last executing test programs: 1m39.827835059s ago: executing program 1 (id=7508): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="99", 0x1}], 0x1}, 0x4048043) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xffc2, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) 1m39.198892876s ago: executing program 1 (id=7515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x8000, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<\t\t') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) 1m37.579461886s ago: executing program 1 (id=7527): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/hibernate_compression_threads', 0x400000, 0x1) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000140)={0x3, 0x380, 0x9, 0xcce6, 0x2, 0x5}) mmap(&(0x7f0000fa4000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m37.329347745s ago: executing program 1 (id=7533): rmdir(0x0) 1m36.633203197s ago: executing program 1 (id=7536): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x81) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000000)=0x400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r7 = dup(r6) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r10, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) listen(r10, 0x8) r11 = socket$inet6(0xa, 0x4, 0x3f) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x1c) writev(r11, &(0x7f0000000700)=[{&(0x7f0000001300)="8c", 0x1}], 0x1) vmsplice(r5, &(0x7f0000000040), 0x100000000000000c, 0x6) 1m20.927073533s ago: executing program 32 (id=7536): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x81) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000000)=0x400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r7 = dup(r6) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r10, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) listen(r10, 0x8) r11 = socket$inet6(0xa, 0x4, 0x3f) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x1c) writev(r11, &(0x7f0000000700)=[{&(0x7f0000001300)="8c", 0x1}], 0x1) vmsplice(r5, &(0x7f0000000040), 0x100000000000000c, 0x6) 7.216756074s ago: executing program 3 (id=8348): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0xf7b4, 0x1ff}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_io_uring_setup(0xbdb, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x3, 0x151}, &(0x7f0000000dc0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 7.082502654s ago: executing program 2 (id=8350): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x32) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x288}, 0xffffffffffffffff, 0x0, r0, 0x3) 7.041921738s ago: executing program 0 (id=8351): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000789", @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf252500000005002b000100000005002e00030000000a0001007770616e3300000008002c0004000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="0100000000000000000001"], 0xc4}}, 0x4008800) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x8044) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 6.06536602s ago: executing program 2 (id=8352): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a01"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.039841466s ago: executing program 2 (id=8355): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) close(0x3) r1 = socket$pptp(0x18, 0x1, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 4.85490895s ago: executing program 0 (id=8356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x9, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500006af414599e5b8a4bfa0000002020207b1af8ff00000000bfa10000000000000700b70300000000000085000000710000009500"/90], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}]}, 0x0, 0x1e1, &(0x7f0000000240)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x7fff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) name_to_handle_at(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000"], 0x24}}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r4}, 0x18) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2) lsetxattr$security_selinux(&(0x7f00000005c0)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000040)='system_u:object_r:file_context_t:s0\x00', 0x24, 0x1) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) fcntl$getflags(r2, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) r8 = ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x2081}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_CARRIER={0x5, 0x21, 0x9}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.7161201s ago: executing program 2 (id=8357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newqdisc={0x118, 0x24, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x7, 0x9}, {0x2, 0xfff3}, {0x7, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x60, 0x48}}, @TCA_RATE={0x6, 0x5, {0x5, 0x18}}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x4, 0x2, 0x0, 0x7, 0x400, 0x6}}, {0x10, 0x2, [0x8, 0x5, 0x0, 0x27, 0x9, 0xff]}}, {{0x1c, 0x1, {0x4, 0x5, 0x7ff, 0x6, 0x1, 0x7fffffff, 0x8, 0x2}}, {0x8, 0x2, [0x8001, 0x5]}}, {{0x1c, 0x1, {0x81, 0x7, 0x56a, 0x101, 0x0, 0x66, 0xff, 0x5}}, {0xe, 0x2, [0x600, 0x8, 0x44, 0x4, 0x1000]}}, {{0x1c, 0x1, {0x0, 0x7, 0x9, 0x2b, 0x1, 0x4, 0x8, 0x4}}, {0xc, 0x2, [0x2, 0xf1b, 0x101, 0x2]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x93}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x3}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x2}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) connect$802154_dgram(r6, &(0x7f0000000300), 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, r6}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x203, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0xc8c00, 0x0) read$nci(r8, &(0x7f0000000180)=""/76, 0x4c) r9 = socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2f0, 0x30, 0x100, 0x71bd23, 0x25dfdbff, {}, [{0x2dc, 0x1, [@m_csum={0xf8, 0x14, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x5, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x75, 0x6, "f90cc54fcc9c8095264b0e12b02dcd836b5130212160662c39452a4b445c2f4c6f1effca3ea3f7cd43a1f925fff035535b4d5683ceff45e1f9be83ff28d6ec46117cfbc7d48ae556ece944cd1739bc772a6f07d0d2c256696fa69d27ebd97ed3ce0d9d7316eea38492bd81fa862c6a1f75"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0xf4, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0xc5, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b274"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xec, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0xc0, 0x6, "3917f19b092bf48251ba9e4b479bb2656a993c29d2e1f662f17fa5950ccad5301d2cf5855b0baa0642b022248f15fd4b54b5933323a49a5e7c3defc988a03e02f907c1760c8f5fcf9f5ee29b137fb9e6e097c7f103e69f5adda3e24e0850a174b414523f1f10d850ee06094a3a70633218dc59dcbdab61cc249e56e600eee27f8eda673f86b12c6e2684268e0643ad76baa3d1ff050d53fb92b00543189e7077fa7089e2857fbfc6d492db420f611b601fc035fc0ec62f62de227635"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x51) chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r10 = socket(0x10, 0x803, 0x0) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000880)) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000b14000125bd7000fcdbdf250800010000000000080001000100000008000100020000000800010002000000080003000300000008000300000000000800030003100000080001000000000008003f00010000000800010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4880}, 0x4000844) socket$netlink(0x10, 0x3, 0x0) 4.107654235s ago: executing program 0 (id=8359): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 4.087311157s ago: executing program 0 (id=8360): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 4.057611079s ago: executing program 3 (id=8361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r2, &(0x7f0000000000)=0x8, r2, 0x0, 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1216732d2dd875bd1c26cff14def87b5893b82d7e1d6e8b2a8ee74ee00d89c57a4119b5dd5896f263050389ac19a0f0d1e2005d2e41d0d42b4d2428be0617c87e741ce033b921a05cacdf0bff9fc36f58c22ab313168764b971d16cfe26f707d5b312e117ee2302a183c44cf22c0b33a8aebba9d673b32d19653e82118e51ec5180e6952053c9c475a949d54d578ff90ed58c834f905b398c659f0519d984569a147f7795b6c38059f7d04dfdf2fd2d567a285719843a3a9f3df2fc0"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) get_robust_list(0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) 3.945272257s ago: executing program 5 (id=8363): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x32) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x288}, 0xffffffffffffffff, 0x0, r0, 0x3) 3.935277128s ago: executing program 2 (id=8364): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1075}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 3.859831404s ago: executing program 5 (id=8365): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ftruncate(0xffffffffffffffff, 0x8800000) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0xd, 0x7, 0x7ffc0001}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r7, 0x0, 0x7fff}, 0x18) link(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 3.842362595s ago: executing program 4 (id=8366): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000789", @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf252500000005002b000100000005002e00030000000a0001007770616e3300000008002c0004000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="0100000000000000000001"], 0xc4}}, 0x4008800) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x8044) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 2.632326015s ago: executing program 3 (id=8367): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x82001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 2.460739947s ago: executing program 4 (id=8368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000005580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sync() 2.444714049s ago: executing program 5 (id=8369): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x10003}, 0x0, 0x32, 0x43a1bd7b, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r3 = dup(r2) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.994104382s ago: executing program 4 (id=8370): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 1.959347325s ago: executing program 5 (id=8371): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0xf7b4, 0x1ff}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_io_uring_setup(0xbdb, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x3, 0x151}, &(0x7f0000000dc0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 1.939502586s ago: executing program 4 (id=8372): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2400, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlockall(0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 1) write(r0, 0x0, 0x0) 1.841254273s ago: executing program 0 (id=8373): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1075}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 1.757557349s ago: executing program 2 (id=8374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x8000, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r8}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nodelalloc}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x580, &(0x7f0000000bc0)="$eJzs3V9rW+UfAPDvSdv9636/djCGeiGDXTgZS9fWPxOEzUvR6UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZelSZPV1MTl84GzPU/OSZ7nyXO+5zzPOUkTwNA6nv6Ti3gxIr5MIiYa1o1GtvL45nbrj2/OpUsSGxsf/ZbEuabXSrL/x7PMCxHx0+cRp3Lby62sri0WSqXicpafqi5dm6qsrp2+slRYKC4Ur87Mzp59fXbmrTff6FlbX734xzcf3n/37Bcn1r/+4eGRu0mcj8PZurRdPSjiVmPmeOGvLDUW55s2nO5BYYMk6XcF2JWRLM7HIj0GTMRIFvXA8++ziNgAhlQi/mFI1ccB9bl9j+bB/xmP3tmcAG1v/+jmtZE4UJsbHVpPnpoZpfPdyR6Un5bx46/37qZL7Hwd4mCHPMAzuXU7Is6Mjm4//iXZ8W/3zkR80Om6YHMZw3b+gX66n45/klsR2+I/tzX+iRbjn/EWsbsbneM/97AHxbSVjv/ebjn+3bppNTmS5f5XG/ONJZevlIpnIuL/EXEyxvan+Z3u55xdf7DRbl3j+C9d0vLrY8GsHg9H9z/9nPlCtfBP2tzo0e2Il1qOf5Ot/k9a9H/6flzssoxjxXsvt1vXuf17a+P7iFda9v+TM1ey8/3Jqdr+MFXfK7b7/c6xn9uV3+/2p/1/aOf2TyaN92srz17Gdwf+LLZbt9v9f1/ycS29L3vsRqFaXZ6O2Je8Pzre/PjMk+fW8/Xt0/afPNE6/nfa/9PJ1yddtv/O0TttNx2E/p/vov9Tm/2/tSN0nXjw3qfftiu/qf3142RT/79WS53MHunm+NdtBXfzngEAAAAAAMCgykXE4Uhy+a10LpfPb36+42gcypXKleqpy+WVq/NR+67sZIzl6ne6Jxo+DzGdfR62np9pys9GxJGI+GrkYC2fnyuX5vvdeAAAAAAAAAAAAAAAAAAAABgQ422+/5/6ZaTftQP2XO2HDfb3uxZAP3T8yf9e/NITMJA6xj/w3Hr2+HdlAJ4Xzv8wvMQ/DC/xD8Or2/gfm9jjigD/Oud/GF7iHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq4oUL6bKx/vjmXJqfv766sli+fnq+WFnML63M5efKy9fyC+XyQqmYnysvdXq9Url8bXomVm5MVYuV6lRlde3SUnnlavXSlaXCgbhUHPPHhgEAAAAAAAAAAAAAAAAAAGCbyuraYqFUKi5LtE2ci4Goxl42cNOunj46KK2Q6GmizwcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjwdwAAAP//Rf8sdQ==") r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 693.210039ms ago: executing program 3 (id=8377): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2, 0x0, 0x120, 0x3, 0x3, 0x2fe}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x180800, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) close(r1) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001100), 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0) write(r2, &(0x7f0000001180)="5addb8a90f7e8eecb89bf930a1373dc88241b3b3462bd50300ca4e8ceb245cdb9d90b9f1af29d3ac8fba24cd08ead729147fb4656ca85668ffde88e643385211b0ed551280ae06518af9591c99c846355047693d7b85929c86c8eab0d6886b559f561213e9e6ea45731d1e382fdf7e9cbdebf2892a64cd8a513592885f36fd36e1e6a0a411e3b521ca8d5914384a1bd0725c22c3f42db99b47c21722e8635a9127f96067f5b66b3f83c5ea2cc6c3f1972a5c2ddd78bed8e6", 0xb8) 640.459243ms ago: executing program 3 (id=8378): socket$pptp(0x18, 0x1, 0x2) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xe, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x1021a, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000005580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sync() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) flistxattr(r3, &(0x7f0000000280)=""/117, 0x75) 453.221727ms ago: executing program 5 (id=8379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x8000, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1004, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa0, 0x4d91, 0x80000001, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cd, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x62, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0x4, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000008, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8) r11 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x76c6, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') io_uring_register$IORING_REGISTER_FILES(r11, 0x1e, &(0x7f0000000000)=[r11], 0x1) 37.695537ms ago: executing program 5 (id=8381): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x10003}, 0x0, 0x32, 0x43a1bd7b, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r3 = dup(r2) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 0s ago: executing program 3 (id=8382): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x1075}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<\t\t') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) kernel console output (not intermixed with test programs): 00 [ 805.412269][ T29] audit: type=1326 audit(1768020709.475:71960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28495 comm="syz.4.