last executing test programs: 15.91245615s ago: executing program 4 (id=7229): arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x12) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000004c0)=[{0x5, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/135, 0x87}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/182, 0xb6}], &(0x7f0000000480)=[0xb, 0x2]}], 0x1) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000500)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000540)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sync_file_range(r2, 0x1, 0x8, 0x1) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000005c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000600)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000640)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0x2, @private1, 0xb3}}, 0x0, 0x0, 0x13, 0x0, "ec5ad9a9cec308faf9a846af3c7fa58f80eee6e9c4e86fad9c687145e2260b38380768b98835ee47a864d3fb34be3335b4187cef31a29c604b74b3ee2eb69df307b6ad87fead9620039fc3f273934250"}, 0xd8) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000780)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x18000, 0x101}, 0x18) move_mount(r4, &(0x7f0000000840)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0), 0x800, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000900)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000940)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000980)) syz_open_pts(r0, 0x2e0040) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000009c0)) poll(&(0x7f0000000a00)=[{r2, 0x1100}], 0x1, 0x1ff) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r5) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000a80)={{0xa, 0x4e22, 0xce34, @local, 0x9}, {0xa, 0x4e21, 0x0, @private0, 0xd8}, 0x0, {[0x8001, 0x2, 0x5, 0x7ff, 0x1, 0x400, 0x1, 0x4]}}, 0x5c) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xfc, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x194}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf37e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000455) 15.91141532s ago: executing program 4 (id=7230): r0 = socket$inet(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x20, r3, 0x509, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa0502) syz_usb_disconnect(r5) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000800)={[{@nojournal_checksum}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) shutdown(r4, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)={0x3, 'erspan0\x00', {0xffffff81}, 0x71}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={r8}, &(0x7f00000002c0)=0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x230, 0x0, 0x2d0, 0x138, 0x2d0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xf4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@multicast2, @loopback, 0xff, 0x0, 'veth1_vlan\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x1, 0xc1513f04b421a003}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x0, 0x5c6cad92e6a38bac], 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x56, 0x9, 0xb, 0x3, 0x7ff1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=@newqdisc={0x3a0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x140, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_PARMS={0x14, 0x1, {0x200, 0xf, 0x0, 0x11, 0x1d, 0x9, 0x5}}]}}, @TCA_STAB={0x234, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x0, 0x7, 0x2, 0xe, 0x2, 0x4}}, {0xc, 0x2, [0x7ff, 0x56ac, 0x0, 0xfcad]}}, {{0x1c, 0x1, {0xfe, 0x80, 0xfff7, 0x10, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0x9, 0xff80, 0x6, 0x5, 0x3, 0x0]}}, {{0x1c, 0x1, {0xbb, 0xda, 0x27b, 0x10005, 0x1, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x3, 0x9, 0xc2, 0x8454, 0x1, 0xea, 0x1, 0x9}}, {0x16, 0x2, [0xf8d8, 0xb48, 0x4, 0x6, 0xf000, 0x7, 0x7, 0x1ff, 0xfffc]}}, {{0x1c, 0x1, {0x0, 0x9, 0x3, 0x7, 0x2, 0xfffffffb, 0x1, 0x2}}, {0x8, 0x2, [0x800, 