last executing test programs: 3.536852052s ago: executing program 3 (id=1181): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x2000c80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$eJzs281qE1EYxvGnH9ov20Sr1VbEF93oZmjjFYTSghhQaiN+gDC1Ew2ZJiUTKhGx3bn1LoTi0p0g3kA3XoELd9247EIc6UxskzaiFXRs8/9tzhvOPOGcnDPhLGY2775aKhUCp+DW1N1l6pX6tSWl1a0exboabXdUH1ezNV0dzX26cPve/RvZXG5mzmw2O38tY2YjF98/ff7m0ofa0J23I+/6tJF+uPkl83ljbGN889v8k2JgxcDKlZq5tlCp1NwF37PFYlByzG75nht4ViwHXrWlv+BXlpfr5pYXhweXq14QmFuuW8mrW61itWrd3MdusWyO49jwoPAr+fW5OTeb9Cjwd1WrWXda0sS+nvx6IgMCAACJanP+X+P83yk4/3eC7fP/g8b924rzPwAAAAAAAAAAAAAAAAAAAAAAh8FWGKbCMEz9aI9J0Rs+YePzgKRBSUOSTkgaljQiKSUpLemkpFOSRiWdlnRG0piks5LOSRpv+q6k54r9kln/gSSnjCbc/52N9e9sTS/u9ktLL1fyK/m4jfuzBRXly9OkUvoarWVDXM9ez81MWiSt80urjfzqSr6nNT+l1PaGaZefivPWmu+L9t1OPqPU9gZrl8+0zffryuWmvKOUPj5SRb4Woz25m38xZTZ9M7cnPxFdd9Q5tqPt+jnOz/rj/AH2x57ft1cTvcnOHVJQf1Zyfd+rUlAcheK1/othHP4i6X8m/Au7i570SAAAAAAAAAAAAAAAAAAAB/GnTwiGq3H+dy5Oeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOz1PQAA//+5gF2o") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x7b97, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3.415650854s ago: executing program 3 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x8e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) (fail_nth: 7) 2.663338094s ago: executing program 3 (id=1189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) move_mount(0xffffffffffffffff, 0x0, r1, &(0x7f0000000440)='./file0\x00', 0x83) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000002c0), 0x0}}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xe4}}, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) 1.828447125s ago: executing program 2 (id=1197): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x88, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) timer_create(0x7, &(0x7f0000000040)={0x0, 0x3c, 0x1, @thr={&(0x7f0000000180)="bbd282f391dd8e05a74d37b52adb9f4232760a8242b9a7af3376255578c04a49be91f79510607da8b38d21d203f205d7b7aa3ced20b9505c05ab371fda88f13ac50306ed6eb42423517f353b40a676d75eafdc83fbe6540855690b891adca83d1b23a02fc74b160337a89953225f6817126829bd8c47fb8066cd569b3c3183842c09b43ffe672f6db466c512b80f82e065023d4f5e1bbd5e2fcb4a35dac629c67f7cb5b577bdaaac43389b236e48e4d3a656b226984d3cc3fa78d043ecac0b1f4d7171b0e75aa516875a3512dcd082c3645144853c51d7c687ebc423e3a542cf7f", &(0x7f00000002c0)}}, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f00000003c0)) close(0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) epoll_create1(0x80000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01}, 0x0) (fail_nth: 7) 1.445226481s ago: executing program 1 (id=1198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x8e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r5, 0xffff, 0x100}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) 1.434571281s ago: executing program 3 (id=1199): perf_event_open(&(0x7f0000002340)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x2, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x4, &(0x7f0000000000)={0x291, 0x8000000000000009}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x62, 0x50a, &(0x7f0000000200)="$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") 1.214484053s ago: executing program 2 (id=1201): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x88, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) timer_create(0x7, &(0x7f0000000040)={0x0, 0x3c, 0x1, @thr={&(0x7f0000000180)="bbd282f391dd8e05a74d37b52adb9f4232760a8242b9a7af3376255578c04a49be91f79510607da8b38d21d203f205d7b7aa3ced20b9505c05ab371fda88f13ac50306ed6eb42423517f353b40a676d75eafdc83fbe6540855690b891adca83d1b23a02fc74b160337a89953225f6817126829bd8c47fb8066cd569b3c3183842c09b43ffe672f6db466c512b80f82e065023d4f5e1bbd5e2fcb4a35dac629c67f7cb5b577bdaaac43389b236e48e4d3a656b226984d3cc3fa78d043ecac0b1f4d7171b0e75aa516875a3512dcd082c3645144853c51d7c687ebc423e3a542cf7f", &(0x7f00000002c0)}}, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f00000003c0)) close(0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) epoll_create1(0x80000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01}, 0x0) 1.214158704s ago: executing program 3 (id=1202): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x1c, 0x4) readv(r0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)='L', 0x1}], 0x1}}], 0x1, 0x8090) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095", @ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_es_lookup_extent_exit\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000240)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}, {@grpquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x101}) 1.181241434s ago: executing program 1 (id=1203): socket(0x2, 0x80805, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = creat(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000003c0), &(0x7f00000001c0)=r0, 0xa1}, 0x20) 1.130691065s ago: executing program 4 (id=1204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x3}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_usb_connect$hid(0x1, 0xfffffffffffffffa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x8, 0x4, 0x21, 0xc1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000640)="3f8b749f49c5cd1f06d2dad26eabdc9d0bd607332ee57071e9d5156af87ee4c196fd01000000000000008724d411ac84d016e354a0e2824179d51d8c4ff24c0ed24bafa2ce69948792a2bc108492348f6c8b15c45362c4c3608099d48efaaf4495aa5d7d172929b4b796a9e96ffd87ce061f3606bc03ec23d5275dd3d0a001e1", 0xb47, r3}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r3, &(0x7f00000000c0), 0x20000000}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x1, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x20040025) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) rt_sigsuspend(0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000180), 0x7, 0xa4c01) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f0000000280)) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec071, r6, 0x3e3da000) getegid() socket$nl_netfilter(0x10, 0x3, 0xc) 1.029221386s ago: executing program 1 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) migrate_pages(0x0, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) 1.028474456s ago: executing program 1 (id=1206): socketpair(0x6, 0x1, 0x3, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r1], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x31, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x17, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ba99000000000000bf1c000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300339bbf09000000000000550901000000000095000000000000b303590000070000000000000000000000181500001125bce9d94dea175f20b28fdf944fba12947e78354a0f6bd3ba39b8fc031c8f18ccbab1d887641f0b4a8c1caa54f3d308b05d8050e6160f87c2869206e87cb40533faf3d279d50ca6260ef7dc7a8733efc3d36a", @ANYRES32=r3, @ANYBLOB="00000000000000005d75e0ff010000001800000000000000000000009c02000085100000f8ffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000cbb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000f4c000/0x1000)=nil) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) open(&(0x7f00000001c0)='./file0\x00', 0x4080ff, 0x29c) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x580, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1400"], 0x28}}, 0x0) 929.144987ms ago: executing program 1 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002ec0)={0x1c, r4, 0x10ada85e65c25359, 0x70bd2a, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) migrate_pages(0x0, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00100000001000000700aa251195c50daec8b2e0c1679365ffe65510034c27ccbe24c26fa49294a849b0f4a41880692e7124f4f314c3ec49958382a342e18aa008f8ee0afa14bb7a6c86219c9ee0df7aac63404d1300"/98, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000008a3f7279aad88cbae1565f25000000002157ba712f7f0000000000120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 870.073999ms ago: executing program 1 (id=1209): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x3}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_usb_connect$hid(0x1, 0xfffffffffffffffa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x8, 0x4, 0x21, 0xc1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000640)="3f8b749f49c5cd1f06d2dad26eabdc9d0bd607332ee57071e9d5156af87ee4c196fd01000000000000008724d411ac84d016e354a0e2824179d51d8c4ff24c0ed24bafa2ce69948792a2bc108492348f6c8b15c45362c4c3608099d48efaaf4495aa5d7d172929b4b796a9e96ffd87ce061f3606bc03ec23d5275dd3d0a001e1", 0xb47, r3}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r3, &(0x7f00000000c0), 0x20000000}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x1, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x20040025) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) rt_sigsuspend(0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000180), 0x7, 0xa4c01) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f0000000280)) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec071, r6, 0x3e3da000) getegid() socket$nl_netfilter(0x10, 0x3, 0xc) 855.110168ms ago: executing program 2 (id=1210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="00813900000000000000000000000000000040000000000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x200000, 0x2}, 0x10) bind$tipc(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff69fdf25017c00000800038004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r8}, 0x18) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0xb, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) close(r1) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x480a02, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f0000000400)={0x4b59, 0x5, 0x6f, 0x3, 0xa, "08d91384d5f28abc"}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x170, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') bind$llc(r11, &(0x7f0000000440)={0x1a, 0x30c, 0x0, 0x9, 0x6, 0x96, @random="92d0b2fca4ab"}, 0x10) 750.7365ms ago: executing program 2 (id=1212): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) set_mempolicy(0x3, &(0x7f0000000000)=0x6bf122f9, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e20, @private=0xa010101}, {0x6}, 0x2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 690.436651ms ago: executing program 2 (id=1213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fsync(0xffffffffffffffff) 690.054491ms ago: executing program 0 (id=1214): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '6\xccm\xda\x1c\xf5c\xb7Ck{\\xII-\x14\xc9', 0x3a, './file0'}, 0x3b) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x31, 0x20055, 0xfcffffff, 0xe33, 0x4000000, 0x32, 0x5, 0x0, 0x5}) 672.413601ms ago: executing program 0 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="5e0de6d0a46fa97f7414d5d4beddb6230d028c2985c07fd13ab9cd215be43701b0695c176f010c8522dc892d07fde1c4dd61620c6f145357d324923d98eafd69fcb6929e5d0149b55ad366cb405eb1db194e21eff7ee1ffd0fc491f7a1bd5ef94daa60e4ca4f86b607c0bfa43209a15cc602bced1e30290c9c66b61c0ce079072dc9c55937e87e811990c0a91e53fb7262746f85989515c54010fd24e6ce0415a26322ae81df827d5dcd02a05bea25986e519c3ec6192d3b14cf5fe367c9165b7e625e7c8389494b52ea3019206695e90ce8167dbf5a4157b8943bb48d9b485936f5e27d9538b9a26e5aba36d03db6093d2d3572600e08431993ce973d4cc18848c4593672ae571311d7723653de6825ebf2cb1ea583fe04db14c9ce1762a6b8f00dfd20f64f9acc3ced5097658b468f02c66bb8a7a586d00970044ace79a1202a934310f37359976a87a4b407ee8c3838f48255c0dd8dec7e6be5ef228cb602d83169cc3cdd372823665e0173e6d17bce2a6fb31d80542852c651fbb12c1f875a9f9f7654944b6054fbd6a2755f1eac851d3574df50e5bcf52b771784b7494278b1ee4954fcc101a27cd2caa6bed9d137b06ac60716f64745446165f75818f9ee4d0d02407e33f2cbe25398555191dc68ca32d57d986da35f029b57bc9ddbdb3c7286994688782975d4e91dfd0ae1aca248ac78df50ecf1a84b8a88577c1884bd97c96b3feea64f35e34b41ee47cc845f9240bfabb68c11e1dec3ae7aa4642af97341fb2358ec2c9fffb1c0bb90f375020e7a14c3c46c41766614442a0eeb6c5a55c6dc8d735ad8f724be9123a12f1416ed9404a070da645be79878b39e36eb461ec426c46a5d0201543fa3ccd8b0c305655aee8dbbae71e1f187bae5abe882e52a41dfb52a057704dbf359f993f0fde8bcab0f8ba7ec1f84e7386e8c72c81a6317bc937529063f8f5cf7b8753592629199a0e63773f9d1c63373738804b8267c989434168ecdfd0805e8936f99b5dffbab3a2c326a8bcf5881fe5f79cf58bea52d236abdfb1986331fabb9aab70f3e50acf81e2f5b4db83a73f9d0ec011f840fc5f62e5762cd4abfabebe5737d1486d65ad58f846c29bb1e94c7b20b04a34be7be0ec348f502dffb12f7e4140f8d70120ff1015664afa4c0dab33e5c04ea296ae48c0f4d7c67db9c319de481e018299990c727eb95b6746cc5bbfbdee52a77d96f2406b2f883eb3cce1deb571bc322dd113d69aac36e3816ca2256067391a1d10386503d2788eb5f3289ed462c3bea4951e2e9843cfa0ee70826c2d29ab31a902ccd9f82e43e56a6299b3f5c19ab010ee56c7d71031684ab754c1a442c386b93fa66dcc36f9c1d372434e75a5a7f8651ec4bb2b46ab61fc45a019abf8e20107e9a228ec07ecadfcb2f2373bf977cdedcdaa103bba3b70fb2ab373070f3fa88ef3ff54c1bf05df0350c3d9f8fc6d35734798bfe454da9128e2011e33e8b7602d3e45c160eb85ff49d722c1d049de00b151a938c5cb59861e19669b381f0ebcae398a93789ce8e2579aaf7b1493db08d71165d6c60396e0f2626b9f4609965d6c063fc071592e5eb58b707a942ab6a8a09192fd0bd3f0964c9ff7c978fbb46bd951f0d60c296f00d38c78bdee7f9e894b04b174a15aa68ff527376b3fc319996400f2e705cdf15f133a59a496402afc90824306d0f5c49993d3fa24ede9304f11fd30b31e7ce0517d9ea1919f2f5ef3ed1ede8f39872e17e0fbfdf1a9342dc65b192cb01dcbae1bbfab8b3fa2db08b09cd2aa9ad36ad9d4fc7039dafe688b1dff5986e172cc2e3476caa63ad6603568b2290252dc015c12323a980c6a347ec50efc9aea18c124bb21877b3807df36b71ad0e108f819988b8769cd1a6ec5d5b853939845187763ccc818d50146b912e3c76dbb7d893d787c898727be3b369c1c0526845b4ce2e842dbb120b2d7174203b3096f381743f4e0480206a13aee6f6514818dc77c5bf1e0476c1e391a71d2c58cc862063c5723bb0e7eb06e7e2d22252793c5b65c77c850530ef57f894145b332708371a06135382b7eea0782f8f7a88392c2be365934785685a2af96aa2b6e2035c3cb6f556071be1fb411f8c8497c041573e261a205d40b098ac2546cf2d25b7947c503ed6c9c9c3217a8695e1ca1b359ac92b91740344796243fac99189c0c46215df1a42478ebdb8c4a8d99e6ee985886de89c5d33f9485891da2023ce3d3c3b7b620c4231100c1911730f9d03e90ccf9cd10e4c7953e79a10913d683b3860db3c40f53f85ef77b9bdc108661a1d7b6c28d3c9f1c8bdd4d6110ba986c1f639de668a027740124ecdf54ab9e877f3208dad0139d434eb76ad3d6fb08ef20b6bdca5392d5e21ff9be075658192e70ff175beaa325397b45bdf9d5025935f9369d6a8bb9e368cab2beae3b891faeb1c9623104cacebffac39be98e324991983a268fce8226ef81184e4f2bab4b05f4c0111bcff4de5633fe26dda28197418470c59a254d18320afb3264ba857e0666e35e504d93054c8fc6e5e6bde8845abd33f6607d988da0e41831bb1228dcd83a894d094fdae1f592078d6d1b79dc8dc40d76e7b065b7ddb42b82773251dfd887fd0083d581deefd2cc8bf133f239aa7d014b67cd27eab9c40578449f61aef4831d1cef26902d886f29ada6624c45ef13caea199e8e98a14eb66559cb55296d7b1bfe87ff39c4e29598a014d723d245a2501301d2e9ac28caa8848532acc0c142b45f02e2daf692ba28decf4e0f6afcf5eeaa84e5282b91c3026d7c350bae653b2fcae8b77e9236348be3717552db2351cb289a4848cfaef7fcca4d246c91aeb619c7fdfc2a740736fd3677599d7e0092cd32274817188964b2be954bcfb3bc7928367be69d05688509f0b1edfbdb2138d766cff0bed83d67fea0ed79a6d02cee5ff6a4a6c6cd05f769cae141cc543af8705d1878953b63b3b1bb9f65e3c35891e9716959627b8bd8cda654dbaf44b2240144d587b2ee6b7c14d4246a920eeb5dd6adde20e4782f015a39b7e1287a3b00d93e7ae0dab496644aa5e833fc2334777c41b8935461c845d44f82fbdd821d413ed3b4a8c35ce5e36729b755c10400e66f49e012b7b1416744498d99093074574068230236c3559a25b4badfc4610cd4bca127b17434a76f10638e26cd77bdc8d9063398def2a36b115b381d03ea4a556aa608bde59c0e6662c0a1382d4bb26563e42b80d21c8400e4f48ccf62bbff0faa291cca6d5093cf12ac83979505bcf31682c225d9f5d02b43a83c4b0d9a9ceaab087b9acf6ec300f3e82f1fb348786704dfb536cdb65e1e35a8e68c9cd2490b198c1d0d46fb7f51ea8f5e210d3547c9577396a6619476871b3260ea49a5bb95825192688cff7e22520b821ceeeccc1f54471b76ae855c3733054be0ce00a4c44de27e45c2c0569de1b7c1621089f731fe64022e5b2225f3d85b71d4dba61a0a51b2a93687a33fa26f586da98f7b811221c717180d717546ef88e8ef37fdb381643f9eb32fbf327f37dc16f725b384d7bec64fb64a25836dd46a3ed3403ae2d9c751056d6db1983c0b36226bef498caa786c78f26a0e56b6fae8034df8fe9e76b466c6f67774c6bcdfa4429c3a5fb1edaa3f0e44f60f13a63c9ed19f360a30dcbdff3a30c8003a5c0eb51d8f1620fc58134550c46a7e66cfcb411c9bb151fe823ef2dbdfaad4ed4b54bd02740aad65163d30c43425c05032107fdb2de4b9be600fd35a33abda297087cd206cc56ade830c52524130ca577cc34f7538fd1bdb1c0608ede243a47cc6021447183509091511565b138126840859812db525691bd0b357bd6499e70ae3aa2d2711298dda1b4f274a6c24e31f548693c2ffb86ac957b00fe7fb802c72cf70977a116972fe9ccfdf206977c6137d152010132a6a3b01197769a418126b57ad67661c555d8c11ad8c09c8ba43a4ff55b28bf37ff03febf4688f30a3ab759b0088810c7e7d45eeeee778fdc9cd0efc719a84170d47246e9ed