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 805.436010][ T29] audit: type=1326 audit(1768020709.475:71961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28495 comm="syz.4.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 805.459623][ T29] audit: type=1326 audit(1768020709.495:71962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28495 comm="syz.4.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 805.483348][ T29] audit: type=1326 audit(1768020709.495:71963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28495 comm="syz.4.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 805.506918][ T29] audit: type=1326 audit(1768020709.495:71964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28495 comm="syz.4.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 805.530696][ T29] audit: type=1326 audit(1768020709.495:71965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28495 comm="syz.4.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 805.554781][ T29] audit: type=1326 audit(1768020709.495:71966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28495 comm="syz.4.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 805.642704][T28522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7731'. [ 805.685153][T28522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7731'. [ 805.714127][T28522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7731'. [ 805.724451][T28521] bridge0: port 1(macsec1) entered blocking state [ 805.731031][T28521] bridge0: port 1(macsec1) entered disabled state [ 805.738162][T28521] macsec1: entered allmulticast mode [ 805.743599][T28521] bridge0: entered allmulticast mode [ 805.749983][T28521] macsec1: left allmulticast mode [ 805.755170][T28521] bridge0: left allmulticast mode [ 805.784987][T28528] loop4: detected capacity change from 0 to 1024 [ 805.805197][T28528] EXT4-fs: Mount option(s) incompatible with ext3 [ 805.864382][T28535] FAULT_INJECTION: forcing a failure. [ 805.864382][T28535] name failslab, interval 1, probability 0, space 0, times 0 [ 805.877138][T28535] CPU: 0 UID: 0 PID: 28535 Comm: syz.3.7734 Not tainted syzkaller #0 PREEMPT(voluntary) [ 805.877172][T28535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 805.877189][T28535] Call Trace: [ 805.877197][T28535] [ 805.877219][T28535] __dump_stack+0x1d/0x30 [ 805.877250][T28535] dump_stack_lvl+0x95/0xd0 [ 805.877279][T28535] dump_stack+0x15/0x1b [ 805.877305][T28535] should_fail_ex+0x265/0x280 [ 805.877335][T28535] should_failslab+0x8c/0xb0 [ 805.877364][T28535] kmem_cache_alloc_noprof+0x69/0x4b0 [ 805.877385][T28535] ? audit_log_start+0x342/0x720 [ 805.877406][T28535] audit_log_start+0x342/0x720 [ 805.877454][T28535] ? kstrtouint+0x76/0xc0 [ 805.877479][T28535] audit_seccomp+0x48/0x100 [ 805.877519][T28535] ? __seccomp_filter+0x832/0x1260 [ 805.877546][T28535] __seccomp_filter+0x843/0x1260 [ 805.877625][T28535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 805.877688][T28535] ? vfs_write+0x7e8/0x960 [ 805.877706][T28535] ? __rcu_read_unlock+0x4f/0x70 [ 805.877728][T28535] ? __fget_files+0x184/0x1c0 [ 805.877804][T28535] __secure_computing+0x82/0x150 [ 805.877901][T28535] syscall_trace_enter+0xcf/0x1e0 [ 805.877924][T28535] do_syscall_64+0xa4/0x2b0 [ 805.877958][T28535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.878059][T28535] RIP: 0033:0x7f022ecaf749 [ 805.878079][T28535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.878172][T28535] RSP: 002b:00007f022d70f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 805.878210][T28535] RAX: ffffffffffffffda RBX: 00007f022ef05fa0 RCX: 00007f022ecaf749 [ 805.878224][T28535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 805.878236][T28535] RBP: 00007f022d70f090 R08: 0000000000000000 R09: 0000000000000000 [ 805.878284][T28535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.878297][T28535] R13: 00007f022ef06038 R14: 00007f022ef05fa0 R15: 00007fffae47ed98 [ 805.878359][T28535] [ 806.146417][T28543] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 806.165934][T28541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7737'. [ 806.218385][T28547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7739'. [ 806.327891][T28526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7730'. [ 806.370796][T28555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5131 sclass=netlink_audit_socket pid=28555 comm=syz.2.7740 [ 806.815340][T28559] lo speed is unknown, defaulting to 1000 [ 807.011925][T28563] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7743'. [ 807.127203][T28575] vlan0: entered allmulticast mode [ 807.257307][T28578] bridge0: entered promiscuous mode [ 807.266462][T28578] bridge0: port 3(macsec1) entered blocking state [ 807.272966][T28578] bridge0: port 3(macsec1) entered disabled state [ 807.282952][T28578] macsec1: entered allmulticast mode [ 807.288491][T28578] bridge0: entered allmulticast mode [ 807.374497][T28578] macsec1: left allmulticast mode [ 807.379611][T28578] bridge0: left allmulticast mode [ 807.392491][T28583] netlink: 'syz.4.7749': attribute type 7 has an invalid length. [ 807.400479][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7749'. [ 807.416596][T28578] bridge0: left promiscuous mode [ 807.466711][T28582] netlink: 'syz.3.7745': attribute type 7 has an invalid length. [ 807.506043][T28587] loop5: detected capacity change from 0 to 1024 [ 807.548353][T28587] EXT4-fs: Mount option(s) incompatible with ext3 [ 807.957665][T28600] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5131 sclass=netlink_audit_socket pid=28600 comm=syz.2.7755 [ 808.246143][T28615] vlan0: entered allmulticast mode [ 808.282588][T28618] netlink: 'syz.5.7761': attribute type 7 has an invalid length. [ 808.585762][T28640] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 808.592457][T28640] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 808.600226][T28640] vhci_hcd vhci_hcd.0: Device attached [ 808.804542][T28645] vhci_hcd: connection closed [ 808.804776][ T1993] vhci_hcd vhci_hcd.2: stop threads [ 808.814838][ T1993] vhci_hcd vhci_hcd.2: release socket [ 808.820258][ T1993] vhci_hcd vhci_hcd.2: disconnect device [ 808.826824][ T5840] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 808.903265][T28660] bridge0: port 3(macsec1) entered blocking state [ 808.909959][T28660] bridge0: port 3(macsec1) entered disabled state [ 808.999139][T28660] macsec1: entered allmulticast mode [ 809.004628][T28660] bridge0: entered allmulticast mode [ 809.043297][T28664] loop3: detected capacity change from 0 to 1024 [ 809.051169][T28660] macsec1: left allmulticast mode [ 809.056286][T28660] bridge0: left allmulticast mode [ 809.063451][T28664] EXT4-fs: Mount option(s) incompatible with ext3 [ 809.148481][T28667] vlan2: entered allmulticast mode [ 809.567128][T28669] lo speed is unknown, defaulting to 1000 [ 810.125372][T28711] sd 0:0:1:0: device reset [ 810.304888][T28713] netlink: 'syz.3.7793': attribute type 7 has an invalid length. [ 810.312805][T28713] __nla_validate_parse: 13 callbacks suppressed [ 810.312822][T28713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7793'. [ 810.355466][ T29] kauditd_printk_skb: 974 callbacks suppressed [ 810.355481][ T29] audit: type=1326 audit(1768020714.455:72939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.385422][ T29] audit: type=1326 audit(1768020714.455:72940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.409102][ T29] audit: type=1326 audit(1768020714.455:72941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.432795][ T29] audit: type=1326 audit(1768020714.455:72942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.456507][ T29] audit: type=1326 audit(1768020714.455:72943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.480302][ T29] audit: type=1326 audit(1768020714.455:72944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.503905][ T29] audit: type=1326 audit(1768020714.455:72945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.527530][ T29] audit: type=1326 audit(1768020714.455:72946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.551122][ T29] audit: type=1326 audit(1768020714.455:72947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.574757][ T29] audit: type=1326 audit(1768020714.455:72948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.3.7793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 810.938442][T28718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7795'. [ 811.031819][T28722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7797'. [ 811.080338][T28724] bridge0: entered promiscuous mode [ 811.088058][T28725] loop2: detected capacity change from 0 to 1024 [ 811.113631][T28724] bridge0: port 3(macsec1) entered blocking state [ 811.120368][T28724] bridge0: port 3(macsec1) entered disabled state [ 811.133607][T28724] macsec1: entered allmulticast mode [ 811.139062][T28724] bridge0: entered allmulticast mode [ 811.145249][T28724] macsec1: left allmulticast mode [ 811.148780][T28725] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 811.150347][T28724] bridge0: left allmulticast mode [ 811.164391][T28729] FAULT_INJECTION: forcing a failure. [ 811.164391][T28729] name failslab, interval 1, probability 0, space 0, times 0 [ 811.180372][T28729] CPU: 0 UID: 0 PID: 28729 Comm: syz.4.7800 Not tainted syzkaller #0 PREEMPT(voluntary) [ 811.180415][T28729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 811.180429][T28729] Call Trace: [ 811.180436][T28729] [ 811.180475][T28729] __dump_stack+0x1d/0x30 [ 811.180504][T28729] dump_stack_lvl+0x95/0xd0 [ 811.180531][T28729] dump_stack+0x15/0x1b [ 811.180556][T28729] should_fail_ex+0x265/0x280 [ 811.180655][T28729] should_failslab+0x8c/0xb0 [ 811.180710][T28729] __kmalloc_noprof+0xb9/0x5a0 [ 811.180736][T28729] ? do_sys_poll+0x19b/0xbd0 [ 811.180766][T28729] do_sys_poll+0x19b/0xbd0 [ 811.180798][T28729] ? selinux_file_open+0x2dc/0x330 [ 811.180905][T28729] __se_sys_poll+0xdd/0x200 [ 811.180934][T28729] __x64_sys_poll+0x43/0x50 [ 811.180966][T28729] x64_sys_call+0x289f/0x3000 [ 811.180992][T28729] do_syscall_64+0xca/0x2b0 [ 811.181157][T28729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.181179][T28729] RIP: 0033:0x7fc62d24f749 [ 811.181194][T28729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.181256][T28729] RSP: 002b:00007fc62bcaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 811.181285][T28729] RAX: ffffffffffffffda RBX: 00007fc62d4a5fa0 RCX: 00007fc62d24f749 [ 811.181301][T28729] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 811.181317][T28729] RBP: 00007fc62bcaf090 R08: 0000000000000000 R09: 0000000000000000 [ 811.181332][T28729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.181409][T28729] R13: 00007fc62d4a6038 R14: 00007fc62d4a5fa0 R15: 00007ffe8bce8f18 [ 811.181432][T28729] [ 811.181742][T28724] bridge0: left promiscuous mode [ 811.355303][T28732] loop5: detected capacity change from 0 to 1024 [ 811.362596][T28732] EXT4-fs: Mount option(s) incompatible with ext3 [ 811.462528][T28740] loop3: detected capacity change from 0 to 1024 [ 811.470698][T28740] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 811.481644][T28740] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 811.492819][T28740] JBD2: no valid journal superblock found [ 811.498912][T28740] EXT4-fs (loop3): Could not load journal inode [ 811.535203][T28740] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7804'. [ 811.566627][T28744] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7805'. [ 811.627553][T28747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7807'. [ 811.636691][T28747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7807'. [ 811.645783][T28747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7807'. [ 811.707523][T28753] sd 0:0:1:0: device reset [ 811.722717][T28747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7807'. [ 811.731916][T28747] netlink: 'syz.0.7807': attribute type 6 has an invalid length. [ 811.866110][T28755] syzkaller0: entered promiscuous mode [ 811.871647][T28755] syzkaller0: entered allmulticast mode [ 812.055317][T28772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7815'. [ 812.147957][T28777] ªªªªªª: renamed from vlan0 (while UP) [ 812.184434][T28776] netlink: 'syz.3.7808': attribute type 7 has an invalid length. [ 812.200528][T28780] bridge0: port 3(macsec1) entered blocking state [ 812.207200][T28780] bridge0: port 3(macsec1) entered disabled state [ 812.246363][T28780] macsec1: entered allmulticast mode [ 812.251719][T28780] bridge0: entered allmulticast mode [ 812.280361][T28780] macsec1: left allmulticast mode [ 812.285584][T28780] bridge0: left allmulticast mode [ 812.309792][T28784] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 812.332604][T28784] loop2: detected capacity change from 0 to 512 [ 812.599878][T28789] loop2: detected capacity change from 0 to 8192 [ 812.968131][T28795] lo speed is unknown, defaulting to 1000 [ 813.141427][T28799] loop5: detected capacity change from 0 to 128 [ 813.551184][T28819] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 813.672145][T28823] loop3: detected capacity change from 0 to 512 [ 813.684643][T28823] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 813.692690][T28823] EXT4-fs (loop3): orphan cleanup on readonly fs [ 813.732452][T28823] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7832: Failed to acquire dquot type 1 [ 813.743897][T28823] EXT4-fs (loop3): Remounting filesystem read-only [ 813.750486][T28823] EXT4-fs (loop3): 1 truncate cleaned up [ 813.756864][T28823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 813.769832][T28823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.835499][T28831] sd 0:0:1:0: device reset [ 813.974552][T28833] bridge0: port 3(macsec1) entered blocking state [ 813.981074][T28833] bridge0: port 3(macsec1) entered disabled state [ 814.050793][T28833] macsec1: entered allmulticast mode [ 814.056185][T28833] bridge0: entered allmulticast mode [ 814.177879][T28833] macsec1: left allmulticast mode [ 814.182990][T28833] bridge0: left allmulticast mode [ 814.343010][T28836] lo speed is unknown, defaulting to 1000 [ 814.462580][T28837] bridge0: port 1(macsec1) entered blocking state [ 814.469137][T28837] bridge0: port 1(macsec1) entered disabled state [ 814.834104][T28837] macsec1: entered allmulticast mode [ 814.839514][T28837] bridge0: entered allmulticast mode [ 814.879461][T28842] loop2: detected capacity change from 0 to 1024 [ 814.925506][T28842] EXT4-fs: Mount option(s) incompatible with ext3 [ 815.044852][T28837] macsec1: left allmulticast mode [ 815.049954][T28837] bridge0: left allmulticast mode [ 815.091584][T28847] loop3: detected capacity change from 0 to 1024 [ 815.098243][T28844] loop4: detected capacity change from 0 to 8192 [ 815.118684][T28847] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 815.130147][T28847] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 815.153225][T28847] JBD2: no valid journal superblock found [ 815.159154][T28847] EXT4-fs (loop3): Could not load journal inode [ 815.461748][T28853] loop4: detected capacity change from 0 to 8192 [ 815.594431][ T29] kauditd_printk_skb: 679 callbacks suppressed [ 815.594446][ T29] audit: type=1326 audit(1768020719.765:73626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.625570][T28861] sd 0:0:1:0: device reset [ 815.696864][ T29] audit: type=1326 audit(1768020719.795:73627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.720536][ T29] audit: type=1326 audit(1768020719.795:73628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.744269][ T29] audit: type=1326 audit(1768020719.795:73629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.767884][ T29] audit: type=1326 audit(1768020719.795:73630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.791555][ T29] audit: type=1326 audit(1768020719.795:73631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.815346][ T29] audit: type=1326 audit(1768020719.795:73632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.839016][ T29] audit: type=1326 audit(1768020719.795:73633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.862872][ T29] audit: type=1326 audit(1768020719.795:73634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 815.886619][ T29] audit: type=1326 audit(1768020719.795:73635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28854 comm="syz.3.7839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 816.096985][T28870] netlink: 'syz.2.7840': attribute type 7 has an invalid length. [ 816.104951][T28870] __nla_validate_parse: 5 callbacks suppressed [ 816.104965][T28870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7840'. [ 816.151937][T28873] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7843'. [ 816.246228][T28877] sd 0:0:1:0: device reset [ 816.266435][T28878] loop5: detected capacity change from 0 to 512 [ 816.305364][T28878] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 816.686469][T28873] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 816.807100][T28884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.824614][T28884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.854133][T28885] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.7847'. [ 816.880175][T28885] bridge0: entered promiscuous mode [ 816.896133][T28885] bridge0: port 3(macsec1) entered blocking state [ 816.902696][T28885] bridge0: port 3(macsec1) entered disabled state [ 816.919528][T28885] macsec1: entered allmulticast mode [ 816.924969][T28885] bridge0: entered allmulticast mode [ 816.954905][T28885] macsec1: left allmulticast mode [ 816.960014][T28885] bridge0: left allmulticast mode [ 816.984163][T28885] bridge0: left promiscuous mode [ 816.994811][T28889] loop5: detected capacity change from 0 to 1024 [ 817.002286][T28889] EXT4-fs: Mount option(s) incompatible with ext3 [ 817.094573][T28892] bridge0: port 3(macsec1) entered blocking state [ 817.101149][T28892] bridge0: port 3(macsec1) entered disabled state [ 817.121078][T28893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.128428][T28892] macsec1: entered allmulticast mode [ 817.134924][T28892] bridge0: entered allmulticast mode [ 817.149327][T28893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.180637][T28892] macsec1: left allmulticast mode [ 817.185828][T28892] bridge0: left allmulticast mode [ 817.308248][T28894] sd 0:0:1:0: device reset [ 817.557664][T28912] loop5: detected capacity change from 0 to 128 [ 818.062895][T28913] lo speed is unknown, defaulting to 1000 [ 818.637528][T28929] sd 0:0:1:0: device reset [ 819.294824][T28932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7858'. [ 819.372486][T28935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7859'. [ 819.394133][T28935] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 819.414798][T28935] loop2: detected capacity change from 0 to 512 [ 819.435257][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7860'. [ 819.447829][T28935] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 819.465421][T28941] vlan0: entered allmulticast mode [ 819.482792][T28945] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7864'. [ 819.506726][T28945] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 819.520150][T28945] loop4: detected capacity change from 0 to 512 [ 819.638895][T28957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7870'. [ 819.670361][T28961] loop5: detected capacity change from 0 to 128 [ 820.241965][T28988] lo speed is unknown, defaulting to 1000 [ 820.604031][T29012] loop4: detected capacity change from 0 to 512 [ 820.616481][T29012] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 820.624753][T29012] EXT4-fs (loop4): orphan cleanup on readonly fs [ 820.633249][T29012] __quota_error: 362 callbacks suppressed [ 820.633264][T29012] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 820.649308][T29012] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 820.658899][T29012] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.7890: Failed to acquire dquot type 1 [ 820.671044][T29012] EXT4-fs (loop4): Remounting filesystem read-only [ 820.677659][T29012] EXT4-fs (loop4): 1 truncate cleaned up [ 820.683894][T29012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 820.696988][T29012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.756193][ T366] Bluetooth: hci0: Frame reassembly failed (-84) [ 821.051424][T29024] lo speed is unknown, defaulting to 1000 [ 821.180735][T29027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7894'. [ 821.566355][T29035] loop5: detected capacity change from 0 to 512 [ 821.584925][T29035] EXT4-fs: Ignoring removed i_version option [ 821.604178][T29035] EXT4-fs (loop5): orphan cleanup on readonly fs [ 821.611640][ T29] audit: type=1326 audit(1768020725.775:73998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.2.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 821.614874][T29035] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.7898: EA inode hash validation failed [ 821.655296][T29035] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.7898: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 821.678827][T29035] EXT4-fs (loop5): Remounting filesystem read-only [ 821.685443][T29035] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.5.7898: ea_inode dec ref err=-117 [ 821.698422][T29035] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 821.699210][ T29] audit: type=1326 audit(1768020725.805:73999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.2.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 821.707516][T29035] EXT4-fs (loop5): 1 orphan inode deleted [ 821.731172][ T29] audit: type=1326 audit(1768020725.805:74000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.2.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 821.740066][T29035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 821.760537][ T29] audit: type=1326 audit(1768020725.805:74001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.2.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 821.760572][ T29] audit: type=1326 audit(1768020725.805:74002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.2.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 821.819796][ T29] audit: type=1326 audit(1768020725.815:74003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.2.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 821.843506][ T29] audit: type=1326 audit(1768020725.815:74004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.2.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 821.867137][ T29] audit: type=1326 audit(1768020725.815:74005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29032 comm="syz.2.7897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 821.945785][T29045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7900'. [ 821.974547][T28312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.019577][T29051] loop4: detected capacity change from 0 to 512 [ 822.056165][T29053] loop3: detected capacity change from 0 to 512 [ 822.078945][T29051] EXT4-fs: Ignoring removed i_version option [ 822.096588][T29051] EXT4-fs (loop4): orphan cleanup on readonly fs [ 822.116947][T29053] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 822.125070][T29053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 822.132233][T29051] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.7904: EA inode hash validation failed [ 822.132860][T29053] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7905: Failed to acquire dquot type 1 [ 822.145089][T29051] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.7904: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 822.157536][T29053] EXT4-fs (loop3): Remounting filesystem read-only [ 822.177721][T29053] EXT4-fs (loop3): 1 truncate cleaned up [ 822.184081][T29053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 822.197091][T29053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.213509][T29051] EXT4-fs (loop4): Remounting filesystem read-only [ 822.220136][T29051] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.7904: ea_inode dec ref err=-117 [ 822.237540][T29061] sd 0:0:1:0: device reset [ 823.066089][T24363] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 823.340252][T29069] lo speed is unknown, defaulting to 1000 [ 823.466826][T29051] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 823.480019][T29051] EXT4-fs (loop4): 1 orphan inode deleted [ 823.486272][T29051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 823.524110][T29067] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7906'. [ 823.579519][T29073] loop2: detected capacity change from 0 to 512 [ 823.602086][T29075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7908'. [ 823.612898][T29073] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 823.621271][T29073] EXT4-fs (loop2): orphan cleanup on readonly fs [ 823.629469][T29075] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 823.644032][T29075] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 823.664812][T20793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.688964][T29073] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.7907: Failed to acquire dquot type 1 [ 823.716081][T29073] EXT4-fs (loop2): Remounting filesystem read-only [ 823.722679][T29073] EXT4-fs (loop2): 1 truncate cleaned up [ 823.728894][T29073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 823.742111][T29073] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.947268][T29084] sd 0:0:1:0: device reset [ 824.466753][T29088] lo speed is unknown, defaulting to 1000 [ 824.491472][T29083] loop5: detected capacity change from 0 to 1024 [ 824.574339][T29083] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 824.585280][T29083] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 824.640330][T29104] lo speed is unknown, defaulting to 1000 [ 824.687692][T29106] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7919'. [ 824.711459][T29083] JBD2: no valid journal superblock found [ 824.717338][T29083] EXT4-fs (loop5): Could not load journal inode [ 824.825801][T29115] netlink: 71 bytes leftover after parsing attributes in process `syz.5.7911'. [ 824.906038][T29118] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.7918'. [ 824.938789][T29119] bridge0: port 3(macsec1) entered blocking state [ 824.945471][T29119] bridge0: port 3(macsec1) entered disabled state [ 824.967045][T29119] macsec1: entered allmulticast mode [ 824.972395][T29119] bridge0: entered allmulticast mode [ 825.130597][T29119] macsec1: left allmulticast mode [ 825.135935][T29119] bridge0: left allmulticast mode [ 825.312632][T29126] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7922'. [ 825.337378][T29125] loop3: detected capacity change from 0 to 1024 [ 825.392012][T29127] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 825.412648][T29125] EXT4-fs: Mount option(s) incompatible with ext3 [ 825.492366][T29128] loop5: detected capacity change from 0 to 512 [ 825.543129][T29127] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 825.628336][T29109] loop2: detected capacity change from 0 to 1024 [ 825.646752][T29109] EXT4-fs: Mount option(s) incompatible with ext3 [ 825.714356][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 825.714375][ T29] audit: type=1326 audit(1768020729.885:74243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29110 comm="syz.3.