last executing test programs: 8m2.401219879s ago: executing program 3 (id=322): unlink(&(0x7f0000000300)='./file1\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 8m2.307988943s ago: executing program 3 (id=323): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 8m2.271979095s ago: executing program 3 (id=324): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) 8m2.241354236s ago: executing program 3 (id=325): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 8m2.202458978s ago: executing program 3 (id=326): openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b40), 0x200, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000b80)={0x1, 0x1}) 8m1.950944889s ago: executing program 3 (id=330): iopl(0x3) unshare(0x22000200) 8m1.893617971s ago: executing program 32 (id=330): iopl(0x3) unshare(0x22000200) 7m56.912294566s ago: executing program 2 (id=395): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$nl_route(r5, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 7m55.232322848s ago: executing program 2 (id=401): socket$inet6(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$eJzs3T9oHmUcB/Df3fu+xiQvEnURxD8gIhoIcRNc4qIQkBBEBBUiIi5KIsQEt8TJxUFnLZm6hNKtaceSJXRpKXRK2wzpUmhDh4YO7XDlfS+BJG/6J33f3pXc5wPH3SV393uO3Pe5G3L3BFBZQxExFhG1iBiOiEZEJHs3eDefhnZWl/rXpiKy7Ks7SXu7fD23u99gRCxGxCcRsZom8Us9Yn7lu81761988Pdc4/2TK9/2F3qSO7Y2N77cPjHx15nxj+cvXbk1kcRYNPedV+8lh/ysnkS89jyKvSCSetkt4GlM/nH6aiv3r0fEe+38NyKN/I/3z+xLq4346P9H7fvv7ctvFtlWoPeyrNG6By5mQOWkEdGMJB2JiHw5TUdG8mf4a7WB9NeZ2d+Hf56Zm/6p7J4K6JVmxMbn5/rODh7I/81ann/g+Grl/+vJ5eut5e1a2a0BCvFWPmvlf/iHhQ9D/qFy5B+qS/6huo6Yf//RAceI+z9U12Py/3JZbQKK0Zn/RtlNAgri+R8qKcuyTP6hwuQfqmtv/gGAasn6yn4DGShL2f0PAAAAAAAAAAAAAAAAAADQaal/bWp3Kqrmhf8itj7LRxfprF9rj0e8+znygbvJvkFIkh4MSvL9O10eoEunSn77+pUb5da/+Ha59RemIxb/jIjRer3z+kt2rr9n9+oTft/4scsCR5QcWP/0m2LrH/Rgudz64+sR51v9z+hh/U8ab7Tnh/c/zR58Mf23+10eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMI8DAAA//84UXFU") r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:devicekit_var_lib_t:s0\x00', 0x29) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0xd, @desc4}) 7m54.289865318s ago: executing program 2 (id=408): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 7m53.80006212s ago: executing program 4 (id=414): mknod$loop(&(0x7f00000009c0)='./file0\x00', 0x10, 0x1) getxattr(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)=@random={'security.', '\x00'}, 0x0, 0x0) 7m53.615406868s ago: executing program 4 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x2e43, &(0x7f0000000000)={0x0, 0x3164, 0x40, 0x1, 0x108}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000100), 0x100000000000001a) 7m53.57455524s ago: executing program 4 (id=418): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000800)=[{{&(0x7f0000000100)=@phonet={0x23, 0xfd, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x18, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x0) 7m53.57402699s ago: executing program 2 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}, 0x3c}}, 0x0) 7m53.515840562s ago: executing program 2 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 7m53.480668664s ago: executing program 2 (id=424): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000004c0)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x202, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 7m53.443717145s ago: executing program 4 (id=425): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340)="be", 0x1) 7m52.647391129s ago: executing program 4 (id=441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r2, r1, 0x25, 0x8, @val=@netkit={@void, @value=r2}}, 0x1c) 7m52.332132673s ago: executing program 4 (id=449): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x60, r2}) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 7m52.289877885s ago: executing program 33 (id=449): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002040)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x60, r2}) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 7m37.985687631s ago: executing program 34 (id=424): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000004c0)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x202, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 1m57.417649644s ago: executing program 1 (id=6989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) rename(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ptype\x00') r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000240)={r5}, &(0x7f0000000300)=0x8) pread64(r2, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fadvise64(r6, 0x1, 0xff, 0x0) pipe2$9p(&(0x7f0000001900), 0x84800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pause() 1m56.512611524s ago: executing program 1 (id=7001): alarm(0x8) 1m56.468707955s ago: executing program 1 (id=7003): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r2 = socket(0x28, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r2, &(0x7f0000000680)={&(0x7f0000000280)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)="9fde72b69012f3934558e3bdd2bfe1aeb899373ab2c1de64e709bdca4363d03fd7066176839d2b7bce53755550bc538f77579692261cbe4f431b6730f2a533f3bfd4b0a7746a6f6c69072f4814a05552407ebaac00e1406f1e87413ac0559b2cc58bfe52796a9666a075019870b9b7cbe7d297b2692686292556d8ee2fb367a4ae202d7dbafc7301862c7fb529a7d056d75542de44d26578f536e84cfb141632d04813cdb5b8714b7c1853f75f156a270c92c7368e99ff12a9bb8f3e1ea436254e299b6f0c00", 0xc6}], 0x1, &(0x7f00000005c0)=[@authinfo={0x18, 0x84, 0x6, {0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x8, 0x800d, 0x5, 0xd, 0x4, 0xfc36, 0x2}}], 0x78, 0x84}, 0x20000005) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 1m55.592001833s ago: executing program 1 (id=7014): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendto$llc(r0, &(0x7f0000000340)="f85197cdff3a0d3f8e41563b670a6b39d6968cd4ddaf33aed1f9381108cbe39b9bf715961d83227d73a290c0ad553645da220aa1f50e84ae3042ff9625bd5e3e21d97a133a44714baf0c6616228c4c83118807934e8be409dfb0eda481a4041230085ab0c1fca68a1fadbab952b5745465577d6f088c3c4034f7bb3e817985a3d9501484e0574c94f710fa5bb3ad173ecde9977dac9e99724f882a65f56bfb022ffd773b8a2ef50c556519349153", 0xae, 0x40, &(0x7f0000000280)={0x1a, 0x206, 0xcc, 0x3, 0x7, 0x3, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='qdisc_destroy\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60004ce) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1m55.347762954s ago: executing program 1 (id=7015): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x840) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1m55.272525097s ago: executing program 1 (id=7016): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendto$llc(r0, &(0x7f0000000340)="f85197cdff3a0d3f8e41563b670a6b39d6968cd4ddaf33aed1f9381108cbe39b9bf715961d83227d73a290c0ad553645da220aa1f50e84ae3042ff9625bd5e3e21d97a133a44714baf0c6616228c4c83118807934e8be409dfb0eda481a4041230085ab0c1fca68a1fadbab952b5745465577d6f088c3c4034f7bb3e817985a3d9501484e0574c94f710fa5bb3ad173ecde9977dac9e99724f882a65f56bfb022ffd773b8a2ef50c556519349153", 0xae, 0x40, &(0x7f0000000280)={0x1a, 0x206, 0xcc, 0x3, 0x7, 0x3, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='qdisc_destroy\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60004ce) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 1m55.272301507s ago: executing program 35 (id=7016): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendto$llc(r0, &(0x7f0000000340)="f85197cdff3a0d3f8e41563b670a6b39d6968cd4ddaf33aed1f9381108cbe39b9bf715961d83227d73a290c0ad553645da220aa1f50e84ae3042ff9625bd5e3e21d97a133a44714baf0c6616228c4c83118807934e8be409dfb0eda481a4041230085ab0c1fca68a1fadbab952b5745465577d6f088c3c4034f7bb3e817985a3d9501484e0574c94f710fa5bb3ad173ecde9977dac9e99724f882a65f56bfb022ffd773b8a2ef50c556519349153", 0xae, 0x40, &(0x7f0000000280)={0x1a, 0x206, 0xcc, 0x3, 0x7, 0x3, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='qdisc_destroy\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60004ce) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 12.712807933s ago: executing program 6 (id=8986): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20010010) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) gettid() timer_create(0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x4) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000100), 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2, 0x7, 0x2a, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x7, 0x7fff}}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 12.488441143s ago: executing program 6 (id=8989): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0x2) 12.479834443s ago: executing program 6 (id=8990): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYBLOB="9ef6bd9ba9c3a7bf63bf08e4a79d6e3d467811dd94e15f44c6929ac765487e206c6c8852bc490cc89f6d8a67767382fadc4d5c0ae0014dceefbc207967f5fecbdf0062e3f836af09e1c6ef9c5966ca24f15eb059eaee86d2205243b03d5ca80ea9c638d8cbd22023ffbaa648748c003d130628f5d1d53b2a2a289ca1b76d1839e0c4e9", @ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYRESDEC, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x4040045}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000007a20000000d9a32827c3e275"], 0x1c}}, 0x4000800) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000540)={'veth1_vlan\x00', {0x2, 0x0, @local}}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) r8 = socket$packet(0x11, 0x3, 0x300) lsm_list_modules(&(0x7f0000000240)=[0x0], &(0x7f0000000300)=0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) bind$xdp(r7, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r4, 0x0, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b01a67dfca00119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09298c43b26aab37dcdcaff32da6af051a0d7e62afc454428dba253f0124317a8ffd7712b970eb3f7b17146b77f9e237596e1b1f58ce09e8b925"], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x57, 0x0, 0x0, 0x0, 0x4, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x8088, 0xb, 0x10003, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x40000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r9, &(0x7f0000003d40)=[{{0x0, 0x4f, 0x0}, 0x5}], 0x1, 0x2, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYBLOB="09ab2f34bcdfd655f0d7fbf7d1b0e6cc7d65900b877dd5201d04d67c536a3861547dbf97a0441ed1b97e56d10831fa66ce248b3b54beeddf3a69e0a1ed57216c3e11e34e077c848868e68b6af5a2f4aa647a0492", @ANYRES64=0x0, @ANYRES8=r2], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.571685002s ago: executing program 6 (id=9003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f0000000000)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000500", "486a070000000500000000000000000000000000000006000000008000", "7e25837b", "0000e3ffffff00"}, 0x38) 11.457567447s ago: executing program 6 (id=9004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 11.372179291s ago: executing program 6 (id=9005): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2ba, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x2020, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xfd, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x9}, 0x0, 0x400000000000, 0x1000, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xfd, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x9}, 0x0, 0x400000000000, 0x1000, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x2, @multicast2}}, 0x1}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}, {@version_u}, {@nodevmap}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}, {@version_u}, {@nodevmap}]}}) 3.26319765s ago: executing program 0 (id=9092): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000640)=[{r1, 0x2}, {r1}], 0x2, 0x0, &(0x7f00000009c0)={[0x2]}, 0x8) socket$inet6(0x10, 0x3, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9001) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000000c0)={0xf3c, 0x0, 0xfffbfffd, 0x3, 0x50, "0c0000000000000000a1d20000000400", 0x4, 0x200}) clock_gettime(0x0, &(0x7f0000000140)) timer_settime(r4, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000240)) writev(r5, &(0x7f0000001880)=[{&(0x7f0000000100)='VV', 0x2}], 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.247750311s ago: executing program 8 (id=9093): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0x2082, 0x100) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) pwrite64(r3, 0x0, 0x0, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 2.31716144s ago: executing program 0 (id=9104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100400000000000000083"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 2.316501881s ago: executing program 8 (id=9105): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20010010) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) gettid() timer_create(0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x4) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2, 0x7, 0x2a, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x7, 0x7fff}}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.275009243s ago: executing program 0 (id=9106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x4, 0x400000000000, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xb, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x67b8, &(0x7f0000000340)={0x0, 0x3f0c, 0x2, 0x10004, 0x6a}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 1.718293826s ago: executing program 8 (id=9113): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r0, 0x1) flock(r0, 0x2) 1.64128523s ago: executing program 8 (id=9115): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0x2082, 0x100) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) pwrite64(r3, 0x0, 0x0, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 1.353261172s ago: executing program 0 (id=9122): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x9, 0x0, 0x18, r2}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r2, 0xfffffef6, &(0x7f00000004c0)={&(0x7f0000000640)=""/8, 0x8, 0x0, &(0x7f0000000500)=""/243, 0xf3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x4, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x5, 0x6, 0x9, 0xffffffffffffffe0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x64a8}], &(0x7f00000003c0)='GPL\x00', 0x8, 0xcb, &(0x7f00000008c0)=""/203, 0x1f00, 0x2a, '\x00', 0x0, @fallback=0x4, r0, 0x8, &(0x7f0000000440)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x5, 0x3}, 0x10, r3, r1, 0x5, &(0x7f0000000a00)=[r0, r0, r1, r0, r1, r1, r4, r0], &(0x7f0000000a40)=[{0x1, 0x1, 0x8, 0x5}, {0x3, 0x1, 0x8, 0x7}, {0x2, 0x5, 0x8, 0x3}, {0x3, 0x2, 0xe, 0x2}, {0x4, 0x1, 0xc, 0x6}], 0x10, 0x7f}, 0x94) pwritev2(r1, &(0x7f00000007c0)=[{&(0x7f0000000880)=',', 0x1}], 0x1, 0x5412, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xa0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xa75) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x1, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) ioctl$F2FS_IOC_FLUSH_DEVICE(r10, 0x4008f50a, &(0x7f0000000340)={0x8, 0x9}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r11, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1c2b244f}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x44890}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) 1.124466882s ago: executing program 0 (id=9126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000380)=r3}, 0x20) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sync_file_range(r7, 0x8e, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x8000) ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/190, 0xbe}) 724.546929ms ago: executing program 8 (id=9130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) (async) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)) (async) shutdown(r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x26, 0x6}, 0x1c) (async) recvmmsg$unix(r8, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001dc0)=""/69, 0x45}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) shutdown(r9, 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="6e62796fc5b512c47a18a91dcca7ef8cbe3b3ca00137f1b2f3982a575684c6082b7a677c1d57bada8dc6136a75e070029c77b9cedb4d3f1412aede658062ca353241492197f29af6d333b56371fe030e3dbfeba690e86369d06a0ab8d37828bdabb50c5e7ca63bd42ababaaa52e194ebaef7805be361946fa3308e462cb0ca9d308f8f086036239cac22ff55c08201c9264e952a002ee9357a7c019a9f2a549be71509ada6af3326687cc780650d6959938f3cf9d14bbbec98eb5bdb605f8bdd4817afdc7801c76e35dc512044bdf29c444022", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) (async) set_robust_list(&(0x7f0000000100)={0x0, 0xfffffffffffffff9}, 