0x1ff]}}, {{0x1c, 0x1, {0x7, 0xa9, 0x8, 0xdd9, 0x0, 0x3, 0x5, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x5, 0xa, 0xf2ed, 0x8, 0x0, 0x4, 0xa5000000, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xf9, 0x65, 0x96c3, 0x2, 0x1, 0x353, 0x8001, 0x5}}, {0xe, 0x2, [0x2, 0x76e, 0xff, 0xc, 0x1ff]}}, {{0x1c, 0x1, {0x80, 0x3, 0x5, 0xff, 0x2, 0x5, 0x2faaa85e, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1, 0x7, 0x8, 0x5, 0x1, 0x5, 0x6, 0x7}}, {0x12, 0x2, [0x2, 0x3, 0xa, 0x5, 0xff, 0x5c68, 0x7]}}, {{0x1c, 0x1, {0x90, 0x6, 0x6, 0xdc, 0x2, 0xc, 0x8, 0x2}}, {0x8, 0x2, [0x200, 0x81]}}, {{0x1c, 0x1, {0x31, 0x8, 0x4, 0x0, 0x0, 0x3, 0xfe0, 0x4}}, {0xc, 0x2, [0x7c, 0x4, 0x7, 0x9]}}, {{0x1c, 0x1, {0x2, 0x8, 0x1, 0x8, 0x1, 0xc, 0x1, 0x4}}, {0xc, 0x2, [0x8001, 0x2, 0xffff, 0x9]}}, {{0x1c, 0x1, {0xfe, 0xc2, 0xf, 0x9, 0x0, 0x1fc, 0x6, 0x2}}, {0x8, 0x2, [0x8, 0x38a]}}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 15.092224073s ago: executing program 4 (id=7242): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 14.404400773s ago: executing program 4 (id=7251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10) getdents(r6, 0x0, 0x58) getgroups(0x3, &(0x7f0000000280)=[0xee01, 0x0, 0xffffffffffffffff]) r8 = syz_clone(0x20022180, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(r8, &(0x7f0000000040)='stat\x00') getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000a40)=0x0) r11 = getpgid(0xffffffffffffffff) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@delsa={0x34, 0x11, 0x1, 0x70bd2d, 0x7, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d3, 0x2, 0x33}, [@mark={0xc, 0x15, {0x350759, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404888d}, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r15 = socket$inet6(0xa, 0x2, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01002bbd7000fcdbdf250f00000008000300", @ANYRES32=r18, @ANYBLOB="ace549928fee84611f273ab179a797587606000000000000000000f105a0f959844bede71a3d4088ca9a97001de305d9e61316bb4fa861ce924c0f074015bb6bed3748286b60fb5970dc2291231a0cb03a4e8869ff63428518fcc71b49565ab84e028f6b6ffb"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, r17, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) setresgid(0x0, r14, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000ec0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f00)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001000)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$unix(r4, &(0x7f0000001100)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000740)="457b720e5a280ca74274e4be3a1d3f3a757f532285682bc8d56fb5280383421f4364c61cdfaa35d7b08fbad76401c284eab8d16a647f30ddacf93a2614031ba2ffb616da2faea8a70abd54cc93ab698706a40fe5ed52af26b1ad0c672bde87bdaff90050977504d67a6535540c4789ac80fe9f26b7a2961bf1e6e8b2456f8ab0c073ef1e468072bc841d493037d4605f814fab4c0a3d048987ccc41365bf4989e44e1c275e70fde709b27a3083dd50f00bcf9106a2945606737a1ef792d7daae9000a80b6d853775ad7e4d7c62a588976d163c52e6b537efe2ab5ee3c3ccb3", 0xdf}, {&(0x7f0000000180)="90ef38caf894365ae06a0b005a21df86ee6ee9db9adc546e32212a0f1b2ffd39533b7d877b83588cf4b6b091da772d2f865d2056131fc2f0773c9199c2f4f56bb04b753f4a54962d3df575d7159ca2ee4708712fa019450f9c5eae32fdc414932500a41c6119a676cf61e4c34f1fae025c6ff6", 0x73}, {&(0x7f0000000840)="731c4532603495d4d77c6faf1217ff26437678ce88e90f2a727c9424090ee3968879757517cb47a0c788d0d9722fb7839dac945f47e95c3d62fd3260573a4af928b4a885865fd810e96a9d602965db82adf503661e405af011d54e6b03206dfb7705958efcab102ce593dc820e72dcd18e452ad4d48a5c11e3c97ec3230ef22f1e662c3c46d903889327e359f9157bcae557da1ef4c2fda11849c9de71abc04cfc540ef33f0bf3abae5e4601be8266f7e8a6f4e4462b6db78e5fac20319fb51a239338b8ab10b7b2ffd565259cbe94fc0eb832e42f1b8a0d88bcfbcc05e5", 