1e072799d7e2419bab5af06f3d319e2e19819237b6b5ba746d221796086570e1bf3365078d4c9806c7949e773c752665a73adfc3ee5d24fd17c653009ad1f3f5a0b3184c99f72dea417702391bcc4f2d1f924298c056d18b4083e075255799b77ed11b003cb5b54f26f28716582dffbcb3fbb9891c2b27ee8a0e3ea8e0412a13e63920ef0886e97b7b22aea7d22734459fe2f09007e16160b0770b6e5235c6cd19fd76b9305615018a0b1ec748a2daedb768680ec63b5c4cc8848221e474c7f3e24f339ce640534e682209d119c29652b95b4d63e1633b31f4c31b27f67ddd456c2816bf9f60457c36c1b6f011251a30b708cb218e25523f967c90a320eaa1e7d9aa8bcfc3c46d89881a9ca821ee324ee883aa7fcfb528e588e05e9e9cdaa7ae84ef5dabba76681d9b2b16af60b0ec3770e5d44b72fdfa193ba723875ea8bc93d50fb22b2ebb576826da6c4e1f7574e4d9ef140986fdc01b0334d8a646e7ac43d12c12463d8142236432e5f03ba68beec4c578016c396ac719e108a6ff7c1d2c7aaea8085dd176f716cbb815f944153657289625f22a8ee62e596d498ed2246ae8daa093280f5e33677ccdb95682faecf22d091c31fd8a0d541adcdb78090368ccdba3afda265ca1bd4bd412b236892ca41a629cdd6bd96529ba789a8f25f7122902f9bd121b050ea3075cf9c8ab7051ec2e7647b5e7ca81ab314863868c2519b0700b924d862fcae1ad13c08cece894ee7026ed0795166e8abac03f593285a8e82a05d0354a8b9e464e363660b7b2674a109397fbb0d191dcd32b1aad1ff7742b7a208ba423058329038ff7e54c963322b1ab821af6d500a996afdf94086293ec0089ebebc7996b76f3a315d7e515c5c56363c8fbf8f5af457bc8ee55ab884b2129cc064e0540315bb758441c25e2c4675972966581ce8dbe69cb52e6ed39b6ea6f752f1d2014cf5e30928815ddff44fc2b7260eafa9a9fb647f2f211ef3a79bd0d2d46d2e64db000db30350977c5b7638565c0db0115e7affbf3b554dc4a7066c50a6a22c6e75487d8624bc2c46a97f51a93009f747cb685af75ae2e8f79894f63e8a79ecae8548ccaf89006607adc82197ed1ceaad2f74f63cef83454e0cae3220d0c2d5ae37f90938cda02ef853e03358ee634707c806262752cb33dfd1e9061d032f8402c075293c33c3fc850ae7cf79cafb1f7629cffbaa6afe2873470ddae816f46877f5d1b463fd0cdc6564b17968058a014ac214bd49240ef7e939ab4220f1e3f641591db5c2a289f42e3f831f6743e03491e7bd97e3eb6edd8b9b7d31985a052bdeaf5682bb8eac75ad212a5fe79fb2ddd3c170336d7d96fc121d0700f71b0e12d1dfed19c372d999dddfe3e350f99803cae669208822fb126a440650c8dc39151f82cb26810edf96a13a198fceafd94b1ad15aef421f01ee62e527295adbb10fda8e3335369cc31297b6bb6597f19a429d73d6f68a6719909c846b825c858f82b4c8f432475812ebe8085e445beea7807c00d3a092e1b00fa02ae41fdf2a1013a7f1f87bf5b3ed8238fe94d07a8851ac2c1d8399af64ac964e2011f888ae935e0c24349127a339cca1b23e1039b89045df50918dc869803526f3f761c66b5a32cb3f370810af2f7a2e6deab47ba0bce10f5f1650776d84896b60f735282196208cc477e68762303830cdb687f9c9f9727bd938b170a4cf32aedbe132fea64c3c649b20ba74caebe8587e634d4d86ca8d7dc637a998b8dd921e9", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002ec0)={0x1c, r4, 0x10ada85e65c25359, 0x70bd2a, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) migrate_pages(0x0, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00100000001000000700aa251195c50daec8b2e0c1679365ffe65510034c27ccbe24c26fa49294a849b0f4a41880692e7124f4f314c3ec49958382a342e18aa008f8ee0afa14bb7a6c86219c9ee0df7aac63404d1300"/98, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000008a3f7279aad88cbae1565f25000000002157ba712f7f0000000000120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 662.136351ms ago: executing program 2 (id=1216): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000014000000", @ANYRES32, @ANYBLOB="0000000000004000000000000000000012000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fd"], 0x48) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000003c0)={0x4, 0x2, 0x16}) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 632.269182ms ago: executing program 0 (id=1217): socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) faccessat2(r2, 0x0, 0x2, 0x1100) socket$inet(0x2, 0x80001, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0x1, @empty, 0x4}}, 0xc5e1, 0x6, 0xf, 0x5, 0x0, 0x3, 0x5}, 0x9c) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050000000000f80108808c000080200004000a00000000000000fe800000000000000000000000000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a0000004c000200ff0100000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac141400050003000000000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000002f00030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fc0100000000000000000000000000010000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r8], 0x248}}, 0x0) 582.760342ms ago: executing program 0 (id=1218): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000280), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3, 0x0, 0x20000000}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1800) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0x5, 0x7, 0x7fff, 0x4, 0x4}) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='net/icmp\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x20023, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r8, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) read$msr(r5, &(0x7f0000000040)=""/59, 0xffb5) ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x80, 0xc, 0x7fff, {{0x13, 0x4, 0x1, 0x7, 0x4c, 0x66, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x40}, {[@ra={0x94, 0x4}, @noop, @rr={0x7, 0xf, 0xc8, [@multicast2, @empty, @rand_addr=0x64010102]}, @generic={0x94, 0x8, "b1c1a77e490c"}, @lsrr={0x83, 0x17, 0x1b, [@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, @rand_addr=0x64010102, @loopback, @remote]}, @noop, @noop]}}}}}) 470.294224ms ago: executing program 0 (id=1219): bpf$MAP_CREATE(0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_mr_vif\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) (async) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x402, 0x200000002000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x4, 0x63, 0x11, 0x23}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="5569da6d2bed14537489bd180000000000fbff006586e29a149204e52f962aae00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x110) (async) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) (async) sendfile(r3, r2, 0x0, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x8402, 0x0) fchmodat(r5, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x0, 0x56, 0x0, 0x3, 0xfffffffc, 0x0, @void, @value}, 0x28) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000), 0x0) 469.630084ms ago: executing program 0 (id=1220): modify_ldt$write2(0x11, &(0x7f0000000100)={0xd, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x10) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") (rerun: 64) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) (async) fcntl$dupfd(r0, 0x0, r0) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) (async) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x6d, 0x1}, 0x20}}, 0x0) (async, rerun: 32) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') (async, rerun: 32) readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000380)) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000120001000000000000000000fe80000000000000000000000000002bfffffffd000000001400490a000000000000000000000000000000000c0015000400000000000000"], 0x48}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800700160001000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') (async) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$KDDELIO(r6, 0x4b35, 0x5) (async, rerun: 32) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="5c00000014006b05884e21000ab36d6e23067524eeb556d8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x3f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400d004) (rerun: 32) mlock(&(0x7f00002f2000/0x4000)=nil, 0x4000) (async, rerun: 32) lseek(r6, 0x2084, 0x0) (async, rerun: 32) rename(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 226.545877ms ago: executing program 3 (id=1221): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000140)={@multicast1, @private=0xa010102, @multicast1}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0060, &(0x7f0000000e80)={[{@mode}]}) ioperm(0x0, 0x82, 0x1e) r1 = socket$inet(0x2, 0x3, 0x2) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f000001fa80)={[{@overriderock}, {@nocompress}, {@hide}, {@session={'session', 0x3d, 0x5a}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@nojoliet}, {@block={'block', 0x3d, 0x400}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map=r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 210.513967ms ago: executing program 4 (id=1222): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x2000c80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x7b97, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 183.230037ms ago: executing program 4 (id=1223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100001c0012800e00010069703665727370616e00000008000280040019385eff4f4fe4a1a721e21b3a04f00d8dcac82eff9c3aff5e1f940c6a81d0fb2dd9277bfd9aacb4dd7e74bffa9656a90800000000000000c79c71f619b44957c350b31e4360c515bb585a2124a1167842afd77fa99cdac8d2b17b147a1f03cb15be7c5cea433e9a384a469e5b86641cba0f9f0813ba184aff5d4ecc69347d36492b631c413fd0d1a31d36"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e24, @private=0xa010100}}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 114.353048ms ago: executing program 4 (id=1224): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="8fcc2ee06d4b2732be39757d997e1c9b9445957b340a619962119c037ee11171f4f80c9b42aac1e948f4aa46556d9002d40c88dcb50ee49ae6b6074b9e85824711c0ef110eb999c5415dc987a21ca94515b61806bf1e5a6e203676d0ea62b36001591260bb71b41ab7cff22e19c0b5ef11c80d5d15b1e1d8487c548c312ea3a2f6f52e1c617d5d02c3563d4d03cb901336678e5dab26eb3bba0e99253a559114805f05c8cc183b2f0dbf077dce25", 0xae}], 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = dup(r2) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0x1856, 0x6d, 0x0, 0xfff, 0xb, "0e80706e6c06a79874342a0e0d13343972d01f"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000c00000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff03}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), 0x0, 0xf3, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000900), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r8, 0xffffffffffffffff, 0x0) connect$vsock_stream(r8, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000800)=r9, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x400, 0x0, 0x1, 0xc9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 98.750389ms ago: executing program 4 (id=1225): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000000}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x6, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000ae94d92173ecfc6078a20058e03f0950cc378e1a4a19094fdf3ecb0d5aaa198b7f4c749a1371a16874bb80526954d46805bac28ab4d805c58a3b4107000000d39849d009d749cc929691aa4234a91c5123edbbae3274fcbd64a4d00726ecdc33e762394b0eda75c44ebce6a6038f32cfc93174b89b0b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRES16, @ANYRES64=r0, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x24040804) syz_clone(0xc0000000, 0x0, 0xe30b, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b301", 0x2, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10162, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004ddc44491000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x80) 0s ago: executing program 4 (id=1226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$addseals(r1, 0x409, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0xc33, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x8000002}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000280)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6150] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.790377][ T6150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.835673][ T6159] pim6reg: entered allmulticast mode [ 96.842185][ T6159] pim6reg: left allmulticast mode [ 96.904993][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.911249][ T6162] @: renamed from vlan0 (while UP) [ 96.936229][ T6163] FAULT_INJECTION: forcing a failure. [ 96.936229][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 96.944381][ T6162] syz.1.686 uses obsolete (PF_INET,SOCK_PACKET) [ 96.949019][ T6163] CPU: 0 UID: 0 PID: 6163 Comm: syz.0.685 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 96.949118][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.949134][ T6163] Call Trace: [ 96.949142][ T6163] [ 96.949151][ T6163] __dump_stack+0x1d/0x30 [ 96.949179][ T6163] dump_stack_lvl+0xe8/0x140 [ 96.949272][ T6163] dump_stack+0x15/0x1b [ 96.949295][ T6163] should_fail_ex+0x265/0x280 [ 96.949341][ T6163] should_failslab+0x8c/0xb0 [ 96.949396][ T6163] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 96.949437][ T6163] ? sidtab_sid2str_get+0xa0/0x130 [ 96.949472][ T6163] kmemdup_noprof+0x2b/0x70 [ 96.949567][ T6163] sidtab_sid2str_get+0xa0/0x130 [ 96.949602][ T6163] security_sid_to_context_core+0x1eb/0x2e0 [ 96.949704][ T6163] security_sid_to_context+0x27/0x40 [ 96.949786][ T6163] selinux_lsmprop_to_secctx+0x67/0xf0 [ 96.949822][ T6163] security_lsmprop_to_secctx+0x43/0x80 [ 96.949878][ T6163] audit_log_task_context+0x77/0x190 [ 96.950043][ T6163] audit_log_task+0xf4/0x250 [ 96.950134][ T6163] audit_seccomp+0x61/0x100 [ 96.950169][ T6163] ? __seccomp_filter+0x68c/0x10d0 [ 96.950224][ T6163] __seccomp_filter+0x69d/0x10d0 [ 96.950258][ T6163] ? __se_sys_keyctl+0x120/0xb80 [ 96.950329][ T6163] ? __rcu_read_unlock+0x4f/0x70 [ 96.950358][ T6163] ? __fget_files+0x184/0x1c0 [ 96.950393][ T6163] __secure_computing+0x82/0x150 [ 96.950425][ T6163] syscall_trace_enter+0xcf/0x1e0 [ 96.950497][ T6163] do_syscall_64+0xac/0x200 [ 96.950526][ T6163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.950572][ T6163] ? clear_bhb_loop+0x40/0x90 [ 96.950601][ T6163] ? clear_bhb_loop+0x40/0x90 [ 96.950629][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.950733][ T6163] RIP: 0033:0x7f0fd244d33c [ 96.950754][ T6163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.950778][ T6163] RSP: 002b:00007f0fd0ab7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.950803][ T6163] RAX: ffffffffffffffda RBX: 00007f0fd2675fa0 RCX: 00007f0fd244d33c [ 96.950820][ T6163] RDX: 000000000000000f RSI: 00007f0fd0ab70a0 RDI: 0000000000000008 [ 96.950837][ T6163] RBP: 00007f0fd0ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.950861][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.950911][ T6163] R13: 0000000000000000 R14: 00007f0fd2675fa0 R15: 00007ffd5ab95a38 [ 96.950937][ T6163] [ 97.040838][ T6169] pim6reg1: entered promiscuous mode [ 97.212024][ T6169] pim6reg1: entered allmulticast mode [ 97.379138][ T6180] syz.1.690 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.441610][ T6180] lo speed is unknown, defaulting to 1000 [ 97.456551][ T6180] lo speed is unknown, defaulting to 1000 [ 97.485690][ T6180] lo speed is unknown, defaulting to 1000 [ 97.499807][ T6180] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.527709][ T6185] vhci_hcd: invalid port number 23 [ 97.536134][ T6180] lo speed is unknown, defaulting to 1000 [ 97.556710][ T6180] lo speed is unknown, defaulting to 1000 [ 97.600777][ T6180] lo speed is unknown, defaulting to 1000 [ 97.617439][ T6180] lo speed is unknown, defaulting to 1000 [ 97.630742][ T6180] lo speed is unknown, defaulting to 1000 [ 98.314206][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 98.338738][ T6204] loop2: detected capacity change from 0 to 1024 [ 98.345990][ T6204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.363940][ T6204] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.430835][ T6204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 98.486605][ T6204] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.699: lblock 2 mapped to illegal pblock 2 (length 1) [ 98.488199][ T6213] process 'syz.1.702' launched './file0' with NULL argv: empty string added [ 98.559735][ T6204] EXT4-fs (loop2): Remounting filesystem read-only [ 98.683121][ T6204] EXT4-fs (loop2): 1 orphan inode deleted [ 98.690256][ T6204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.706080][ T6204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.872935][ T6204] loop2: detected capacity change from 0 to 512 [ 98.889525][ T6204] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.699: Failed to acquire dquot type 1 [ 98.902394][ T6204] EXT4-fs (loop2): 1 truncate cleaned up [ 98.908976][ T6204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.921715][ T6204] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.933205][ T6204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.846204][ T6221] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 