0x18) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 627.895173ms ago: executing program 8 (id=9132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x4, 0x400000000000, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xb, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x67b8, &(0x7f0000000340)={0x0, 0x3f0c, 0x2, 0x10004, 0x6a}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 611.746124ms ago: executing program 7 (id=9134): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r3}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) 589.287215ms ago: executing program 5 (id=9136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtaction={0x88, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x74, 0x1, [@m_mirred={0x70, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x800, 0x1, 0xa1e3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x7, 0xf5, 0x1}, 0x2}}]}, {0x4}, {0xc, 0x7, {0xd8c12683a2bf5f6a, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x88}, 0x1, 0x2b1e}, 0x200408d4) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xd5, r2, &(0x7f0000000040)="105d88874539ed6d", 0x8, 0x3, 0x0, 0x1, r2}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f5}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 559.322316ms ago: executing program 5 (id=9137): sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) socket$kcm(0x10, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000d604f7f26ba08c7ff68ab5a8b7925b9e38b5f2decb3c3bc325a23000000", @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde1b}, 0x94) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000009500014f6568398c53defab91e000000000000071fb64ecec7d3e126d3912952cd1bda9e56e0f185d15eb93a2a34263bf0e6fa60b3883f83f80dd60ee1be5a3f20bee753bdd5a586397391d91db19d7df5dc99fd300454a5c6a63826999f08153e1b8df318a2956ee73c2ee1b27b2899ee89c6ecaa29666077802a762e46964b69fe73e74b349c97d01aeb0b624200d5947a32d682a0050483fcba483b967b0574bba23465b1312976328ded096a48cb38d5c2f614ec92c4c13ee533e066ef8a76fc490189350000000053"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111001, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r8, 0x0, 0x10000000ca38}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 496.891599ms ago: executing program 7 (id=9138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$notify(r2, 0x402, 0xc0000030) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) getdents64(r2, &(0x7f0000001000)=""/164, 0xa4) 496.262709ms ago: executing program 7 (id=9139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = fcntl$getown(r4, 0x9) ptrace$ARCH_SHSTK_ENABLE(0x1e, r6, 0x3, 0x5001) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f6, 0x200, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000340), 0x4) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) 480.59266ms ago: executing program 7 (id=9140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000380)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 369.482865ms ago: executing program 5 (id=9141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000004c0), 0x10) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f0000000080)="ed463b47a5e15be18f0190e400a6cb790b1936018db66b35d292824c728b1517f91069e7ab23b11bef629a69498cb6a195b05d6aaf8673b3b0bfc4b0eed382c042f46c74b3eee646bc39bda0a9dac149e13d8bed49c206c5b5c84608062af97bde88ec091389baddaf5532323d70a984e14fd56d45b29cd049143c68cbfdf7bce491b98a03eb43e6cb5bc05444d32c79635c7c24e1ba8b256efa97cd013f129613fafdf274e7c365b4841b17b72331183df97b540eb25880548b2941fee9ef4bb4092693f348cc251b834b0f3ef456", 0xcf}, {&(0x7f0000000940)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db648f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000500)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f1a0dba3814e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818817b4ace348ba3a9e496f461dd87b46703be45be02f1542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb98838cc0884b5d379", 0xf2}, {&(0x7f0000000340)="c83c", 0x2}], 0x5}, 0x20000090) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@utf8}, {@session={'session', 0x3d, 0x8000000016}}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x5}}, {@dmode={'dmode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x80}}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@session={'session', 0x3d, 0x51}}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@uid}, {@check_relaxed}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x50}}], [{@context={'context', 0x3d, 'sysadm_u'}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") 327.085406ms ago: executing program 5 (id=9142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) getdents64(r2, &(0x7f0000001000)=""/164, 0xa4) 312.211317ms ago: executing program 5 (id=9143): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x400, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) readlink(&(0x7f0000000000)='./file2\x00', &(0x7f0000000700)=""/71, 0x47) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000800) mount$9p_fd(0x0, &(0x7f0000002600)='./file2\x00', 0x0, 0x800800, 0x0) 187.403602ms ago: executing program 7 (id=9144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 47.383129ms ago: executing program 5 (id=9145): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) 39.968119ms ago: executing program 7 (id=9146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 0s ago: executing program 0 (id=9147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xf, 0xfffffffffffffe23) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001240)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r5}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r3], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f00000013c0)=ANY=[@ANYRESHEX=r10, @ANYRESHEX=r4, @ANYRES64=r8, @ANYRESOCT=r8, @ANYBLOB="7992e1dcb0214a00fc95c0de87ded91e3183d96bfcee67afdf17835d9c7abd35fc5e7562b623b9988a4d53472c602596919ef88e5d3e1459816caa49404e00e9", @ANYRESDEC=r6], 0x1, 0x54a, &(0x7f0000000580)="$eJzs3V1v09YfwPGfS/snyl+qpjEhVBU4lE0qUglOAkERN/Ock/SAY0e2g9orVNEUVaQwUSatvWHcsE3aXgS73IvYO0J7CZtsJ32geQD6xKrvJ4JzYh/7/I4b+Se38bEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACx3JptFy3xjN9eUsO5tTBo7r7tbX1ggdzYV4zoV8RK/kkuJ5eyRZe+2l19MflvTmazd7OSS4qcbP//4hf3LkxO9LcfEfBH+eMT97S5tf10pdvtvDiqQD5Dl88r9e2Q49PQvokC03QaWpkoUNVKxb61WI9U3Xg6Wo5i3VRuqJ04CNW8e0MVq9Wy0oXloO03ao6n+wvv3izZdkXdL7S0E0aBf+t+IXIXjecZv5G2SVYnbe4mH8QHJlaxdppKra13O+VxA0gaFT+kUWlco5JdKhWLpVKxcqd6565tTx5YYL9HDrQ4ug8t/puO8OwNHM5EL/+LJ0Z8acuSqIEvV2oSSiDNIet7+vn/m1t6ZL97838/y1/aXT0jaf6/kr27Miz/D4nl5F6bsiXb8lRWpCtd6ciLU4/oZF8N0eKLkUgCMdIUJ12iekuUVKUiFbHlkSxKXSJRUhcjnmiJZFkiiUWnnyhXQtHiSCyBhKJkXly5IUqKUpWqlEWJloIsSyBt8aUhNXHSvazJenrcy6KsYTHuNCoOHUa+/7nrSGnEaMn/OLwjPX8Dh/FPP/8DAAAAAIAzy0p/+55c/0/J5bRWN562TzssAAAAAABwhNK//M8mxVRSuywW1/8AAAAAAJw1VnqPnSUiebma1dbESm+X4pcAAAAAAACcEenf/68kRToHylWxdqZL4fofAAAAAIAz4pexc+xHrfPWX39LGE5Zr1tLX1sb6dy8zsa5bLtz7+8xrs9Y072dpEUlKyYnXT1r5bJGO5NgvusVa+PisHYDcHYC+OljArgwKb/JtazNtdWsXO2vyXrJ142nC27g3SuK40xPxHop/uHZ+o+SDv9Xvzlt5WS92yk8ft5dTWN5nezl9UZvAsUD8yiOiOVlOt9Ces/FwBFPpTdi9PrNW7K23u3Ye8c/kW0+sb/HV9Mj+nwjc1mrud6Mt/n9488lfRYLw0bfi6J4yJG/ketZm+vz17NiQBSlcVGU9kYx+FgcPoryuCjKh4wCAE7L2pgsZMmBvPsJZ7lPy+7ykdn9jcxnbeZn0hPr5MyAM7o97oxuHzK7/XngGUjDcmzS7+/vZdW3yQZvh/YbeSUrOYTnXm58Lxc3t7Zvrm+sPOk86TwrlcoV+7Zt3ynJVDqMXkHuAQAMsPcZO9bA/D/2KTzW7TFX1V/ufKWgII/luXRlVRbSuw3SbxwM3Gt+z9cQFsZctebTNJk94WVhxFXd/9K7HPr7LY1suz+G8gn8JAAAODlzY/Lwh+T/hTHX3ftz+eir4/yep7UBAIDjocN3Vj7+2QpD03pUrFaLTryoVRi4D1Roag2tjB/r0F10/IZWrTCIAzfwkspDU9ORitqtVhDGqh6EqhVEZimdPlD1Hv0e6abjx8aNWp52Iq3cwI8dN1Y1E7mq1f7OM9GiDtONo5Z2Td24TmwCX0VBO3R1QalI6z0NTU37sambpOqrVmiaTphTDwOv3dSqpiM3NK04yHbY78v49SBsprstnPbBBgDgM7G5tf10pdvtvDjGysCOcyc+VAAA0DMiS58/lYAAAAAAAAAAAAAAAAAAAAAAAMABJ3H/H5UzXulPBf25xEPlCCpjTx2vjv3kBOBY/RsAAP//NNZPlg==") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r11 = getpgrp(0xffffffffffffffff) kcmp(r11, r11, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xfffffffffffff001}, 0x18) r13 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r13, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000001340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'GP\x01x\xd7\xd0\xcd[\x9f|V\x00\x00\x00\x00L\x00', 0x3a, '-[{]\x00\x00\x00', 0x3a, './file0', 0x3a, [0x50, 0x43, 0x50, 0x50, 0x43, 0x43, 0x46, 0x4f]}, 0x47) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c0000000306010200000010000000000a000001050001000700000030c0bd64954f448b9b997754ba2835e00bc80cb8d2f9328c4db723b73f5ac2361f93a126bafd3d66ccb468354fc844ba5db45b5e41bae253622a5a79211a76996f8081ef4a407c248ecb2e6fcd1e0000d149cf7d64b958dfde933a81997fc742ada1357db1427441f85aff408150430bd4cc2db436ffc3603470a6ca27e52b7fe0"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) kernel console output (not intermixed with test programs): l+0xe8/0x140 [ 490.786913][ T465] dump_stack+0x15/0x1b [ 490.786993][ T465] should_fail_ex+0x265/0x280 [ 490.787023][ T465] should_failslab+0x8c/0xb0 [ 490.787064][ T465] kmem_cache_alloc_noprof+0x50/0x4a0 [ 490.787096][ T465] ? skb_clone+0x151/0x1f0 [ 490.787117][ T465] skb_clone+0x151/0x1f0 [ 490.787136][ T465] ip_mc_output+0x10d/0x340 [ 490.787229][ T465] ? __pfx_dst_output+0x10/0x10 [ 490.787263][ T465] ip_send_skb+0x151/0x160 [ 490.787286][ T465] udp_send_skb+0x6e3/0xa40 [ 490.787310][ T465] udp_sendmsg+0x1050/0x13c0 [ 490.787329][ T465] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 490.787398][ T465] ? __pfx_udp_sendmsg+0x10/0x10 [ 490.787419][ T465] inet_sendmsg+0xac/0xd0 [ 490.787449][ T465] __sock_sendmsg+0x102/0x180 [ 490.787522][ T465] ____sys_sendmsg+0x345/0x4a0 [ 490.787671][ T465] ___sys_sendmsg+0x17b/0x1d0 [ 490.787699][ T465] __sys_sendmmsg+0x178/0x300 [ 490.787776][ T465] __x64_sys_sendmmsg+0x57/0x70 [ 490.787801][ T465] x64_sys_call+0x1e28/0x3000 [ 490.787871][ T465] do_syscall_64+0xd8/0x2a0 [ 490.787901][ T465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.787923][ T465] RIP: 0033:0x7fc38809f749 [ 490.787986][ T465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.788005][ T465] RSP: 002b:00007fc386b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 490.788027][ T465] RAX: ffffffffffffffda RBX: 00007fc3882f5fa0 RCX: 00007fc38809f749 [ 490.788079][ T465] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 490.788093][ T465] RBP: 00007fc386b07090 R08: 0000000000000000 R09: 0000000000000000 [ 490.788183][ T465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.788195][ T465] R13: 00007fc3882f6038 R14: 00007fc3882f5fa0 R15: 00007ffe82891a68 [ 490.788211][ T465] [ 491.074082][ T464] netlink: 'syz.8.8371': attribute type 10 has an invalid length. [ 491.083909][T31692] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.136602][ T481] netlink: 'syz.0.8375': attribute type 10 has an invalid length. [ 491.255374][ T507] binfmt_misc: register: failed to install interpreter file ./file0 [ 491.296871][ T509] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J' [ 491.513268][ T537] bridge0: port 3(gretap0) entered blocking state [ 491.519962][ T537] bridge0: port 3(gretap0) entered disabled state [ 491.530111][ T537] gretap0: entered allmulticast mode [ 491.537614][ T537] gretap0: entered promiscuous mode [ 491.544831][ T537] netlink: 'syz.8.8394': attribute type 10 has an invalid length. [ 491.554801][ T537] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 491.592164][ T5627] bio_check_eod: 270 callbacks suppressed [ 491.592175][ T5627] kworker/u8:43: attempt to access beyond end of device [ 491.592175][ T5627] loop0: rw=1, sector=145, nr_sectors = 25 limit=128 [ 491.628206][ T560] SELinux: Context system_u:object_r:tmpfs_t:s0 is not valid (left unmapped). [ 491.637702][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 491.637718][ T29] audit: type=1400 audit(1764996005.571:16175): avc: denied { relabelto } for pid=538 comm="syz.6.8393" name="bus" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmpfs_t:s0" [ 491.639146][ T562] netlink: 'syz.0.8400': attribute type 1 has an invalid length. [ 491.643891][ T29] audit: type=1400 audit(1764996005.571:16176): avc: denied { associate } for pid=538 comm="syz.6.8393" name="bus" dev="tmpfs" ino=1603 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmpfs_t:s0" [ 491.712607][ T562] bond1: entered promiscuous mode [ 491.721490][ T562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.728914][ T29] audit: type=1400 audit(1764996005.646:16177): avc: denied { unlink } for pid=25378 comm="syz-executor" name="bus" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmpfs_t:s0" [ 491.757940][ T562] FAULT_INJECTION: forcing a failure. [ 491.757940][ T562] name failslab, interval 1, probability 0, space 0, times 0 [ 491.770607][ T562] CPU: 0 UID: 0 PID: 562 Comm: syz.0.8400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 491.770633][ T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.770676][ T562] Call Trace: [ 491.770684][ T562] [ 491.770691][ T562] __dump_stack+0x1d/0x30 [ 491.770715][ T562] dump_stack_lvl+0xe8/0x140 [ 491.770737][ T562] dump_stack+0x15/0x1b [ 491.770757][ T562] should_fail_ex+0x265/0x280 [ 491.770797][ T562] should_failslab+0x8c/0xb0 [ 491.770877][ T562] kmem_cache_alloc_lru_noprof+0x55/0x4b0 [ 491.770897][ T562] ? __d_alloc+0x37/0x340 [ 491.770919][ T562] __d_alloc+0x37/0x340 [ 491.770938][ T562] ? radix_tree_iter_tag_clear+0x105/0x180 [ 491.770998][ T562] d_alloc_pseudo+0x1e/0x80 [ 491.771020][ T562] alloc_file_pseudo+0x71/0x160 [ 491.771046][ T562] anon_inode_getfile+0xa0/0x120 [ 491.771073][ T562] bpf_link_prime+0xfc/0x1d0 [ 491.771174][ T562] bpf_xdp_link_attach+0x217/0x5d0 [ 491.771205][ T562] link_create+0x502/0x6e0 [ 491.771227][ T562] __sys_bpf+0x628/0x7c0 [ 491.771249][ T562] __x64_sys_bpf+0x41/0x50 [ 491.771343][ T562] x64_sys_call+0x28e1/0x3000 [ 491.771366][ T562] do_syscall_64+0xd8/0x2a0 [ 491.771391][ T562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.771412][ T562] RIP: 0033:0x7fcd4c9cf749 [ 491.771494][ T562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.771511][ T562] RSP: 002b:00007fcd4b42f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.771529][ T562] RAX: ffffffffffffffda RBX: 00007fcd4cc25fa0 RCX: 00007fcd4c9cf749 [ 491.771542][ T562] RDX: 0000000000000014 RSI: 00002000000000c0 RDI: 000000000000001c [ 491.771555][ T562] RBP: 00007fcd4b42f090 R08: 0000000000000000 R09: 0000000000000000 [ 491.771570][ T562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.771626][ T562] R13: 00007fcd4cc26038 R14: 00007fcd4cc25fa0 R15: 00007fff461a54f8 [ 491.771646][ T562] [ 492.014774][ T614] netlink: 'syz.7.8406': attribute type 10 has an invalid length. [ 492.134239][ T29] audit: type=1400 audit(1764996006.029:16178): avc: denied { create } for pid=622 comm="syz.5.8409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 492.302988][ T642] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 492.310940][ T642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 492.320042][ T642] System zones: 0-1, 15-15, 18-18, 34-34 [ 492.326667][ T642] EXT4-fs (loop5): orphan cleanup on readonly fs [ 492.334052][ T642] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 492.343563][ T642] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 492.358158][ T642] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 492.365495][ T642] EXT4-fs (loop5): 1 truncate cleaned up [ 492.371239][ T29] audit: type=1326 audit(1764996006.244:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8691aef749 code=0x7ffc0000 [ 492.394221][ T29] audit: type=1326 audit(1764996006.244:16180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8691aef749 code=0x7ffc0000 [ 492.417089][ T29] audit: type=1326 audit(1764996006.244:16181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8691aef749 code=0x7ffc0000 [ 492.417757][ T642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.439954][ T29] audit: type=1326 audit(1764996006.244:16182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8691aef749 code=0x7ffc0000 [ 492.439984][ T29] audit: type=1326 audit(1764996006.244:16183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8691aef749 code=0x7ffc0000 [ 492.561046][ T660] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 492.569019][ T660] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 492.620437][ T659] syz.8.8418: attempt to access beyond end of device [ 492.620437][ T659] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 492.633857][ T659] syz.8.8418: attempt to access beyond end of device [ 492.633857][ T659] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 492.647347][ T659] syz.8.8418: attempt to access beyond end of device [ 492.647347][ T659] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 492.660756][ T659] syz.8.8418: attempt to access beyond end of device [ 492.660756][ T659] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 492.674342][ T659] syz.8.8418: attempt to access beyond end of device [ 492.674342][ T659] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 492.687972][ T659] syz.8.8418: attempt to access beyond end of device [ 492.687972][ T659] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 492.701640][ T659] syz.8.8418: attempt to access beyond end of device [ 492.701640][ T659] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 492.740557][ T2045] kworker/u8:11: attempt to access beyond end of device [ 492.740557][ T2045] loop8: rw=1, sector=929, nr_sectors = 57 limit=128 [ 492.766624][T20531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.876702][ T685] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 492.945648][ T701] Buffer I/O error on dev loop4, logical block 0, async page read [ 492.954141][ T701] Buffer I/O error on dev loop4, logical block 0, async page read [ 492.962057][ T701] loop4: unable to read partition table [ 492.979357][ T701] loop_reread_partitions: partition scan of loop4 (úů塙‰üŤľSęjĚ–ă˘P=Ă˝?