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 825.800441][T29134] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7924'. [ 825.816410][ T29] audit: type=1326 audit(1768020729.885:74244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29110 comm="syz.3.7920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 825.856364][T29134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7924'. [ 825.896684][ T29] audit: type=1326 audit(1768020730.025:74245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.2.7925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 825.920387][ T29] audit: type=1326 audit(1768020730.025:74246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.2.7925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 825.944063][ T29] audit: type=1326 audit(1768020730.025:74247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.2.7925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 825.967759][ T29] audit: type=1326 audit(1768020730.025:74248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.2.7925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 825.991443][ T29] audit: type=1326 audit(1768020730.025:74249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.2.7925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 826.015252][ T29] audit: type=1326 audit(1768020730.025:74250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.2.7925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 826.039480][ T29] audit: type=1326 audit(1768020730.025:74251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.2.7925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 826.063465][ T29] audit: type=1326 audit(1768020730.025:74252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29129 comm="syz.2.7925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f350ceaf749 code=0x7ffc0000 [ 826.139374][T29141] loop5: detected capacity change from 0 to 512 [ 826.154831][T29141] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 826.162960][T29141] EXT4-fs (loop5): orphan cleanup on readonly fs [ 826.170177][T29141] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7929: Failed to acquire dquot type 1 [ 826.181619][T29141] EXT4-fs (loop5): Remounting filesystem read-only [ 826.188196][T29141] EXT4-fs (loop5): 1 truncate cleaned up [ 826.195832][T29141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 826.208679][T29141] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.333669][T29148] loop4: detected capacity change from 0 to 1024 [ 826.340783][T29148] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 826.351764][T29148] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 826.367519][T29148] JBD2: no valid journal superblock found [ 826.373315][T29148] EXT4-fs (loop4): Could not load journal inode [ 826.538229][T29155] lo speed is unknown, defaulting to 1000 [ 827.372253][T29165] __nla_validate_parse: 1 callbacks suppressed [ 827.372267][T29165] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7931'. [ 827.455781][T29164] sd 0:0:1:0: device reset [ 827.742284][T29175] tmpfs: Bad value for 'mpol' [ 827.857088][T29176] bridge0: port 3(macsec1) entered blocking state [ 827.863642][T29176] bridge0: port 3(macsec1) entered disabled state [ 827.870382][T29176] macsec1: entered allmulticast mode [ 827.875747][T29176] bridge0: entered allmulticast mode [ 827.886838][T29176] macsec1: left allmulticast mode [ 827.891950][T29176] bridge0: left allmulticast mode [ 827.925300][T29172] loop4: detected capacity change from 0 to 8192 [ 828.624353][T29201] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7943'. [ 828.656766][T29197] loop2: detected capacity change from 0 to 8192 [ 828.865376][T29206] sd 0:0:1:0: device reset [ 828.959746][T29219] bridge0: port 3(macsec1) entered blocking state [ 828.966298][T29219] bridge0: port 3(macsec1) entered disabled state [ 828.984688][T29219] macsec1: entered allmulticast mode [ 828.990046][T29219] bridge0: entered allmulticast mode [ 829.127270][T29225] sd 0:0:1:0: device reset [ 829.208329][T29219] macsec1: left allmulticast mode [ 829.213424][T29219] bridge0: left allmulticast mode [ 829.296942][T29227] netlink: 'syz.5.7951': attribute type 7 has an invalid length. [ 829.304843][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7951'. [ 829.400104][T29230] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7953'. [ 829.538432][T29232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7954'. [ 829.692776][T29234] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7955'. [ 829.894158][T29244] loop3: detected capacity change from 0 to 512 [ 829.906167][T29244] EXT4-fs: Ignoring removed i_version option [ 829.929841][T29244] EXT4-fs (loop3): orphan cleanup on readonly fs [ 829.942832][T29244] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.7958: EA inode hash validation failed [ 829.980401][T29244] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.7958: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 830.029695][T29244] EXT4-fs (loop3): Remounting filesystem read-only [ 830.036313][T29244] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.7958: ea_inode dec ref err=-117 [ 830.107498][T29244] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 830.143990][T29244] EXT4-fs (loop3): 1 orphan inode deleted [ 830.158954][T29244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 830.206084][T29244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7958'. [ 830.215943][T29255] loop2: detected capacity change from 0 to 8192 [ 830.289866][T29261] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7965'. [ 830.375634][T23956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.739419][T29274] loop2: detected capacity change from 0 to 8192 [ 830.845262][ T29] kauditd_printk_skb: 943 callbacks suppressed [ 830.845278][ T29] audit: type=1326 audit(1768020735.015:75194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.4.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 831.151858][T29279] loop5: detected capacity change from 0 to 1024 [ 831.195934][T29279] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 831.207000][T29279] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 831.357741][ T29] audit: type=1326 audit(1768020735.435:75195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29283 comm="syz.4.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 831.381553][ T29] audit: type=1326 audit(1768020735.435:75196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29283 comm="syz.4.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 831.405215][ T29] audit: type=1326 audit(1768020735.435:75197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29283 comm="syz.4.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 831.437532][T29279] JBD2: no valid journal superblock found [ 831.443469][T29279] EXT4-fs (loop5): Could not load journal inode [ 831.560550][T29289] sd 0:0:1:0: device reset [ 831.576017][T29279] netlink: 71 bytes leftover after parsing attributes in process `syz.5.7972'. [ 831.604123][ T29] audit: type=1326 audit(1768020735.765:75198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29278 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 831.627880][ T29] audit: type=1326 audit(1768020735.765:75199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29278 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 831.651558][ T29] audit: type=1326 audit(1768020735.765:75200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29278 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 831.675293][ T29] audit: type=1326 audit(1768020735.765:75201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29278 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 831.698944][ T29] audit: type=1326 audit(1768020735.765:75202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29278 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 831.722837][ T29] audit: type=1326 audit(1768020735.765:75203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29278 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 831.950519][T29298] loop5: detected capacity change from 0 to 2048 [ 831.956804][T29300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7979'. [ 831.969053][T29300] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 831.981650][T29300] loop2: detected capacity change from 0 to 512 [ 831.997005][T29300] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 832.015151][T29298] Alternate GPT is invalid, using primary GPT. [ 832.021627][T29298] loop5: p2 p3 p7 [ 832.072885][ T350] Bluetooth: hci0: Frame reassembly failed (-84) [ 832.167807][T29311] loop4: detected capacity change from 0 to 512 [ 832.185379][T29311] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 832.193587][T29311] EXT4-fs (loop4): orphan cleanup on readonly fs [ 832.200886][T29311] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.7983: Failed to acquire dquot type 1 [ 832.212499][T29311] EXT4-fs (loop4): Remounting filesystem read-only [ 832.219139][T29311] EXT4-fs (loop4): 1 truncate cleaned up [ 832.225351][T29311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 832.238239][T29311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.628368][T29321] lo speed is unknown, defaulting to 1000 [ 833.544310][T29343] sd 0:0:1:0: device reset [ 833.636795][T29345] loop3: detected capacity change from 0 to 8192 [ 833.912731][T29353] x_tables: duplicate underflow at hook 3 [ 834.114228][T24363] Bluetooth: hci0: command 0x1003 tx timeout [ 834.120286][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 834.198060][T29360] __nla_validate_parse: 1 callbacks suppressed [ 834.198098][T29360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7996'. [ 834.307911][T29369] block device autoloading is deprecated and will be removed. [ 834.329488][T29370] loop4: detected capacity change from 0 to 1024 [ 834.334382][T29370] EXT4-fs: Ignoring removed nobh option [ 834.334410][T29370] EXT4-fs: Ignoring removed bh option [ 834.357758][T29370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.478630][T29378] netlink: 248 bytes leftover after parsing attributes in process `syz.5.8000'. [ 834.830410][T29383] loop3: detected capacity change from 0 to 8192 [ 835.465548][T20793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.634305][T29393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8005'. [ 835.708764][T29395] FAULT_INJECTION: forcing a failure. [ 835.708764][T29395] name failslab, interval 1, probability 0, space 0, times 0 [ 835.721539][T29395] CPU: 0 UID: 0 PID: 29395 Comm: syz.4.8006 Not tainted syzkaller #0 PREEMPT(voluntary) [ 835.721566][T29395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 835.721581][T29395] Call Trace: [ 835.721590][T29395] [ 835.721628][T29395] __dump_stack+0x1d/0x30 [ 835.721653][T29395] dump_stack_lvl+0x95/0xd0 [ 835.721674][T29395] dump_stack+0x15/0x1b [ 835.721693][T29395] should_fail_ex+0x265/0x280 [ 835.721770][T29395] should_failslab+0x8c/0xb0 [ 835.721830][T29395] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 835.721877][T29395] ? __alloc_skb+0x2ff/0x4b0 [ 835.721902][T29395] __alloc_skb+0x2ff/0x4b0 [ 835.721925][T29395] ? __alloc_skb+0x228/0x4b0 [ 835.721966][T29395] netlink_alloc_large_skb+0xbf/0xf0 [ 835.722060][T29395] netlink_sendmsg+0x3cf/0x6b0 [ 835.722244][T29395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.722319][T29395] __sock_sendmsg+0x145/0x180 [ 835.722343][T29395] ____sys_sendmsg+0x31e/0x4a0 [ 835.722380][T29395] ___sys_sendmsg+0x17b/0x1d0 [ 835.722557][T29395] __x64_sys_sendmsg+0xd4/0x160 [ 835.722590][T29395] x64_sys_call+0x17ba/0x3000 [ 835.722617][T29395] do_syscall_64+0xca/0x2b0 [ 835.722650][T29395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.722675][T29395] RIP: 0033:0x7fc62d24f749 [ 835.722695][T29395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.722757][T29395] RSP: 002b:00007fc62bcaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.722780][T29395] RAX: ffffffffffffffda RBX: 00007fc62d4a5fa0 RCX: 00007fc62d24f749 [ 835.722858][T29395] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 835.722869][T29395] RBP: 00007fc62bcaf090 R08: 0000000000000000 R09: 0000000000000000 [ 835.722881][T29395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.722893][T29395] R13: 00007fc62d4a6038 R14: 00007fc62d4a5fa0 R15: 00007ffe8bce8f18 [ 835.722911][T29395] [ 835.959617][T29401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8009'. [ 835.970052][T29401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8009'. [ 836.019633][T29403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8011'. [ 836.028834][T29403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8011'. [ 836.042033][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 836.042049][ T29] audit: type=1326 audit(1768020740.205:75402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.072166][ T29] audit: type=1326 audit(1768020740.205:75403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.114579][ T29] audit: type=1326 audit(1768020740.265:75404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.121938][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8010'. [ 836.138216][ T29] audit: type=1326 audit(1768020740.265:75405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.138303][ T29] audit: type=1326 audit(1768020740.265:75406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.194406][ T29] audit: type=1326 audit(1768020740.265:75407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.218021][ T29] audit: type=1326 audit(1768020740.265:75408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.241678][ T29] audit: type=1326 audit(1768020740.265:75409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.265545][ T29] audit: type=1326 audit(1768020740.265:75410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.289166][ T29] audit: type=1326 audit(1768020740.265:75411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29404 comm="syz.4.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 836.360953][T29413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8015'. [ 836.473530][T29418] loop4: detected capacity change from 0 to 512 [ 836.494538][T29415] netlink: 'syz.0.8016': attribute type 7 has an invalid length. [ 836.502306][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8016'. [ 836.511241][T29413] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 836.513770][T29417] FAULT_INJECTION: forcing a failure. [ 836.513770][T29417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.532714][T29417] CPU: 0 UID: 0 PID: 29417 Comm: syz.5.8017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 836.532816][T29417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.532829][T29417] Call Trace: [ 836.532836][T29417] [ 836.532845][T29417] __dump_stack+0x1d/0x30 [ 836.532872][T29417] dump_stack_lvl+0x95/0xd0 [ 836.532899][T29417] dump_stack+0x15/0x1b [ 836.532977][T29417] should_fail_ex+0x265/0x280 [ 836.532999][T29417] should_fail+0xb/0x20 [ 836.533017][T29417] should_fail_usercopy+0x1a/0x20 [ 836.533113][T29417] _copy_from_user+0x1c/0xb0 [ 836.533184][T29417] ___sys_sendmsg+0xc1/0x1d0 [ 836.533228][T29417] __x64_sys_sendmsg+0xd4/0x160 [ 836.533298][T29417] x64_sys_call+0x17ba/0x3000 [ 836.533322][T29417] do_syscall_64+0xca/0x2b0 [ 836.533425][T29417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.533479][T29417] RIP: 0033:0x7f5ac2cbf749 [ 836.533494][T29417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.533515][T29417] RSP: 002b:00007f5ac1727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.533568][T29417] RAX: ffffffffffffffda RBX: 00007f5ac2f15fa0 RCX: 00007f5ac2cbf749 [ 836.533584][T29417] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 836.533656][T29417] RBP: 00007f5ac1727090 R08: 0000000000000000 R09: 0000000000000000 [ 836.533672][T29417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.533688][T29417] R13: 00007f5ac2f16038 R14: 00007f5ac2f15fa0 R15: 00007ffee00b06b8 [ 836.533765][T29417] [ 836.787111][T29425] loop4: detected capacity change from 0 to 1024 [ 836.806515][T29425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.856901][T29425] 9pnet_virtio: no channels available for device 127.0.0.1 [ 836.912030][T20793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.250044][T29451] sd 0:0:1:0: device reset [ 837.621953][T29455] lo speed is unknown, defaulting to 1000 [ 838.034064][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 838.283115][T29464] netlink: 'syz.4.8030': attribute type 7 has an invalid length. [ 838.374921][T29467] loop4: detected capacity change from 0 to 1024 [ 838.414400][T29467] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 838.425357][T29467] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 838.464208][T29467] JBD2: no valid journal superblock found [ 838.470001][T29467] EXT4-fs (loop4): Could not load journal inode [ 838.520566][T29471] loop3: detected capacity change from 0 to 512 [ 838.555091][T29471] EXT4-fs: Mount option(s) incompatible