115.855083][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 115.855099][ T29] audit: type=1326 audit(1749891492.718:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 115.906488][ T29] audit: type=1326 audit(1749891492.748:7160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 115.930090][ T29] audit: type=1326 audit(1749891492.748:7161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 115.953562][ T29] audit: type=1326 audit(1749891492.748:7162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 115.977016][ T29] audit: type=1326 audit(1749891492.748:7163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 115.981643][ T6231] loop4: detected capacity change from 0 to 8192 [ 116.000451][ T29] audit: type=1326 audit(1749891492.758:7164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 116.030190][ T29] audit: type=1326 audit(1749891492.758:7165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 116.053637][ T29] audit: type=1326 audit(1749891492.758:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 116.077281][ T29] audit: type=1326 audit(1749891492.758:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 116.100699][ T29] audit: type=1326 audit(1749891492.758:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6218 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 116.168366][ T6237] netlink: 'syz.4.708': attribute type 10 has an invalid length. [ 116.573736][ T6243] loop3: detected capacity change from 0 to 8192 [ 117.485211][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 117.511858][ T6271] pim6reg: entered allmulticast mode [ 117.519350][ T6269] FAULT_INJECTION: forcing a failure. [ 117.519350][ T6269] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.532553][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.4.719 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 117.532642][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.532655][ T6269] Call Trace: [ 117.532662][ T6269] [ 117.532668][ T6269] __dump_stack+0x1d/0x30 [ 117.532691][ T6269] dump_stack_lvl+0xe8/0x140 [ 117.532714][ T6269] dump_stack+0x15/0x1b [ 117.532735][ T6269] should_fail_ex+0x265/0x280 [ 117.532769][ T6269] should_fail+0xb/0x20 [ 117.532800][ T6269] should_fail_usercopy+0x1a/0x20 [ 117.532825][ T6269] _copy_to_user+0x20/0xa0 [ 117.532924][ T6269] simple_read_from_buffer+0xb5/0x130 [ 117.532979][ T6269] proc_fail_nth_read+0x100/0x140 [ 117.533006][ T6269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.533028][ T6269] vfs_read+0x19d/0x6f0 [ 117.533043][ T6269] ? __rcu_read_unlock+0x4f/0x70 [ 117.533065][ T6269] ? __rcu_read_unlock+0x4f/0x70 [ 117.533091][ T6269] ? __fget_files+0x184/0x1c0 [ 117.533174][ T6269] ksys_read+0xda/0x1a0 [ 117.533195][ T6269] __x64_sys_read+0x40/0x50 [ 117.533304][ T6269] x64_sys_call+0x2d77/0x2fb0 [ 117.533333][ T6269] do_syscall_64+0xd2/0x200 [ 117.533358][ T6269] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.533408][ T6269] ? clear_bhb_loop+0x40/0x90 [ 117.533435][ T6269] ? clear_bhb_loop+0x40/0x90 [ 117.533464][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.533483][ T6269] RIP: 0033:0x7f500053d33c [ 117.533498][ T6269] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.533555][ T6269] RSP: 002b:00007f4ffeb86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.533573][ T6269] RAX: ffffffffffffffda RBX: 00007f5000766080 RCX: 00007f500053d33c [ 117.533585][ T6269] RDX: 000000000000000f RSI: 00007f4ffeb860a0 RDI: 000000000000000a [ 117.533597][ T6269] RBP: 00007f4ffeb86090 R08: 0000000000000000 R09: 0000000000000000 [ 117.533610][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.533625][ T6269] R13: 0000000000000000 R14: 00007f5000766080 R15: 00007fffd06d0628 [ 117.533653][ T6269] [ 117.765029][ T6271] pim6reg: left allmulticast mode [ 117.875421][ T6281] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 117.885964][ T6283] netlink: 68 bytes leftover after parsing attributes in process `syz.3.725'. [ 117.948358][ T6286] loop9: detected capacity change from 0 to 7 [ 117.954962][ T6286] Buffer I/O error on dev loop9, logical block 0, async page read [ 117.967792][ T6286] Buffer I/O error on dev loop9, logical block 0, async page read [ 117.975884][ T6286] loop9: unable to read partition table [ 117.988355][ T6286] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 117.988355][ T6286] U) failed (rc=-5) [ 117.989987][ T6234] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.011721][ T6291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6291 comm=syz.3.729 [ 118.024220][ T6291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6291 comm=syz.3.729 [ 118.046041][ T6234] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.055616][ T6234] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.063690][ T6234] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.085970][ T6234] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.094253][ T6234] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.102838][ T6234] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.111134][ T6234] Buffer I/O error on dev loop9, logical block 0, async page read [ 118.299751][ T6316] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 118.304179][ T6305] lo speed is unknown, defaulting to 1000 [ 118.315591][ T6305] lo speed is unknown, defaulting to 1000 [ 118.376450][ T6326] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 118.655519][ T6352] netlink: 'syz.0.751': attribute type 21 has an invalid length. [ 118.769318][ T6352] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.704162][ T6358] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 119.866263][ T6362] lo speed is unknown, defaulting to 1000 [ 119.885194][ T6362] lo speed is unknown, defaulting to 1000 [ 120.075963][ T6370] loop4: detected capacity change from 0 to 1024 [ 120.091532][ T6370] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.102672][ T6370] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 120.122345][ T6370] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.130307][ T6370] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #3: comm syz.4.752: iget: bad i_size value: 1407392063428608 [ 120.152809][ T6370] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.752: Bad quota inode: 3, type: 0 [ 120.186063][ T6370] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 120.200760][ T6370] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 120.240867][ T6370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.321080][ T6366] loop3: detected capacity change from 0 to 1024 [ 120.336099][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.346606][ T6366] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.424491][ T6366] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 120.549463][ T6366] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.566663][ T6366] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.757: iget: bad i_size value: 1407392063428608 [ 120.797303][ T6366] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.757: Bad quota inode: 3, type: 0 [ 120.813035][ T6366] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 120.827773][ T6366] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 120.839817][ T6366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.937048][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 120.937074][ T29] audit: type=1400 audit(1749891497.798:7747): avc: denied { bind } for pid=6390 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.240343][ T29] audit: type=1326 audit(1749891498.098:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.283351][ T29] audit: type=1326 audit(1749891498.098:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.307635][ T29] audit: type=1326 audit(1749891498.098:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.331087][ T29] audit: type=1326 audit(1749891498.098:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.355208][ T29] audit: type=1326 audit(1749891498.098:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.378844][ T29] audit: type=1326 audit(1749891498.098:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.402894][ T29] audit: type=1326 audit(1749891498.098:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.426874][ T29] audit: type=1326 audit(1749891498.098:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.450451][ T29] audit: type=1326 audit(1749891498.098:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 121.484103][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.577341][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 121.625665][ T6407] loop4: detected capacity change from 0 to 1024 [ 121.651721][ T6407] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.665836][ T6407] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.697615][ T6407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 121.756426][ T6407] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.770: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.777552][ T6407] EXT4-fs (loop4): Remounting filesystem read-only [ 121.785818][ T6407] EXT4-fs (loop4): 1 orphan inode deleted [ 121.792421][ T6407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.806757][ T6407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.937430][ T6420] loop4: detected capacity change from 0 to 512 [ 121.956550][ T6420] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.770: Failed to acquire dquot type 1 [ 121.969861][ T6420] EXT4-fs (loop4): 1 truncate cleaned up [ 121.976303][ T6420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.991544][ T6420] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.005038][ T6420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.050043][ T6423] loop1: detected capacity change from 0 to 8192 [ 122.181146][ T6429] netlink: 'syz.0.776': attribute type 21 has an invalid length. [ 122.216349][ T6429] FAULT_INJECTION: forcing a failure. [ 122.216349][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 122.229705][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.0.776 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 122.229738][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.229782][ T6429] Call Trace: [ 122.229789][ T6429] [ 122.229796][ T6429] __dump_stack+0x1d/0x30 [ 122.229895][ T6429] dump_stack_lvl+0xe8/0x140 [ 122.229967][ T6429] dump_stack+0x15/0x1b [ 122.229982][ T6429] should_fail_ex+0x265/0x280 [ 122.230042][ T6429] should_failslab+0x8c/0xb0 [ 122.230067][ T6429] __kmalloc_noprof+0xa5/0x3e0 [ 122.230092][ T6429] ? fib_create_info+0xbb1/0x1980 [ 122.230140][ T6429] fib_create_info+0xbb1/0x1980 [ 122.230169][ T6429] fib_table_insert+0x60/0xeb0 [ 122.230237][ T6429] ? fib_trie_table+0xd0/0xf0 [ 122.230263][ T6429] ? fib_new_table+0x1ac/0x1c0 [ 122.230382][ T6429] inet_rtm_newroute+0xab/0x140 [ 122.230489][ T6429] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 122.230515][ T6429] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 122.230545][ T6429] netlink_rcv_skb+0x123/0x220 [ 122.230609][ T6429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.230649][ T6429] rtnetlink_rcv+0x1c/0x30 [ 122.230683][ T6429] netlink_unicast+0x5a1/0x670 [ 122.230729][ T6429] netlink_sendmsg+0x58b/0x6b0 [ 122.230752][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.230776][ T6429] __sock_sendmsg+0x145/0x180 [ 122.230812][ T6429] ____sys_sendmsg+0x31e/0x4e0 [ 122.230842][ T6429] ___sys_sendmsg+0x17b/0x1d0 [ 122.230907][ T6429] __x64_sys_sendmsg+0xd4/0x160 [ 122.230940][ T6429] x64_sys_call+0x2999/0x2fb0 [ 122.230966][ T6429] do_syscall_64+0xd2/0x200 [ 122.230996][ T6429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.231021][ T6429] ? clear_bhb_loop+0x40/0x90 [ 122.231041][ T6429] ? clear_bhb_loop+0x40/0x90 [ 122.231068][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.231160][ T6429] RIP: 0033:0x7f0fd244e929 [ 122.231178][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.231200][ T6429] RSP: 002b:00007f0fd0ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.231223][ T6429] RAX: ffffffffffffffda RBX: 00007f0fd2675fa0 RCX: 00007f0fd244e929 [ 122.231234][ T6429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 122.231247][ T6429] RBP: 00007f0fd0ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.231278][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.231293][ T6429] R13: 0000000000000000 R14: 00007f0fd2675fa0 R15: 00007ffd5ab95a38 [ 122.231315][ T6429] [ 122.537471][ T6438] loop3: detected capacity change from 0 to 1024 [ 122.566602][ T6438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.889550][ T6447] pim6reg: entered allmulticast mode [ 122.908915][ T6446] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 122.915728][ T6446] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 122.923454][ T6446] vhci_hcd vhci_hcd.0: Device attached [ 122.976694][ T6447] pim6reg: left allmulticast mode [ 123.119646][ T6452] bridge0: port 3(gretap0) entered blocking state [ 123.126272][ T6452] bridge0: port 3(gretap0) entered disabled state [ 123.259617][ T6452] gretap0: entered allmulticast mode [ 123.284881][ T6452] gretap0: entered promiscuous mode [ 123.347292][ T6452] bridge0: port 3(gretap0) entered blocking state [ 123.353853][ T6452] bridge0: port 3(gretap0) entered forwarding state [ 123.384318][ T6457] gretap0: left allmulticast mode [ 123.389426][ T6457] gretap0: left promiscuous mode [ 123.394586][ T6457] bridge0: port 3(gretap0) entered disabled state [ 123.446085][ T6448] vhci_hcd: connection closed [ 123.446318][ T51] vhci_hcd: stop threads [ 123.455532][ T51] vhci_hcd: release socket [ 123.459982][ T51] vhci_hcd: disconnect device [ 123.523797][ T3387] vhci_hcd: vhci_device speed not set [ 123.552801][ T6464] lo speed is unknown, defaulting to 1000 [ 123.559079][ T6464] lo speed is unknown, defaulting to 1000 [ 123.666302][ T6469] loop2: detected capacity change from 0 to 164 [ 123.675035][ T6469] isofs_fill_super: root inode is not a directory. Corrupted media? [ 123.836159][ T6477] loop2: detected capacity change from 0 to 8192 [ 123.853814][ T6478] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 123.988283][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.468837][ T6490] vhci_hcd: invalid port number 23 [ 124.536240][ T6491] loop4: detected capacity change from 0 to 1024 [ 124.624598][ T6491] EXT4-fs: Ignoring removed nobh option [ 124.630314][ T6491] EXT4-fs: Ignoring removed bh option [ 124.790720][ T6491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.096066][ T6501] Driver unsupported XDP return value 0 on prog (id 622) dev N/A, expect packet loss! [ 125.356424][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.451844][ T6511] random: crng reseeded on system resumption [ 125.502421][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 125.565172][ T6508] lo speed is unknown, defaulting to 1000 [ 125.582696][ T6518] vhci_hcd: invalid port number 23 [ 125.587958][ T6508] lo speed is unknown, defaulting to 1000 [ 125.902828][ T6534] loop2: detected capacity change from 0 to 164 [ 126.736827][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 126.736842][ T29] audit: type=1326 audit(1749891503.588:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f20ddc5d58a code=0x7ffc0000 [ 126.766919][ T29] audit: type=1326 audit(1749891503.588:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f20ddc5d58a code=0x7ffc0000 [ 126.790410][ T29] audit: type=1326 audit(1749891503.588:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f20ddc5d197 code=0x7ffc0000 [ 126.804664][ T6534] isofs_fill_super: root inode is not a directory. Corrupted media? [ 126.813828][ T29] audit: type=1326 audit(1749891503.588:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f20ddc600ca code=0x7ffc0000 [ 126.872543][ T29] audit: type=1326 audit(1749891503.708:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20ddc5d290 code=0x7ffc0000 [ 126.896722][ T29] audit: type=1326 audit(1749891503.708:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20ddc5e52b code=0x7ffc0000 [ 126.920051][ T29] audit: type=1326 audit(1749891503.708:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f20ddc5d58a code=0x7ffc0000 [ 126.944141][ T29] audit: type=1326 audit(1749891503.708:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 126.967664][ T29] audit: type=1326 audit(1749891503.708:8336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 127.041153][ T29] audit: type=1326 audit(1749891503.898:8337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6532 