ă}X‹şĐ śëÜ%ő«`ÉćÖ€ů…Š5) failed (rc=-5) [ 492.996043][ T701] pim6reg: entered allmulticast mode [ 493.010390][ T701] pim6reg: left allmulticast mode [ 493.109975][ T719] netlink: 'syz.7.8432': attribute type 10 has an invalid length. [ 493.629181][ T757] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 494.330725][ T784] siw: device registration error -23 [ 494.352850][ T784] __nla_validate_parse: 13 callbacks suppressed [ 494.352866][ T784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8450'. [ 494.506639][ T805] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8457'. [ 494.550863][ T805] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 494.866672][ T826] set_capacity_and_notify: 23 callbacks suppressed [ 494.866691][ T826] loop0: detected capacity change from 0 to 1024 [ 494.888803][ T826] EXT4-fs: inline encryption not supported [ 494.895398][ T826] EXT4-fs: Ignoring removed orlov option [ 494.902346][ T826] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 494.923014][ T826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 494.933094][ T826] System zones: 0-1, 3-12 [ 494.939369][ T826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.012116][T31692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.149147][ T842] binfmt_misc: register: failed to install interpreter file ./file0 [ 495.343384][ T845] loop0: detected capacity change from 0 to 764 [ 495.379063][ T845] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 495.421760][ T851] xt_hashlimit: max too large, truncated to 1048576 [ 495.471727][ T853] loop7: detected capacity change from 0 to 1024 [ 495.480451][ T857] loop0: detected capacity change from 0 to 128 [ 495.509209][ T853] EXT4-fs: inline encryption not supported [ 495.515073][ T853] EXT4-fs: Ignoring removed orlov option [ 495.542477][ T861] loop6: detected capacity change from 0 to 128 [ 495.559892][ T853] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 495.604809][ T853] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 495.644892][ T853] System zones: 0-1, 3-12 [ 495.664188][ T853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.707663][ T875] loop0: detected capacity change from 0 to 128 [ 495.769023][T21199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.901099][ T884] binfmt_misc: register: failed to install interpreter file ./file0 [ 496.098915][ T893] loop5: detected capacity change from 0 to 128 [ 496.163289][ T900] loop5: detected capacity change from 0 to 128 [ 496.381349][ T922] loop5: detected capacity change from 0 to 1024 [ 496.417938][ T922] EXT4-fs: inline encryption not supported [ 496.423780][ T922] EXT4-fs: Ignoring removed orlov option [ 496.472223][ T922] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 496.615464][ T922] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 496.623728][ T922] System zones: 0-1, 3-12 [ 496.628569][ T922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.767371][ T931] lo speed is unknown, defaulting to 1000 [ 496.860724][T20531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.872073][ T956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.880532][ T956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.110631][ T972] loop6: detected capacity change from 0 to 128 [ 497.118039][ T974] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 497.148668][ T982] EXT4-fs: inline encryption not supported [ 497.154564][ T982] EXT4-fs: Ignoring removed orlov option [ 497.287155][ T1002] netlink: 'syz.7.8505': attribute type 10 has an invalid length. [ 497.310217][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 497.310232][ T29] audit: type=1326 audit(1764996010.866:16338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.348735][ T29] audit: type=1326 audit(1764996010.903:16339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.372297][ T29] audit: type=1326 audit(1764996010.903:16340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.384727][ T1004] lo speed is unknown, defaulting to 1000 [ 497.395839][ T29] audit: type=1326 audit(1764996010.903:16341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.424964][ T29] audit: type=1326 audit(1764996010.903:16342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.448507][ T29] audit: type=1326 audit(1764996010.903:16343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.472041][ T29] audit: type=1326 audit(1764996010.903:16344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.495559][ T29] audit: type=1326 audit(1764996010.903:16345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.520506][ T29] audit: type=1326 audit(1764996011.025:16346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.544437][ T29] audit: type=1326 audit(1764996011.025:16347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1001 comm="syz.7.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 497.669642][ T1031] syz.7.8508: attempt to access beyond end of device [ 497.669642][ T1031] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 497.689354][ T1031] syz.7.8508: attempt to access beyond end of device [ 497.689354][ T1031] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 497.703326][ T1031] syz.7.8508: attempt to access beyond end of device [ 497.703326][ T1031] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 497.718478][ T1031] syz.7.8508: attempt to access beyond end of device [ 497.718478][ T1031] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 497.739495][ T1031] syz.7.8508: attempt to access beyond end of device [ 497.739495][ T1031] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 497.756142][ T1031] syz.7.8508: attempt to access beyond end of device [ 497.756142][ T1031] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 497.787668][ T5607] kworker/u8:23: attempt to access beyond end of device [ 497.787668][ T5607] loop7: rw=1, sector=449, nr_sectors = 57 limit=128 [ 497.841046][ T1049] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 497.854684][ T1049] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.958064][T21199] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.083962][ T1067] netlink: 'syz.0.8518': attribute type 10 has an invalid length. [ 498.106702][ T1067] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.115388][ T1067] bond0: (slave team0): Enslaving as an active interface with an up link [ 498.146059][ T1073] netlink: 'syz.7.8521': attribute type 13 has an invalid length. [ 498.165530][ T1073] gretap0: refused to change device tx_queue_len [ 498.171901][ T1073] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 498.287754][ T1086] EXT4-fs: inline encryption not supported [ 498.293656][ T1086] EXT4-fs: Ignoring removed orlov option [ 498.324494][ T1086] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 498.343079][ T1089] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 498.359812][ T1089] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.380072][ T1086] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 498.388848][ T1086] System zones: 0-1, 3-12 [ 498.394602][ T1086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.442982][T31692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.503808][T21199] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.563577][ T1118] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 498.587535][ T1121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 498.616907][ T1132] netlink: 'syz.7.8534': attribute type 13 has an invalid length. [ 498.625473][ T1132] gretap0: refused to change device tx_queue_len [ 498.631828][ T1132] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 498.661619][ T1121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.680437][ T1121] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 498.711285][T20531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.751176][ T1148] EXT4-fs: inline encryption not supported [ 498.757059][ T1148] EXT4-fs: Ignoring removed orlov option [ 498.763097][ T1148] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 498.778424][ T1148] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 498.786570][ T1148] System zones: 0-1, 3-12 [ 498.791800][ T1148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.846622][T31692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.189456][ T1161] EXT4-fs: inline encryption not supported [ 499.195318][ T1161] EXT4-fs: Ignoring removed orlov option [ 499.201584][ T1161] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 499.227407][ T1161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 499.235683][ T1161] System zones: 0-1, 3-12 [ 499.241462][ T1161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.273950][T21199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.807866][ T1195] EXT4-fs: inline encryption not supported [ 499.813795][ T1195] EXT4-fs: Ignoring removed orlov option [ 499.835805][ T1195] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 499.861590][ T1195] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 499.884445][ T1195] System zones: 0-1, 3-12 [ 499.896972][ T1195] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.926992][T26000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.985532][ T1216] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8550'. [ 500.019717][ T1216] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 500.033819][ T1218] netlink: 'syz.0.8552': attribute type 10 has an invalid length. [ 500.041665][ T1218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8552'. [ 500.146066][ T1225] EXT4-fs: inline encryption not supported [ 500.151908][ T1225] EXT4-fs: Ignoring removed orlov option [ 500.217294][ T1225] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 500.234039][ T1225] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 500.242339][ T1225] System zones: 0-1, 3-12 [ 500.263641][ T1225] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.467427][T26000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.818317][ T1242] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8560'. [ 500.866931][ T1256] set_capacity_and_notify: 16 callbacks suppressed [ 500.866947][ T1256] loop6: detected capacity change from 0 to 1024 [ 500.880824][ T1256] EXT4-fs: inline encryption not supported [ 500.886687][ T1256] EXT4-fs: Ignoring removed orlov option [ 500.893086][ T1249] lo speed is unknown, defaulting to 1000 [ 500.905525][ T1266] binfmt_misc: register: failed to install interpreter file ./file0 [ 500.986892][ T1300] loop5: detected capacity change from 0 to 128 [ 501.023230][ T1300] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 501.037856][ T1300] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.051717][ T1311] loop7: detected capacity change from 0 to 164 [ 501.058893][ T1311] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J' [ 501.133778][ T1325] loop6: detected capacity change from 0 to 128 [ 501.163265][ T1323] loop7: detected capacity change from 0 to 512 [ 501.183935][ T5628] Bluetooth: hci0: Frame reassembly failed (-84) [ 501.184771][ T1335] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8573'. [ 501.198251][T20531] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 501.210941][ T1323] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 501.218894][ T1323] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 501.232616][ T1323] System zones: 0-1, 15-15, 18-18, 34-34 [ 501.238605][ T1346] loop5: detected capacity change from 0 to 1024 [ 501.245343][ T1346] EXT4-fs: inline encryption not supported [ 501.251283][ T1346] EXT4-fs: Ignoring removed orlov option [ 501.257746][ T1323] EXT4-fs (loop7): orphan cleanup on readonly fs [ 501.264303][ T1323] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 501.265515][ T1346] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 501.278939][ T1323] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 501.296366][ T1323] EXT4-fs (loop7): 1 truncate cleaned up [ 501.302757][ T1323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.324766][ T1346] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 501.333722][ T1352] loop0: detected capacity change from 0 to 512 [ 501.342449][ T1346] System zones: 0-1, 3-12 [ 501.348655][ T1346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.363080][ T1352] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 501.371141][ T1352] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 501.381727][ T1352] System zones: 0-1, 15-15, 18-18, 34-34 [ 501.388566][ T1352] EXT4-fs (loop0): orphan cleanup on readonly fs [ 501.395698][T20531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.404993][ T1352] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 501.419653][ T1352] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 501.429115][ T1352] EXT4-fs (loop0): 1 truncate cleaned up [ 501.442376][ T1352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.476414][ T1369] loop5: detected capacity change from 0 to 128 [ 501.504221][T21199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.542015][ T1377] syz.5.8579: attempt to access beyond end of device [ 501.542015][ T1377] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 501.559546][ T1378] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 501.567576][ T1378] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 501.577075][ T1377] syz.5.8579: attempt to access beyond end of device [ 501.577075][ T1377] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 501.590863][ T1377] syz.5.8579: attempt to access beyond end of device [ 501.590863][ T1377] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 501.686425][T31692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.757229][ T1403] loop6: detected capacity change from 0 to 128 [ 501.790040][ T1408] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8588'. [ 501.803841][ T1408] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 501.830362][ T1412] loop5: detected capacity change from 0 to 128 [ 501.899630][ T1424] netlink: 'syz.6.8592': attribute type 13 has an invalid length. [ 501.908007][ T1424] gretap0: refused to change device tx_queue_len [ 501.914546][ T1424] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 501.943653][ T1427] EXT4-fs: inline encryption not supported [ 501.949657][ T1427] EXT4-fs: Ignoring removed orlov option [ 501.955824][ T1427] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 501.985242][ T1427] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 501.993420][ T1427] System zones: 0-1, 3-12 [ 501.998314][ T1427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.024318][T31692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.076172][ T1443] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 502.093662][ T1443] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.118421][T31692] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 502.300016][ T1452] lo speed is unknown, defaulting to 1000 [ 502.341484][ T1488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8606'. [ 502.389409][ T1503] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 502.399979][ T1503] SELinux: failed to load policy [ 502.412404][ T1503] syzkaller1: entered promiscuous mode [ 502.417957][ T1503] syzkaller1: entered allmulticast mode [ 502.663009][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 502.663022][ T29] audit: type=1326 audit(1764996015.880:16814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd4c9c65e7 