with ext2 [ 838.596892][T29474] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 838.634615][T29474] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 838.648689][T29476] loop3: detected capacity change from 0 to 1024 [ 838.665118][T29476] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 838.676129][T29476] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 838.737174][T29476] JBD2: no valid journal superblock found [ 838.743184][T29476] EXT4-fs (loop3): Could not load journal inode [ 839.069759][T29488] bridge0: port 3(macsec1) entered blocking state [ 839.076285][T29488] bridge0: port 3(macsec1) entered disabled state [ 839.083081][T29488] macsec1: entered allmulticast mode [ 839.088424][T29488] bridge0: entered allmulticast mode [ 839.295003][T29488] macsec1: left allmulticast mode [ 839.300191][T29488] bridge0: left allmulticast mode [ 839.462197][T29489] lo speed is unknown, defaulting to 1000 [ 839.527196][T29483] loop3: detected capacity change from 0 to 1024 [ 839.536868][T29483] EXT4-fs: Mount option(s) incompatible with ext3 [ 839.565581][T29493] __nla_validate_parse: 14 callbacks suppressed [ 839.565596][T29493] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8040'. [ 839.599607][T29497] loop5: detected capacity change from 0 to 8192 [ 839.688704][T29502] loop3: detected capacity change from 0 to 8192 [ 839.764344][T13307] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 839.769606][T13307] loop3: partition table partially beyond EOD, truncated [ 839.781906][T13307] loop3: p1 start 30976 is beyond EOD, truncated [ 839.788449][T13307] loop3: p2 size 16128 extends beyond EOD, truncated [ 839.798031][T13307] loop3: p3 start 327168 is beyond EOD, truncated [ 839.805100][T13307] loop3: p5 start 30976 is beyond EOD, truncated [ 839.811459][T13307] loop3: p6 size 16128 extends beyond EOD, truncated [ 839.828172][T29502] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 839.833539][T29502] loop3: partition table partially beyond EOD, truncated [ 839.858552][T29502] loop3: p1 start 30976 is beyond EOD, truncated [ 839.865066][T29502] loop3: p2 size 16128 extends beyond EOD, truncated [ 839.880626][T29502] loop3: p3 start 327168 is beyond EOD, truncated [ 839.887604][T29502] loop3: p5 start 30976 is beyond EOD, truncated [ 839.893999][T29502] loop3: p6 size 16128 extends beyond EOD, truncated [ 840.232208][T29521] random: crng reseeded on system resumption [ 840.758261][T29536] lo speed is unknown, defaulting to 1000 [ 841.243970][T29540] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.8053'. [ 841.261741][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 841.261757][ T29] audit: type=1326 audit(1768020745.425:75785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.303563][T29540] bridge0: port 3(macsec1) entered blocking state [ 841.310185][T29540] bridge0: port 3(macsec1) entered disabled state [ 841.313542][T29542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8055'. [ 841.364839][T29540] macsec1: entered allmulticast mode [ 841.370196][T29540] bridge0: entered allmulticast mode [ 841.398576][T29540] macsec1: left allmulticast mode [ 841.403675][T29540] bridge0: left allmulticast mode [ 841.424710][ T29] audit: type=1326 audit(1768020745.455:75786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.448448][ T29] audit: type=1326 audit(1768020745.455:75787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.472445][ T29] audit: type=1326 audit(1768020745.455:75788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.496177][ T29] audit: type=1326 audit(1768020745.455:75789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.519767][ T29] audit: type=1326 audit(1768020745.455:75790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.543524][ T29] audit: type=1326 audit(1768020745.455:75791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.567312][ T29] audit: type=1326 audit(1768020745.455:75792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.590985][ T29] audit: type=1326 audit(1768020745.465:75793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.614792][ T29] audit: type=1326 audit(1768020745.465:75794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29531 comm="syz.0.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7372a6f749 code=0x7ffc0000 [ 841.876974][T29558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8061'. [ 841.916729][T29561] loop3: detected capacity change from 0 to 128 [ 842.043693][T29564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8064'. [ 842.169591][T29570] geneve2: entered promiscuous mode [ 842.174978][T29570] geneve2: entered allmulticast mode [ 842.387066][T29586] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.8069'. [ 842.417101][T29586] bridge0: port 3(macsec1) entered blocking state [ 842.423605][T29586] bridge0: port 3(macsec1) entered disabled state [ 842.444690][T29586] macsec1: entered allmulticast mode [ 842.450055][T29586] bridge0: entered allmulticast mode [ 842.468165][T29586] macsec1: left allmulticast mode [ 842.473453][T29586] bridge0: left allmulticast mode [ 842.611419][T29591] loop4: detected capacity change from 0 to 512 [ 842.621652][T29593] loop2: detected capacity change from 0 to 512 [ 842.669253][T29593] EXT4-fs: Ignoring removed i_version option [ 842.696626][T29593] EXT4-fs (loop2): orphan cleanup on readonly fs [ 842.732122][T29593] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.8074: EA inode hash validation failed [ 842.788678][T29593] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.8074: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 842.868397][T29602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8077'. [ 842.884524][T29593] EXT4-fs (loop2): Remounting filesystem read-only [ 842.891113][T29593] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.2.8074: ea_inode dec ref err=-117 [ 842.906768][T29591] bond2: option primary_reselect: invalid value (4) [ 842.914308][T29591] bond2 (unregistering): Released all slaves [ 842.920505][T29593] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 842.934945][T29593] EXT4-fs (loop2): 1 orphan inode deleted [ 842.941572][T29593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 842.983305][T29593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8074'. [ 843.003308][T29609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8080'. [ 843.069547][T29614] FAULT_INJECTION: forcing a failure. [ 843.069547][T29614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.082690][T29614] CPU: 0 UID: 0 PID: 29614 Comm: syz.0.8080 Not tainted syzkaller #0 PREEMPT(voluntary) [ 843.082716][T29614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 843.082730][T29614] Call Trace: [ 843.082739][T29614] [ 843.082749][T29614] __dump_stack+0x1d/0x30 [ 843.082877][T29614] dump_stack_lvl+0x95/0xd0 [ 843.082906][T29614] dump_stack+0x15/0x1b [ 843.082931][T29614] should_fail_ex+0x265/0x280 [ 843.082962][T29614] should_fail+0xb/0x20 [ 843.082981][T29614] should_fail_usercopy+0x1a/0x20 [ 843.083071][T29614] _copy_to_user+0x20/0xa0 [ 843.083146][T29614] simple_read_from_buffer+0xb5/0x130 [ 843.083214][T29614] proc_fail_nth_read+0x10e/0x150 [ 843.083252][T29614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.083290][T29614] vfs_read+0x1a8/0x770 [ 843.083305][T29614] ? __rcu_read_unlock+0x4f/0x70 [ 843.083352][T29614] ? __fget_files+0x184/0x1c0 [ 843.083378][T29614] ? mutex_lock+0x58/0x90 [ 843.083460][T29614] ksys_read+0xda/0x1a0 [ 843.083482][T29614] __x64_sys_read+0x40/0x50 [ 843.083499][T29614] x64_sys_call+0x2889/0x3000 [ 843.083522][T29614] do_syscall_64+0xca/0x2b0 [ 843.083633][T29614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.083662][T29614] RIP: 0033:0x7f7372a6e15c [ 843.083682][T29614] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 843.083704][T29614] RSP: 002b:00007f737147b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.083728][T29614] RAX: ffffffffffffffda RBX: 00007f7372cc6090 RCX: 00007f7372a6e15c [ 843.083744][T29614] RDX: 000000000000000f RSI: 00007f737147b0a0 RDI: 0000000000000007 [ 843.083760][T29614] RBP: 00007f737147b090 R08: 0000000000000000 R09: 0000000000000000 [ 843.083808][T29614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.083821][T29614] R13: 00007f7372cc6128 R14: 00007f7372cc6090 R15: 00007fff7baf3068 [ 843.083845][T29614] [ 843.321787][T22188] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.326624][T29613] bridge0: port 1(macsec1) entered blocking state [ 843.337281][T29613] bridge0: port 1(macsec1) entered disabled state [ 843.344445][T29613] macsec1: entered allmulticast mode [ 843.349775][T29613] bridge0: entered allmulticast mode [ 843.356327][T29613] macsec1: left allmulticast mode [ 843.361392][T29613] bridge0: left allmulticast mode [ 843.437916][T29619] loop4: detected capacity change from 0 to 1024 [ 843.455262][T29619] EXT4-fs: Mount option(s) incompatible with ext3 [ 843.465522][T29620] loop2: detected capacity change from 0 to 1024 [ 843.472763][T29620] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 843.483779][T29620] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 843.525681][T29623] 9p: Bad value for 'rfdno' [ 843.560586][T29620] JBD2: no valid journal superblock found [ 843.566510][T29620] EXT4-fs (loop2): Could not load journal inode [ 843.625163][T29625] loop4: detected capacity change from 0 to 1024 [ 843.641199][T29625] EXT4-fs: Ignoring removed nobh option [ 843.646946][T29625] EXT4-fs: Ignoring removed bh option [ 843.664611][T29627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8086'. [ 843.683649][T29625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.743887][T20793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.844512][T29648] loop3: detected capacity change from 0 to 8192 [ 843.952219][T29653] FAULT_INJECTION: forcing a failure. [ 843.952219][T29653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.965410][T29653] CPU: 1 UID: 0 PID: 29653 Comm: syz.0.8094 Not tainted syzkaller #0 PREEMPT(voluntary) [ 843.965444][T29653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 843.965460][T29653] Call Trace: [ 843.965469][T29653] [ 843.965478][T29653] __dump_stack+0x1d/0x30 [ 843.965514][T29653] dump_stack_lvl+0x95/0xd0 [ 843.965539][T29653] dump_stack+0x15/0x1b [ 843.965561][T29653] should_fail_ex+0x265/0x280 [ 843.965635][T29653] should_fail+0xb/0x20 [ 843.965677][T29653] should_fail_usercopy+0x1a/0x20 [ 843.965812][T29653] _copy_to_user+0x20/0xa0 [ 843.965885][T29653] simple_read_from_buffer+0xb5/0x130 [ 843.965913][T29653] proc_fail_nth_read+0x10e/0x150 [ 843.965951][T29653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.966046][T29653] vfs_read+0x1a8/0x770 [ 843.966070][T29653] ? mutex_lock+0x58/0x90 [ 843.966105][T29653] ksys_read+0xda/0x1a0 [ 843.966130][T29653] __x64_sys_read+0x40/0x50 [ 843.966195][T29653] x64_sys_call+0x2889/0x3000 [ 843.966256][T29653] do_syscall_64+0xca/0x2b0 [ 843.966359][T29653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.966386][T29653] RIP: 0033:0x7f7372a6e15c [ 843.966405][T29653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 843.966428][T29653] RSP: 002b:00007f737147b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.966451][T29653] RAX: ffffffffffffffda RBX: 00007f7372cc6090 RCX: 00007f7372a6e15c [ 843.966552][T29653] RDX: 000000000000000f RSI: 00007f737147b0a0 RDI: 0000000000000007 [ 843.966642][T29653] RBP: 00007f737147b090 R08: 0000000000000000 R09: 0000000000000000 [ 843.966708][T29653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.966723][T29653] R13: 00007f7372cc6128 R14: 00007f7372cc6090 R15: 00007fff7baf3068 [ 843.966749][T29653] [ 844.325454][T29664] loop2: detected capacity change from 0 to 1024 [ 844.373193][T29664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.408250][T29664] ext4 filesystem being mounted at /422/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.473039][T29675] bridge0: port 3(macsec1) entered blocking state [ 844.479669][T29675] bridge0: port 3(macsec1) entered disabled state [ 844.534883][T29675] macsec1: entered allmulticast mode [ 844.540309][T29675] bridge0: entered allmulticast mode [ 844.583148][T29675] macsec1: left allmulticast mode [ 844.588409][T29675] bridge0: left allmulticast mode [ 844.607852][T29664] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 844.610887][T29680] Falling back ldisc for ptm0. [ 844.660101][T29670] loop3: detected capacity change from 0 to 1024 [ 844.694086][T29670] EXT4-fs: Mount option(s) incompatible with ext3 [ 844.761919][T22188] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.844338][T29692] __nla_validate_parse: 5 callbacks suppressed [ 844.844355][T29692] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.8102'. [ 844.884155][T29692] bridge0: entered promiscuous mode [ 844.891319][T29692] bridge0: port 3(macsec1) entered blocking state [ 844.897875][T29692] bridge0: port 3(macsec1) entered disabled state [ 844.932404][T29692] macsec1: entered allmulticast mode [ 844.937857][T29692] bridge0: entered allmulticast mode [ 844.945085][T29692] macsec1: left allmulticast mode [ 844.950135][T29692] bridge0: left allmulticast mode [ 844.964670][T29692] bridge0: left promiscuous mode [ 844.977689][T29695] sd 0:0:1:0: device reset [ 845.106829][T29685] loop5: detected capacity change from 0 to 1024 [ 845.126897][T29685] EXT4-fs: Mount option(s) incompatible with ext3 [ 845.574291][T29698] EXT4-fs: Ignoring removed i_version option [ 845.593749][T29698] EXT4-fs (loop2): orphan cleanup on readonly fs [ 845.607092][T29698] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.8105: EA inode hash validation failed [ 845.628808][T29698] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.8105: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 845.646406][T29698] EXT4-fs (loop2): Remounting filesystem read-only [ 845.652952][T29698] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.2.8105: ea_inode dec ref err=-117 [ 845.669442][T29698] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 845.678689][T29698] EXT4-fs (loop2): 1 orphan inode deleted [ 845.685043][T29698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 845.708226][T29698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8105'. [ 845.795829][T22188] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.890967][T29718] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.8114'. [ 845.923679][T29716] bridge0: port 3(macsec1) entered blocking state [ 845.930192][T29716] bridge0: port 3(macsec1) entered disabled state [ 845.937907][T29716] macsec1: entered allmulticast mode [ 845.943291][T29716] bridge0: entered allmulticast mode [ 845.949355][T29716] macsec1: left allmulticast mode [ 845.954448][T29716] bridge0: left allmulticast mode [ 845.996699][T29721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8115'. [ 846.083481][T29723] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 846.094719][T29723] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 846.143574][T29727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8118'. [ 846.152896][T29723] JBD2: no valid journal superblock found [ 846.158715][T29723] EXT4-fs (loop3): Could not load journal inode [ 846.211268][T29730] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 846.222274][T29730] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 846.240382][T29730] JBD2: no valid journal superblock found [ 846.246457][T29730] EXT4-fs (loop5): Could not load journal inode [ 846.512257][T29732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8113'. [ 846.580769][T29730] netlink: 71 bytes leftover after parsing attributes in process `syz.5.8119'. [ 846.608925][ T29] kauditd_printk_skb: 917 callbacks suppressed [ 846.608942][ T29] audit: type=1326 audit(1768020750.775:76712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.661387][ T29] audit: type=1326 audit(1768020750.775:76713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.685246][ T29] audit: type=1326 audit(1768020750.775:76714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.687668][T29723] netlink: 71 bytes leftover after parsing attributes in process `syz.3.8116'. [ 846.708979][ T29] audit: type=1326 audit(1768020750.775:76715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.741845][ T29] audit: type=1326 audit(1768020750.775:76716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.765729][ T29] audit: type=1326 audit(1768020750.775:76717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.789507][ T29] audit: type=1326 audit(1768020750.775:76718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.813179][ T29] audit: type=1326 audit(1768020750.775:76719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.837011][ T29] audit: type=1326 audit(1768020750.775:76720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.860716][ T29] audit: type=1326 audit(1768020750.775:76721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29729 comm="syz.5.