0xde}, {&(0x7f0000000940)="d6351c3db8f9380587e5efcaa904d6faa6e4487fda75b3a208fb3cf0ae83bb6895f3c7aff5a2949b2110b79703a64b5258da7f50a06f0a542a9ef5183de0d595f89e7b52ca09538e399974ce3ee594254351da76d950325898f23559a20d647dd7d2a863638c5cf378d7610f00e255b77c803b30efe7deb5f9508ab3d98b8d2fb95c2e44a5fe09e91225e6e007f7e860ac5aa1d58657902b85b99424a48dcdb876f86f445e3a1d84d2e7c44396ca774c68966411a73884d73e74ed96fd9f0397aa6b3fdd3e4be2ef3470284e", 0xcc}, {&(0x7f0000000ac0)="fe778492d18ffcff7b4065e9961589da71079d86bb21dafdb8366b1aa668146298710f9b5e34a825c83b274bdbd3ad77a86c9bf6b0e21a4c8118ab3396fd79dc3dac41411d98d9d8bff4f5cfca648558452dc70f589a0972ecf64379c46c32dc485d4ba459896cd0c4227e310daa22683cca956b19129465760475133463927602d2ed14526767ac42d5410ba46f582ba3c2a1ff0c749e64c57d999752bbbcb3da4c38b76cb2833b5e50e7ce6019df5672fcafe16fc6c4be5b24a962a2b2ffce03a888e51754d070867d", 0xca}, {&(0x7f0000000c00)="c49d8062d622716d1d261f19fc5f2bc3dc272a7a4cd63f58a09b9c1bb6333fff8e8ff32bf5ed1cc4eab822ef749f9e52727f4cf89a108980372e5db73d9f7449bc6a09cf9405813de1bce19258c2735b72e7181f9bdc71101832bec736fa8f28999833c8c5ad567561bc3b4cac952161569e93cf828b90b8ae8433954af61dde574976304ca0814d1143883606f6b452315c6efe39110d3bc65298d2991774187987556f8115f7b5113c6ca629471befa2a731206faec487a3201c2171d17bf9da465e4c38ef2bcd4b9f6d3328c50cb4a84553d1870b21da8227416cc1ba8a46d6772549ce14e8ad0e461f5d6f087ed1066432ae", 0xf4}, {&(0x7f0000000d00)="81ded018e9fa1ac2a0828794c6a224dab020a85eaa20f1046dda58c3c3b3b0994bbd507fb70c32b9ced041a5024df439a3e5fc8f15f218423fe1e3466fac301e0cabc86d1c3fff5277deffaf0655c8552f7e41176fdc24807b40a4cbb62935db079572e7674cece718e9409f8f170b20cf4b36b791aefb3e25f310e59b5f29befeaee6947ac1992b1e005a363e3ac268cf049073680673458c712148edb4df71114910bec99cf08ccadc0bcd759cc0cd2f16c40acf3db3bddd2cdc1fc67f1d742b5e3605a8ce7423ef9d1a509ebc655fa7a2efa135cca5677873b6840b8e7a0dc3a6235f6129f890713a008a80999763bce4f41438b03a7ff679b3bf829473", 0xff}, {&(0x7f0000000240)="df0a41dba01629f46fa1fc44b895121543471d5e0e4e2532f8", 0x19}, {&(0x7f0000000580)="b6764217cceb34eb2b9573c605fb8665b3bd0de92116fd51a484748b841bf13b0461ec26205be0fcc1785b1f3855431f8e9fe4d1692492c5a1a20576ac03578f3ae0aa00efc895a50b184419c007a1d89ba3f82eb48ce4c778b0c44014baeb655764c16be8516ec4edfaccb4e63cda897ceda8b6d1d509195fec9e9d4d52d14fc443a0fe6148b1077abc02f67af0ddf3361d53cd2ba3178b104bfeb1f42b69520dd1e561d48b41caccdc577660a5e574d692d5e8", 0xb4}], 0x9, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}], 0x80, 0x4881}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 14.328174674s ago: executing program 4 (id=7252): syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0xed67, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000240)=@nl=@proc}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 13.94110696s ago: executing program 4 (id=7259): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 13.94086668s ago: executing program 32 (id=7259): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 2.095897988s ago: executing program 1 (id=7537): r0 = socket$inet(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x20, r3, 0x509, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa0502) syz_usb_disconnect(r5) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000800)={[{@nojournal_checksum}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) shutdown(r4, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)={0x3, 'erspan0\x00', {0xffffff81}, 0x71}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400), &(0x7f00000002c0)=0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x230, 0x0, 0x2d0, 0x138, 0x2d0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xf4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@multicast2, @loopback, 0xff, 0x0, 'veth1_vlan\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x1, 0xc1513f04b421a003}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x0, 0x5c6cad92e6a38bac], 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x56, 0x9, 0xb, 0x3, 