code=0x7ffc0000 [ 502.700381][ T29] audit: type=1326 audit(1764996015.908:16815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4c96b829 code=0x7ffc0000 [ 502.723888][ T29] audit: type=1326 audit(1764996015.908:16816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd4c9c65e7 code=0x7ffc0000 [ 502.747307][ T29] audit: type=1326 audit(1764996015.908:16817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4c96b829 code=0x7ffc0000 [ 502.770865][ T29] audit: type=1326 audit(1764996015.908:16818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcd4c9cf749 code=0x7ffc0000 [ 502.794286][ T29] audit: type=1326 audit(1764996015.908:16819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd4c9c65e7 code=0x7ffc0000 [ 502.817712][ T29] audit: type=1326 audit(1764996015.908:16820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4c96b829 code=0x7ffc0000 [ 502.841131][ T29] audit: type=1326 audit(1764996015.908:16821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcd4c9cf749 code=0x7ffc0000 [ 502.864705][ T29] audit: type=1326 audit(1764996016.030:16822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd4c9c65e7 code=0x7ffc0000 [ 502.881900][ T1523] binfmt_misc: register: failed to install interpreter file ./file0 [ 502.888106][ T29] audit: type=1326 audit(1764996016.030:16823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.8607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd4c96b829 code=0x7ffc0000 [ 502.996632][ T1537] EXT4-fs: inline encryption not supported [ 503.002573][ T1537] EXT4-fs: Ignoring removed orlov option [ 503.092017][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8615'. [ 503.108094][ T1543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8615'. [ 503.117739][ T1543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8615'. [ 503.127148][ T1543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8615'. [ 503.185191][ T1554] netlink: 'syz.6.8617': attribute type 10 has an invalid length. [ 503.195631][ T1554] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.204002][ T1554] bond0: (slave team0): Enslaving as an active interface with an up link [ 503.336037][ T1562] bio_check_eod: 262 callbacks suppressed [ 503.336053][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.336053][ T1562] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 503.362608][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.362608][ T1562] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 503.363516][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 503.376089][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.376089][ T1562] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 503.382149][ T3498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 503.473409][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.473409][ T1562] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 503.526493][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.526493][ T1562] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 503.542974][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.542974][ T1562] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 503.558607][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.558607][ T1562] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 503.573035][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.573035][ T1562] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 503.586595][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.586595][ T1562] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 503.600958][ T1585] ext4: Bad value for 'max_dir_size_kb' [ 503.617480][ T1562] syz.5.8619: attempt to access beyond end of device [ 503.617480][ T1562] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 503.685365][ T1596] netlink: 'syz.7.8628': attribute type 10 has an invalid length. [ 503.751332][ T1583] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 503.782811][ T1614] siw: device registration error -23 [ 503.821048][ T1583] EXT4-fs (loop8): 1 truncate cleaned up [ 503.962669][ T1634] EXT4-fs: inline encryption not supported [ 503.968642][ T1634] EXT4-fs: Ignoring removed orlov option [ 503.997710][ T1634] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 504.026198][ T1634] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 504.034318][ T1634] System zones: 0-1, 3-12 [ 504.263257][ T1665] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 504.506491][ T1694] gretap0: left allmulticast mode [ 504.511633][ T1694] gretap0: left promiscuous mode [ 504.516677][ T1694] bridge0: port 3(gretap0) entered disabled state [ 504.536232][ T1694] netlink: 'syz.8.8650': attribute type 10 has an invalid length. [ 504.593523][ T1696] netlink: 'syz.0.8651': attribute type 10 has an invalid length. [ 504.621515][ T1705] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.753748][ T1716] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 504.761715][ T1716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 504.770218][ T1716] System zones: 0-1, 15-15, 18-18, 34-34 [ 504.776196][ T1716] EXT4-fs (loop8): orphan cleanup on readonly fs [ 504.782646][ T1716] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 504.797297][ T1716] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 504.804288][ T1716] EXT4-fs (loop8): 1 truncate cleaned up [ 504.872805][ T4648] IPVS: starting estimator thread 0... [ 504.894645][ T1745] netlink: 'syz.8.8663': attribute type 10 has an invalid length. [ 504.939274][ T1751] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.977120][ T1740] IPVS: using max 2496 ests per chain, 124800 per kthread [ 505.081808][ T1759] netlink: 'syz.0.8666': attribute type 10 has an invalid length. [ 505.129776][ T1765] siw: device registration error -23 [ 505.150795][ T1767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.170956][ T1767] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.249317][ T1786] netlink: 'syz.0.8674': attribute type 10 has an invalid length. [ 505.277835][ T1789] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 505.285844][ T1789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 505.295693][ T1789] System zones: 0-1, 15-15, 18-18, 34-34 [ 505.301674][ T1789] EXT4-fs (loop5): orphan cleanup on readonly fs [ 505.308233][ T1789] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 505.322951][ T1789] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 505.331345][ T1789] EXT4-fs (loop5): 1 truncate cleaned up [ 505.368866][ T1804] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 505.379694][ T1804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 505.388064][ T1804] System zones: 1-12 [ 505.394131][ T1804] EXT4-fs (loop8): 1 orphan inode deleted [ 505.399857][ T1804] EXT4-fs (loop8): 1 truncate cleaned up [ 505.431480][ T1811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.449099][ T1811] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.508182][ T1820] __nla_validate_parse: 11 callbacks suppressed [ 505.508197][ T1820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8683'. [ 505.523651][ T1820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.531136][ T1820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.538973][ T1820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.546403][ T1820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.553997][ T1820] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 505.561036][ T1820] batman_adv: batadv0: Removing interface: veth1_vlan [ 505.582454][ T1822] netlink: 'syz.8.8684': attribute type 10 has an invalid length. [ 505.590462][ T1823] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=1823 comm=syz.0.8683 [ 505.780781][ T1844] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 505.788747][ T1844] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 505.797908][ T1844] System zones: 0-1, 15-15, 18-18, 34-34 [ 505.804290][ T1844] EXT4-fs (loop8): orphan cleanup on readonly fs [ 505.811144][ T1844] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 505.825792][ T1844] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 505.836253][ T1844] EXT4-fs (loop8): 1 truncate cleaned up [ 505.876705][ T1855] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8691'. [ 505.903561][ T1858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.919206][ T1858] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 506.093059][ T1887] netlink: 'syz.8.8700': attribute type 10 has an invalid length. [ 506.100989][ T1887] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8700'. [ 506.134522][ T1896] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.367844][ T1920] set_capacity_and_notify: 29 callbacks suppressed [ 506.367863][ T1920] loop8: detected capacity change from 0 to 128 [ 506.508300][ T1934] netlink: 'syz.8.8712': attribute type 10 has an invalid length. [ 506.516139][ T1934] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8712'. [ 506.598024][ T1945] loop5: detected capacity change from 0 to 1024 [ 506.613188][ T1945] EXT4-fs: inline encryption not supported [ 506.619181][ T1945] EXT4-fs: Ignoring removed orlov option [ 506.630701][ T1945] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 506.656692][ T1945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 506.670490][ T1945] System zones: 0-1, 3-12 [ 506.731489][ T1964] loop8: detected capacity change from 0 to 164 [ 506.738267][ T1964] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J' [ 506.755254][ T1969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8722'. [ 506.786077][ T1977] loop8: detected capacity change from 0 to 128 [ 506.941089][ T1993] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 506.954660][ T1995] loop5: detected capacity change from 0 to 128 [ 506.997582][ T2002] loop5: detected capacity change from 0 to 1024 [ 507.004299][ T2002] EXT4-fs: inline encryption not supported [ 507.010162][ T2002] EXT4-fs: Ignoring removed orlov option [ 507.016264][ T2002] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 507.042669][ T2002] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 507.050977][ T2002] System zones: 0-1, 3-12 [ 507.079200][ T2017] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8734'. [ 507.591783][ T2040] siw: device registration error -23 [ 507.600410][ T2040] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8741'. [ 507.650563][ T2042] loop6: detected capacity change from 0 to 128 [ 508.232649][ T2069] loop8: detected capacity change from 0 to 512 [ 508.280790][ T2069] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 508.288820][ T2069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 508.326600][ T2069] System zones: 0-1, 15-15, 18-18, 34-34 [ 508.332477][ T2069] EXT4-fs (loop8): orphan cleanup on readonly fs [ 508.339453][ T2069] __quota_error: 218 callbacks suppressed [ 508.339467][ T2069] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 508.354521][ T2069] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 508.369104][ T2069] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 508.376335][ T2069] EXT4-fs (loop8): 1 truncate cleaned up [ 508.389998][ T2080] loop5: detected capacity change from 0 to 128 [ 508.405217][ T2080] FAT-fs (loop5): Directory bread(block 524322) failed [ 508.412224][ T2080] FAT-fs (loop5): Directory bread(block 524323) failed [ 508.419196][ T2080] FAT-fs (loop5): Directory bread(block 524324) failed [ 508.426142][ T2080] FAT-fs (loop5): Directory bread(block 524325) failed [ 508.434565][ T2080] FAT-fs (loop5): Directory bread(block 524326) failed [ 508.442273][ T2080] FAT-fs (loop5): Directory bread(block 524327) failed [ 508.449564][ T2080] FAT-fs (loop5): Directory bread(block 524328) failed [ 508.456597][ T2080] FAT-fs (loop5): Directory bread(block 524329) failed [ 508.465262][ T2080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8751'. [ 508.494813][ T2088] loop8: detected capacity change from 0 to 128 [ 508.526140][ T2092] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8754'. [ 508.575403][ T2099] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.630954][ T2099] bond2 (unregistering): Released all slaves [ 508.728475][ T2184] EXT4-fs: inline encryption not supported [ 508.734564][ T2184] EXT4-fs: Ignoring removed orlov option [ 508.741236][ T2184] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 508.768050][ T2184] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 508.792242][ T2133] EXT4-fs (loop7): orphan cleanup on readonly fs [ 508.798645][ T2184] System zones: 0-1, 3-12 [ 508.817414][ T2133] EXT4-fs warning (device loop7): ext4_xattr_inode_get:546: inode #11: comm syz.7.8760: ea_inode file size=4 entry size=6 [ 508.834784][ T2133] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 508.866251][ T2133] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.8760: corrupted inode contents [ 508.879416][ T2133] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #15: comm syz.7.8760: mark_inode_dirty error [ 508.894639][ T2133] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.8760: corrupted inode contents [ 508.907349][ T2133] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #15: comm syz.7.8760: mark_inode_dirty error [ 508.921127][ T2133] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #15: comm syz.7.8760: mark inode dirty (error -117) [ 508.935738][ T2133] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 508.986111][ T2133] EXT4-fs (loop7): 1 orphan inode deleted [ 508.993801][ T2218] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8770'. [ 509.038873][ T29] audit: type=1326 audit(1764996021.839:17039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.062471][ T29] audit: type=1326 audit(1764996021.839:17040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.086025][ T29] audit: type=1326 audit(1764996021.839:17041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.109670][ T29] audit: type=1326 audit(1764996021.839:17042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.133168][ T29] audit: type=1326 audit(1764996021.839:17043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.164364][ T29] audit: type=1326 audit(1764996021.952:17044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.182972][ T2239] siw: device registration error -23 [ 509.187939][ T29] audit: type=1326 audit(1764996021.952:17045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.216755][ T29] audit: type=1326 audit(1764996021.952:17046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.240332][ T29] audit: type=1326 audit(1764996021.952:17047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2224 comm="syz.7.8773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 509.280624][ T2243] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.339570][ T2243] bond1 (unregistering): Released all slaves [ 509.521444][ T2340] bio_check_eod: 355 callbacks suppressed [ 509.521461][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.521461][ T2340] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 509.543514][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.543514][ T2340] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 509.552831][ T2342] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.567986][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.567986][ T2340] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 509.582232][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.582232][ T2340] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 509.598349][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.598349][ T2340] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 509.611831][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.611831][ T2340] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 509.625355][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.625355][ T2340] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 509.639005][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.639005][ T2340] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 509.652566][ T2340] syz.7.8785: attempt to access beyond end of device [ 509.652566][ T2340] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 509.748255][ T2360] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.781586][ T2360] bond1 (unregistering): Released all slaves [ 509.834895][ T5603] kworker/u8:19: attempt to access beyond end of device [ 509.834895][ T5603] loop8: rw=1, sector=545, nr_sectors = 57 limit=128 [ 509.895923][ T2449] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 509.903879][ T2449] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 