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 846.918013][T29745] EXT4-fs: Ignoring removed i_version option [ 846.937542][T29745] EXT4-fs (loop5): orphan cleanup on readonly fs [ 846.950404][T29745] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.8124: EA inode hash validation failed [ 846.957017][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8127'. [ 846.965281][T29745] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.8124: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 846.987244][T29745] EXT4-fs (loop5): Remounting filesystem read-only [ 846.993783][T29745] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.5.8124: ea_inode dec ref err=-117 [ 847.007057][T29745] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 847.016842][T29745] EXT4-fs (loop5): 1 orphan inode deleted [ 847.023282][T29745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 847.037531][T29745] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8124'. [ 847.079530][T29756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5131 sclass=netlink_audit_socket pid=29756 comm=syz.3.8128 [ 847.104627][T28312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.227577][T29761] lo speed is unknown, defaulting to 1000 [ 847.474248][T29781] bridge0: entered promiscuous mode [ 847.486262][T29781] bridge0: port 3(macsec1) entered blocking state [ 847.492812][T29781] bridge0: port 3(macsec1) entered disabled state [ 847.501728][T29781] macsec1: entered allmulticast mode [ 847.507270][T29781] bridge0: entered allmulticast mode [ 847.514101][T29781] macsec1: left allmulticast mode [ 847.519177][T29781] bridge0: left allmulticast mode [ 847.528444][T29781] bridge0: left promiscuous mode [ 847.562064][T29776] set_capacity_and_notify: 4 callbacks suppressed [ 847.562101][T29776] loop5: detected capacity change from 0 to 1024 [ 847.577986][T29776] EXT4-fs: Mount option(s) incompatible with ext3 [ 847.651718][T29790] loop5: detected capacity change from 0 to 512 [ 847.662187][T29790] EXT4-fs: Ignoring removed i_version option [ 847.680516][T29788] loop3: detected capacity change from 0 to 1024 [ 847.694405][T29788] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 847.699308][T29790] EXT4-fs (loop5): orphan cleanup on readonly fs [ 847.705455][T29788] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 847.731998][T29788] JBD2: no valid journal superblock found [ 847.738042][T29788] EXT4-fs (loop3): Could not load journal inode [ 847.744468][T29790] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.8140: EA inode hash validation failed [ 847.761182][T29790] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.8140: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 847.791477][T29790] EXT4-fs (loop5): Remounting filesystem read-only [ 847.798091][T29790] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.5.8140: ea_inode dec ref err=-117 [ 847.835136][T29790] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 847.853716][T29790] EXT4-fs (loop5): 1 orphan inode deleted [ 847.873253][T29790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 847.932981][T29803] loop3: detected capacity change from 0 to 8192 [ 848.095135][T28312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.271588][T29816] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 848.348897][T29820] sd 0:0:1:0: device reset [ 848.923976][T24363] Bluetooth: hci0: command 0x1003 tx timeout [ 848.975480][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 849.035738][T29825] bridge0: entered promiscuous mode [ 849.078153][T29829] loop2: detected capacity change from 0 to 1024 [ 849.085896][T29825] bridge0: port 3(macsec1) entered blocking state [ 849.092372][T29825] bridge0: port 3(macsec1) entered disabled state [ 849.120444][T29832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29832 comm=syz.3.8154 [ 849.137912][T29829] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 849.148920][T29829] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 849.152541][T29835] loop5: detected capacity change from 0 to 1024 [ 849.165814][T29835] EXT4-fs: Mount option(s) incompatible with ext3 [ 849.174083][T29825] macsec1: entered allmulticast mode [ 849.179493][T29825] bridge0: entered allmulticast mode [ 849.195855][T29836] loop3: detected capacity change from 0 to 512 [ 849.223048][T29825] macsec1: left allmulticast mode [ 849.228188][T29825] bridge0: left allmulticast mode [ 849.245144][T29829] JBD2: no valid journal superblock found [ 849.250945][T29829] EXT4-fs (loop2): Could not load journal inode [ 849.258239][T29825] bridge0: left promiscuous mode [ 849.260201][T29836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.328388][T29836] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 849.391192][T23956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.668012][T29860] sd 0:0:1:0: device reset [ 849.684104][T29859] netlink: 'syz.2.8163': attribute type 1 has an invalid length. [ 849.755843][T29866] sd 0:0:1:0: device reset [ 849.769107][T29859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 849.835791][T29865] macvlan2: entered promiscuous mode [ 849.841162][T29865] macvlan2: entered allmulticast mode [ 849.926938][T29865] bond1: entered promiscuous mode [ 849.957860][T29865] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 849.991034][T29865] bond1: left promiscuous mode [ 850.005132][T29864] loop3: detected capacity change from 0 to 1024 [ 850.043857][T29852] bridge0: port 3(macsec1) entered blocking state [ 850.050410][T29852] bridge0: port 3(macsec1) entered disabled state [ 850.065350][T29864] EXT4-fs: Mount option(s) incompatible with ext3 [ 850.127865][T29852] macsec1: entered allmulticast mode [ 850.133235][T29852] bridge0: entered allmulticast mode [ 850.174780][T29852] macsec1: left allmulticast mode [ 850.179951][T29852] bridge0: left allmulticast mode [ 850.229969][T29859] bond1: (slave ip6gretap1): making interface the new active one [ 850.335219][T29859] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 850.364884][T29867] macvlan2: entered promiscuous mode [ 850.370253][T29867] macvlan2: entered allmulticast mode [ 850.417765][T29867] bond1: entered promiscuous mode [ 850.422916][T29867] ip6gretap1: entered promiscuous mode [ 850.429009][T29867] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 850.436502][T29867] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 850.483276][T29867] bond1: left promiscuous mode [ 850.488173][T29867] ip6gretap1: left promiscuous mode [ 850.502719][T21702] Bluetooth: hci0: Frame reassembly failed (-84) [ 850.600619][T29878] __nla_validate_parse: 7 callbacks suppressed [ 850.600635][T29878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8167'. [ 850.644821][T29876] loop3: detected capacity change from 0 to 8192 [ 850.689108][T29882] loop2: detected capacity change from 0 to 512 [ 850.706558][T29882] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 850.714616][T29882] EXT4-fs (loop2): orphan cleanup on readonly fs [ 850.721558][T29882] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.8169: Failed to acquire dquot type 1 [ 850.733190][T29882] EXT4-fs (loop2): Remounting filesystem read-only [ 850.739762][T29882] EXT4-fs (loop2): 1 truncate cleaned up [ 850.746100][T29882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 850.759045][T29882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.121427][T29893] lo speed is unknown, defaulting to 1000 [ 851.426938][T29900] 9p: Bad value for 'rfdno' [ 851.593743][T29912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8179'. [ 851.609765][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8178'. [ 851.618888][ T29] kauditd_printk_skb: 924 callbacks suppressed [ 851.618909][ T29] audit: type=1326 audit(1768020755.775:77644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.649674][T29914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5131 sclass=netlink_audit_socket pid=29914 comm=syz.2.8180 [ 851.664997][ T29] audit: type=1326 audit(1768020755.815:77645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.688648][ T29] audit: type=1326 audit(1768020755.815:77646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.720903][ T29] audit: type=1326 audit(1768020755.835:77647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.744676][ T29] audit: type=1326 audit(1768020755.835:77648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.768335][ T29] audit: type=1326 audit(1768020755.835:77649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.792857][ T29] audit: type=1326 audit(1768020755.955:77650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.835951][ T29] audit: type=1326 audit(1768020755.985:77651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.859646][ T29] audit: type=1326 audit(1768020755.985:77652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 851.909829][ T29] audit: type=1326 audit(1768020756.075:77653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.5.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 852.276157][T29932] block device autoloading is deprecated and will be removed. [ 852.454579][T29936] netlink: 248 bytes leftover after parsing attributes in process `syz.0.8186'. [ 852.513998][T24363] Bluetooth: hci0: command 0x1003 tx timeout [ 852.554005][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 852.643360][T29940] 9p: Bad value for 'rfdno' [ 852.682606][T29944] syzkaller1: entered promiscuous mode [ 852.688224][T29944] syzkaller1: entered allmulticast mode [ 852.729870][T29944] set_capacity_and_notify: 1 callbacks suppressed [ 852.729891][T29944] loop4: detected capacity change from 0 to 764 [ 852.743353][T29944] iso9660: Unknown parameter '0000000000000000000900000000000000000000004' [ 852.767457][T29944] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 852.901644][T29949] FAULT_INJECTION: forcing a failure. [ 852.901644][T29949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.914813][T29949] CPU: 0 UID: 0 PID: 29949 Comm: syz.2.8190 Not tainted syzkaller #0 PREEMPT(voluntary) [ 852.914848][T29949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.914946][T29949] Call Trace: [ 852.914955][T29949] [ 852.914965][T29949] __dump_stack+0x1d/0x30 [ 852.915086][T29949] dump_stack_lvl+0x95/0xd0 [ 852.915113][T29949] dump_stack+0x15/0x1b [ 852.915138][T29949] should_fail_ex+0x265/0x280 [ 852.915166][T29949] should_fail+0xb/0x20 [ 852.915288][T29949] should_fail_usercopy+0x1a/0x20 [ 852.915311][T29949] _copy_from_user+0x1c/0xb0 [ 852.915338][T29949] ___sys_sendmsg+0xc1/0x1d0 [ 852.915458][T29949] __x64_sys_sendmsg+0xd4/0x160 [ 852.915495][T29949] x64_sys_call+0x17ba/0x3000 [ 852.915562][T29949] do_syscall_64+0xca/0x2b0 [ 852.915595][T29949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.915620][T29949] RIP: 0033:0x7f350ceaf749 [ 852.915638][T29949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.915678][T29949] RSP: 002b:00007f350b90f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.915700][T29949] RAX: ffffffffffffffda RBX: 00007f350d105fa0 RCX: 00007f350ceaf749 [ 852.915731][T29949] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 852.915746][T29949] RBP: 00007f350b90f090 R08: 0000000000000000 R09: 0000000000000000 [ 852.915761][T29949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.915777][T29949] R13: 00007f350d106038 R14: 00007f350d105fa0 R15: 00007ffc29e16288 [ 852.915835][T29949] [ 853.099057][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8192'. [ 853.300890][T29962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8195'. [ 853.702621][T29963] sd 0:0:1:0: device reset [ 853.874933][T29959] lo speed is unknown, defaulting to 1000 [ 854.366102][T29975] 9p: Bad value for 'rfdno' [ 854.399146][T29979] x_tables: duplicate underflow at hook 3 [ 854.488201][T29981] loop3: detected capacity change from 0 to 1024 [ 854.500942][T29981] EXT4-fs: Ignoring removed nobh option [ 854.506644][T29981] EXT4-fs: Ignoring removed bh option [ 854.584403][T29981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.604232][T29991] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8206'. [ 854.637604][T23956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.071378][T29995] lo speed is unknown, defaulting to 1000 [ 855.253357][T30003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8210'. [ 855.425498][T30009] sd 0:0:1:0: device reset [ 855.656052][T30012] syzkaller1: entered promiscuous mode [ 855.661597][T30012] syzkaller1: entered allmulticast mode [ 855.836099][T30018] 9p: Bad value for 'rfdno' [ 856.033377][T30023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8217'. [ 856.247648][T30037] loop3: detected capacity change from 0 to 1024 [ 856.259069][T30037] EXT4-fs: Ignoring removed nobh option [ 856.264726][T30037] EXT4-fs: Ignoring removed bh option [ 856.287426][T30037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.333364][T30041] sd 0:0:1:0: device reset [ 856.420289][T23956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.522138][T30046] loop0: detected capacity change from 0 to 512 [ 856.558483][T30046] EXT4-fs: Ignoring removed i_version option [ 856.599069][T30046] EXT4-fs (loop0): orphan cleanup on readonly fs [ 856.626999][T30046] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.8225: EA inode hash validation failed [ 856.657012][T30046] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.8225: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 856.697943][T30046] EXT4-fs (loop0): Remounting filesystem read-only [ 856.704610][T30046] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.0.8225: ea_inode dec ref err=-117 [ 856.750235][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 856.750251][ T29] audit: type=1400 audit(1768020760.905:77944): avc: denied { add_name } for pid=30045 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.779794][ T29] audit: type=1400 audit(1768020760.905:77945): avc: denied { create } for pid=30045 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 856.802678][ T29] audit: type=1400 audit(1768020760.915:77946): avc: denied { write } for pid=30045 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=32168 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 856.829351][ T29] audit: type=1400 audit(1768020760.915:77947): avc: denied { append } for pid=30045 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=32168 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 856.873060][T30046] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 856.882164][T30046] EXT4-fs (loop0): 1 orphan inode deleted [ 856.888311][T30046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 856.907290][T30046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8225'. [ 856.917990][ T29] audit: type=1326 audit(1768020761.035:77948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.4.