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 127.141671][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 127.187876][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'. [ 127.211406][ T6550] FAULT_INJECTION: forcing a failure. [ 127.211406][ T6550] name failslab, interval 1, probability 0, space 0, times 0 [ 127.224277][ T6550] CPU: 1 UID: 0 PID: 6550 Comm: syz.1.812 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 127.224309][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.224324][ T6550] Call Trace: [ 127.224331][ T6550] [ 127.224340][ T6550] __dump_stack+0x1d/0x30 [ 127.224443][ T6550] dump_stack_lvl+0xe8/0x140 [ 127.224467][ T6550] dump_stack+0x15/0x1b [ 127.224488][ T6550] should_fail_ex+0x265/0x280 [ 127.224532][ T6550] should_failslab+0x8c/0xb0 [ 127.224565][ T6550] __kvmalloc_node_noprof+0x123/0x4e0 [ 127.224642][ T6550] ? alloc_netdev_mqs+0x5ac/0xab0 [ 127.224667][ T6550] alloc_netdev_mqs+0x5ac/0xab0 [ 127.224689][ T6550] rtnl_create_link+0x239/0x710 [ 127.224711][ T6550] rtnl_newlink_create+0x14c/0x620 [ 127.224746][ T6550] ? __schedule+0x6a8/0xb30 [ 127.224802][ T6550] rtnl_newlink+0xf29/0x12d0 [ 127.224880][ T6550] ? __kfree_skb+0x109/0x150 [ 127.224904][ T6550] ? __memcg_slab_free_hook+0x135/0x230 [ 127.224959][ T6550] ? __kfree_skb+0x109/0x150 [ 127.224980][ T6550] ? __rcu_read_unlock+0x4f/0x70 [ 127.225007][ T6550] ? avc_has_perm_noaudit+0x1b1/0x200 [ 127.225081][ T6550] ? selinux_capable+0x1f9/0x270 [ 127.225125][ T6550] ? security_capable+0x83/0x90 [ 127.225159][ T6550] ? ns_capable+0x7d/0xb0 [ 127.225241][ T6550] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.225268][ T6550] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 127.225342][ T6550] netlink_rcv_skb+0x123/0x220 [ 127.225367][ T6550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.225403][ T6550] rtnetlink_rcv+0x1c/0x30 [ 127.225425][ T6550] netlink_unicast+0x5a1/0x670 [ 127.225558][ T6550] netlink_sendmsg+0x58b/0x6b0 [ 127.225588][ T6550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.225612][ T6550] __sock_sendmsg+0x145/0x180 [ 127.225720][ T6550] ____sys_sendmsg+0x345/0x4e0 [ 127.225743][ T6550] ___sys_sendmsg+0x17b/0x1d0 [ 127.225779][ T6550] __sys_sendmmsg+0x178/0x300 [ 127.225827][ T6550] __x64_sys_sendmmsg+0x57/0x70 [ 127.225851][ T6550] x64_sys_call+0x2f2f/0x2fb0 [ 127.225872][ T6550] do_syscall_64+0xd2/0x200 [ 127.225897][ T6550] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.225999][ T6550] ? clear_bhb_loop+0x40/0x90 [ 127.226059][ T6550] ? clear_bhb_loop+0x40/0x90 [ 127.226083][ T6550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.226109][ T6550] RIP: 0033:0x7f7ff549e929 [ 127.226146][ T6550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.226165][ T6550] RSP: 002b:00007f7ff3b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.226263][ T6550] RAX: ffffffffffffffda RBX: 00007f7ff56c5fa0 RCX: 00007f7ff549e929 [ 127.226276][ T6550] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 127.226288][ T6550] RBP: 00007f7ff3b07090 R08: 0000000000000000 R09: 0000000000000000 [ 127.226315][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.226327][ T6550] R13: 0000000000000000 R14: 00007f7ff56c5fa0 R15: 00007ffdacfc7138 [ 127.226345][ T6550] [ 127.562219][ T6556] xt_hashlimit: size too large, truncated to 1048576 [ 127.671805][ T6558] loop3: detected capacity change from 0 to 8192 [ 127.797209][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 127.809017][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 127.854492][ T6567] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 127.961489][ T6556] loop1: detected capacity change from 0 to 1024 [ 128.336022][ T6556] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 128.383552][ T6556] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 128.407770][ T6556] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.815: iget: special inode unallocated [ 128.440549][ T6556] EXT4-fs (loop1): Remounting filesystem read-only [ 128.447277][ T6556] EXT4-fs (loop1): no journal found [ 128.452576][ T6556] EXT4-fs (loop1): can't get journal size [ 128.453234][ T6573] pim6reg: entered allmulticast mode [ 128.467240][ T6556] EXT4-fs (loop1): filesystem is read-only [ 128.473602][ T6556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.488816][ T6573] pim6reg: left allmulticast mode [ 128.497147][ T6556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.702744][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.823'. [ 128.706129][ T6580] lo speed is unknown, defaulting to 1000 [ 128.717511][ T6590] loop3: detected capacity change from 0 to 1024 [ 128.741080][ T6580] lo speed is unknown, defaulting to 1000 [ 128.742020][ T6590] EXT4-fs: Ignoring removed nobh option [ 128.752648][ T6590] EXT4-fs: Ignoring removed bh option [ 128.805251][ T6590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.837736][ T6596] loop1: detected capacity change from 0 to 8192 [ 128.868797][ T6596] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.901863][ T6590] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.924224][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 128.985681][ T6602] loop4: detected capacity change from 0 to 2048 [ 128.995183][ T6609] EXT4-fs error (device loop3): ext4_xattr_block_find:1869: inode #15: comm syz.3.825: corrupted xattr block 145: invalid header [ 129.017007][ T6609] EXT4-fs (loop3): Remounting filesystem read-only [ 129.052910][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.158810][ T6602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.269242][ T6617] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 129.470204][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.070740][ T6622] loop4: detected capacity change from 0 to 8192 [ 130.501810][ T6631] lo speed is unknown, defaulting to 1000 [ 130.508391][ T6631] lo speed is unknown, defaulting to 1000 [ 130.621674][ T6631] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.674048][ T6636] netlink: 'syz.3.839': attribute type 21 has an invalid length. [ 130.696228][ T6636] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.416033][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 131.430158][ T6642] pim6reg: entered allmulticast mode [ 131.451500][ T6642] pim6reg: left allmulticast mode [ 131.457429][ T6644] loop3: detected capacity change from 0 to 1024 [ 131.568816][ T6649] netlink: 'syz.0.840': attribute type 12 has an invalid length. [ 131.592332][ T6644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.619872][ T6652] loop2: detected capacity change from 0 to 512 [ 131.626436][ T6644] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.637438][ T6651] FAULT_INJECTION: forcing a failure. [ 131.637438][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 131.650139][ T6651] CPU: 1 UID: 0 PID: 6651 Comm: syz.1.843 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 131.650173][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.650188][ T6651] Call Trace: [ 131.650196][ T6651] [ 131.650205][ T6651] __dump_stack+0x1d/0x30 [ 131.650259][ T6651] dump_stack_lvl+0xe8/0x140 [ 131.650277][ T6651] dump_stack+0x15/0x1b [ 131.650292][ T6651] should_fail_ex+0x265/0x280 [ 131.650331][ T6651] ? __se_sys_mount+0xef/0x2e0 [ 131.650351][ T6651] should_failslab+0x8c/0xb0 [ 131.650391][ T6651] __kmalloc_cache_noprof+0x4c/0x320 [ 131.650422][ T6651] ? memdup_user+0x99/0xd0 [ 131.650451][ T6651] __se_sys_mount+0xef/0x2e0 [ 131.650531][ T6651] ? fput+0x8f/0xc0 [ 131.650583][ T6651] ? ksys_write+0x192/0x1a0 [ 131.650608][ T6651] __x64_sys_mount+0x67/0x80 [ 131.650655][ T6651] x64_sys_call+0xd36/0x2fb0 [ 131.650677][ T6651] do_syscall_64+0xd2/0x200 [ 131.650709][ T6651] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.650742][ T6651] ? clear_bhb_loop+0x40/0x90 [ 131.650768][ T6651] ? clear_bhb_loop+0x40/0x90 [ 131.650795][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.650817][ T6651] RIP: 0033:0x7f7ff549e929 [ 131.650900][ T6651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.650917][ T6651] RSP: 002b:00007f7ff3b07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.650957][ T6651] RAX: ffffffffffffffda RBX: 00007f7ff56c5fa0 RCX: 00007f7ff549e929 [ 131.650973][ T6651] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 131.650985][ T6651] RBP: 00007f7ff3b07090 R08: 0000200000000300 R09: 0000000000000000 [ 131.651000][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.651050][ T6651] R13: 0000000000000000 R14: 00007f7ff56c5fa0 R15: 00007ffdacfc7138 [ 131.651104][ T6651] [ 131.873394][ T6652] loop2: detected capacity change from 0 to 1024 [ 131.880822][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 131.880838][ T29] audit: type=1400 audit(1749891508.728:8410): avc: denied { ioctl } for pid=6648 comm="syz.2.842" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.914984][ T6644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 131.971685][ T6644] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.841: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.994688][ T6644] EXT4-fs (loop3): Remounting filesystem read-only [ 132.001284][ T6644] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 132.026837][ T6652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.041309][ T6644] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 132.060143][ T6644] EXT4-fs (loop3): 1 orphan inode deleted [ 132.076517][ T6652] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.086037][ T6644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.086674][ T6644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.154889][ T6652] loop2: detected capacity change from 0 to 256 [ 132.184752][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 132.204854][ T6652] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.249208][ T6644] loop3: detected capacity change from 0 to 512 [ 132.289085][ T6644] Quota error (device loop3): do_check_range: Getting block 67108867 out of range 1-5 [ 132.299596][ T6644] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 132.309182][ T6644] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.841: Failed to acquire dquot type 1 [ 132.321532][ T6644] EXT4-fs (loop3): 1 truncate cleaned up [ 132.329431][ T6644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.342352][ T6644] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.355229][ T6644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.373314][ T6644] loop3: detected capacity change from 0 to 1024 [ 132.380283][ T6644] EXT4-fs: Ignoring removed nobh option [ 132.385925][ T6644] EXT4-fs: Ignoring removed bh option [ 132.393597][ T6644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.520148][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.790541][ T29] audit: type=1400 audit(1749891509.648:8411): avc: denied { create } for pid=6682 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.815671][ T6679] loop1: detected capacity change from 0 to 8192 [ 132.833475][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.851'. [ 132.844198][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 132.886349][ T6685] loop4: detected capacity change from 0 to 8192 [ 132.976909][ T6693] pim6reg: entered allmulticast mode [ 132.983440][ T6693] pim6reg: left allmulticast mode [ 133.028744][ T6695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6695 comm=syz.0.855 [ 133.041250][ T6695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6695 comm=syz.0.855 [ 133.083293][ T6698] netlink: 'syz.3.856': attribute type 21 has an invalid length. [ 133.230904][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 133.250961][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 133.420122][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 133.429508][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 133.614113][ T29] audit: type=1400 audit(1749891510.478:8412): avc: denied { map } for pid=6702 comm="syz.2.858" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.670844][ T6716] vhci_hcd: invalid port number 96 [ 133.676057][ T6716] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 133.743359][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 133.788218][ T6713] lo speed is unknown, defaulting to 1000 [ 133.802455][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 133.811339][ T6713] lo speed is unknown, defaulting to 1000 [ 133.838955][ T6724] FAULT_INJECTION: forcing a failure. [ 133.838955][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 133.851663][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.0.865 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 133.851827][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.851842][ T6724] Call Trace: [ 133.851848][ T6724] [ 133.851856][ T6724] __dump_stack+0x1d/0x30 [ 133.851879][ T6724] dump_stack_lvl+0xe8/0x140 [ 133.851902][ T6724] dump_stack+0x15/0x1b [ 133.851920][ T6724] should_fail_ex+0x265/0x280 [ 133.851988][ T6724] should_failslab+0x8c/0xb0 [ 133.852015][ T6724] kmem_cache_alloc_noprof+0x50/0x310 [ 133.852178][ T6724] ? __proc_create+0x265/0x500 [ 133.852209][ T6724] __proc_create+0x265/0x500 [ 133.852307][ T6724] proc_create_data+0xa3/0x1e0 [ 133.852380][ T6724] recent_mt_check+0x779/0x8f0 [ 133.852496][ T6724] recent_mt_check_v0+0x67/0x90 [ 133.852538][ T6724] xt_check_match+0x2ad/0x4f0 [ 133.852586][ T6724] ? strnlen+0x28/0x50 [ 133.852665][ T6724] ? strcmp+0x22/0x50 [ 133.852687][ T6724] ? xt_find_match+0x1d1/0x210 [ 133.852722][ T6724] translate_table+0xb4b/0x1070 [ 133.852780][ T6724] ? _copy_from_user+0x89/0xb0 [ 133.852822][ T6724] do_ip6t_set_ctl+0x678/0x840 [ 133.852856][ T6724] ? kstrtoull+0x111/0x140 [ 133.852996][ T6724] ? __rcu_read_unlock+0x4f/0x70 [ 133.853027][ T6724] nf_setsockopt+0x199/0x1b0 [ 133.853200][ T6724] ipv6_setsockopt+0x11a/0x130 [ 133.853233][ T6724] tcp_setsockopt+0x95/0xb0 [ 133.853256][ T6724] sock_common_setsockopt+0x66/0x80 [ 133.853349][ T6724] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.853384][ T6724] __sys_setsockopt+0x181/0x200 [ 133.853409][ T6724] __x64_sys_setsockopt+0x64/0x80 [ 133.853432][ T6724] x64_sys_call+0x2bd5/0x2fb0 [ 133.853491][ T6724] do_syscall_64+0xd2/0x200 [ 133.853574][ T6724] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.853603][ T6724] ? clear_bhb_loop+0x40/0x90 [ 133.853626][ T6724] ? clear_bhb_loop+0x40/0x90 [ 133.853731][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.853758][ T6724] RIP: 0033:0x7f0fd244e929 [ 133.853777][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.853808][ T6724] RSP: 002b:00007f0fd0ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.853830][ T6724] RAX: ffffffffffffffda RBX: 00007f0fd2675fa0 RCX: 00007f0fd244e929 [ 133.853844][ T6724] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 133.853857][ T6724] RBP: 00007f0fd0ab7090 R08: 0000000000000520 R09: 0000000000000000 [ 133.853871][ T6724] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001 [ 133.853884][ T6724] R13: 0000000000000000 R14: 00007f0fd2675fa0 R15: 00007ffd5ab95a38 [ 133.853903][ T6724] [ 134.209239][ T6734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6734 comm=syz.0.870 [ 134.221728][ T6734] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6734 comm=syz.0.870 [ 134.286963][ T29] audit: type=1326 audit(1749891511.148:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500053e929 code=0x7ffc0000 [ 134.290070][ T6744] loop4: detected capacity change from 0 to 164 [ 134.311246][ T29] audit: type=1326 audit(1749891511.148:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f500053e929 code=0x7ffc0000 [ 134.340151][ T29] audit: type=1326 audit(1749891511.148:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.4.