509.904975][ T2460] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 509.919847][ T2460] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 509.923858][ T2449] System zones: 0-1, 15-15, 18-18, 34-34 [ 509.928621][ T2460] System zones: 0-1, 15-15, 18-18, 34-34 [ 509.934128][ T2449] EXT4-fs (loop0): orphan cleanup on readonly fs [ 509.939892][ T2460] EXT4-fs (loop8): orphan cleanup on readonly fs [ 509.952131][ T2460] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 509.966701][ T2460] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 509.973658][ T2460] EXT4-fs (loop8): 1 truncate cleaned up [ 509.980162][ T2449] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 509.994858][ T2449] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 510.001918][ T2449] EXT4-fs (loop0): 1 truncate cleaned up [ 510.018634][ T2460] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 510.026759][ T2460] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 510.045053][ T2472] FAULT_INJECTION: forcing a failure. [ 510.045053][ T2472] name failslab, interval 1, probability 0, space 0, times 0 [ 510.057739][ T2472] CPU: 1 UID: 0 PID: 2472 Comm: syz.5.8803 Not tainted syzkaller #0 PREEMPT(voluntary) [ 510.057766][ T2472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.057779][ T2472] Call Trace: [ 510.057853][ T2472] [ 510.057860][ T2472] __dump_stack+0x1d/0x30 [ 510.057924][ T2472] dump_stack_lvl+0xe8/0x140 [ 510.057946][ T2472] dump_stack+0x15/0x1b [ 510.057967][ T2472] should_fail_ex+0x265/0x280 [ 510.058001][ T2472] should_failslab+0x8c/0xb0 [ 510.058023][ T2472] __kvmalloc_node_noprof+0x12e/0x690 [ 510.058110][ T2472] ? io_alloc_cache_init+0x36/0xb0 [ 510.058206][ T2472] io_alloc_cache_init+0x36/0xb0 [ 510.058233][ T2472] io_ring_ctx_alloc+0x2c1/0x650 [ 510.058263][ T2472] io_uring_create+0x50/0x4e0 [ 510.058302][ T2472] ? memchr_inv+0x30/0x2e0 [ 510.058331][ T2472] __se_sys_io_uring_setup+0x1be/0x1d0 [ 510.058368][ T2472] __x64_sys_io_uring_setup+0x31/0x40 [ 510.058399][ T2472] x64_sys_call+0x244c/0x3000 [ 510.058493][ T2472] do_syscall_64+0xd8/0x2a0 [ 510.058525][ T2472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.058568][ T2472] RIP: 0033:0x7f5e8bf7f749 [ 510.058585][ T2472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.058670][ T2472] RSP: 002b:00007f5e8a9e6fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 510.058692][ T2472] RAX: ffffffffffffffda RBX: 00007f5e8c1d5fa0 RCX: 00007f5e8bf7f749 [ 510.058703][ T2472] RDX: 00002000000002c0 RSI: 0000200000000300 RDI: 00000000000042ca [ 510.058718][ T2472] RBP: 0000200000000300 R08: 0000000000000000 R09: 00002000000002c0 [ 510.058789][ T2472] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 510.058802][ T2472] R13: 0000200000000040 R14: 00000000000042ca R15: 00002000000002c0 [ 510.058819][ T2472] [ 510.268298][ T2479] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 510.322002][ T2449] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 510.330116][ T2449] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 510.510921][ T2505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.519446][ T2505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.531499][ T2498] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 510.539433][ T2498] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 510.589581][ T2498] System zones: 0-1, 15-15, 18-18, 34-34 [ 510.628268][ T2498] EXT4-fs (loop5): orphan cleanup on readonly fs [ 510.681689][ T2498] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 510.696395][ T2498] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 510.757564][ T2498] EXT4-fs (loop5): 1 truncate cleaned up [ 510.840277][ T2533] siw: device registration error -23 [ 510.908466][ T2547] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 511.152288][ T2563] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.183515][ T2576] binfmt_misc: register: failed to install interpreter file ./file0 [ 511.208726][ T2578] siw: device registration error -23 [ 511.215790][ T2578] __nla_validate_parse: 5 callbacks suppressed [ 511.215805][ T2578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8829'. [ 511.292301][ T2583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.299048][ T2583] EXT4-fs: Ignoring removed orlov option [ 511.304780][ T2583] ext2: Unknown parameter 'n˙˙˙˙X' [ 511.434584][ T2592] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 511.459637][ T2594] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 511.585291][ T2600] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.619608][ T2600] bond2 (unregistering): Released all slaves [ 511.769551][ T2682] siw: device registration error -23 [ 511.776955][ T2682] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8840'. [ 511.803489][ T2685] set_capacity_and_notify: 20 callbacks suppressed [ 511.803503][ T2685] loop8: detected capacity change from 0 to 764 [ 511.817198][ T2685] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 511.956944][ T2702] loop0: detected capacity change from 0 to 1024 [ 511.963687][ T2702] EXT4-fs: Ignoring removed bh option [ 511.969317][ T2702] EXT4-fs: inline encryption not supported [ 511.975999][ T2702] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 511.987452][ T2702] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 511.996014][ T2702] System zones: 0-1, 3-12 [ 512.001468][ T2702] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.8845: lblock 1 mapped to illegal pblock 1 (length 1) [ 512.016596][ T2702] EXT4-fs (loop0): Remounting filesystem read-only [ 512.023458][ T2702] EXT4-fs (loop0): 1 orphan inode deleted [ 512.053743][ T2715] loop0: detected capacity change from 0 to 512 [ 512.065672][ T2715] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.089070][ T2711] loop5: detected capacity change from 0 to 128 [ 512.097077][ T2715] bond2 (unregistering): Released all slaves [ 512.103089][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c435e00: rx timeout, send abort [ 512.103125][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c434a00: rx timeout, send abort [ 512.111345][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c435e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 512.111401][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c434a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 512.157029][ T2712] netlink: 'syz.5.8847': attribute type 39 has an invalid length. [ 512.167346][ T2711] netlink: 'syz.5.8847': attribute type 39 has an invalid length. [ 512.168526][ T2787] binfmt_misc: register: failed to install interpreter file ./file0 [ 512.202362][ T2791] netlink: 'syz.6.8850': attribute type 1 has an invalid length. [ 512.218456][ T2791] bond3: entered promiscuous mode [ 512.223739][ T2791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.232528][ T2791] FAULT_INJECTION: forcing a failure. [ 512.232528][ T2791] name failslab, interval 1, probability 0, space 0, times 0 [ 512.245219][ T2791] CPU: 0 UID: 0 PID: 2791 Comm: syz.6.8850 Not tainted syzkaller #0 PREEMPT(voluntary) [ 512.245293][ T2791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.245384][ T2791] Call Trace: [ 512.245390][ T2791] [ 512.245397][ T2791] __dump_stack+0x1d/0x30 [ 512.245423][ T2791] dump_stack_lvl+0xe8/0x140 [ 512.245448][ T2791] dump_stack+0x15/0x1b [ 512.245470][ T2791] should_fail_ex+0x265/0x280 [ 512.245579][ T2791] should_failslab+0x8c/0xb0 [ 512.245603][ T2791] kmem_cache_alloc_noprof+0x50/0x4a0 [ 512.245638][ T2791] ? skb_clone+0x151/0x1f0 [ 512.245660][ T2791] skb_clone+0x151/0x1f0 [ 512.245758][ T2791] __netlink_deliver_tap+0x2c9/0x500 [ 512.245787][ T2791] netlink_unicast+0x66b/0x690 [ 512.245808][ T2791] netlink_sendmsg+0x58b/0x6b0 [ 512.245836][ T2791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.245926][ T2791] __sock_sendmsg+0x145/0x180 [ 512.245957][ T2791] ____sys_sendmsg+0x31e/0x4a0 [ 512.245985][ T2791] ___sys_sendmsg+0x17b/0x1d0 [ 512.246035][ T2791] __x64_sys_sendmsg+0xd4/0x160 [ 512.246058][ T2791] x64_sys_call+0x17ba/0x3000 [ 512.246084][ T2791] do_syscall_64+0xd8/0x2a0 [ 512.246146][ T2791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.246183][ T2791] RIP: 0033:0x7f1b699af749 [ 512.246276][ T2791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.246356][ T2791] RSP: 002b:00007f1b6840f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.246373][ T2791] RAX: ffffffffffffffda RBX: 00007f1b69c05fa0 RCX: 00007f1b699af749 [ 512.246384][ T2791] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000004 [ 512.246395][ T2791] RBP: 00007f1b6840f090 R08: 0000000000000000 R09: 0000000000000000 [ 512.246407][ T2791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.246420][ T2791] R13: 00007f1b69c06038 R14: 00007f1b69c05fa0 R15: 00007fffc13457f8 [ 512.246468][ T2791] [ 512.444120][ T2791] bond3: (slave bridge1): making interface the new active one [ 512.451652][ T2791] bridge1: entered promiscuous mode [ 512.458367][ T2791] bridge1: left promiscuous mode [ 512.516908][ T2833] netlink: 'syz.0.8852': attribute type 10 has an invalid length. [ 512.524793][ T2833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8852'. [ 512.534402][ T2833] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 512.592106][ T2842] loop6: detected capacity change from 0 to 128 [ 512.681623][ T2860] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 513.369005][ T2883] loop7: detected capacity change from 0 to 128 [ 513.423802][ T2890] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 513.433968][ T2890] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8869'. [ 513.443349][ T2890] hsr_slave_0: left promiscuous mode [ 513.449292][ T2890] hsr_slave_1: left promiscuous mode [ 513.604743][ T2902] netlink: 'syz.7.8871': attribute type 10 has an invalid length. [ 513.689131][ T29] kauditd_printk_skb: 1180 callbacks suppressed [ 513.689147][ T29] audit: type=1326 audit(1764996026.199:18223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2876 comm="syz.5.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e8bfb2005 code=0x7ffc0000 [ 513.720406][ T29] audit: type=1326 audit(1764996026.227:18224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2876 comm="syz.5.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5e8bf7f749 code=0x7ffc0000 [ 513.744055][ T29] audit: type=1326 audit(1764996026.227:18225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2876 comm="syz.5.8864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5e8bf7f749 code=0x7ffc0000 [ 513.820906][ T2921] siw: device registration error -23 [ 513.842996][ T2921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8877'. [ 513.867112][ T2927] loop5: detected capacity change from 0 to 764 [ 513.876149][ T2927] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 513.942585][ T2933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.951102][ T2933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.982315][ T2932] loop7: detected capacity change from 0 to 164 [ 514.002078][ T2932] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J' [ 514.091650][ T2942] netlink: 'syz.0.8885': attribute type 10 has an invalid length. [ 514.099641][ T2942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8885'. [ 514.151891][ T2946] loop5: detected capacity change from 0 to 128 [ 514.199204][ T29] audit: type=1326 audit(1764996026.274:18226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.7.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 514.222721][ T29] audit: type=1326 audit(1764996026.274:18227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.7.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 514.240753][ T2942] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 514.246275][ T29] audit: type=1326 audit(1764996026.274:18228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.7.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 514.285459][ T29] audit: type=1326 audit(1764996026.274:18229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.7.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 514.309012][ T29] audit: type=1326 audit(1764996026.274:18230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.7.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 514.332474][ T29] audit: type=1326 audit(1764996026.274:18231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.7.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 514.355982][ T29] audit: type=1326 audit(1764996026.274:18232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2901 comm="syz.7.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 514.499407][ T2970] loop5: detected capacity change from 0 to 128 [ 514.524938][ T2973] netlink: 'syz.7.8894': attribute type 10 has an invalid length. [ 514.554678][ T2978] EXT4-fs: inline encryption not supported [ 514.560594][ T2978] EXT4-fs: Ignoring removed orlov option [ 514.587418][ T2978] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 514.611761][ T2978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 514.629397][ T2978] System zones: 0-1, 3-12 [ 514.680422][ T2993] FAULT_INJECTION: forcing a failure. [ 514.680422][ T2993] name failslab, interval 1, probability 0, space 0, times 0 [ 514.693049][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: syz.5.8898 Not tainted syzkaller #0 PREEMPT(voluntary) [ 514.693078][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.693098][ T2993] Call Trace: [ 514.693104][ T2993] [ 514.693114][ T2993] __dump_stack+0x1d/0x30 [ 514.693139][ T2993] dump_stack_lvl+0xe8/0x140 [ 514.693161][ T2993] dump_stack+0x15/0x1b [ 514.693217][ T2993] should_fail_ex+0x265/0x280 [ 514.693246][ T2993] ? audit_log_d_path+0x8d/0x150 [ 514.693265][ T2993] should_failslab+0x8c/0xb0 [ 514.693344][ T2993] __kmalloc_cache_noprof+0x4c/0x4c0 [ 514.693366][ T2993] audit_log_d_path+0x8d/0x150 [ 514.693384][ T2993] audit_log_d_path_exe+0x42/0x70 [ 514.693403][ T2993] audit_log_task+0x1e9/0x250 [ 514.693467][ T2993] ? kstrtouint+0x76/0xc0 [ 514.693497][ T2993] audit_seccomp+0x61/0x100 [ 514.693525][ T2993] ? __seccomp_filter+0x832/0x1260 [ 514.693607][ T2993] __seccomp_filter+0x843/0x1260 [ 514.693630][ T2993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 514.693653][ T2993] ? vfs_write+0x7e8/0x960 [ 514.693679][ T2993] ? __rcu_read_unlock+0x4f/0x70 [ 514.693745][ T2993] ? __fget_files+0x184/0x1c0 [ 514.693765][ T2993] __secure_computing+0x82/0x150 [ 514.693788][ T2993] syscall_trace_enter+0xcf/0x1e0 [ 514.693815][ T2993] do_syscall_64+0xb2/0x2a0 [ 514.693868][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.693943][ T2993] RIP: 0033:0x7f5e8bf7f749 [ 514.693958][ T2993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.693974][ T2993] RSP: 002b:00007f5e8a9e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 514.694037][ T2993] RAX: ffffffffffffffda RBX: 00007f5e8c1d5fa0 RCX: 00007f5e8bf7f749 [ 514.694049][ T2993] RDX: 0100000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 514.694061][ T2993] RBP: 00007f5e8a9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 514.694073][ T2993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.694084][ T2993] R13: 00007f5e8c1d6038 R14: 00007f5e8c1d5fa0 R15: 00007fff0b9b0f08 [ 514.694106][ T2993] [ 514.932530][ T3001] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 514.940546][ T3001] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 514.948693][ T3001] System zones: 0-1, 15-15, 18-18, 34-34 [ 514.955107][ T3001] EXT4-fs (loop0): orphan cleanup on readonly fs [ 514.955723][ T3008] netlink: 'syz.7.8900': attribute type 10 has an invalid length. [ 514.961678][ T3001] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 514.969383][ T3008] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8900'. [ 514.983898][ T3001] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 515.020287][ T3001] EXT4-fs (loop0): 1 truncate cleaned up [ 515.060702][ T3017] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8904'. [ 515.143060][ T3029] EXT4-fs: inline encryption not supported [ 515.148908][ T3029] EXT4-fs: Ignoring removed orlov option [ 515.158962][ T3029] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 515.177961][ T3031] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 515.185892][ T3031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 515.194205][ T3031] System zones: 0-1, 15-15, 18-18, 34-34 [ 515.200065][ T3031] EXT4-fs (loop7): orphan cleanup on readonly fs [ 515.206640][ T3031] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 515.221180][ T3031] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 515.225243][ T3029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 515.236065][ T3043] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 515.236135][ T3043] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 515.244212][ T3031] EXT4-fs (loop7): 1 truncate cleaned up [ 515.260920][ T3029] System zones: 0-1, 3-12 [ 515.283889][ T3031] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 515.291822][ T3031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 515.430186][ T3068] netlink: 'syz.5.8916': attribute type 10 has an invalid length. [ 515.477681][ T3076] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.499014][ T3082] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.503777][ T3078] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8920'. [ 515.544643][ T3082] bond1 (unregistering): Released all slaves [ 515.651466][ T5645] bio_check_eod: 146 callbacks suppressed [ 515.651482][ T5645] kworker/u8:61: attempt to access beyond end of device [ 515.651482][ T5645] loop5: rw=1, sector=145, nr_sectors = 25 limit=128 [ 516.095624][ T3179] siw: device registration error -23 [ 516.103450][ T3179] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8926'. [ 516.277861][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.277861][ T3189] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 516.291844][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.291844][ T3189] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 516.305520][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.305520][ T3189] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 516.319138][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.319138][ T3189] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 516.332976][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.332976][ T3189] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 516.333017][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.333017][ T3189] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 516.360041][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.360041][ T3189] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 516.373625][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.373625][ T3189] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 516.373665][ T3189] syz.5.8929: attempt to access beyond end of device [ 516.373665][ T3189] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 516.943792][ T3233] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J' [ 517.344073][ T3255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3255 comm=syz.0.8946 [ 517.344815][ T3254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3254 comm=syz.0.8946 [ 518.508178][ T3275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.517091][ T3275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.581294][ T3281] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 518.770440][ T3291] __nla_validate_parse: 1 callbacks suppressed [ 518.770454][ T3291] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8956'. [ 518.854691][ T3293] set_capacity_and_notify: 13 callbacks suppressed [ 518.854725][ T3293] loop8: detected capacity change from 0 to 128 [ 519.045329][ T3321] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 519.172645][ T3328] loop7: detected capacity change from 0 to 128 [ 519.288937][ T3331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.297563][ T3331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.401577][ T3341] loop7: detected capacity change from 0 to 512 [ 519.414356][ T3341] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 519.422379][ T3341] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 519.532115][ T3341] System zones: 0-1, 15-15, 18-18, 34-34 [ 519.538911][ T3341] EXT4-fs (loop7): orphan cleanup on readonly fs [ 519.545514][ T3341] __quota_error: 163 callbacks suppressed [ 519.545530][ T3341] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 519.561274][ T3341] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 519.575888][ T3341] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 519.583474][ T3341] EXT4-fs (loop7): 1 truncate cleaned up [ 519.589736][ T3341] EXT4-fs mount: 68 callbacks suppressed [ 519.589751][ T3341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.656364][T21199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.698143][ T29] audit: type=1326 audit(1764996031.812:18394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.7.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 519.731069][ T3350] FAULT_INJECTION: forcing a failure. [ 519.731069][ T3350] name failslab, interval 1, probability 0, space 0, times 0 [ 519.731726][ T29] audit: type=1326 audit(1764996031.812:18395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.7.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 519.743756][ T3350] CPU: 0 UID: 0 PID: 3350 Comm: syz.7.8973 Not tainted syzkaller #0 PREEMPT(voluntary) [ 519.743816][ T3350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.743830][ T3350] Call Trace: [ 519.743839][ T3350] [ 519.743848][ T3350] __dump_stack+0x1d/0x30 [ 519.743954][ T3350] dump_stack_lvl+0xe8/0x140 [ 519.744056][ T3350] dump_stack+0x15/0x1b [ 519.744076][ T3350] should_fail_ex+0x265/0x280 [ 519.744171][ T3350] ? audit_log_d_path+0x8d/0x150 [ 519.744192][ T3350] should_failslab+0x8c/0xb0 [ 519.744212][ T3350] __kmalloc_cache_noprof+0x4c/0x4c0 [ 519.744264][ T3350] audit_log_d_path+0x8d/0x150 [ 519.744285][ T3350] audit_log_d_path_exe+0x42/0x70 [ 519.744307][ T3350] audit_log_task+0x1e9/0x250 [ 519.744364][ T3350] ? kstrtouint+0x76/0xc0 [ 519.744394][ T3350] audit_seccomp+0x61/0x100 [ 519.744446][ T3350] ? __seccomp_filter+0x832/0x1260 [ 519.744473][ T3350] __seccomp_filter+0x843/0x1260 [ 519.744501][ T3350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 519.744549][ T3350] ? vfs_write+0x7e8/0x960 [ 519.744578][ T3350] ? __rcu_read_unlock+0x4f/0x70 [ 519.744600][ T3350] ? __fget_files+0x184/0x1c0 [ 519.744624][ T3350] __secure_computing+0x82/0x150 [ 519.744684][ T3350] syscall_trace_enter+0xcf/0x1e0 [ 519.744743][ T3350] do_syscall_64+0xb2/0x2a0 [ 519.744772][ T3350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.744795][ T3350] RIP: 0033:0x7fc38809f749 [ 519.744811][ T3350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.744876][ T3350] RSP: 002b:00007fc386b07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 519.744905][ T3350] RAX: ffffffffffffffda RBX: 00007fc3882f5fa0 RCX: 00007fc38809f749 [ 519.744919][ T3350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.744932][ T3350] RBP: 00007fc386b07090 R08: 0000000000000000 R09: 0000000000000000 [ 519.744989][ T3350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.745003][ T3350] R13: 00007fc3882f6038 R14: 00007fc3882f5fa0 R15: 00007ffe82891a68 [ 519.745022][ T3350] [ 519.974981][ T29] audit: type=1326 audit(1764996031.849:18396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3351 comm="syz.0.8974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd4c9cf749 code=0x0 [ 519.997887][ T29] audit: type=1326 audit(1764996031.849:18397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.7.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 520.021492][ T29] audit: type=1326 audit(1764996031.849:18398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.7.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 520.044955][ T29] audit: type=1326 audit(1764996031.849:18399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.7.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc38809df90 code=0x7ffc0000 [ 520.068430][ T29] audit: type=1326 audit(1764996031.849:18400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.7.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc38809e1ff code=0x7ffc0000 [ 520.091797][ T29] audit: type=1326 audit(1764996031.849:18401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.7.8973" exe="" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 520.114860][ T29] audit: type=1326 audit(1764996031.859:18402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3349 comm="syz.7.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc38809e15c code=0x7ffc0000 [ 520.146492][ T3360] netlink: 'syz.6.8977': attribute type 3 has an invalid length. [ 520.154329][ T3360] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8977'. [ 520.237706][ T3371] loop7: detected capacity change from 0 to 128 [ 520.419407][ T3381] netlink: 182 bytes leftover after parsing attributes in process `syz.6.8982'. [ 520.632584][ T3400] netlink: 'syz.0.8987': attribute type 10 has an invalid length. [ 520.640539][ T3400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8987'. [ 520.651253][ T3400] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 520.695583][ T3404] pim6reg: entered allmulticast mode [ 520.731807][ T3404] SELinux: ebitmap start bit (33554464) is not a multiple of the map unit size (64) [ 520.742090][ T3404] SELinux: failed to load policy [ 520.747647][ T3404] pim6reg: left allmulticast mode [ 521.211017][ T3422] loop5: detected capacity change from 0 to 256 [ 521.279985][ T3425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8992'. [ 521.376108][ T3430] loop7: detected capacity change from 0 to 164 [ 521.383093][ T3430] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J' [ 521.543843][ T3445] loop0: detected capacity change from 0 to 128 [ 521.829987][ T3462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.838472][ T3462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.907880][ T3455] pimreg: entered allmulticast mode [ 521.920240][ T3455] pimreg: left allmulticast mode [ 522.142084][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.151173][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.163042][ T3484] netlink: 'syz.5.9009': attribute type 13 has an invalid length. [ 522.173044][ T3490] FAULT_INJECTION: forcing a failure. [ 522.173044][ T3490] name failslab, interval 1, probability 0, space 0, times 0 [ 522.185698][ T3490] CPU: 0 UID: 0 PID: 3490 Comm: syz.0.9008 Not tainted syzkaller #0 PREEMPT(voluntary) [ 522.185721][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.185729][ T3490] Call Trace: [ 522.185734][ T3490] [ 522.185739][ T3490] __dump_stack+0x1d/0x30 [ 522.185754][ T3490] dump_stack_lvl+0xe8/0x140 [ 522.185767][ T3490] dump_stack+0x15/0x1b [ 522.185778][ T3490] should_fail_ex+0x265/0x280 [ 522.185796][ T3490] ? resv_map_alloc+0x32/0x190 [ 522.185810][ T3490] should_failslab+0x8c/0xb0 [ 522.185821][ T3490] __kmalloc_cache_noprof+0x4c/0x4c0 [ 522.185834][ T3490] resv_map_alloc+0x32/0x190 [ 522.185846][ T3490] hugetlb_reserve_pages+0x1ab/0xc00 [ 522.185864][ T3490] hugetlbfs_file_mmap+0x27e/0x340 [ 522.185881][ T3490] mmap_region+0xf93/0x15f0 [ 522.185909][ T3490] do_mmap+0x9b3/0xbe0 [ 522.185925][ T3490] vm_mmap_pgoff+0x17a/0x2e0 [ 522.185947][ T3490] ksys_mmap_pgoff+0x2d0/0x310 [ 522.185963][ T3490] x64_sys_call+0x16bb/0x3000 [ 522.185982][ T3490] do_syscall_64+0xd8/0x2a0 [ 522.186011][ T3490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.186030][ T3490] RIP: 0033:0x7fcd4c9cf749 [ 522.186039][ T3490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.186050][ T3490] RSP: 002b:00007fcd4b40e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 522.186062][ T3490] RAX: ffffffffffffffda RBX: 00007fcd4cc26090 RCX: 00007fcd4c9cf749 [ 522.186069][ T3490] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 522.186076][ T3490] RBP: 00007fcd4b40e090 R08: ffffffffffffffff R09: 0000000000000000 [ 522.186084][ T3490] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 522.186091][ T3490] R13: 00007fcd4cc26128 R14: 00007fcd4cc26090 R15: 00007fff461a54f8 [ 522.186101][ T3490] [ 522.419368][ T3491] 9pnet_fd: Insufficient options for proto=fd [ 522.442220][ T5653] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.451067][ T5653] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.462159][ T5653] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.463343][ T3495] netlink: 'syz.8.9010': attribute type 10 has an invalid length. [ 522.470649][ T5653] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.011471][ T3505] siw: device registration error -23 [ 523.018438][ T3505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9013'. [ 523.674871][ T3516] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9015'. [ 523.749186][ T3524] FAULT_INJECTION: forcing a failure. [ 523.749186][ T3524] name failslab, interval 1, probability 0, space 0, times 0 [ 523.761978][ T3524] CPU: 0 UID: 0 PID: 3524 Comm: syz.8.9017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 523.762009][ T3524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.762022][ T3524] Call Trace: [ 523.762030][ T3524] [ 523.762037][ T3524] __dump_stack+0x1d/0x30 [ 523.762059][ T3524] dump_stack_lvl+0xe8/0x140 [ 523.762157][ T3524] dump_stack+0x15/0x1b [ 523.762174][ T3524] should_fail_ex+0x265/0x280 [ 523.762207][ T3524] should_failslab+0x8c/0xb0 [ 523.762229][ T3524] kmem_cache_alloc_noprof+0x50/0x4a0 [ 523.762322][ T3524] ? skb_clone+0x151/0x1f0 [ 523.762346][ T3524] skb_clone+0x151/0x1f0 [ 523.762425][ T3524] pfkey_sendmsg+0x2cc/0x900 [ 523.762452][ T3524] ? avc_has_perm+0xf7/0x180 [ 523.762489][ T3524] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 523.762509][ T3524] __sock_sendmsg+0x145/0x180 [ 523.762560][ T3524] ____sys_sendmsg+0x31e/0x4a0 [ 523.762583][ T3524] ___sys_sendmsg+0x17b/0x1d0 [ 523.762614][ T3524] __x64_sys_sendmsg+0xd4/0x160 [ 523.762661][ T3524] x64_sys_call+0x17ba/0x3000 [ 523.762688][ T3524] do_syscall_64+0xd8/0x2a0 [ 523.762746][ T3524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.762813][ T3524] RIP: 0033:0x7f8691aef749 [ 523.762827][ T3524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.762843][ T3524] RSP: 002b:00007f869054f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.762893][ T3524] RAX: ffffffffffffffda RBX: 00007f8691d45fa0 RCX: 00007f8691aef749 [ 523.762908][ T3524] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 523.762919][ T3524] RBP: 00007f869054f090 R08: 0000000000000000 R09: 0000000000000000 [ 523.762931][ T3524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.762943][ T3524] R13: 00007f8691d46038 R14: 00007f8691d45fa0 R15: 00007ffe036ba4a8 [ 523.763003][ T3524] [ 524.026742][ T3535] FAULT_INJECTION: forcing a failure. [ 524.026742][ T3535] name failslab, interval 1, probability 0, space 0, times 0 [ 524.039435][ T3535] CPU: 0 UID: 0 PID: 3535 Comm: syz.8.9019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 524.039535][ T3535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 524.039625][ T3535] Call Trace: [ 524.039633][ T3535] [ 524.039640][ T3535] __dump_stack+0x1d/0x30 [ 524.039666][ T3535] dump_stack_lvl+0xe8/0x140 [ 524.039689][ T3535] dump_stack+0x15/0x1b [ 524.039709][ T3535] should_fail_ex+0x265/0x280 [ 524.039792][ T3535] ? __se_sys_fsopen+0x10d/0x1e0 [ 524.039814][ T3535] should_failslab+0x8c/0xb0 [ 524.039837][ T3535] __kmalloc_cache_noprof+0x4c/0x4c0 [ 524.039863][ T3535] __se_sys_fsopen+0x10d/0x1e0 [ 524.039962][ T3535] __x64_sys_fsopen+0x31/0x40 [ 524.039986][ T3535] x64_sys_call+0xb84/0x3000 [ 524.040013][ T3535] do_syscall_64+0xd8/0x2a0 [ 524.040107][ T3535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.040127][ T3535] RIP: 0033:0x7f8691aef749 [ 524.040141][ T3535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.040182][ T3535] RSP: 002b:00007f869054f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 524.040204][ T3535] RAX: ffffffffffffffda RBX: 00007f8691d45fa0 RCX: 00007f8691aef749 [ 524.040294][ T3535] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 524.040323][ T3535] RBP: 00007f869054f090 R08: 0000000000000000 R09: 0000000000000000 [ 524.040335][ T3535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.040346][ T3535] R13: 00007f8691d46038 R14: 00007f8691d45fa0 R15: 00007ffe036ba4a8 [ 524.040363][ T3535] [ 524.212281][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9018'. [ 524.841290][ T3551] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9024'. [ 524.903642][ T3555] netlink: 'syz.7.9026': attribute type 10 has an invalid length. [ 524.912288][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 524.912376][ T29] audit: type=1326 audit(1764996036.686:18433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.7.9026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 524.945024][ T29] audit: type=1326 audit(1764996036.714:18434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.7.9026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 524.968611][ T29] audit: type=1326 