51/0x3000 [ 341.331894][T22915] do_syscall_64+0xd2/0x200 [ 341.331913][T22915] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 341.332002][T22915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.332032][T22915] RIP: 0033:0x7f4a0e01f6c9 [ 341.332047][T22915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.332071][T22915] RSP: 002b:00007f4a0ca87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.332095][T22915] RAX: ffffffffffffffda RBX: 00007f4a0e275fa0 RCX: 00007f4a0e01f6c9 [ 341.332131][T22915] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 341.332142][T22915] RBP: 00007f4a0ca87090 R08: 0000200000000280 R09: 0000000000000000 [ 341.332153][T22915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.332164][T22915] R13: 00007f4a0e276038 R14: 00007f4a0e275fa0 R15: 00007ffdb43eb258 [ 341.332181][T22915] [ 341.532844][T22899] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.542723][T22899] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.569899][T22920] FAULT_INJECTION: forcing a failure. [ 341.569899][T22920] name failslab, interval 1, probability 0, space 0, times 0 [ 341.582609][T22920] CPU: 1 UID: 0 PID: 22920 Comm: syz.0.4575 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 341.582739][T22920] Tainted: [W]=WARN [ 341.582748][T22920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.582763][T22920] Call Trace: [ 341.582777][T22920] [ 341.582787][T22920] __dump_stack+0x1d/0x30 [ 341.582811][T22920] dump_stack_lvl+0xe8/0x140 [ 341.582832][T22920] dump_stack+0x15/0x1b [ 341.582850][T22920] should_fail_ex+0x265/0x280 [ 341.582928][T22920] ? tcf_proto_create+0x44/0x1a0 [ 341.582949][T22920] should_failslab+0x8c/0xb0 [ 341.582979][T22920] __kmalloc_cache_noprof+0x4c/0x4a0 [ 341.583076][T22920] tcf_proto_create+0x44/0x1a0 [ 341.583153][T22920] tc_new_tfilter+0x95c/0x10a0 [ 341.583171][T22920] ? __rcu_read_unlock+0x4f/0x70 [ 341.583230][T22920] ? ns_capable+0x7d/0xb0 [ 341.583320][T22920] ? __pfx_tc_new_tfilter+0x10/0x10 [ 341.583341][T22920] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 341.583382][T22920] ? avc_has_perm_noaudit+0x1b1/0x200 [ 341.583406][T22920] netlink_rcv_skb+0x123/0x220 [ 341.583485][T22920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.583516][T22920] rtnetlink_rcv+0x1c/0x30 [ 341.583538][T22920] netlink_unicast+0x5c0/0x690 [ 341.583572][T22920] netlink_sendmsg+0x58b/0x6b0 [ 341.583638][T22920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.583658][T22920] __sock_sendmsg+0x145/0x180 [ 341.583695][T22920] ____sys_sendmsg+0x31e/0x4e0 [ 341.583717][T22920] ___sys_sendmsg+0x17b/0x1d0 [ 341.583775][T22920] __x64_sys_sendmsg+0xd4/0x160 [ 341.583808][T22920] x64_sys_call+0x191e/0x3000 [ 341.583836][T22920] do_syscall_64+0xd2/0x200 [ 341.583857][T22920] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 341.583954][T22920] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 341.583989][T22920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.584016][T22920] RIP: 0033:0x7f4a0e01f6c9 [ 341.584067][T22920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.584085][T22920] RSP: 002b:00007f4a0ca87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.584105][T22920] RAX: ffffffffffffffda RBX: 00007f4a0e275fa0 RCX: 00007f4a0e01f6c9 [ 341.584118][T22920] RDX: 00000000200c4004 RSI: 0000200000000580 RDI: 0000000000000007 [ 341.584130][T22920] RBP: 00007f4a0ca87090 R08: 0000000000000000 R09: 0000000000000000 [ 341.584191][T22920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.584203][T22920] R13: 00007f4a0e276038 R14: 00007f4a0e275fa0 R15: 00007ffdb43eb258 [ 341.584223][T22920] [ 341.841212][T22916] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.864976][T16421] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.873355][T16421] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.885281][T16421] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.894053][T16421] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.904216][T22916] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.923412][T16421] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.931751][T16421] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.941000][T16421] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.949325][T16421] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.959250][T22916] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.013811][T22916] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.045770][T22960] loop3: detected capacity change from 0 to 1024 [ 342.053443][T22960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.067226][T16433] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.108658][T16433] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.118137][T16433] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.126454][T16433] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.142834][T22979] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 342.149493][T22979] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 342.157165][T22979] vhci_hcd vhci_hcd.0: Device attached [ 342.235905][T22982] SELinux: policydb version 0 does not match my version range 15-35 [ 342.244784][T22982] SELinux: failed to load policy [ 342.258936][T22995] netlink: 'syz.4.4590': attribute type 39 has an invalid length. [ 342.822847][T23053] team0: Port device team_slave_1 removed [ 342.859187][T23061] loop2: detected capacity change from 0 to 256 [ 342.869272][T22980] vhci_hcd: connection closed [ 342.869520][ T31] vhci_hcd: stop threads [ 342.878761][ T31] vhci_hcd: release socket [ 342.883219][ T31] vhci_hcd: disconnect device [ 343.431892][T23073] syz_tun: entered allmulticast mode [ 343.439239][T23072] syz_tun: left allmulticast mode [ 343.734685][ T29] kauditd_printk_skb: 1302 callbacks suppressed [ 343.734700][ T29] audit: type=1326 audit(343.712:17604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23046 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 344.156694][ T29] audit: type=1326 audit(343.742:17605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23046 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40f20f6c9 code=0x7ffc0000 [ 344.179876][ T29] audit: type=1400 audit(343.782:17606): avc: denied { ioctl } for pid=23084 comm="syz.4.4619" path="socket:[65355]" dev="sockfs" ino=65355 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 344.372334][T23110] __nla_validate_parse: 9 callbacks suppressed [ 344.372353][T23110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4627'. [ 344.466589][T23117] loop2: detected capacity change from 0 to 2048 [ 345.001225][T23137] validate_nla: 2 callbacks suppressed [ 345.001245][T23137] netlink: 'syz.4.4635': attribute type 39 has an invalid length. [ 345.039854][T22800] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 345.065263][T22800] EXT4-fs (loop2): Remounting filesystem read-only [ 345.197868][T23145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=23145 comm=syz.4.4637 [ 345.211290][ T29] audit: type=1326 audit(345.182:17607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.4.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 345.234377][ T29] audit: type=1326 audit(345.182:17608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.4.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 345.257372][ T29] audit: type=1326 audit(345.182:17609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.4.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 345.280322][ T29] audit: type=1326 audit(345.182:17610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.4.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 345.303427][ T29] audit: type=1326 audit(345.182:17611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.4.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f88f6c9 code=0x7ffc0000 [ 345.326406][ T29] audit: type=1326 audit(345.182:17612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.4.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff03f89155c code=0x7ffc0000 [ 345.349313][ T29] audit: type=1326 audit(345.182:17613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23144 comm="syz.4.4637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff03f891494 code=0x7ffc0000 [ 345.387159][T23151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4638'. [ 345.600357][T23150] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.711800][T23174] loop3: detected capacity change from 0 to 2048 [ 345.777752][T23174] Alternate GPT is invalid, using primary GPT. [ 345.784086][T23174] loop3: p1 p2 p3 [ 345.934130][T23197] FAULT_INJECTION: forcing a failure. [ 345.934130][T23197] name failslab, interval 1, probability 0, space 0, times 0 [ 345.947092][T23197] CPU: 1 UID: 0 PID: 23197 Comm: syz.2.4642 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.947128][T23197] Tainted: [W]=WARN [ 345.947135][T23197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.947147][T23197] Call