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500053e929 code=0x7ffc0000 [ 134.370019][ T6744] isofs_fill_super: root inode is not a directory. Corrupted media? [ 135.129427][ T6776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6776 comm=syz.0.885 [ 135.141941][ T6776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6776 comm=syz.0.885 [ 135.461020][ T6801] loop4: detected capacity change from 0 to 1024 [ 135.468176][ T6801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.478662][ T6801] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.490304][ T6801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 135.500944][ T6801] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.893: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.517686][ T6801] EXT4-fs (loop4): Remounting filesystem read-only [ 135.540997][ T6801] EXT4-fs (loop4): 1 orphan inode deleted [ 135.547367][ T6801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.567369][ T6801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.638885][ T6807] loop3: detected capacity change from 0 to 8192 [ 135.748733][ T6785] loop2: detected capacity change from 0 to 1024 [ 135.760982][ T6785] EXT4-fs: Ignoring removed orlov option [ 135.771812][ T6785] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 135.797217][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.069325][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.725894][ T6820] loop2: detected capacity change from 0 to 1024 [ 136.744547][ T6835] FAULT_INJECTION: forcing a failure. [ 136.744547][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 136.744604][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.1.903 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 136.744645][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.744659][ T6835] Call Trace: [ 136.744684][ T6835] [ 136.744693][ T6835] __dump_stack+0x1d/0x30 [ 136.744777][ T6835] dump_stack_lvl+0xe8/0x140 [ 136.744797][ T6835] dump_stack+0x15/0x1b [ 136.744816][ T6835] should_fail_ex+0x265/0x280 [ 136.744851][ T6835] ? con_set_unimap+0x4af/0x6f0 [ 136.744883][ T6835] should_failslab+0x8c/0xb0 [ 136.744985][ T6835] __kmalloc_cache_noprof+0x4c/0x320 [ 136.745020][ T6835] ? down+0x48/0x60 [ 136.745054][ T6835] con_set_unimap+0x4af/0x6f0 [ 136.745127][ T6835] vt_ioctl+0xfbb/0x1880 [ 136.745164][ T6835] ? tty_jobctrl_ioctl+0x29e/0x810 [ 136.745203][ T6835] tty_ioctl+0x7de/0xb80 [ 136.745277][ T6835] ? __pfx_tty_ioctl+0x10/0x10 [ 136.745316][ T6835] __se_sys_ioctl+0xcb/0x140 [ 136.745354][ T6835] __x64_sys_ioctl+0x43/0x50 [ 136.745441][ T6835] x64_sys_call+0x19a8/0x2fb0 [ 136.745468][ T6835] do_syscall_64+0xd2/0x200 [ 136.745508][ T6835] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.745533][ T6835] ? clear_bhb_loop+0x40/0x90 [ 136.745554][ T6835] ? clear_bhb_loop+0x40/0x90 [ 136.745649][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.745668][ T6835] RIP: 0033:0x7f7ff549e929 [ 136.745742][ T6835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.745765][ T6835] RSP: 002b:00007f7ff3b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.745786][ T6835] RAX: ffffffffffffffda RBX: 00007f7ff56c5fa0 RCX: 00007f7ff549e929 [ 136.745798][ T6835] RDX: 0000200000000200 RSI: 0000000000004b67 RDI: 0000000000000004 [ 136.745809][ T6835] RBP: 00007f7ff3b07090 R08: 0000000000000000 R09: 0000000000000000 [ 136.745821][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.745832][ T6835] R13: 0000000000000000 R14: 00007f7ff56c5fa0 R15: 00007ffdacfc7138 [ 136.745861][ T6835] [ 136.796615][ T6820] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.802363][ T6820] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.802462][ T6820] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.802489][ T6820] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.899: iget: bad i_size value: 1407392063428608 [ 136.802815][ T6820] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.899: Bad quota inode: 3, type: 0 [ 136.803034][ T6820] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 136.803060][ T6820] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 136.803405][ T6820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.956378][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.004324][ T6842] FAULT_INJECTION: forcing a failure. [ 137.004324][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.004408][ T6842] CPU: 0 UID: 0 PID: 6842 Comm: syz.2.905 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 137.004438][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.004450][ T6842] Call Trace: [ 137.004457][ T6842] [ 137.004466][ T6842] __dump_stack+0x1d/0x30 [ 137.004490][ T6842] dump_stack_lvl+0xe8/0x140 [ 137.004514][ T6842] dump_stack+0x15/0x1b [ 137.004575][ T6842] should_fail_ex+0x265/0x280 [ 137.004683][ T6842] should_fail+0xb/0x20 [ 137.004791][ T6842] should_fail_usercopy+0x1a/0x20 [ 137.004817][ T6842] strncpy_from_user+0x25/0x230 [ 137.004879][ T6842] ? kmem_cache_alloc_noprof+0x186/0x310 [ 137.004915][ T6842] ? getname_flags+0x80/0x3b0 [ 137.004950][ T6842] getname_flags+0xae/0x3b0 [ 137.004985][ T6842] do_sys_openat2+0x60/0x110 [ 137.005086][ T6842] __x64_sys_openat+0xf2/0x120 [ 137.005128][ T6842] x64_sys_call+0x1af/0x2fb0 [ 137.005204][ T6842] do_syscall_64+0xd2/0x200 [ 137.005234][ T6842] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.005271][ T6842] ? clear_bhb_loop+0x40/0x90 [ 137.005301][ T6842] ? clear_bhb_loop+0x40/0x90 [ 137.005332][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.005429][ T6842] RIP: 0033:0x7f20ddc5d290 [ 137.005449][ T6842] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 137.005475][ T6842] RSP: 002b:00007f20dc2c6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 137.005501][ T6842] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20ddc5d290 [ 137.005519][ T6842] RDX: 0000000000000000 RSI: 00007f20ddce0c51 RDI: 00000000ffffff9c [ 137.005594][ T6842] RBP: 00007f20ddce0c51 R08: 0000000000000000 R09: 0000000000000000 [ 137.005610][ T6842] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 137.005627][ T6842] R13: 0000000000000000 R14: 00007f20dde85fa0 R15: 00007ffc88a2fe78 [ 137.005682][ T6842] [ 137.131043][ T6846] pim6reg: entered allmulticast mode [ 137.322482][ T6846] pim6reg: left allmulticast mode [ 137.354863][ T6852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6852 comm=syz.1.910 [ 137.368026][ T6852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6852 comm=syz.1.910 [ 138.555301][ T6877] audit_log_lost: 140 callbacks suppressed [ 138.555318][ T6877] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 138.568964][ T6877] audit: out of memory in audit_log_start [ 138.626461][ T29] audit: type=1326 audit(1749891515.418:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 138.649973][ T29] audit: type=1326 audit(1749891515.418:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 138.673440][ T29] audit: type=1326 audit(1749891515.418:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 138.696824][ T29] audit: type=1326 audit(1749891515.418:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 138.720207][ T29] audit: type=1326 audit(1749891515.418:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ff549d290 code=0x7ffc0000 [ 138.743683][ T29] audit: type=1326 audit(1749891515.418:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ff549d3df code=0x7ffc0000 [ 138.799252][ T29] audit: type=1326 audit(1749891515.558:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7ff549d33c code=0x7ffc0000 [ 138.822640][ T29] audit: type=1326 audit(1749891515.558:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ff549d3df code=0x7ffc0000 [ 139.049930][ T6855] loop2: detected capacity change from 0 to 1024 [ 139.116613][ T6855] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.228077][ T6855] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 139.267133][ T6855] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.273771][ T6855] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.911: iget: bad i_size value: 1407392063428608 [ 139.301865][ T6855] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.911: Bad quota inode: 3, type: 0 [ 139.312982][ T6855] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 139.328498][ T6855] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 139.338305][ T6855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.371318][ T6902] __nla_validate_parse: 4 callbacks suppressed [ 139.371335][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 139.387131][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.927'. [ 139.396195][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 139.414508][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.927'. [ 139.427775][ T6894] lo speed is unknown, defaulting to 1000 [ 139.435799][ T6894] lo speed is unknown, defaulting to 1000 [ 139.675894][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.805869][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'. [ 139.958237][ T6910] loop1: detected capacity change from 0 to 1024 [ 139.998667][ T6910] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.027648][ T6910] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 140.076665][ T6910] EXT4-fs (loop1): orphan cleanup on readonly fs [ 140.084767][ T6910] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #3: comm syz.1.930: iget: bad i_size value: 1407392063428608 [ 140.224656][ T6910] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.930: Bad quota inode: 3, type: 0 [ 140.304630][ T6930] lo speed is unknown, defaulting to 1000 [ 140.331378][ T6910] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 140.346075][ T6910] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 140.399996][ T6908] loop4: detected capacity change from 0 to 1024 [ 140.420708][ T6930] lo speed is unknown, defaulting to 1000 [ 140.478740][ T6908] EXT4-fs: Ignoring removed orlov option [ 140.493420][ T6910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.558726][ T6908] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 140.711857][ T6908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.975700][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.985600][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.177056][ T6950] loop4: detected capacity change from 0 to 128 [ 141.242104][ T6955] loop1: detected capacity change from 0 to 164 [ 141.252363][ T6955] isofs_fill_super: root inode is not a directory. Corrupted media? [ 141.435477][ T6962] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.870528][ T6918] loop3: detected capacity change from 0 to 1024 [ 141.902942][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 141.933473][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 141.942515][ T6966] loop4: detected capacity change from 0 to 1024 [ 141.954424][ T6918] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.981941][ T6966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.012953][ T6918] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 142.026136][ T6966] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.046713][ T6918] EXT4-fs (loop3): orphan cleanup on readonly fs [ 142.055978][ T6966] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 142.070004][ T6966] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.945: lblock 2 mapped to illegal pblock 2 (length 1) [ 142.087527][ T6918] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #3: comm syz.3.932: iget: bad i_size value: 1407392063428608 [ 142.100854][ T6966] EXT4-fs (loop4): Remounting filesystem read-only [ 142.100927][ T6918] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.932: Bad quota inode: 3, type: 0 [ 142.119900][ T6918] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 142.133763][ T6966] EXT4-fs (loop4): 1 orphan inode deleted [ 142.134693][ T6918] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 142.140744][ T6966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.166717][ T6918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.181108][ T6966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.502457][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.581225][ T6980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.950'. [ 143.681914][ T6992] Cannot find set identified by id 65534 to match [ 143.726253][ T6992] loop3: detected capacity change from 0 to 128 [ 143.740920][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 143.740938][ T29] audit: type=1400 audit(1749891520.598:8645): avc: denied { ioctl } for pid=6998 comm="GPL" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.771329][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.779303][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.792275][ T6997] loop4: detected capacity change from 0 to 2048 [ 143.794164][ T29] audit: type=1326 audit(1749891520.638:8646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 143.822329][ T29] audit: type=1326 audit(1749891520.638:8647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 143.845841][ T29] audit: type=1326 audit(1749891520.638:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 143.869005][ T29] audit: type=1326 audit(1749891520.638:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 143.892643][ T29] audit: type=1326 audit(1749891520.638:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 143.916324][ T29] audit: type=1326 audit(1749891520.658:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9958e929 code=0x7ffc0000 [ 143.916492][ T6988] team0: Port device dummy0 removed [ 143.939703][ T29] audit: type=1326 audit(1749891520.658:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9958e929 code=0x7ffc0000 [ 143.939742][ T29] audit: type=1326 audit(1749891520.658:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3b9958e929 code=0x7ffc0000 [ 143.992946][ T29] audit: type=1326 audit(1749891520.658:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9958e929 code=0x7ffc0000 [ 144.037675][ T6988] bridge_slave_0: left allmulticast mode [ 144.043375][ T6988] bridge_slave_0: left promiscuous mode [ 144.049854][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.058778][ T6997] loop4: p1 < > p3 [ 144.067761][ T6988] bridge_slave_1: left allmulticast mode [ 144.073498][ T6988] bridge_slave_1: left promiscuous mode [ 144.080029][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.092051][ T6997] loop4: p3 size 134217728 extends beyond EOD, truncated [ 144.099807][ T6988] bond0: (slave bond_slave_0): Releasing backup interface [ 144.112287][ T6988] bond0: (slave bond_slave_1): Releasing backup interface [ 144.124345][ T6988] team0: Port device team_slave_1 removed [ 144.131641][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.140506][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.150945][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.160157][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.185922][ T6988] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.194430][ T6988] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.202784][ T6988] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.211377][ T6988] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.302382][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.962'. [ 144.327077][ T7002] lo speed is unknown, defaulting to 1000 [ 144.335557][ T7002] lo speed is unknown, defaulting to 1000 [ 144.377452][ T7020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7020 comm=syz.1.965 [ 144.389931][ T7020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7020 comm=syz.1.965 [ 144.438901][ T7018] loop3: detected capacity change from 0 to 8192 [ 144.534167][ T7018] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 144.539436][ T7018] loop3: partition table partially beyond EOD, truncated [ 144.567591][ T7018] loop3: p1 start 67108864 is beyond EOD, truncated [ 144.575163][ T7018] loop3: p2 size 61546 extends beyond EOD, truncated [ 144.630337][ T7032] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.753532][ T7018] loop3: p3 start 100859904 is beyond EOD, truncated [ 144.766577][ T7038] loop4: detected capacity change from 0 to 512 [ 144.777079][ T7018] loop3: p5 start 67108864 is beyond EOD, truncated [ 144.783813][ T7018] loop3: p6 size 61546 extends beyond EOD, truncated [ 144.799795][ T7038] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.861729][ T7038] EXT4-fs (loop4): mount failed [ 145.048268][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 145.080826][ T7038] bond2: entered promiscuous mode [ 145.086087][ T7038] bond2: entered allmulticast mode [ 145.109375][ T7038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.365826][ T7058] lo speed is unknown, defaulting to 1000 [ 145.372221][ T7058] lo speed is unknown, defaulting to 1000 [ 145.534135][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.980'. [ 145.604240][ T7074] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7074 comm=syz.2.983 [ 145.616683][ T7074] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7074 comm=syz.2.983 [ 145.777556][ T7082] loop1: detected capacity change from 0 to 128 [ 145.875475][ T7084] syzkaller1: entered promiscuous mode [ 145.881061][ T7084] syzkaller1: entered