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 856.941743][ T29] audit: type=1326 audit(1768020761.035:77949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.4.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 856.965545][ T29] audit: type=1326 audit(1768020761.035:77950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.4.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 856.989280][ T29] audit: type=1326 audit(1768020761.035:77951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.4.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 857.013018][ T29] audit: type=1326 audit(1768020761.035:77952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.4.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 857.036738][ T29] audit: type=1326 audit(1768020761.035:77953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30034 comm="syz.4.8222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 857.153697][T30069] bridge0: port 3(batadv1) entered blocking state [ 857.160317][T30069] bridge0: port 3(batadv1) entered disabled state [ 857.168284][T30069] batadv1: entered allmulticast mode [ 857.184432][T30069] batadv1: entered promiscuous mode [ 857.227859][T23157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.248489][T30070] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5131 sclass=netlink_audit_socket pid=30070 comm=syz.2.8228 [ 857.336147][T30088] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8230'. [ 857.413494][T30092] 9p: Bad value for 'rfdno' [ 857.663779][ T1596] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 857.673057][ T1596] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 858.749522][T30111] sd 0:0:1:0: device reset [ 858.839575][T30109] netlink: 'syz.0.8234': attribute type 7 has an invalid length. [ 858.847515][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8234'. [ 859.272575][T30060] Set syz1 is full, maxelem 65536 reached [ 859.525531][T30126] sd 0:0:1:0: device reset [ 859.948165][T30141] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.8239'. [ 859.996182][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8244'. [ 860.034587][T30124] bridge0: port 4(macsec1) entered blocking state [ 860.041174][T30124] bridge0: port 4(macsec1) entered disabled state [ 860.047999][T30124] macsec1: entered allmulticast mode [ 860.053339][T30124] bridge0: entered allmulticast mode [ 860.059449][T30124] macsec1: left allmulticast mode [ 860.064729][T30124] bridge0: left allmulticast mode [ 860.217492][T30141] loop3: detected capacity change from 0 to 1024 [ 860.229011][T30141] EXT4-fs: Mount option(s) incompatible with ext3 [ 861.102634][T30153] sd 0:0:1:0: device reset [ 861.153395][T30152] netlink: 'syz.4.8246': attribute type 7 has an invalid length. [ 861.161222][T30152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8246'. [ 861.702061][T30167] syzkaller1: entered promiscuous mode [ 861.707648][T30167] syzkaller1: entered allmulticast mode [ 861.789495][T30171] netlink: 'syz.5.8247': attribute type 7 has an invalid length. [ 861.797309][T30171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8247'. [ 861.883671][T30172] sd 0:0:1:0: device reset [ 861.896643][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 861.896664][ T29] audit: type=1326 audit(1768020765.935:78346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 861.926618][ T29] audit: type=1326 audit(1768020765.935:78347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 861.950203][ T29] audit: type=1326 audit(1768020765.935:78348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 861.973863][ T29] audit: type=1326 audit(1768020765.935:78349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 861.997734][ T29] audit: type=1326 audit(1768020765.935:78350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 862.021420][ T29] audit: type=1326 audit(1768020765.935:78351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 862.045097][ T29] audit: type=1326 audit(1768020765.935:78352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 862.069266][ T29] audit: type=1326 audit(1768020765.935:78353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 862.092853][ T29] audit: type=1326 audit(1768020765.935:78354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 862.116589][ T29] audit: type=1326 audit(1768020765.935:78355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30155 comm="syz.5.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 862.241474][T30167] loop3: detected capacity change from 0 to 764 [ 862.505427][T30177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8254'. [ 862.518721][T30167] iso9660: Unknown parameter '0000000000000000000900000000000000000000004' [ 863.128851][T30188] lo speed is unknown, defaulting to 1000 [ 863.503615][T30199] loop0: detected capacity change from 0 to 1024 [ 863.510820][T30201] loop5: detected capacity change from 0 to 512 [ 863.518318][T30201] EXT4-fs: Ignoring removed i_version option [ 863.535447][T30201] EXT4-fs (loop5): orphan cleanup on readonly fs [ 863.553689][T30201] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.8263: EA inode hash validation failed [ 863.566511][T30201] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.8263: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 863.581742][T30201] EXT4-fs (loop5): Remounting filesystem read-only [ 863.588319][T30201] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.5.8263: ea_inode dec ref err=-117 [ 863.604288][T30199] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 863.615224][T30199] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 863.617224][T30201] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 863.647284][T30201] EXT4-fs (loop5): 1 orphan inode deleted [ 863.656249][T30201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 863.671380][T30199] JBD2: no valid journal superblock found [ 863.677322][T30199] EXT4-fs (loop0): Could not load journal inode [ 863.722811][T30199] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8262'. [ 863.731954][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 863.734772][T30201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8263'. [ 863.739071][T24363] Bluetooth: hci0: command 0x1003 tx timeout [ 863.764498][T30208] syzkaller1: entered promiscuous mode [ 863.770040][T30208] syzkaller1: entered allmulticast mode [ 863.851476][T30213] FAULT_INJECTION: forcing a failure. [ 863.851476][T30213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.865211][T30213] CPU: 0 UID: 0 PID: 30213 Comm: syz.0.8267 Not tainted syzkaller #0 PREEMPT(voluntary) [ 863.865317][T30213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.865333][T30213] Call Trace: [ 863.865341][T30213] [ 863.865399][T30213] __dump_stack+0x1d/0x30 [ 863.865449][T30213] dump_stack_lvl+0x95/0xd0 [ 863.865473][T30213] dump_stack+0x15/0x1b [ 863.865498][T30213] should_fail_ex+0x265/0x280 [ 863.865524][T30213] should_fail+0xb/0x20 [ 863.865548][T30213] should_fail_usercopy+0x1a/0x20 [ 863.865606][T30213] _copy_from_user+0x1c/0xb0 [ 863.865713][T30213] ___sys_sendmsg+0xc1/0x1d0 [ 863.865840][T30213] __x64_sys_sendmsg+0xd4/0x160 [ 863.865882][T30213] x64_sys_call+0x17ba/0x3000 [ 863.866002][T30213] do_syscall_64+0xca/0x2b0 [ 863.866038][T30213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.866065][T30213] RIP: 0033:0x7f7372a6f749 [ 863.866081][T30213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.866193][T30213] RSP: 002b:00007f73714cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.866219][T30213] RAX: ffffffffffffffda RBX: 00007f7372cc5fa0 RCX: 00007f7372a6f749 [ 863.866236][T30213] RDX: 0000000024004080 RSI: 0000200000000200 RDI: 0000000000000003 [ 863.866253][T30213] RBP: 00007f73714cf090 R08: 0000000000000000 R09: 0000000000000000 [ 863.866270][T30213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.866286][T30213] R13: 00007f7372cc6038 R14: 00007f7372cc5fa0 R15: 00007fff7baf3068 [ 863.866312][T30213] [ 864.195959][T28312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.355713][T30238] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.8275'. [ 865.428999][T30226] sd 0:0:1:0: device reset [ 865.481093][T30242] bridge0: port 3(macsec1) entered blocking state [ 865.488202][T30242] bridge0: port 3(macsec1) entered disabled state [ 865.510861][T30242] macsec1: entered allmulticast mode [ 865.516249][T30242] bridge0: entered allmulticast mode [ 865.522197][T30242] macsec1: left allmulticast mode [ 865.527291][T30242] bridge0: left allmulticast mode [ 865.586322][T30235] lo speed is unknown, defaulting to 1000 [ 865.649260][T30232] loop0: detected capacity change from 0 to 1024 [ 865.661480][T30232] EXT4-fs: Mount option(s) incompatible with ext3 [ 865.694943][T30252] netlink: 'syz.4.8278': attribute type 1 has an invalid length. [ 865.732042][T30254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8281'. [ 865.741188][T30254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8281'. [ 865.760020][T30252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.790707][T30258] macvlan2: entered promiscuous mode [ 865.796268][T30258] macvlan2: entered allmulticast mode [ 865.810729][T30258] bond2: entered promiscuous mode [ 865.816614][T30258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 865.832013][T30258] bond2: left promiscuous mode [ 865.859361][T30252] bond2: (slave ip6gretap1): making interface the new active one [ 865.888812][T30252] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 865.952286][T30271] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.8285'. [ 865.988550][T30271] bridge0: port 4(macsec1) entered blocking state [ 865.995285][T30271] bridge0: port 4(macsec1) entered disabled state [ 866.024184][T30271] macsec1: entered allmulticast mode [ 866.029548][T30271] bridge0: entered allmulticast mode [ 866.114510][T30271] macsec1: left allmulticast mode [ 866.119651][T30271] bridge0: left allmulticast mode [ 866.259556][T30282] sd 0:0:1:0: device reset [ 866.330369][T30265] loop3: detected capacity change from 0 to 1024 [ 866.367569][T30265] EXT4-fs: Mount option(s) incompatible with ext3 [ 866.826773][T30288] sd 0:0:1:0: device reset [ 867.095757][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 867.095776][ T29] audit: type=1326 audit(1768020771.225:78909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30264 comm="syz.3.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 867.110620][T30290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8293'. [ 867.125929][ T29] audit: type=1326 audit(1768020771.225:78910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30264 comm="syz.3.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 867.158421][ T29] audit: type=1326 audit(1768020771.245:78911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30289 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 867.182041][ T29] audit: type=1326 audit(1768020771.245:78912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30289 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 867.203373][T30291] syzkaller1: entered promiscuous mode [ 867.205675][ T29] audit: type=1326 audit(1768020771.245:78913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30289 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 867.211124][T30291] syzkaller1: entered allmulticast mode [ 867.234764][ T29] audit: type=1326 audit(1768020771.245:78914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30289 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 867.234796][ T29] audit: type=1326 audit(1768020771.245:78915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30289 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 867.234902][ T29] audit: type=1326 audit(1768020771.245:78916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30289 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 867.311190][ T29] audit: type=1326 audit(1768020771.245:78917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30289 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 867.334816][ T29] audit: type=1326 audit(1768020771.245:78918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30289 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac2cbf749 code=0x7ffc0000 [ 867.437211][T30291] loop0: detected capacity change from 0 to 764 [ 867.449141][T30291] iso9660: Unknown parameter '0000000000000000000900000000000000000000004' [ 867.547186][T30294] loop5: detected capacity change from 0 to 8192 [ 868.643080][T30308] veth0_to_team: entered promiscuous mode [ 868.773586][T30313] sd 0:0:1:0: device reset [ 869.793951][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 870.123135][T30343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8311'. [ 870.514929][T30332] sd 0:0:1:0: device reset [ 870.525461][T30354] loop5: detected capacity change from 0 to 1024 [ 870.534736][T30354] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 870.546165][T30354] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 870.562529][T30354] JBD2: no valid journal superblock found [ 870.568370][T30354] EXT4-fs (loop5): Could not load journal inode [ 870.601869][T30356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8317'. [ 870.643734][T30354] netlink: 71 bytes leftover after parsing attributes in process `syz.5.8316'. [ 870.659092][T30359] loop2: detected capacity change from 0 to 128 [ 870.687085][T30359] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 870.707980][T30364] x_tables: duplicate underflow at hook 3 [ 870.779941][ T575] Bluetooth: hci0: Frame reassembly failed (-84) [ 870.795759][T30374] FAULT_INJECTION: forcing a failure. [ 870.795759][T30374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.809385][T30374] CPU: 1 UID: 0 PID: 30374 Comm: syz.0.8325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 870.809421][T30374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 870.809447][T30374] Call Trace: [ 870.809456][T30374] [ 870.809467][T30374] __dump_stack+0x1d/0x30 [ 870.809499][T30374] dump_stack_lvl+0x95/0xd0 [ 870.809528][T30374] dump_stack+0x15/0x1b [ 870.809555][T30374] should_fail_ex+0x265/0x280 [ 870.809625][T30374] should_fail+0xb/0x20 [ 870.809651][T30374] should_fail_usercopy+0x1a/0x20 [ 870.809682][T30374] _copy_from_user+0x1c/0xb0 [ 870.809786][T30374] ___sys_sendmsg+0xc1/0x1d0 [ 870.809908][T30374] __x64_sys_sendmsg+0xd4/0x160 [ 870.809981][T30374] x64_sys_call+0x17ba/0x3000 [ 870.810014][T30374] do_syscall_64+0xca/0x2b0 [ 870.810123][T30374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.810153][T30374] RIP: 0033:0x7f7372a6f749 [ 870.810249][T30374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.810348][T30374] RSP: 002b:00007f73714cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.810369][T30374] RAX: ffffffffffffffda RBX: 00007f7372cc5fa0 RCX: 00007f7372a6f749 [ 870.810387][T30374] RDX: 0000000020048850 RSI: 0000200000006040 RDI: 0000000000000008 [ 870.810399][T30374] RBP: 00007f73714cf090 R08: 0000000000000000 R09: 0000000000000000 [ 870.810411][T30374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.810423][T30374] R13: 00007f7372cc6038 R14: 00007f7372cc5fa0 R15: 00007fff7baf3068 [ 870.810488][T30374] [ 871.105625][T30384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8330'. [ 871.156615][T30382] loop5: detected capacity change from 0 to 8192 [ 871.163092][T30388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 871.381208][T30394] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 871.441474][T30404] x_tables: duplicate underflow at hook 3 [ 871.559244][T30408] loop3: detected capacity change from 0 to 512 [ 871.566047][T30408] EXT4-fs: Ignoring removed i_version option [ 871.573879][T30408] EXT4-fs (loop3): orphan cleanup on readonly fs [ 871.582514][T30408] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.8340: EA inode hash validation failed [ 871.595938][T30400] bridge0: port 1(macsec1) entered blocking state [ 871.602508][T30400] bridge0: port 1(macsec1) entered disabled state [ 871.609173][T30408] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.8340: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 871.619727][T30400] macsec1: entered allmulticast mode [ 871.629535][T30400] bridge0: entered allmulticast mode [ 871.653055][T30408] EXT4-fs (loop3): Remounting filesystem read-only [ 871.659684][T30408] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.8340: ea_inode dec ref err=-117 [ 871.689721][T30415] sd 0:0:1:0: device reset [ 871.753229][T30416] loop4: detected capacity change from 0 to 1024 [ 871.768666][T30408] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 871.808539][T30416] EXT4-fs: Mount option(s) incompatible with ext3 [ 871.837468][T30408] EXT4-fs (loop3): 1 orphan inode deleted [ 871.897975][T30408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 871.979352][T30408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8340'. [ 872.161730][T30400] macsec1: left allmulticast mode [ 872.166877][T30400] bridge0: left allmulticast mode [ 872.339192][T30414] lo speed is unknown, defaulting to 1000 [ 872.413241][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 872.413258][ T29] audit: type=1400 audit(1768020776.575:79229): avc: denied { write } for pid=30422 comm="syz.0.8343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 872.442745][T23956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.452701][ T29] audit: type=1400 audit(1768020776.605:79230): avc: denied { unmount } for pid=23956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 872.460618][T30425] loop4: detected capacity change from 0 to 8192 [ 872.485981][T30424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5131 sclass=netlink_audit_socket pid=30424 comm=syz.0.8343 [ 872.517012][ T29] audit: type=1326 audit(1768020776.685:79231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30428 comm="syz.3.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 872.540836][ T29] audit: type=1326 audit(1768020776.685:79232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30428 comm="syz.3.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 872.564480][ T29] audit: type=1326 audit(1768020776.685:79233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30428 comm="syz.3.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 872.588121][ T29] audit: type=1326 audit(1768020776.685:79234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30428 comm="syz.3.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 872.611968][ T29] audit: type=1326 audit(1768020776.685:79235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30428 comm="syz.3.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 872.635664][ T29] audit: type=1326 audit(1768020776.685:79236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30428 comm="syz.3.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 872.745840][ T29] audit: type=1326 audit(1768020776.915:79237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30428 comm="syz.3.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 872.790892][ T29] audit: type=1326 audit(1768020776.935:79238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30428 comm="syz.3.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 872.834921][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 872.835883][T24363] Bluetooth: hci0: command 0x1003 tx timeout [ 872.917221][T30440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5131 sclass=netlink_audit_socket pid=30440 comm=syz.4.8349 [ 873.998398][T30451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8352'. [ 874.230408][T30447] lo speed is unknown, defaulting to 1000 [ 874.460605][T30457] lo speed is unknown, defaulting to 1000 [ 875.567382][T30468] sd 0:0:1:0: device reset [ 875.643674][T30466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8356'. [ 875.731819][T30465] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5131 sclass=netlink_audit_socket pid=30465 comm=syz.2.8357 [ 875.795088][T30473] syzkaller1: entered promiscuous mode [ 875.800618][T30473] syzkaller1: entered allmulticast mode [ 876.134566][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8362'. [ 876.225336][T30493] loop4: detected capacity change from 0 to 512 [ 876.324749][T30493] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 876.332915][T30493] EXT4-fs (loop4): orphan cleanup on readonly fs [ 876.339836][T30493] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.8366: Failed to acquire dquot type 1 [ 876.351364][T30493] EXT4-fs (loop4): Remounting filesystem read-only [ 876.358106][T30493] EXT4-fs (loop4): 1 truncate cleaned up [ 876.364559][T30493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 876.377546][T30493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.506089][T30499] netlink: 'syz.5.8365': attribute type 7 has an invalid length. [ 876.514050][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8365'. [ 877.241361][T30496] sd 0:0:1:0: device reset [ 877.359293][T30503] lo speed is unknown, defaulting to 1000 [ 877.454257][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 877.454272][ T29] audit: type=1326 audit(1768020781.625:79413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30505 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 877.812966][ T29] audit: type=1326 audit(1768020781.745:79414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30505 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 877.836808][ T29] audit: type=1326 audit(1768020781.775:79415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30509 comm="syz.4.8368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 877.860517][ T29] audit: type=1326 audit(1768020781.775:79416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30509 comm="syz.4.8368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fc62d24f749 code=0x7ffc0000 [ 877.884173][ T29] audit: type=1326 audit(1768020781.825:79417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30505 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 877.907830][ T29] audit: type=1326 audit(1768020781.825:79418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30505 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 877.931489][ T29] audit: type=1326 audit(1768020781.825:79419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30505 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 877.955094][ T29] audit: type=1326 audit(1768020781.825:79420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30505 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 877.978681][ T29] audit: type=1326 audit(1768020781.825:79421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30505 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 878.002365][ T29] audit: type=1326 audit(1768020781.825:79422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30505 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f022ecaf749 code=0x7ffc0000 [ 878.221149][T30521] FAULT_INJECTION: forcing a failure. [ 878.221149][T30521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.234431][T30521] CPU: 1 UID: 0 PID: 30521 Comm: syz.4.8372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 878.234457][T30521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.234469][T30521] Call Trace: [ 878.234476][T30521] [ 878.234483][T30521] __dump_stack+0x1d/0x30 [ 878.234556][T30521] dump_stack_lvl+0x95/0xd0 [ 878.234639][T30521] dump_stack+0x15/0x1b [ 878.234662][T30521] should_fail_ex+0x265/0x280 [ 878.234707][T30521] should_fail+0xb/0x20 [ 878.234725][T30521] should_fail_usercopy+0x1a/0x20 [ 878.234787][T30521] _copy_from_user+0x1c/0xb0 [ 878.234820][T30521] __sys_sendto+0x19e/0x330 [ 878.234857][T30521] __x64_sys_sendto+0x76/0x90 [ 878.234888][T30521] x64_sys_call+0x29a7/0x3000 [ 878.234947][T30521] do_syscall_64+0xca/0x2b0 [ 878.234986][T30521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.235069][T30521] RIP: 0033:0x7fc62d24f749 [ 878.235087][T30521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.235109][T30521] RSP: 002b:00007fc62bcaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 878.235128][T30521] RAX: ffffffffffffffda RBX: 00007fc62d4a5fa0 RCX: 00007fc62d24f749 [ 878.235173][T30521] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 878.235188][T30521] RBP: 00007fc62bcaf090 R08: 0000200000000140 R09: 000000000000001c [ 878.235199][T30521] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 878.235211][T30521] R13: 00007fc62d4a6038 R14: 00007fc62d4a5fa0 R15: 00007ffe8bce8f18 [ 878.235228][T30521] [ 878.619223][T30526] lo speed is unknown, defaulting to 1000 [ 879.190319][T30531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8375'. [ 879.331980][T30529] sd 0:0:1:0: device reset [ 879.412807][T30537] loop2: detected capacity change from 0 to 1024 [ 879.491305][T30537] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 879.502287][T30537] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 879.638732][T30541] loop5: detected capacity change from 0 to 1024 [ 879.651587][T30537] JBD2: no valid journal superblock found [ 879.658021][T30537] EXT4-fs (loop2): Could not load journal inode [ 879.668994][T30542] bridge0: port 1(macsec1) entered blocking state [ 879.675522][T30542] bridge0: port 1(macsec1) entered disabled state [ 879.682686][T30542] macsec1: entered allmulticast mode [ 879.688022][T30542] bridge0: entered allmulticast mode [ 879.712161][T30541] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 879.723209][T30541] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 879.741689][T30541] JBD2: no valid journal superblock found [ 879.747626][T30541] EXT4-fs (loop5): Could not load journal inode [ 879.754378][T30542] macsec1: left allmulticast mode [ 879.759493][T30542] bridge0: left allmulticast mode [ 879.830326][T30533] loop4: detected capacity change from 0 to 1024 [ 879.855978][T30533] EXT4-fs: Mount option(s) incompatible with ext3 [ 879.963370][T30541] netlink: 71 bytes leftover after parsing attributes in process `syz.5.8379'. [ 880.018075][T30537] netlink: 71 bytes leftover after parsing attributes in process `syz.2.8374'. [ 880.053806][T13307] ================================================================== [ 880.061960][T13307] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 880.069125][T13307] [ 880.071466][T13307] write to 0xffff8881053da6bc of 4 bytes by task 13305 on cpu 0: [ 880.079198][T13307] shmem_symlink+0x387/0x3b0 [ 880.083825][T13307] vfs_symlink+0x1b4/0x1f0 [ 880.088281][T13307] do_symlinkat+0xf0/0x470 [ 880.092719][T13307] __x64_sys_symlink+0x50/0x60 [ 880.097510][T13307] x64_sys_call+0x24a9/0x3000 [ 880.102218][T13307] do_syscall_64+0xca/0x2b0 [ 880.106751][T13307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.112667][T13307] [ 880.115007][T13307] read to 0xffff8881053da6bc of 4 bytes by task 13307 on cpu 1: [ 880.122653][T13307] fill_mg_cmtime+0x5b/0x260 [ 880.127265][T13307] generic_fillattr+0x24a/0x340 [ 880.132140][T13307] shmem_getattr+0x181/0x200 [ 880.136762][T13307] vfs_getattr_nosec+0x146/0x1e0 [ 880.141721][T13307] vfs_statx+0x113/0x390 [ 880.145986][T13307] vfs_fstatat+0x115/0x170 [ 880.150597][T13307] __se_sys_newfstatat+0x55/0x260 [ 880.155645][T13307] __x64_sys_newfstatat+0x55/0x70 [ 880.160694][T13307] x64_sys_call+0x111f/0x3000 [ 880.165392][T13307] do_syscall_64+0xca/0x2b0 [ 880.169925][T13307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.175836][T13307] [ 880.178187][T13307] value changed: 0x0d27bd92 -> 0x0d892f06 [ 880.183926][T13307] [ 880.186274][T13307] Reported by Kernel Concurrency Sanitizer on: [ 880.192446][T13307] CPU: 1 UID: 0 PID: 13307 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 880.201841][T13307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 880.211913][T13307] ================================================================== [ 880.524988][T30558] sd 0:0:1:0: device reset [ 881.172018][T30559] sch_tbf: burst 22 is lower than device lo mtu (65550) !