Trace: [ 345.947153][T23197] [ 345.947163][T23197] __dump_stack+0x1d/0x30 [ 345.947339][T23197] dump_stack_lvl+0xe8/0x140 [ 345.947368][T23197] dump_stack+0x15/0x1b [ 345.947392][T23197] should_fail_ex+0x265/0x280 [ 345.947438][T23197] ? sctp_association_new+0x71/0x1200 [ 345.947489][T23197] should_failslab+0x8c/0xb0 [ 345.947521][T23197] __kmalloc_cache_noprof+0x4c/0x4a0 [ 345.947568][T23197] sctp_association_new+0x71/0x1200 [ 345.947676][T23197] ? sctp_v4_to_sk_saddr+0x29/0x40 [ 345.947770][T23197] ? sctp_do_bind+0x49a/0x4b0 [ 345.947838][T23197] ? sctp_v4_scope+0x140/0x150 [ 345.947863][T23197] sctp_connect_new_asoc+0x1a8/0x3a0 [ 345.947930][T23197] sctp_sendmsg+0xf10/0x18d0 [ 345.947955][T23197] ? selinux_socket_sendmsg+0x141/0x1b0 [ 345.948024][T23197] ? __pfx_sctp_sendmsg+0x10/0x10 [ 345.948048][T23197] inet_sendmsg+0xc5/0xd0 [ 345.948072][T23197] __sock_sendmsg+0x102/0x180 [ 345.948166][T23197] ____sys_sendmsg+0x345/0x4e0 [ 345.948196][T23197] ___sys_sendmsg+0x17b/0x1d0 [ 345.948307][T23197] __sys_sendmmsg+0x178/0x300 [ 345.948348][T23197] __x64_sys_sendmmsg+0x57/0x70 [ 345.948371][T23197] x64_sys_call+0x1c4a/0x3000 [ 345.948401][T23197] do_syscall_64+0xd2/0x200 [ 345.948429][T23197] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.948541][T23197] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 345.948574][T23197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.948595][T23197] RIP: 0033:0x7fb40f20f6c9 [ 345.948627][T23197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.948652][T23197] RSP: 002b:00007fb40dc77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.948738][T23197] RAX: ffffffffffffffda RBX: 00007fb40f465fa0 RCX: 00007fb40f20f6c9 [ 345.948754][T23197] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 345.948771][T23197] RBP: 00007fb40dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 345.948788][T23197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.948805][T23197] R13: 00007fb40f466038 R14: 00007fb40f465fa0 R15: 00007ffff16a1378 [ 345.948829][T23197] [ 345.986315][T23195] vlan2: entered promiscuous mode [ 346.052383][T23202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4650'. [ 346.054410][T23195] vlan2: entered allmulticast mode [ 346.107146][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4649'. [ 346.109727][T23195] hsr_slave_1: entered allmulticast mode [ 346.312247][T23226] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4656'. [ 346.323238][T23228] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 346.714860][T23248] loop1: detected capacity change from 0 to 2048 [ 346.757239][T23248] loop1: p1 < > p4 < > [ 346.761491][T23248] loop1: partition table partially beyond EOD, truncated [ 346.769274][T23248] loop1: p4 start 42180 is beyond EOD, truncated [ 346.770121][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4665'. [ 347.095842][T23280] SELinux: policydb version 0 does not match my version range 15-35 [ 347.117054][T23280] SELinux: failed to load policy [ 347.158626][T23286] loop1: detected capacity change from 0 to 1024 [ 347.171420][T23286] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 347.197468][T23286] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 347.217224][T23286] EXT4-fs (loop1): orphan cleanup on readonly fs [ 347.226839][T23286] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 347.241371][T23286] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 347.377279][T23286] EXT4-fs (loop1): 1 truncate cleaned up [ 347.478597][T23291] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4674'. [ 347.490351][T23291] netlink: 'syz.3.4674': attribute type 1 has an invalid length. [ 347.498303][T23291] netlink: 'syz.3.4674': attribute type 2 has an invalid length. [ 347.605224][T23300] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4677'. [ 348.156562][T23345] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4695'. [ 348.263276][T23345] SELinux: policydb version 0 does not match my version range 15-35 [ 348.283430][T23345] SELinux: failed to load policy [ 348.406308][T23350] loop1: detected capacity change from 0 to 2048 [ 348.521007][T23358] netlink: 'syz.4.4698': attribute type 2 has an invalid length. [ 348.567069][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4698'. [ 348.739393][ T29] kauditd_printk_skb: 916 callbacks suppressed [ 348.739411][ T29] audit: type=1326 audit(348.722:18529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 