allmulticast mode [ 146.159295][ T7088] FAULT_INJECTION: forcing a failure. [ 146.159295][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 146.172021][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.1.987 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 146.172054][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.172068][ T7088] Call Trace: [ 146.172075][ T7088] [ 146.172082][ T7088] __dump_stack+0x1d/0x30 [ 146.172173][ T7088] dump_stack_lvl+0xe8/0x140 [ 146.172195][ T7088] dump_stack+0x15/0x1b [ 146.172227][ T7088] should_fail_ex+0x265/0x280 [ 146.172262][ T7088] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 146.172286][ T7088] should_failslab+0x8c/0xb0 [ 146.172310][ T7088] __kmalloc_cache_noprof+0x4c/0x320 [ 146.172418][ T7088] selinux_netlbl_sock_genattr+0x88/0x260 [ 146.172441][ T7088] selinux_netlbl_socket_post_create+0x68/0x100 [ 146.172469][ T7088] selinux_socket_post_create+0x214/0x2a0 [ 146.172510][ T7088] security_socket_post_create+0x5d/0xb0 [ 146.172567][ T7088] __sock_create+0x362/0x5b0 [ 146.172603][ T7088] sock_create_kern+0x38/0x50 [ 146.172636][ T7088] mptcp_subflow_create_socket+0x84/0x630 [ 146.172675][ T7088] __mptcp_nmpc_sk+0xb3/0x3b0 [ 146.172696][ T7088] mptcp_listen+0xc0/0x570 [ 146.172790][ T7088] __x64_sys_listen+0x10d/0x170 [ 146.172822][ T7088] x64_sys_call+0x2b93/0x2fb0 [ 146.172885][ T7088] do_syscall_64+0xd2/0x200 [ 146.172967][ T7088] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.173008][ T7088] ? clear_bhb_loop+0x40/0x90 [ 146.173034][ T7088] ? clear_bhb_loop+0x40/0x90 [ 146.173132][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.173153][ T7088] RIP: 0033:0x7f7ff549e929 [ 146.173167][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.173203][ T7088] RSP: 002b:00007f7ff3b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 146.173226][ T7088] RAX: ffffffffffffffda RBX: 00007f7ff56c5fa0 RCX: 00007f7ff549e929 [ 146.173242][ T7088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 146.173257][ T7088] RBP: 00007f7ff3b07090 R08: 0000000000000000 R09: 0000000000000000 [ 146.173297][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.173313][ T7088] R13: 0000000000000000 R14: 00007f7ff56c5fa0 R15: 00007ffdacfc7138 [ 146.173354][ T7088] [ 146.468939][ T7088] loop1: detected capacity change from 0 to 164 [ 146.485020][ T7088] ISOFS: unable to read i-node block [ 146.490376][ T7088] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 146.600816][ T7077] loop4: detected capacity change from 0 to 1024 [ 146.635905][ T7077] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.872296][ T7098] netlink: 96 bytes leftover after parsing attributes in process `syz.1.987'. [ 147.027924][ T7101] netlink: 60 bytes leftover after parsing attributes in process `syz.2.991'. [ 147.056950][ T7077] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.982: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.071757][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'. [ 147.179640][ T7077] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.982: Failed to acquire dquot type 0 [ 147.197869][ T7120] 9pnet_fd: Insufficient options for proto=fd [ 147.221379][ T7077] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.982: Freeing blocks not in datazone - block = 0, count = 4096 [ 147.255122][ T7077] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.982: Invalid inode bitmap blk 0 in block_group 0 [ 147.273873][ T3428] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.392656][ T7125] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 147.401183][ T3428] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 147.414824][ T7128] netlink: 'syz.3.999': attribute type 8 has an invalid length. [ 147.422500][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 147.495386][ T7077] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 147.513070][ T7128] bond1: entered promiscuous mode [ 147.518255][ T7128] bond1: entered allmulticast mode [ 147.593860][ T7128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.614143][ T7128] bond1 (unregistering): Released all slaves [ 147.655177][ T7077] EXT4-fs (loop4): 1 orphan inode deleted [ 147.709786][ T7077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.858657][ T7072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.127692][ T7143] Cannot find set identified by id 0 to match [ 148.137989][ T7141] pim6reg: entered allmulticast mode [ 148.155652][ T7141] pim6reg: left allmulticast mode [ 148.164014][ T7143] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1005'. [ 148.463460][ T7165] loop9: detected capacity change from 0 to 7 [ 148.470070][ T7165] buffer_io_error: 2 callbacks suppressed [ 148.470083][ T7165] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.501519][ T7165] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.510158][ T7165] loop9: unable to read partition table [ 148.525265][ T7165] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 148.525265][ T7165] U) failed (rc=-5) [ 148.745638][ T7154] loop4: detected capacity change from 0 to 1024 [ 148.760679][ T7154] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.795931][ T7154] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 148.806501][ T7154] EXT4-fs (loop4): orphan cleanup on readonly fs [ 148.813102][ T7154] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #3: comm syz.4.1001: iget: bad i_size value: 1407392063428608 [ 148.822572][ T7178] pim6reg: entered allmulticast mode [ 148.833411][ T7154] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1001: Bad quota inode: 3, type: 0 [ 148.835388][ T7178] pim6reg: left allmulticast mode [ 148.852421][ T7154] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 148.867884][ T7154] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 148.878265][ T7154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.945556][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 149.036045][ T7185] loop3: detected capacity change from 0 to 1024 [ 149.049954][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.077245][ T7185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.118123][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.170080][ T7195] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1024'. [ 149.287363][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 149.318092][ T7210] loop3: detected capacity change from 0 to 1024 [ 149.341244][ T7210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.372909][ T7210] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.411325][ T7210] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 149.429033][ T7210] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1030: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.446360][ T7210] EXT4-fs (loop3): Remounting filesystem read-only [ 149.452913][ T7210] __quota_error: 167 callbacks suppressed [ 149.452929][ T7210] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 149.502429][ T7218] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.503229][ T7210] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 149.519380][ T7210] EXT4-fs (loop3): 1 orphan inode deleted [ 149.522585][ T7205] loop4: detected capacity change from 0 to 1024 [ 149.525552][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.547603][ T7205] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.554428][ T7210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.588645][ T7205] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 149.597556][ T7205] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.605211][ T7205] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #3: comm syz.4.1026: iget: bad i_size value: 1407392063428608 [ 149.619892][ T7205] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1026: Bad quota inode: 3, type: 0 [ 149.632484][ T7205] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 149.647932][ T7205] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 149.655015][ T7205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.731852][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.800156][ T7225] lo speed is unknown, defaulting to 1000 [ 149.807739][ T7225] lo speed is unknown, defaulting to 1000 [ 149.815552][ T29] audit: type=1326 audit(1749891526.678:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.1034" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f500053e929 code=0x0 [ 150.173461][ T7242] __nla_validate_parse: 2 callbacks suppressed [ 150.173475][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 150.194142][ T7242] loop3: detected capacity change from 0 to 1024 [ 150.201021][ T7242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.210199][ T7242] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.227762][ T7242] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 150.237853][ T7242] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.1039: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.253234][ T7242] EXT4-fs (loop3): Remounting filesystem read-only [ 150.259897][ T7242] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 150.269687][ T7242] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 150.278652][ T7242] EXT4-fs (loop3): 1 orphan inode deleted [ 150.285918][ T7242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.298786][ T7242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.374587][ T7246] loop9: detected capacity change from 0 to 7 [ 150.380889][ T7246] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.388926][ T7246] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.397504][ T7246] loop9: unable to read partition table [ 150.403185][ T7246] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 150.403185][ T7246] U) failed (rc=-5) [ 150.611302][ T29] audit: type=1326 audit(1749891527.468:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500053e929 code=0x7ffc0000 [ 150.635348][ T29] audit: type=1326 audit(1749891527.468:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f500053e929 code=0x7ffc0000 [ 150.659044][ T29] audit: type=1326 audit(1749891527.468:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500053e929 code=0x7ffc0000 [ 150.683455][ T29] audit: type=1326 audit(1749891527.468:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500053e929 code=0x7ffc0000 [ 150.708048][ T29] audit: type=1326 audit(1749891527.468:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7251 comm="syz.4.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f500053e929 code=0x7ffc0000 [ 150.762439][ T7255] loop4: detected capacity change from 0 to 256 [ 150.845511][ T7261] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 150.854537][ T7261] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 150.918082][ T7253] loop2: detected capacity change from 0 to 1024 [ 150.939472][ T7253] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.962209][ T7253] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 150.978181][ T7253] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.993575][ T7253] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.1042: iget: bad i_size value: 1407392063428608 [ 151.021309][ T7253] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1042: Bad quota inode: 3, type: 0 [ 151.035163][ T7270] netlink: 'syz.0.1048': attribute type 10 has an invalid length. [ 151.044629][ T7272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5753 sclass=netlink_route_socket pid=7272 comm=syz.3.1049 [ 151.060960][ T7272] SELinux: syz.3.1049 (7272) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 151.089409][ T7253] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 151.104145][ T7253] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 151.113594][ T7253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.211066][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.254799][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 151.267510][ T7274] netlink: 'syz.1.1050': attribute type 13 has an invalid length. [ 151.275476][ T7274] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1050'. [ 151.294251][ T7274] erspan0: refused to change device tx_queue_len [ 151.301215][ T7274] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 151.370066][ T7287] loop1: detected capacity change from 0 to 8192 [ 151.381326][ T7287] netlink: 'syz.1.1056': attribute type 10 has an invalid length. [ 151.402968][ T7290] FAULT_INJECTION: forcing a failure. [ 151.402968][ T7290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.416119][ T7290] CPU: 1 UID: 0 PID: 7290 Comm: syz.0.1057 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 151.416150][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.416165][ T7290] Call Trace: [ 151.416172][ T7290] [ 151.416181][ T7290] __dump_stack+0x1d/0x30 [ 151.416206][ T7290] dump_stack_lvl+0xe8/0x140 [ 151.416233][ T7290] dump_stack+0x15/0x1b [ 151.416253][ T7290] should_fail_ex+0x265/0x280 [ 151.416330][ T7290] should_fail+0xb/0x20 [ 151.416367][ T7290] should_fail_usercopy+0x1a/0x20 [ 151.416441][ T7290] _copy_from_user+0x1c/0xb0 [ 151.416470][ T7290] ___sys_recvmsg+0xaa/0x370 [ 151.416510][ T7290] do_recvmmsg+0x1ef/0x540 [ 151.416650][ T7290] ? fput+0x8f/0xc0 [ 151.416678][ T7290] __x64_sys_recvmmsg+0xe5/0x170 [ 151.416735][ T7290] x64_sys_call+0x1c6a/0x2fb0 [ 151.416760][ T7290] do_syscall_64+0xd2/0x200 [ 151.416786][ T7290] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.416888][ T7290] ? clear_bhb_loop+0x40/0x90 [ 151.416914][ T7290] ? clear_bhb_loop+0x40/0x90 [ 151.417010][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.417036][ T7290] RIP: 0033:0x7f0fd244e929 [ 151.417054][ T7290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.417142][ T7290] RSP: 002b:00007f0fd0ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.417168][ T7290] RAX: ffffffffffffffda RBX: 00007f0fd2675fa0 RCX: 00007f0fd244e929 [ 151.417183][ T7290] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 151.417198][ T7290] RBP: 00007f0fd0ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.417213][ T7290] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 151.417228][ T7290] R13: 0000000000000000 R14: 00007f0fd2675fa0 R15: 00007ffd5ab95a38 [ 151.417271][ T7290] [ 151.695497][ T7299] pim6reg: entered allmulticast mode [ 151.702009][ T7299] pim6reg: left allmulticast mode [ 151.958413][ T7301] loop4: detected capacity change from 0 to 1024 [ 151.966812][ T7301] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.982441][ T7301] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 151.991787][ T7301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.998242][ T7301] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #3: comm syz.4.1062: iget: bad i_size value: 1407392063428608 [ 152.013657][ T7301] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1062: Bad quota inode: 3, type: 0 [ 152.025972][ T7301] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 152.040709][ T7301] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 152.050350][ T7301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.130738][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.228069][ T7314] pim6reg: entered allmulticast mode [ 152.236712][ T7314] pim6reg: left allmulticast mode [ 152.260115][ T7304] loop1: detected capacity change from 0 to 1024 [ 152.268086][ T7304] EXT4-fs: Ignoring removed orlov option [ 152.276039][ T7304] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 152.307488][ T7318] FAULT_INJECTION: forcing a failure. [ 152.307488][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.320723][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.4.1068 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 152.320813][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.320829][ T7318] Call Trace: [ 152.320836][ T7318] [ 152.320844][ T7318] __dump_stack+0x1d/0x30 [ 152.320896][ T7318] dump_stack_lvl+0xe8/0x140 [ 152.320938][ T7318] dump_stack+0x15/0x1b [ 152.320959][ T7318] should_fail_ex+0x265/0x280 [ 152.321017][ T7318] should_fail+0xb/0x20 [ 152.321170][ T7318] should_fail_usercopy+0x1a/0x20 [ 152.321197][ T7318] _copy_to_user+0x20/0xa0 [ 152.321223][ T7318] simple_read_from_buffer+0xb5/0x130 [ 152.321293][ T7318] proc_fail_nth_read+0x100/0x140 [ 152.321323][ T7318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.321349][ T7318] vfs_read+0x19d/0x6f0 [ 152.321367][ T7318] ? __rcu_read_unlock+0x4f/0x70 [ 152.321390][ T7318] ? __fget_files+0x184/0x1c0 [ 152.321415][ T7318] ksys_read+0xda/0x1a0 [ 