audit(1764996036.714:18435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.7.9026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 524.992066][ T29] audit: type=1326 audit(1764996036.714:18436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.7.9026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 525.015592][ T29] audit: type=1326 audit(1764996036.714:18437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.7.9026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 525.039063][ T29] audit: type=1326 audit(1764996036.714:18438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.7.9026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 525.072227][ T29] audit: type=1326 audit(1764996036.836:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.7.9026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 525.095831][ T29] audit: type=1326 audit(1764996036.836:18440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.7.9026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38809f749 code=0x7ffc0000 [ 525.148490][ T3564] loop8: detected capacity change from 0 to 128 [ 525.232738][ T29] audit: type=1404 audit(1764996036.985:18441): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 525.248232][ T29] audit: type=1404 audit(1764996037.004:18442): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 525.284707][ T3574] loop8: detected capacity change from 0 to 128 [ 525.295935][ T3574] bio_check_eod: 275 callbacks suppressed [ 525.295951][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.295951][ T3574] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 525.323045][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.323045][ T3574] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 525.336505][ T3574] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 525.346254][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.346254][ T3574] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 525.359773][ T3574] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 525.368447][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.368447][ T3574] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 525.382130][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.382130][ T3574] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 525.395560][ T3574] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 525.408470][ T3578] netlink: 'syz.0.9032': attribute type 10 has an invalid length. [ 525.418124][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.418124][ T3574] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 525.431544][ T3574] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 525.440635][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.440635][ T3574] loop8: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 525.454133][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.454133][ T3574] loop8: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 525.467540][ T3574] Buffer I/O error on dev loop8, logical block 95, lost async page write [ 525.476093][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.476093][ T3574] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 525.489540][ T3574] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 525.498267][ T3574] syz.8.9031: attempt to access beyond end of device [ 525.498267][ T3574] loop8: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 525.512034][ T3574] Buffer I/O error on dev loop8, logical block 99, lost async page write [ 525.520889][ T3574] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 525.529869][ T3574] Buffer I/O error on dev loop8, logical block 111, lost async page write [ 525.538718][ T3574] Buffer I/O error on dev loop8, logical block 112, lost async page write [ 525.580871][ T3583] loop0: detected capacity change from 0 to 128 [ 525.589598][ T3583] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 525.606165][ T3583] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.716968][ T3594] siw: device registration error -23 [ 525.723792][ T3594] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9036'. [ 525.890135][ T3602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.898769][ T3602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.948243][ T3606] loop8: detected capacity change from 0 to 128 [ 526.281150][ T3620] loop5: detected capacity change from 0 to 164 [ 526.287812][ T3620] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J' [ 526.315162][ T3625] loop5: detected capacity change from 0 to 128 [ 526.478154][T31692] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.496553][ T3637] loop0: detected capacity change from 0 to 128 [ 526.635406][ T3645] siw: device registration error -23 [ 526.642214][ T3645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9048'. [ 526.821384][ T3630] syz.5.9045 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 526.835597][ T3630] CPU: 0 UID: 0 PID: 3630 Comm: syz.5.9045 Not tainted syzkaller #0 PREEMPT(voluntary) [ 526.835683][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.835699][ T3630] Call Trace: [ 526.835707][ T3630] [ 526.835715][ T3630] __dump_stack+0x1d/0x30 [ 526.835765][ T3630] dump_stack_lvl+0xe8/0x140 [ 526.835792][ T3630] dump_stack+0x15/0x1b [ 526.835815][ T3630] dump_header+0x81/0x220 [ 526.835849][ T3630] oom_kill_process+0x342/0x400 [ 526.835876][ T3630] out_of_memory+0x979/0xb80 [ 526.835901][ T3630] try_charge_memcg+0x610/0xa10 [ 526.836049][ T3630] obj_cgroup_charge_pages+0xa6/0x150 [ 526.836107][ T3630] __memcg_kmem_charge_page+0x9f/0x170 [ 526.836153][ T3630] __alloc_frozen_pages_noprof+0x188/0x360 [ 526.836192][ T3630] alloc_pages_mpol+0xb3/0x260 [ 526.836218][ T3630] alloc_pages_noprof+0x90/0x130 [ 526.836313][ T3630] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 526.836344][ T3630] ? ___kmalloc_large_node+0x50/0x130 [ 526.836372][ T3630] __kvmalloc_node_noprof+0x47f/0x690 [ 526.836399][ T3630] ? ip_set_alloc+0x24/0x30 [ 526.836422][ T3630] ? ip_set_alloc+0x24/0x30 [ 526.836514][ T3630] ? __kmalloc_cache_noprof+0x246/0x4c0 [ 526.836535][ T3630] ip_set_alloc+0x24/0x30 [ 526.836556][ T3630] hash_netiface_create+0x282/0x740 [ 526.836613][ T3630] ? __pfx_hash_netiface_create+0x10/0x10 [ 526.836689][ T3630] ip_set_create+0x3cc/0x970 [ 526.836766][ T3630] ? __nla_parse+0x40/0x60 [ 526.836790][ T3630] nfnetlink_rcv_msg+0x4c6/0x590 [ 526.836826][ T3630] netlink_rcv_skb+0x123/0x220 [ 526.836885][ T3630] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 526.836956][ T3630] nfnetlink_rcv+0x167/0x16c0 [ 526.836978][ T3630] ? __free_frozen_pages+0x284/0x510 [ 526.837001][ T3630] ? free_large_kmalloc+0x9f/0x150 [ 526.837038][ T3630] ? bpf_check+0x9d67/0xc860 [ 526.837068][ T3630] ? arch_scale_cpu_capacity+0x15/0x70 [ 526.837095][ T3630] ? sched_balance_rq+0x639/0x1ed0 [ 526.837147][ T3630] ? do_jit+0x80b5/0x8340 [ 526.837178][ T3630] ? should_fail_ex+0x30/0x280 [ 526.837210][ T3630] ? selinux_nlmsg_lookup+0x99/0x890 [ 526.837242][ T3630] ? __rcu_read_unlock+0x34/0x70 [ 526.837306][ T3630] ? __netlink_lookup+0x266/0x2a0 [ 526.837334][ T3630] netlink_unicast+0x5c0/0x690 [ 526.837357][ T3630] netlink_sendmsg+0x58b/0x6b0 [ 526.837441][ T3630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.837531][ T3630] __sock_sendmsg+0x145/0x180 [ 526.837564][ T3630] ____sys_sendmsg+0x31e/0x4a0 [ 526.837592][ T3630] ___sys_sendmsg+0x17b/0x1d0 [ 526.837738][ T3630] __x64_sys_sendmsg+0xd4/0x160 [ 526.837769][ T3630] x64_sys_call+0x17ba/0x3000 [ 526.837792][ T3630] do_syscall_64+0xd8/0x2a0 [ 526.837825][ T3630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.837884][ T3630] RIP: 0033:0x7f5e8bf7f749 [ 526.837899][ T3630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.837916][ T3630] RSP: 002b:00007f5e8a9e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.837934][ T3630] RAX: ffffffffffffffda RBX: 00007f5e8c1d5fa0 RCX: 00007f5e8bf7f749 [ 526.838009][ T3630] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 526.838025][ T3630] RBP: 00007f5e8c003f91 R08: 0000000000000000 R09: 0000000000000000 [ 526.838040][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.838054][ T3630] R13: 00007f5e8c1d6038 R14: 00007f5e8c1d5fa0 R15: 00007fff0b9b0f08 [ 526.838104][ T3630] [ 527.169963][ T3630] memory: usage 307200kB, limit 307200kB, failcnt 424 [ 527.176730][ T3630] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 527.184645][ T3630] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 527.191948][ T3630] Memory cgroup stats for /syz5: [ 527.192449][ T3630] cache 0 [ 527.200334][ T3630] rss 4096 [ 527.203389][ T3630] shmem 0 [ 527.206355][ T3630] mapped_file 0 [ 527.209813][ T3630] dirty 0 [ 527.212757][ T3630] writeback 0 [ 527.216032][ T3630] workingset_refault_anon 137 [ 527.220714][ T3630] workingset_refault_file 72 [ 527.225325][ T3630] swap 385024 [ 527.228655][ T3630] swapcached 16384 [ 527.228665][ T3630] pgpgin 441841 [ 527.228674][ T3630] pgpgout 441837 [ 527.228682][ T3630] pgfault 594950 [ 527.242943][ T3630] pgmajfault 86 [ 527.242984][ T3630] inactive_anon 0 [ 527.242992][ T3630] active_anon 16384 [ 527.242999][ T3630] inactive_file 0 [ 527.243007][ T3630] active_file 0 [ 527.260978][ T3630] unevictable 0 [ 527.264454][ T3630] hierarchical_memory_limit 314572800 [ 527.269824][ T3630] hierarchical_memsw_limit 9223372036854771712 [ 527.276060][ T3630] total_cache 0 [ 527.279515][ T3630] total_rss 4096 [ 527.283048][ T3630] total_shmem 0 [ 527.286521][ T3630] total_mapped_file 0 [ 527.290565][ T3630] total_dirty 0 [ 527.294015][ T3630] total_writeback 0 [ 527.298001][ T3630] total_workingset_refault_anon 137 [ 527.303201][ T3630] total_workingset_refault_file 72 [ 527.308338][ T3630] total_swap 385024 [ 527.312145][ T3630] total_swapcached 16384 [ 527.316384][ T3630] total_pgpgin 441841 [ 527.320408][ T3630] total_pgpgout 441837 [ 527.324476][ T3630] total_pgfault 594950 [ 527.328573][ T3630] total_pgmajfault 86 [ 527.332566][ T3630] total_inactive_anon 0 [ 527.336716][ T3630] total_active_anon 16384 [ 527.341056][ T3630] total_inactive_file 0 [ 527.345268][ T3630] total_active_file 0 [ 527.349297][ T3630] total_unevictable 0 [ 527.353292][ T3630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.9045,pid=3629,uid=0 [ 527.367972][ T3630] Memory cgroup out of memory: Killed process 3629 (syz.5.9045) total-vm:93968kB, anon-rss:1140kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 527.604834][ T3670] netlink: 'syz.5.9057': attribute type 10 has an invalid length. [ 527.765013][ T3680] FAULT_INJECTION: forcing a failure. [ 527.765013][ T3680] name failslab, interval 1, probability 0, space 0, times 0 [ 527.777790][ T3680] CPU: 1 UID: 0 PID: 3680 Comm: syz.5.9060 Not tainted syzkaller #0 PREEMPT(voluntary) [ 527.777816][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.777827][ T3680] Call Trace: [ 527.777834][ T3680] [ 527.777863][ T3680] __dump_stack+0x1d/0x30 [ 527.777886][ T3680] dump_stack_lvl+0xe8/0x140 [ 527.777916][ T3680] dump_stack+0x15/0x1b [ 527.778011][ T3680] should_fail_ex+0x265/0x280 [ 527.778046][ T3680] should_failslab+0x8c/0xb0 [ 527.778093][ T3680] __kmalloc_noprof+0xa5/0x590 [ 527.778150][ T3680] ? security_sk_alloc+0x52/0x120 [ 527.778171][ T3680] security_sk_alloc+0x52/0x120 [ 527.778252][ T3680] sk_prot_alloc+0xc2/0x190 [ 527.778272][ T3680] sk_alloc+0x34/0x3d0 [ 527.778288][ T3680] unix_create1+0xa5/0x400 [ 527.778308][ T3680] ? inode_init_always_gfp+0x4cd/0x500 [ 527.778356][ T3680] unix_create+0x11f/0x150 [ 527.778383][ T3680] __sock_create+0x2e5/0x580 [ 527.778409][ T3680] __sys_socketpair+0x170/0x430 [ 527.778434][ T3680] ? ksys_write+0x192/0x1a0 [ 527.778459][ T3680] __x64_sys_socketpair+0x52/0x60 [ 527.778548][ T3680] x64_sys_call+0x2df3/0x3000 [ 527.778577][ T3680] do_syscall_64+0xd8/0x2a0 [ 527.778600][ T3680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.778620][ T3680] RIP: 0033:0x7f5e8bf7f749 [ 527.778710][ T3680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.778729][ T3680] RSP: 002b:00007f5e8a9e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 527.778784][ T3680] RAX: ffffffffffffffda RBX: 00007f5e8c1d5fa0 RCX: 00007f5e8bf7f749 [ 527.778796][ T3680] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 527.778809][ T3680] RBP: 00007f5e8a9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 527.778821][ T3680] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 527.778833][ T3680] R13: 00007f5e8c1d6038 R14: 00007f5e8c1d5fa0 R15: 00007fff0b9b0f08 [ 527.778872][ T3680] [ 527.986734][ T3680] loop5: detected capacity change from 0 to 512 [ 527.994461][ T3680] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 528.014877][ T3680] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.9060: bad orphan inode 13 [ 528.029125][ T3680] ext4_test_bit(bit=12, block=18) = 1 [ 528.034689][ T3680] is_bad_inode(inode)=0 [ 528.039143][ T3680] NEXT_ORPHAN(inode)=0 [ 528.043285][ T3680] max_ino=32 [ 528.046514][ T3680] i_nlink=1 [ 528.089668][ T3680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 528.210858][ T3692] loop0: detected capacity change from 0 to 128 [ 528.218243][T20531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 528.240875][ T3697] loop5: detected capacity change from 0 to 164 [ 528.247640][ T3697] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J' [ 528.863783][ T3744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.901300][ T3748] FAULT_INJECTION: forcing a failure. [ 528.901300][ T3748] name failslab, interval 1, probability 0, space 0, times 0 [ 528.914018][ T3748] CPU: 1 UID: 0 PID: 3748 Comm: syz.7.9076 Not tainted syzkaller #0 PREEMPT(voluntary) [ 528.914046][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.914059][ T3748] Call Trace: [ 528.914095][ T3748] [ 528.914129][ T3748] __dump_stack+0x1d/0x30 [ 528.914149][ T3748] dump_stack_lvl+0xe8/0x140 [ 528.914236][ T3748] dump_stack+0x15/0x1b [ 528.914247][ T3748] should_fail_ex+0x265/0x280 [ 528.914329][ T3748] ? __se_sys_mount+0xef/0x2e0 [ 528.914348][ T3748] should_failslab+0x8c/0xb0 [ 528.914360][ T3748] __kmalloc_cache_noprof+0x4c/0x4c0 [ 528.914373][ T3748] ? memdup_user+0x99/0xd0 [ 528.914460][ T3748] __se_sys_mount+0xef/0x2e0 [ 528.914521][ T3748] ? __bpf_trace_sys_enter+0x10/0x30 [ 528.914535][ T3748] ? trace_sys_enter+0xd0/0xf0 [ 528.914548][ T3748] __x64_sys_mount+0x67/0x80 [ 528.914566][ T3748] x64_sys_call+0x2cca/0x3000 [ 528.914580][ T3748] do_syscall_64+0xd8/0x2a0 [ 528.914598][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.914611][ T3748] RIP: 0033:0x7fc38809f749 [ 528.914621][ T3748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.914703][ T3748] RSP: 002b:00007fc386b07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 528.914715][ T3748] RAX: ffffffffffffffda RBX: 00007fc3882f5fa0 RCX: 00007fc38809f749 [ 528.914723][ T3748] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 528.914731][ T3748] RBP: 00007fc386b07090 R08: 0000200000000300 R09: 0000000000000000 [ 528.914738][ T3748] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 528.914746][ T3748] R13: 00007fc3882f6038 R14: 00007fc3882f5fa0 R15: 00007ffe82891a68 [ 528.914810][ T3748] [ 528.976477][ T3735] lo speed is unknown, defaulting to 1000 [ 529.097319][ T3756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 529.127925][ T3756] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.204212][ T5634] bridge_slave_1: left allmulticast mode [ 529.209900][ T5634] bridge_slave_1: left promiscuous mode [ 529.215597][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.226915][ T5634] bridge_slave_0: left allmulticast mode [ 529.232623][ T5634] bridge_slave_0: left promiscuous mode [ 529.238348][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.368482][ T3882] siw: device registration error -23 [ 529.376034][ T5634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.385324][ T5634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.394602][ T5634] bond0 (unregistering): (slave team0): Releasing backup interface [ 529.402929][ T5634] bond0 (unregistering): Released all slaves [ 529.410930][ T5634] bond1 (unregistering): Released all slaves [ 529.418834][ T3882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9081'. [ 529.430320][ T3735] chnl_net:caif_netlink_parms(): no params data found [ 529.529030][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.536146][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.550506][ T3735] bridge_slave_0: entered allmulticast mode [ 529.571171][ T3735] bridge_slave_0: entered promiscuous mode [ 529.584865][ T5634] hsr_slave_0: left promiscuous mode [ 529.590779][ T5634] hsr_slave_1: left promiscuous mode [ 529.621900][ T5634] team0 (unregistering): Port device team_slave_1 removed [ 529.631868][ T5634] team0 (unregistering): Port device team_slave_0 removed [ 529.659627][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.666785][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.674916][ T3735] bridge_slave_1: entered allmulticast mode [ 529.681812][ T3735] bridge_slave_1: entered promiscuous mode [ 529.708406][ T3735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.721745][ T3735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.759097][T26000] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 529.791359][ T3735] team0: Port device team_slave_0 added [ 529.798580][ T3735] team0: Port device team_slave_1 added [ 529.856228][ T4033] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9091'. [ 529.866515][ T3735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.873511][ T3735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.899446][ T3735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.910970][ T3735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.917937][ T3735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.943892][ T3735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.026475][ T3735] hsr_slave_0: entered promiscuous mode [ 530.034418][ T3735] hsr_slave_1: entered promiscuous mode [ 530.040391][ T3735] debugfs: 'hsr0' already exists in 'hsr' [ 530.046165][ T3735] Cannot create hsr debugfs directory [ 530.052918][ T4080] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 530.074823][ T4080] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.092262][ T4107] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 530.105119][ T4107] vhci_hcd: invalid port number 253 [ 530.110348][ T4107] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 530.337803][ T3735] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 530.346704][ T3735] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 530.355367][ T3735] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 530.364464][ T3735] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 530.404556][ T3735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.416878][ T3735] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.425720][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.432828][ T5641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.443263][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.450331][ T5620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.466804][ T4184] FAULT_INJECTION: forcing a failure. [ 530.466804][ T4184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.479904][ T4184] CPU: 0 UID: 0 PID: 4184 Comm: syz.7.9098 Not tainted syzkaller #0 PREEMPT(voluntary) [ 530.479931][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.479954][ T4184] Call Trace: [ 530.479960][ T4184] [ 530.479967][ T4184] __dump_stack+0x1d/0x30 [ 530.479992][ T4184] dump_stack_lvl+0xe8/0x140 [ 530.480015][ T4184] dump_stack+0x15/0x1b [ 530.480101][ T4184] should_fail_ex+0x265/0x280 [ 530.480146][ T4184] should_fail+0xb/0x20 [ 530.480207][ T4184] should_fail_usercopy+0x1a/0x20 [ 530.480230][ T4184] _copy_to_user+0x20/0xa0 [ 530.480256][ T4184] simple_read_from_buffer+0xb5/0x130 [ 530.480291][ T4184] proc_fail_nth_read+0x10e/0x150 [ 530.480386][ T4184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.480413][ T4184] vfs_read+0x1a8/0x770 [ 530.480443][ T4184] ? __rcu_read_unlock+0x4f/0x70 [ 530.480477][ T4184] ? __fget_files+0x184/0x1c0 [ 530.480498][ T4184] ? mutex_lock+0x58/0x90 [ 530.480521][ T4184] ksys_read+0xda/0x1a0 [ 530.480634][ T4184] __x64_sys_read+0x40/0x50 [ 530.480739][ T4184] x64_sys_call+0x2889/0x3000 [ 530.480766][ T4184] do_syscall_64+0xd8/0x2a0 [ 530.480796][ T4184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.480878][ T4184] RIP: 0033:0x7fc38809e15c [ 530.480896][ T4184] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 530.480915][ T4184] RSP: 002b:00007fc386b07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.480934][ T4184] RAX: ffffffffffffffda RBX: 00007fc3882f5fa0 RCX: 00007fc38809e15c [ 530.480946][ T4184] RDX: 000000000000000f RSI: 00007fc386b070a0 RDI: 0000000000000005 [ 530.480958][ T4184] RBP: 00007fc386b07090 R08: 0000000000000000 R09: 0000000000000000 [ 530.480977][ T4184] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 530.480989][ T4184] R13: 00007fc3882f6038 R14: 00007fc3882f5fa0 R15: 00007ffe82891a68 [ 530.481007][ T4184] [ 530.714259][ T4191] set_capacity_and_notify: 5 callbacks suppressed [ 530.714275][ T4191] loop7: detected capacity change from 0 to 128 [ 530.714999][ T3735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.754977][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 530.754994][ T29] audit: type=1400 audit(1764996042.159:18627): avc: denied { bind } for pid=4198 comm="syz.7.9100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.805644][ T29] audit: type=1400 audit(1764996042.187:18628): avc: denied { setopt } for pid=4198 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.840741][ T3735] veth0_vlan: entered promiscuous mode [ 530.848434][ T3735] veth1_vlan: entered promiscuous mode [ 530.862818][ T3735] veth0_macvtap: entered promiscuous mode [ 530.870685][ T4214] loop7: detected capacity change from 0 to 128 [ 530.872572][ T3735] veth1_macvtap: entered promiscuous mode [ 530.888876][ T3735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.901561][ T3735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.913915][ T5621] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.927364][ T5621] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.950270][T26000] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 530.951225][ T5621] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.979694][ T4218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9104'. [ 530.980170][ T29] audit: type=1400 audit(1764996042.365:18629): avc: denied { mounton } for pid=3735 comm="syz-executor" path="/root/syzkaller.mlenld/syz-tmp" dev="sda1" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 531.013146][ T29] audit: type=1400 audit(1764996042.365:18630): avc: denied { mount } for pid=3735 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 531.035448][ T29] audit: type=1400 audit(1764996042.365:18631): avc: denied { mount } for pid=3735 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 531.037297][ T4214] bio_check_eod: 110 callbacks suppressed [ 531.037312][ T4214] syz.7.9103: attempt to access beyond end of device [ 531.037312][ T4214] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 531.057560][ T29] audit: type=1400 audit(1764996042.365:18632): avc: denied { mounton } for pid=3735 comm="syz-executor" path="/root/syzkaller.mlenld/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 531.057607][ T29] audit: type=1400 audit(1764996042.365:18633): avc: denied { mounton } for pid=3735 comm="syz-executor" path="/root/syzkaller.mlenld/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=99596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 531.068013][ T5621] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.076809][ T29] audit: type=1400 audit(1764996042.365:18634): avc: denied { mounton } for pid=3735 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 531.076838][ T29] audit: type=1400 audit(1764996042.365:18635): avc: denied { mount } for pid=3735 comm="syz-executor" name="/" dev="gadgetfs" ino=3760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 531.104913][ T4214] syz.7.9103: attempt to access beyond end of device [ 531.104913][ T4214] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 531.199647][ T29] audit: type=1400 audit(1764996042.580:18636): avc: denied { write } for pid=3735 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 531.219277][ T4214] syz.7.9103: attempt to access beyond end of device [ 531.219277][ T4214] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 531.274799][ T4230] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 531.293482][ T4230] loop5: detected capacity change from 0 to 128 [ 531.324822][ T2375] kworker/u8:12: attempt to access beyond end of device [ 531.324822][ T2375] loop7: rw=1, sector=361, nr_sectors = 57 limit=128 [ 531.449664][ T4244] loop5: detected capacity change from 0 to 1024 [ 531.463030][ T4244] EXT4-fs: Ignoring removed orlov option [ 531.479158][ T4244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.509756][ T3735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.645310][ T4260] FAULT_INJECTION: forcing a failure. [ 531.645310][ T4260] name failslab, interval 1, probability 0, space 0, times 0 [ 531.648207][ T4259] loop8: detected capacity change from 0 to 128 [ 531.658054][ T4260] CPU: 0 UID: 0 PID: 4260 Comm: syz.7.9116 Not tainted syzkaller #0 PREEMPT(voluntary) [ 531.658150][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.658163][ T4260] Call Trace: [ 531.658171][ T4260] [ 531.658180][ T4260] __dump_stack+0x1d/0x30 [ 531.658241][ T4260] dump_stack_lvl+0xe8/0x140 [ 531.658265][ T4260] dump_stack+0x15/0x1b [ 531.658286][ T4260] should_fail_ex+0x265/0x280 [ 531.658402][ T4260] should_failslab+0x8c/0xb0 [ 531.658424][ T4260] kmem_cache_alloc_noprof+0x50/0x4a0 [ 531.658458][ T4260] ? flock_lock_inode+0x135/0xf60 [ 531.658515][ T4260] flock_lock_inode+0x135/0xf60 [ 531.658552][ T4260] ? file_has_perm+0x359/0x3a0 [ 531.658578][ T4260] locks_lock_inode_wait+0x6f/0x2a0 [ 531.658611][ T4260] ? selinux_file_lock+0x38/0x50 [ 531.658638][ T4260] __se_sys_flock+0x2f1/0x3b0 [ 531.658665][ T4260] __x64_sys_flock+0x31/0x40 [ 531.658686][ T4260] x64_sys_call+0x2155/0x3000 [ 531.658735][ T4260] do_syscall_64+0xd8/0x2a0 [ 531.658787][ T4260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.658810][ T4260] RIP: 0033:0x7fc38809f749 [ 531.658833][ T4260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.658919][ T4260] RSP: 002b:00007fc386b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 531.658940][ T4260] RAX: ffffffffffffffda RBX: 00007fc3882f5fa0 RCX: 00007fc38809f749 [ 531.658954][ T4260] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 531.658967][ T4260] RBP: 00007fc386b07090 R08: 0000000000000000 R09: 0000000000000000 [ 531.658998][ T4260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.659011][ T4260] R13: 00007fc3882f6038 R14: 00007fc3882f5fa0 R15: 00007ffe82891a68 [ 531.659111][ T4260] [ 531.855172][ T4259] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 531.868271][ T4259] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.908476][ T4273] loop5: detected capacity change from 0 to 128 [ 531.940828][ T4277] loop0: detected capacity change from 0 to 128 [ 531.952162][ T4277] syz.0.9122: attempt to access beyond end of device [ 531.952162][ T4277] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 532.043965][ T4277] syz.0.9122: attempt to access beyond end of device [ 532.043965][ T4277] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 532.057929][ T4277] syz.0.9122: attempt to access beyond end of device [ 532.057929][ T4277] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 532.071662][ T4277] syz.0.9122: attempt to access beyond end of device [ 532.071662][ T4277] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 532.089925][ T4277] syz.0.9122: attempt to access beyond end of device [ 532.089925][ T4277] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 532.103767][ T4277] syz.0.9122: attempt to access beyond end of device [ 532.103767][ T4277] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 532.149813][ T4292] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9125'. [ 532.159173][ T5607] buffer_io_error: 18 callbacks suppressed [ 532.159185][ T5607] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 532.174031][ T5607] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 532.182812][ T5607] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 532.191448][ T5607] Buffer I/O error on dev loop0, logical block 164, lost async page write [ 532.200161][ T5607] Buffer I/O error on dev loop0, logical block 165, lost async page write [ 532.208885][ T5607] Buffer I/O error on dev loop0, logical block 166, lost async page write [ 532.279718][ T4301] netlink: 'syz.5.9128': attribute type 10 has an invalid length. [ 532.289912][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.298085][ T4301] bond0: (slave team0): Enslaving as an active interface with an up link [ 532.504591][ T4304] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 532.517570][ T4304] loop5: detected capacity change from 0 to 512 [ 532.524742][ T4304] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 532.537738][ T4304] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 532.550994][ T4304] EXT4-fs (loop5): 1 truncate cleaned up [ 532.557654][T26000] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 532.561612][ T4304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.588814][ T4312] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9130'. [ 532.608382][ T3735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.628154][ T4321] binfmt_misc: register: failed to install interpreter file ./file0 [ 532.925643][ T4346] loop5: detected capacity change from 0 to 1764 [ 532.932543][ T4346] iso9660: Bad value for 'session' [ 532.979857][ T4353] erspan0: entered promiscuous mode [ 532.997921][ T4353] loop5: detected capacity change from 0 to 512 [ 533.015573][ T4353] EXT4-fs: Ignoring removed orlov option [ 533.021338][ T4353] EXT4-fs: Ignoring removed i_version option [ 533.027498][ T4353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.061165][ T4353] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 533.069151][ T4353] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 533.093279][ T4353] EXT4-fs (loop5): orphan cleanup on readonly fs [ 533.099759][ T4353] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 533.114313][ T4353] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 533.123020][ T4353] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9143: bg 0: block 40: padding at end of block bitmap is not set [ 533.137620][ T4353] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 533.147787][ T4353] EXT4-fs (loop5): 1 truncate cleaned up [ 533.156396][ T4353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.174029][ T4353] EXT4-fs (loop5): shut down requested (1) [ 533.187768][ T4353] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 533.198863][ T4353] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 533.211132][ T4353] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 533.232558][ T3735] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.301769][ T42] ================================================================== [ 533.309880][ T42] BUG: KCSAN: data-race in __stop_tty / pty_write_room [ 533.316741][ T42] [ 533.319063][ T42] write to 0xffff888111bccdbc of 1 bytes by task 4368 on cpu 1: [ 533.326695][ T42] __stop_tty+0x36/0x90 [ 533.330921][ T42] n_tty_ioctl_helper+0x1e9/0x210 [ 533.335969][ T42] n_tty_ioctl+0x101/0x200 [ 533.340412][ T42] tty_ioctl+0x83f/0xb80 [ 533.344670][ T42] __se_sys_ioctl+0xce/0x140 [ 533.349279][ T42] __x64_sys_ioctl+0x43/0x50 [ 533.353875][ T42] x64_sys_call+0x14b0/0x3000 [ 533.358556][ T42] do_syscall_64+0xd8/0x2a0 [ 533.363056][ T42] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.368941][ T42] [ 533.371251][ T42] read to 0xffff888111bccdbc of 1 bytes by task 42 on cpu 0: [ 533.378601][ T42] pty_write_room+0x19/0x70 [ 533.383089][ T42] tty_write_room+0x3f/0x60 [ 533.387573][ T42] __process_echoes+0x36/0x6b0 [ 533.392331][ T42] n_tty_receive_buf_common+0x8e4/0xbe0 [ 533.397877][ T42] n_tty_receive_buf2+0x33/0x40 [ 533.402719][ T42] tty_ldisc_receive_buf+0x66/0xf0 [ 533.407820][ T42] tty_port_default_receive_buf+0x59/0x90 [ 533.413529][ T42] flush_to_ldisc+0x148/0x340 [ 533.418192][ T42] process_scheduled_works+0x4ce/0x9d0 [ 533.423638][ T42] worker_thread+0x582/0x770 [ 533.428216][ T42] kthread+0x489/0x510 [ 533.432276][ T42] ret_from_fork+0x149/0x290 [ 533.436856][ T42] ret_from_fork_asm+0x1a/0x30 [ 533.441610][ T42] [ 533.443913][ T42] value changed: 0x00 -> 0x01 [ 533.448569][ T42] [ 533.450872][ T42] Reported by Kernel Concurrency Sanitizer on: [ 533.457004][ T42] CPU: 0 UID: 0 PID: 42 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 533.466715][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 533.476756][ T42] Workqueue: events_unbound flush_to_ldisc [ 533.482552][ T42] ================================================================== [ 533.553718][ T4367] iso9660: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777y’áÜ°!J'