348.780247][T23376] netlink: 'syz.3.4704': attribute type 1 has an invalid length. [ 348.788506][T23376] netlink: 'syz.3.4704': attribute type 2 has an invalid length. [ 348.789070][ T29] audit: type=1326 audit(348.722:18530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 348.819486][ T29] audit: type=1326 audit(348.722:18531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 348.842658][ T29] audit: type=1326 audit(348.722:18532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 348.865657][ T29] audit: type=1326 audit(348.722:18533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 348.869268][T23379] netlink: 'syz.4.4703': attribute type 1 has an invalid length. [ 348.889358][ T29] audit: type=1326 audit(348.722:18534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 348.889400][ T29] audit: type=1326 audit(348.722:18535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 348.897236][T23379] netlink: 'syz.4.4703': attribute type 2 has an invalid length. [ 348.920274][ T29] audit: type=1326 audit(348.722:18536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 348.994105][ T29] audit: type=1326 audit(348.752:18537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 349.017447][ T29] audit: type=1326 audit(348.802:18538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23349 comm="syz.1.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b688af6c9 code=0x7ffc0000 [ 349.083184][T23389] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 349.083465][T23388] IPVS: stopping master sync thread 23389 ... [ 349.159972][T23393] netlink: 'syz.4.4708': attribute type 1 has an invalid length. [ 349.167828][T23393] netlink: 'syz.4.4708': attribute type 2 has an invalid length. [ 349.257741][T23401] loop1: detected capacity change from 0 to 512 [ 349.392454][T23418] loop1: detected capacity change from 0 to 256 [ 349.487349][T23412] __nla_validate_parse: 5 callbacks suppressed [ 349.487375][T23412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4714'. [ 349.602821][T23435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4720'. [ 349.673528][T23436] loop1: detected capacity change from 0 to 512 [ 349.741853][T23441] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4721'. [ 349.768271][T23436] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 349.776420][T23436] EXT4-fs (loop1): orphan cleanup on readonly fs [ 349.785620][T23436] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 349.797936][T23436] EXT4-fs (loop1): Remounting filesystem read-only [ 349.804665][T23436] EXT4-fs (loop1): 1 truncate cleaned up [ 349.839886][ T3421] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 349.867022][ T3421] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.025077][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.035716][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.067299][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 350.078306][T23436] EXT4-fs mount: 12 callbacks suppressed [ 350.078328][T23436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.097146][T23436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.244519][T23431] lo speed is unknown, defaulting to 1000 [ 350.279193][T23431] lo speed is unknown, defaulting to 1000 [ 350.285476][T23431] lo speed is unknown, defaulting to 1000 [ 350.303896][T23450] lo speed is unknown, defaulting to 1000 [ 350.385828][T23450] lo speed is unknown, defaulting to 1000 [ 350.404205][T23450] lo speed is unknown, defaulting to 1000 [ 350.622044][T23517] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4731'. [ 350.656587][T23515] validate_nla: 2 callbacks suppressed [ 350.662334][T23515] netlink: 'syz.0.4730': attribute type 39 has an invalid length. [ 350.720088][T23523] netlink: 'syz.0.4732': attribute type 1 has an invalid length. [ 350.762494][T23517] ================================================================== [ 350.770640][T23517] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 350.777887][T23517] [ 350.780226][T23517] write to 0xffff888237c1b2a0 of 8 bytes by interrupt on cpu 0: [ 350.787885][T23517] hrtimer_interrupt+0x193/0x460 [ 350.792873][T23517] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 350.798803][T23517] sysvec_apic_timer_interrupt+0x6f/0x80 [ 350.804492][T23517] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.810518][T23517] _raw_spin_unlock_irq+0x2f/0x50 [ 350.815592][T23517] get_signal+0xc21/0xf70 [ 