152.321542][ T7318] __x64_sys_read+0x40/0x50 [ 152.321564][ T7318] x64_sys_call+0x2d77/0x2fb0 [ 152.321592][ T7318] do_syscall_64+0xd2/0x200 [ 152.321618][ T7318] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.321685][ T7318] ? clear_bhb_loop+0x40/0x90 [ 152.321712][ T7318] ? clear_bhb_loop+0x40/0x90 [ 152.321740][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.321766][ T7318] RIP: 0033:0x7f500053d33c [ 152.321785][ T7318] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.321881][ T7318] RSP: 002b:00007f4ffeba7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.321905][ T7318] RAX: ffffffffffffffda RBX: 00007f5000765fa0 RCX: 00007f500053d33c [ 152.321921][ T7318] RDX: 000000000000000f RSI: 00007f4ffeba70a0 RDI: 0000000000000006 [ 152.321936][ T7318] RBP: 00007f4ffeba7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.321951][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.321965][ T7318] R13: 0000000000000000 R14: 00007f5000765fa0 R15: 00007fffd06d0628 [ 152.321991][ T7318] [ 152.553930][ T7304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.631408][ T7328] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.645796][ T7329] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 152.661767][ T7328] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 152.669342][ T7324] loop4: detected capacity change from 0 to 8192 [ 152.681532][ T7324] netlink: 'syz.4.1070': attribute type 10 has an invalid length. [ 152.760478][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1073'. [ 152.794124][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.872292][ T7342] loop1: detected capacity change from 0 to 164 [ 152.879690][ T7342] isofs_fill_super: root inode is not a directory. Corrupted media? [ 152.940445][ T7336] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 152.972096][ T7354] loop4: detected capacity change from 0 to 128 [ 152.998443][ T7354] bio_check_eod: 107 callbacks suppressed [ 152.998456][ T7354] +}[@: attempt to access beyond end of device [ 152.998456][ T7354] loop4: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 153.017924][ T7354] +}[@: attempt to access beyond end of device [ 153.017924][ T7354] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 153.030890][ T7354] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 153.040414][ T7354] +}[@: attempt to access beyond end of device [ 153.040414][ T7354] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 153.053411][ T7354] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 153.062418][ T7354] +}[@: attempt to access beyond end of device [ 153.062418][ T7354] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 153.076044][ T7354] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 153.084715][ T7354] +}[@: attempt to access beyond end of device [ 153.084715][ T7354] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 153.097734][ T7354] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 153.107086][ T7354] +}[@: attempt to access beyond end of device [ 153.107086][ T7354] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 153.120040][ T7354] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 153.128867][ T7354] +}[@: attempt to access beyond end of device [ 153.128867][ T7354] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 153.130398][ T7360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.141816][ T7354] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 153.142103][ T7354] +}[@: attempt to access beyond end of device [ 153.142103][ T7354] loop4: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 153.175033][ T7354] +}[@: attempt to access beyond end of device [ 153.175033][ T7354] loop4: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 153.188052][ T7354] +}[@: attempt to access beyond end of device [ 153.188052][ T7354] loop4: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 153.217382][ T7360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.276035][ T7360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.362748][ T7360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.436706][ T7360] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.455119][ T7368] loop2: detected capacity change from 0 to 512 [ 153.456601][ T7360] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.473115][ T7360] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.485767][ T7368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.499867][ T7368] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.501615][ T7360] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.558529][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.568227][ T7372] loop4: detected capacity change from 0 to 8192 [ 153.589032][ T7372] netlink: 'syz.4.1086': attribute type 10 has an invalid length. [ 153.620864][ T7380] loop2: detected capacity change from 0 to 164 [ 153.628777][ T7380] isofs_fill_super: root inode is not a directory. Corrupted media? [ 153.748323][ T7392] netlink: 'syz.3.1093': attribute type 27 has an invalid length. [ 153.836626][ T7400] loop2: detected capacity change from 0 to 8192 [ 153.901075][ T7417] netlink: 'syz.2.1097': attribute type 10 has an invalid length. [ 153.944931][ T7415] loop4: detected capacity change from 0 to 8192 [ 153.966899][ T7415] netlink: 'syz.4.1102': attribute type 10 has an invalid length. [ 154.720309][ T7440] FAULT_INJECTION: forcing a failure. [ 154.720309][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 154.733028][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.0.1111 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 154.733072][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.733085][ T7440] Call Trace: [ 154.733092][ T7440] [ 154.733098][ T7440] __dump_stack+0x1d/0x30 [ 154.733123][ T7440] dump_stack_lvl+0xe8/0x140 [ 154.733197][ T7440] dump_stack+0x15/0x1b [ 154.733213][ T7440] should_fail_ex+0x265/0x280 [ 154.733308][ T7440] ? nf_conncount_init+0x9e/0x1e0 [ 154.733334][ T7440] should_failslab+0x8c/0xb0 [ 154.733359][ T7440] __kmalloc_cache_noprof+0x4c/0x320 [ 154.733391][ T7440] ? nf_ct_netns_do_get+0x366/0x380 [ 154.733536][ T7440] nf_conncount_init+0x9e/0x1e0 [ 154.733563][ T7440] connlimit_mt_check+0x8a/0x150 [ 154.733630][ T7440] xt_check_match+0x2ad/0x4f0 [ 154.733773][ T7440] ? xt_find_match+0x145/0x210 [ 154.733810][ T7440] ? strcmp+0x22/0x50 [ 154.733843][ T7440] ? xt_find_match+0x1d1/0x210 [ 154.733890][ T7440] translate_table+0xa9c/0xf90 [ 154.733945][ T7440] do_ipt_set_ctl+0x66f/0x820 [ 154.734064][ T7440] ? _raw_spin_unlock_bh+0x36/0x40 [ 154.734098][ T7440] ? tcp_release_cb+0xf1/0x370 [ 154.734228][ T7440] nf_setsockopt+0x199/0x1b0 [ 154.734315][ T7440] ip_setsockopt+0x102/0x110 [ 154.734347][ T7440] tcp_setsockopt+0x95/0xb0 [ 154.734407][ T7440] sock_common_setsockopt+0x66/0x80 [ 154.734435][ T7440] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.734465][ T7440] __sys_setsockopt+0x181/0x200 [ 154.734564][ T7440] __x64_sys_setsockopt+0x64/0x80 [ 154.734606][ T7440] x64_sys_call+0x2bd5/0x2fb0 [ 154.734633][ T7440] do_syscall_64+0xd2/0x200 [ 154.734748][ T7440] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.734781][ T7440] ? clear_bhb_loop+0x40/0x90 [ 154.734808][ T7440] ? clear_bhb_loop+0x40/0x90 [ 154.734852][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.734873][ T7440] RIP: 0033:0x7f0fd244e929 [ 154.734897][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.734920][ T7440] RSP: 002b:00007f0fd0ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.734954][ T7440] RAX: ffffffffffffffda RBX: 00007f0fd2675fa0 RCX: 00007f0fd244e929 [ 154.734969][ T7440] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 154.734982][ T7440] RBP: 00007f0fd0ab7090 R08: 0000000000000570 R09: 0000000000000000 [ 154.734994][ T7440] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000002 [ 154.735007][ T7440] R13: 0000000000000000 R14: 00007f0fd2675fa0 R15: 00007ffd5ab95a38 [ 154.735043][ T7440] [ 155.160481][ T7451] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 155.218467][ T7455] lo speed is unknown, defaulting to 1000 [ 155.224571][ T7455] lo speed is unknown, defaulting to 1000 [ 155.324194][ T7465] loop4: detected capacity change from 0 to 8192 [ 156.326774][ T7470] loop1: detected capacity change from 0 to 1024 [ 156.358897][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 156.442587][ T7470] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.477112][ T7483] loop2: detected capacity change from 0 to 1024 [ 156.514846][ T29] kauditd_printk_skb: 687 callbacks suppressed [ 156.514862][ T29] audit: type=1326 audit(1749891533.378:9509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.552013][ T7483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.564012][ T7470] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 156.578602][ T7470] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.581128][ T7483] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.588487][ T7470] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #3: comm syz.1.1122: iget: bad i_size value: 1407392063428608 [ 156.631601][ T7470] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.1122: Bad quota inode: 3, type: 0 [ 156.635309][ T29] audit: type=1326 audit(1749891533.408:9510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.645914][ T7483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 156.666080][ T29] audit: type=1326 audit(1749891533.408:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.666123][ T29] audit: type=1326 audit(1749891533.408:9512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.666151][ T29] audit: type=1326 audit(1749891533.408:9513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.666184][ T29] audit: type=1326 audit(1749891533.408:9514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.666290][ T29] audit: type=1326 audit(1749891533.408:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.666341][ T29] audit: type=1326 audit(1749891533.408:9516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.666374][ T29] audit: type=1326 audit(1749891533.408:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.666402][ T29] audit: type=1326 audit(1749891533.408:9518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.0.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd244e929 code=0x7ffc0000 [ 156.715731][ T7470] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 156.878006][ T7470] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 156.885507][ T7470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.941734][ T7483] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1126: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.980550][ T7483] EXT4-fs (loop2): Remounting filesystem read-only [ 156.992390][ T7483] EXT4-fs (loop2): 1 orphan inode deleted [ 157.008769][ T7483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.026896][ T7483] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.152371][ T7500] loop3: detected capacity change from 0 to 8192 [ 157.159612][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.202198][ T7500] netlink: 'syz.3.1131': attribute type 10 has an invalid length. [ 157.211355][ T7500] team0: Port device dummy0 added [ 157.230784][ T7509] loop1: detected capacity change from 0 to 128 [ 157.279181][ T7516] loop9: detected capacity change from 0 to 7 [ 157.288515][ T7516] buffer_io_error: 12 callbacks suppressed [ 157.288527][ T7516] Buffer I/O error on dev loop9, logical block 0, async page read [ 157.319786][ T7516] Buffer I/O error on dev loop9, logical block 0, async page read [ 157.328300][ T7516] loop9: unable to read partition table [ 157.332659][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 157.335265][ T7516] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 157.335265][ T7516] U) failed (rc=-5) [ 157.357957][ T7519] loop2: detected capacity change from 0 to 1024 [ 157.368117][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 157.368164][ T7519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.378707][ T7519] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.402485][ T7521] loop1: detected capacity change from 0 to 1024 [ 157.410890][ T7521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.420478][ T7521] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.436412][ T7521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 157.448401][ T7521] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.1140: lblock 2 mapped to illegal pblock 2 (length 1) [ 157.462759][ T7521] EXT4-fs (loop1): Remounting filesystem read-only [ 157.471390][ T7521] EXT4-fs (loop1): 1 orphan inode deleted [ 157.478457][ T7521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.492452][ T7521] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.502387][ T7519] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 157.512099][ T7519] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1141: lblock 2 mapped to illegal pblock 2 (length 1) [ 157.526283][ T7519] EXT4-fs (loop2): Remounting filesystem read-only [ 157.533075][ T7519] EXT4-fs (loop2): 1 orphan inode deleted [ 157.540098][ T7519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.553387][ T7519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.602134][ T7532] netlink: 'syz.4.1144': attribute type 4 has an invalid length. [ 158.435767][ T7535] netlink: 'syz.4.1144': attribute type 4 has an invalid length. [ 158.497455][ T7521] loop1: detected capacity change from 0 to 512 [ 158.516618][ T7538] pim6reg: entered allmulticast mode [ 158.540488][ T7538] pim6reg: left allmulticast mode [ 158.572888][ T7521] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1140: Failed to acquire dquot type 1 [ 158.575757][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 158.595531][ T7521] EXT4-fs (loop1): 1 truncate cleaned up [ 158.603451][ T7521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.617463][ T7521] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.623106][ T7550] loop2: detected capacity change from 0 to 1024 [ 158.629451][ T7521] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.654431][ T7550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.664220][ T7545] netlink: 'syz.0.1149': attribute type 10 has an invalid length. [ 158.676321][ T7550] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.687881][ T7550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 158.697493][ T7550] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1150: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.711955][ T7550] EXT4-fs (loop2): Remounting filesystem read-only [ 158.721181][ T7550] EXT4-fs (loop2): 1 orphan inode deleted [ 158.727669][ T7550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.740970][ T7550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.748551][ T7536] loop1: detected capacity change from 0 to 1024 [ 158.759942][ T7536] EXT4-fs: Ignoring removed nobh option [ 158.765725][ T7536] EXT4-fs: Ignoring removed bh option [ 158.804822][ T7563] lo speed is unknown, defaulting to 1000 [ 158.812276][ T7563] lo speed is unknown, defaulting to 1000 [ 158.904614][ T7536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.060842][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.547060][ T7585] pim6reg: entered allmulticast mode [ 159.678439][ T7585] pim6reg: left allmulticast mode [ 159.777282][ T7590] loop4: detected capacity change from 0 to 256 [ 159.803150][ T7594] FAULT_INJECTION: forcing a failure. [ 159.803150][ T7594] name failslab, interval 1, probability 0, space 0, times 0 [ 159.815848][ T7594] CPU: 1 UID: 0 PID: 7594 Comm: syz.2.1164 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 159.815961][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.815976][ T7594] Call Trace: [ 159.815984][ T7594] [ 159.815993][ T7594] __dump_stack+0x1d/0x30 [ 159.816019][ T7594] dump_stack_lvl+0xe8/0x140 [ 159.816108][ T7594] dump_stack+0x15/0x1b [ 159.816129][ T7594] should_fail_ex+0x265/0x280 [ 159.816171][ T7594] should_failslab+0x8c/0xb0 [ 159.816210][ T7594] kmem_cache_alloc_noprof+0x50/0x310 [ 159.816301][ T7594] ? security_inode_alloc+0x37/0x100 [ 159.816331][ T7594] security_inode_alloc+0x37/0x100 [ 159.816365][ T7594] inode_init_always_gfp+0x4b7/0x500 [ 159.816392][ T7594] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 159.816411][ T7594] alloc_inode+0x58/0x170 [ 159.816427][ T7594] new_inode+0x1d/0xe0 [ 159.816488][ T7594] shmem_get_inode+0x244/0x750 [ 159.816525][ T7594] __shmem_file_setup+0x113/0x210 [ 159.816558][ T7594] shmem_file_setup+0x3b/0x50 [ 159.816591][ T7594] __se_sys_memfd_create+0x2c3/0x590 [ 159.816661][ T7594] __x64_sys_memfd_create+0x31/0x40 [ 159.816698][ T7594] x64_sys_call+0x122f/0x2fb0 [ 159.816740][ T7594] do_syscall_64+0xd2/0x200 [ 159.816784][ T7594] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.816811][ T7594] ? clear_bhb_loop+0x40/0x90 [ 159.816867][ T7594] ? clear_bhb_loop+0x40/0x90 [ 159.816891][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.816935][ T7594] RIP: 0033:0x7f20ddc5e929 [ 159.816948][ T7594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.816967][ T7594] RSP: 002b:00007f20dc2c6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 159.817031][ T7594] RAX: ffffffffffffffda RBX: 00000000000005c9 RCX: 00007f20ddc5e929 [ 159.817042][ T7594] RDX: 00007f20dc2c6dec RSI: 0000000000000000 RDI: 00007f20ddce14cc [ 159.817052][ T7594] RBP: 0000200000000880 R08: 00007f20dc2c6b07 R09: 0000000000000000 [ 159.817064][ T7594] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 159.817078][ T7594] R13: 00007f20dc2c6dec R14: 00007f20dc2c6df0 R15: 00007ffc88a2fe78 [ 159.817130][ T7594] [ 160.119560][ T7598] capability: warning: `syz.2.1166' uses deprecated v2 capabilities in a way that may be insecure [ 160.147418][ T7597] loop3: detected capacity change from 0 to 8192 [ 160.169409][ T7598] netlink: '+}[@': attribute type 9 has an invalid length. [ 160.176721][ T7598] netlink: '+}[@': attribute type 7 has an invalid length. [ 160.184025][ T7598] netlink: '+}[@': attribute type 8 has an invalid length. [ 160.204959][ T7597] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 160.389467][ T7621] loop3: detected capacity change from 0 to 128 [ 160.623017][ T7628] lo speed is unknown, defaulting to 1000 [ 160.630190][ T7628] lo speed is unknown, defaulting to 1000 [ 160.782524][ T7626] loop2: detected capacity change from 0 to 1024 [ 160.817867][ T7626] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.854872][ T7626] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 160.887793][ T7645] loop3: detected capacity change from 0 to 128 [ 160.895205][ T7626] EXT4-fs (loop2): orphan cleanup on readonly fs [ 160.911421][ T7626] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.1175: iget: bad i_size value: 1407392063428608 [ 160.977057][ T7626] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1175: Bad quota inode: 3, type: 0 [ 161.008521][ T7626] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 161.023994][ T7626] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 161.034827][ T7626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.049818][ T7647] tipc: Started in network mode [ 161.055481][ T7647] tipc: Node identity 8eceabc0a65e, cluster identity 4711 [ 161.062769][ T7647] tipc: Enabled bearer , priority 0 [ 161.094534][ T7647] FAULT_INJECTION: forcing a failure. [ 161.094534][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 161.107353][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.3.1182 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 161.107377][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.107388][ T7647] Call Trace: [ 161.107393][ T7647] [ 161.107401][ T7647] __dump_stack+0x1d/0x30 [ 161.107450][ T7647] dump_stack_lvl+0xe8/0x140 [ 161.107475][ T7647] dump_stack+0x15/0x1b [ 161.107494][ T7647] should_fail_ex+0x265/0x280 [ 161.107534][ T7647] should_failslab+0x8c/0xb0 [ 161.107561][ T7647] kmem_cache_alloc_node_noprof+0x57/0x320 [ 161.107669][ T7647] ? __alloc_skb+0x101/0x320 [ 161.107754][ T7647] __alloc_skb+0x101/0x320 [ 161.107790][ T7647] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 161.107829][ T7647] addrconf_ifdown+0xd8f/0xf30 [ 161.107907][ T7647] ? __pfx_cbs_dev_notifier+0x10/0x10 [ 161.107933][ T7647] ? tls_dev_event+0x3d7/0x910 [ 161.107962][ T7647] addrconf_notify+0x222/0x930 [ 161.107990][ T7647] ? __pfx_addrconf_notify+0x10/0x10 [ 161.108031][ T7647] raw_notifier_call_chain+0x6c/0x1b0 [ 161.108131][ T7647] ? call_netdevice_notifiers_info+0x9c/0x100 [ 161.108159][ T7647] call_netdevice_notifiers_info+0xae/0x100 [ 161.108186][ T7647] netif_set_mtu_ext+0x296/0x370 [ 161.108226][ T7647] netif_set_mtu+0x4a/0xf0 [ 161.108260][ T7647] dev_set_mtu+0xc1/0x170 [ 161.108364][ T7647] dev_ifsioc+0x474/0xaa0 [ 161.108384][ T7647] ? __rcu_read_unlock+0x4f/0x70 [ 161.108407][ T7647] dev_ioctl+0x70a/0x960 [ 161.108427][ T7647] sock_do_ioctl+0x197/0x220 [ 161.108523][ T7647] sock_ioctl+0x41b/0x610 [ 161.108547][ T7647] ? __pfx_sock_ioctl+0x10/0x10 [ 161.108644][ T7647] __se_sys_ioctl+0xcb/0x140 [ 161.108688][ T7647] __x64_sys_ioctl+0x43/0x50 [ 161.108717][ T7647] x64_sys_call+0x19a8/0x2fb0 [ 161.108801][ T7647] do_syscall_64+0xd2/0x200 [ 161.108824][ T7647] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.108849][ T7647] ? clear_bhb_loop+0x40/0x90 [ 161.108923][ T7647] ? clear_bhb_loop+0x40/0x90 [ 161.109037][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.109058][ T7647] RIP: 0033:0x7f3b9958e929 [ 161.109084][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.109102][ T7647] RSP: 002b:00007f3b97bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.109192][ T7647] RAX: ffffffffffffffda RBX: 00007f3b997b5fa0 RCX: 00007f3b9958e929 [ 161.109204][ T7647] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000007 [ 161.109217][ T7647] RBP: 00007f3b97bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.109228][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.109240][ T7647] R13: 0000000000000000 R14: 00007f3b997b5fa0 R15: 00007ffe8ca2e368 [ 161.109259][ T7647] [ 161.384847][ T7647] syzkaller0: MTU too low for tipc bearer [ 161.390615][ T7647] tipc: Disabling bearer [ 161.397998][ T7619] loop4: detected capacity change from 0 to 1024 [ 161.410658][ T7619] EXT4-fs: Ignoring removed orlov option [ 161.435371][ T7619] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 161.517577][ T7651] pim6reg: entered allmulticast mode [ 161.533908][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 161.533923][ T29] audit: type=1326 audit(1749891538.388:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 161.545770][ T7651] pim6reg: left allmulticast mode [ 161.564403][ T29] audit: type=1326 audit(1749891538.388:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 161.592292][ T29] audit: type=1326 audit(1749891538.388:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ff549e929 code=0x7ffc0000 [ 161.671963][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.690552][ T7619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.717270][ T7660] loop1: detected capacity change from 0 to 8192 [ 161.735124][ T7665] loop2: detected capacity change from 0 to 128 [ 161.756384][ T7660] netlink: 'syz.1.1187': attribute type 10 has an invalid length. [ 161.882762][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.901596][ T7665] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 161.909833][ T7665] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 161.918542][ T29] audit: type=1326 audit(1749891538.698:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.2.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 161.942117][ T29] audit: type=1326 audit(1749891538.698:9632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.2.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 161.965615][ T29] audit: type=1326 audit(1749891538.758:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.2.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 161.989118][ T29] audit: type=1326 audit(1749891538.758:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.2.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 162.012699][ T29] audit: type=1326 audit(1749891538.758:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.2.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 162.036122][ T29] audit: type=1326 audit(1749891538.758:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.2.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 162.059613][ T29] audit: type=1326 audit(1749891538.758:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7662 comm="syz.2.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20ddc5e929 code=0x7ffc0000 [ 162.065834][ T7666] lo speed is unknown, defaulting to 1000 [ 162.130314][ T7666] lo speed is unknown, defaulting to 1000 [ 162.297990][ T7678] pim6reg: entered allmulticast mode [ 162.375031][ T7678] pim6reg: left allmulticast mode [ 162.610931][ T7689] FAULT_INJECTION: forcing a failure. [ 162.610931][ T7689] name failslab, interval 1, probability 0, space 0, times 0 [ 162.624372][ T7689] CPU: 0 UID: 0 PID: 7689 Comm: syz.2.1197 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 162.624401][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.624415][ T7689] Call Trace: [ 162.624441][ T7689] [ 162.624449][ T7689] __dump_stack+0x1d/0x30 [ 162.624474][ T7689] dump_stack_lvl+0xe8/0x140 [ 162.624497][ T7689] dump_stack+0x15/0x1b [ 162.624517][ T7689] should_fail_ex+0x265/0x280 [ 162.624599][ T7689] should_failslab+0x8c/0xb0 [ 162.624627][ T7689] __kvmalloc_node_noprof+0x123/0x4e0 [ 162.624655][ T7689] ? alloc_netdev_mqs+0xa1/0xab0 [ 162.624674][ T7689] ? vsnprintf+0x829/0x890 [ 162.624737][ T7689] alloc_netdev_mqs+0xa1/0xab0 [ 162.624761][ T7689] ? __pfx_vlan_setup+0x10/0x10 [ 162.624798][ T7689] rtnl_create_link+0x239/0x710 [ 162.624818][ T7689] rtnl_newlink_create+0x14c/0x620 [ 162.624903][ T7689] ? security_capable+0x83/0x90 [ 162.624935][ T7689] ? netlink_ns_capable+0x86/0xa0 [ 162.624970][ T7689] rtnl_newlink+0xf29/0x12d0 [ 162.625088][ T7689] ? __kfree_skb+0x109/0x150 [ 162.625105][ T7689] ? __memcg_slab_free_hook+0x135/0x230 [ 162.625216][ T7689] ? __kfree_skb+0x109/0x150 [ 162.625238][ T7689] ? __rcu_read_unlock+0x4f/0x70 [ 162.625260][ T7689] ? avc_has_perm_noaudit+0x1b1/0x200 [ 162.625313][ T7689] ? selinux_capable+0x1f9/0x270 [ 162.625358][ T7689] ? security_capable+0x83/0x90 [ 162.625417][ T7689] ? ns_capable+0x7d/0xb0 [ 162.625434][ T7689] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.625457][ T7689] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 162.625493][ T7689] netlink_rcv_skb+0x123/0x220 [ 162.625583][ T7689] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.625622][ T7689] rtnetlink_rcv+0x1c/0x30 [ 162.625650][ T7689] netlink_unicast+0x5a1/0x670 [ 162.625729][ T7689] netlink_sendmsg+0x58b/0x6b0 [ 162.625753][ T7689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.625777][ T7689] __sock_sendmsg+0x145/0x180 [ 162.625864][ T7689] ____sys_sendmsg+0x31e/0x4e0 [ 162.625894][ T7689] ___sys_sendmsg+0x17b/0x1d0 [ 162.625938][ T7689] __x64_sys_sendmsg+0xd4/0x160 [ 162.625970][ T7689] x64_sys_call+0x2999/0x2fb0 [ 162.626034][ T7689] do_syscall_64+0xd2/0x200 [ 162.626057][ T7689] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.626084][ T7689] ? clear_bhb_loop+0x40/0x90 [ 162.626151][ T7689] ? clear_bhb_loop+0x40/0x90 [ 162.626171][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.626268][ T7689] RIP: 0033:0x7f20ddc5e929 [ 162.626282][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.626299][ T7689] RSP: 002b:00007f20dc2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.626318][ T7689] RAX: ffffffffffffffda RBX: 00007f20dde85fa0 RCX: 00007f20ddc5e929 [ 162.626331][ T7689] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 162.626342][ T7689] RBP: 00007f20dc2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.626401][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.626416][ T7689] R13: 0000000000000000 R14: 00007f20dde85fa0 R15: 00007ffc88a2fe78 [ 162.626440][ T7689] [ 162.976413][ T7692] loop3: detected capacity change from 0 to 512 [ 162.995121][ T7692] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.009260][ T7695] tipc: Started in network mode [ 163.014455][ T7695] tipc: Node identity 728eab91ef3b, cluster identity 4711 [ 163.021683][ T7695] tipc: Enabled bearer , priority 0 [ 163.033087][ T7695] syzkaller0: MTU too low for tipc bearer [ 163.038961][ T7695] tipc: Disabling bearer [ 163.046412][ T7692] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1199: Failed to acquire dquot type 1 [ 163.062360][ T7692] EXT4-fs (loop3): 1 truncate cleaned up [ 163.070914][ T7692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.098424][ T7696] wireguard0: entered promiscuous mode [ 163.139936][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.168295][ T7699] vlan3: entered allmulticast mode [ 163.173545][ T7699] bond0: entered allmulticast mode [ 163.178730][ T7699] bond_slave_0: entered allmulticast mode [ 163.184504][ T7699] bond_slave_1: entered allmulticast mode [ 163.202059][ T7699] bridge0: port 3(vlan3) entered blocking state [ 163.208462][ T7699] bridge0: port 3(vlan3) entered disabled state [ 163.254005][ T7699] vlan3: entered promiscuous mode [ 163.259120][ T7699] bond0: entered promiscuous mode [ 163.264224][ T7699] bond_slave_0: entered promiscuous mode [ 163.270070][ T7699] bond_slave_1: entered promiscuous mode [ 163.294047][ T7699] bridge0: port 3(vlan3) entered blocking state [ 163.300574][ T7699] bridge0: port 3(vlan3) entered forwarding state [ 163.328525][ T7708] loop1: detected capacity change from 0 to 128 [ 163.369780][ T7710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7710 comm=syz.1.1206 [ 163.382394][ T7710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7710 comm=syz.1.1206 [ 163.442752][ T7717] loop1: detected capacity change from 0 to 128 [ 163.517415][ T7721] loop3: detected capacity change from 0 to 512 [ 163.528981][ T7721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.547770][ T7723] pimreg: entered allmulticast mode [ 163.556047][ T7723] pimreg: left allmulticast mode [ 163.606438][ T7729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.674318][ T7721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.753934][ T7721] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.159243][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.172958][ T7757] loop4: detected capacity change from 0 to 128 [ 164.242777][ T7761] loop3: detected capacity change from 0 to 164 [ 164.250789][ T7761] isofs_fill_super: root inode is not a directory. Corrupted media? [ 164.328464][ T7768] lo speed is unknown, defaulting to 1000 [ 164.335246][ T7768] lo speed is unknown, defaulting to 1000 [ 164.379503][ T3305] ================================================================== [ 164.387643][ T3305] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 164.395149][ T3305] [ 164.397479][ T3305] read-write to 0xffff888106bd86d8 of 8 bytes by task 7771 on cpu 1: [ 164.405555][ T3305] inode_add_bytes+0x47/0xe0 [ 164.410165][ T3305] __dquot_alloc_space+0x180/0x8a0 [ 164.415292][ T3305] shmem_inode_acct_blocks+0x129/0x240 [ 164.420776][ T3305] shmem_get_folio_gfp+0x5a7/0xd60 [ 164.425946][ T3305] shmem_write_begin+0xa8/0x190 [ 164.430834][ T3305] generic_perform_write+0x181/0x490 [ 164.436133][ T3305] shmem_file_write_iter+0xc5/0xf0 [ 164.441346][ T3305] __kernel_write_iter+0x253/0x4c0 [ 164.446472][ T3305] dump_user_range+0x407/0x8c0 [ 164.451248][ T3305] elf_core_dump+0x1dc2/0x1f80 [ 164.456033][ T3305] do_coredump+0x1dfd/0x27b0 [ 164.460646][ T3305] get_signal+0xd85/0xf70 [ 164.465001][ T3305] arch_do_signal_or_restart+0x96/0x480 [ 164.470582][ T3305] irqentry_exit_to_user_mode+0x5e/0xa0 [ 164.476164][ T3305] irqentry_exit+0x12/0x50 [ 164.480606][ T3305] asm_exc_page_fault+0x26/0x30 [ 164.485474][ T3305] [ 164.487804][ T3305] read to 0xffff888106bd86d8 of 8 bytes by task 3305 on cpu 0: [ 164.495355][ T3305] generic_fillattr+0x27d/0x340 [ 164.500220][ T3305] shmem_getattr+0x181/0x200 [ 164.504824][ T3305] vfs_getattr_nosec+0x143/0x1e0 [ 164.509780][ T3305] vfs_statx+0x113/0x390 [ 164.514039][ T3305] vfs_fstatat+0x115/0x170 [ 164.518472][ T3305] __se_sys_newfstatat+0x55/0x260 [ 164.523524][ T3305] __x64_sys_newfstatat+0x55/0x70 [ 164.528656][ T3305] x64_sys_call+0x2c22/0x2fb0 [ 164.533344][ T3305] do_syscall_64+0xd2/0x200 [ 164.537858][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.543766][ T3305] [ 164.546096][ T3305] value changed: 0x00000000000003a8 -> 0x00000000000003b0 [ 164.553206][ T3305] [ 164.555533][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 164.561696][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 164.574295][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.584359][ T3305] ==================================================================