350.819951][T23517] arch_do_signal_or_restart+0x96/0x440 [ 350.825542][T23517] exit_to_user_mode_loop+0x77/0x110 [ 350.830880][T23517] do_syscall_64+0x1d6/0x200 [ 350.835511][T23517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.841435][T23517] [ 350.843795][T23517] read to 0xffff888237c1b2a0 of 8 bytes by task 23517 on cpu 1: [ 350.851452][T23517] print_cpu+0x2ea/0x660 [ 350.855747][T23517] timer_list_show+0x107/0x170 [ 350.860557][T23517] seq_read_iter+0x636/0x950 [ 350.865174][T23517] proc_reg_read_iter+0x110/0x180 [ 350.870224][T23517] copy_splice_read+0x442/0x660 [ 350.875097][T23517] splice_direct_to_actor+0x26f/0x680 [ 350.880509][T23517] do_splice_direct+0xda/0x150 [ 350.885310][T23517] do_sendfile+0x380/0x650 [ 350.889778][T23517] __x64_sys_sendfile64+0x105/0x150 [ 350.895026][T23517] x64_sys_call+0x2bb4/0x3000 [ 350.899751][T23517] do_syscall_64+0xd2/0x200 [ 350.904292][T23517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.910425][T23517] [ 350.912771][T23517] value changed: 0x00000051aa12cf7f -> 0x00000051aa544380 [ 350.919884][T23517] [ 350.922237][T23517] Reported by Kernel Concurrency Sanitizer on: [ 350.928420][T23517] CPU: 1 UID: 0 PID: 23517 Comm: syz.3.4731 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 350.939829][T23517] Tainted: [W]=WARN [ 350.943652][T23517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.953818][T23517] ================================================================== [ 350.986140][T23526] SELinux: policydb version 0 does not match my version range 15-35 [ 351.005521][T23526] SELinux: failed to load policy [ 351.829122][ T31] bridge_slave_1: left allmulticast mode [ 351.834816][ T31] bridge_slave_1: left promiscuous mode [ 351.840571][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.848615][ T31] bridge_slave_0: left allmulticast mode [ 351.854321][ T31] bridge_slave_0: left promiscuous mode [ 351.860055][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.909582][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.919183][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.928316][ T31] bond0 (unregistering): Released all slaves [ 351.936889][ T31] bond1 (unregistering): Released all slaves [ 351.945146][ T31] bond2 (unregistering): Released all slaves [ 352.035341][ T31] hsr_slave_0: left promiscuous mode [ 352.040960][ T31] hsr_slave_1: left promiscuous mode [ 352.046861][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.055177][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.084081][ T31] team0 (unregistering): Port device team_slave_1 removed [ 352.093805][ T31] team0 (unregistering): Port device team_slave_0 removed [ 356.951784][ T31] bridge_slave_1: left allmulticast mode [ 356.957500][ T31] bridge_slave_1: left promiscuous mode [ 356.963218][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.971230][ T31] bridge_slave_0: left allmulticast mode [ 356.976946][ T31] bridge_slave_0: left promiscuous mode [ 356.982673][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.051076][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.061234][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.071018][ T31] bond0 (unregistering): Released all slaves [ 357.080016][ T31] bond1 (unregistering): Released all slaves [ 357.088593][ T31] bond2 (unregistering): Released all slaves [ 357.097048][ T31] bond3 (unregistering): Released all slaves [ 357.105337][ T31] bond4 (unregistering): Released all slaves [ 357.113874][ T31] bond5 (unregistering): Released all slaves [ 357.122020][ T31] bond6 (unregistering): Released all slaves [ 357.130697][ T31] bond7 (unregistering): Released all slaves [ 357.139217][ T31] bond8 (unregistering): Released all slaves [ 357.147757][ T31] bond9 (unregistering): Released all slaves [ 357.156132][ T31] bond10 (unregistering): Released all slaves [ 357.164519][ T31] bond11 (unregistering): Released all slaves [ 357.173187][ T31] bond12 (unregistering): Released all slaves [ 357.181667][ T31] bond13 (unregistering): Released all slaves [ 357.190317][ T31] bond14 (unregistering): Released all slaves [ 357.199165][ T31] bond15 (unregistering): Released all slaves [ 357.283039][ T31] veth1_macvtap: left promiscuous mode [ 357.288672][ T31] veth0_macvtap: left promiscuous mode [ 357.294321][ T31] veth1_vlan: left promiscuous mode [ 357.300028][ T31] veth0_vlan: left promiscuous mode [ 357.359683][ T31] team0 (unregistering): Port device team_slave_0 removed