0x7ff1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x2c}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=@newqdisc={0x3a0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x140, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x8}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_PARMS={0x14, 0x1, {0x200, 0xf, 0x0, 0x11, 0x1d, 0x9, 0x5}}]}}, @TCA_STAB={0x234, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x0, 0x7, 0x2, 0xe, 0x2, 0x4}}, {0xc, 0x2, [0x7ff, 0x56ac, 0x0, 0xfcad]}}, {{0x1c, 0x1, {0xfe, 0x80, 0xfff7, 0x10, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0x9, 0xff80, 0x6, 0x5, 0x3, 0x0]}}, {{0x1c, 0x1, {0xbb, 0xda, 0x27b, 0x10005, 0x1, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x3, 0x9, 0xc2, 0x8454, 0x1, 0xea, 0x1, 0x9}}, {0x16, 0x2, [0xf8d8, 0xb48, 0x4, 0x6, 0xf000, 0x7, 0x7, 0x1ff, 0xfffc]}}, {{0x1c, 0x1, {0x0, 0x9, 0x3, 0x7, 0x2, 0xfffffffb, 0x1, 0x2}}, {0x8, 0x2, [0x800, 0x1ff]}}, {{0x1c, 0x1, {0x7, 0xa9, 0x8, 0xdd9, 0x0, 0x3, 0x5, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x5, 0xa, 0xf2ed, 0x8, 0x0, 0x4, 0xa5000000, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xf9, 0x65, 0x96c3, 0x2, 0x1, 0x353, 0x8001, 0x5}}, {0xe, 0x2, [0x2, 0x76e, 0xff, 0xc, 0x1ff]}}, {{0x1c, 0x1, {0x80, 0x3, 0x5, 0xff, 0x2, 0x5, 0x2faaa85e, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1, 0x7, 0x8, 0x5, 0x1, 0x5, 0x6, 0x7}}, {0x12, 0x2, [0x2, 0x3, 0xa, 0x5, 0xff, 0x5c68, 0x7]}}, {{0x1c, 0x1, {0x90, 0x6, 0x6, 0xdc, 0x2, 0xc, 0x8, 0x2}}, {0x8, 0x2, [0x200, 0x81]}}, {{0x1c, 0x1, {0x31, 0x8, 0x4, 0x0, 0x0, 0x3, 0xfe0, 0x4}}, {0xc, 0x2, [0x7c, 0x4, 0x7, 0x9]}}, {{0x1c, 0x1, {0x2, 0x8, 0x1, 0x8, 0x1, 0xc, 0x1, 0x4}}, {0xc, 0x2, [0x8001, 0x2, 0xffff, 0x9]}}, {{0x1c, 0x1, {0xfe, 0xc2, 0xf, 0x9, 0x0, 0x1fc, 0x6, 0x2}}, {0x8, 0x2, [0x8, 0x38a]}}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1.282440551s ago: executing program 3 (id=7552): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 1.263798171s ago: executing program 3 (id=7554): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 1.208698082s ago: executing program 3 (id=7556): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) eventfd(0x101) 1.207795762s ago: executing program 0 (id=7557): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getcwd(&(0x7f0000000380)=""/131, 0x83) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="a40000001100040026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b2b9220000008000000008002e0000000000050027003300000075001a80040007000400070020000a80050008000100000014000700200100000000f3ffffffffffffff00011800028014000180080021000600000008000f00030d9b4a04000a80200002801c00018008000800f4ffffff080009000000000008000e000200000004001c000400070004000700bcb527149c9c2e6940f7e8f61afa21dfa53e6280dbbb35"], 0xa4}, 0x1, 0x0, 0x0, 0x24000811}, 0x24040000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x3, {0x1, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x2, 0x448, {0x2, 0x8, 0x679c, 0x401}, 0x0, 0x0}}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f68"], 0xfc}}, 0x20000004) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) dup3(0xffffffffffffffff, r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000980)) 1.177762912s ago: executing program 3 (id=7559): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.099867373s ago: executing program 1 (id=7560): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 982.534815ms ago: executing program 1 (id=7561): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) close(0x3) 920.123596ms ago: executing program 1 (id=7562): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) 885.809047ms ago: executing program 1 (id=7563): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getcwd(&(0x7f0000000380)=""/131, 0x83) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="a40000001100040026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b2b9220000008000000008002e0000000000050027003300000075001a80040007000400070020000a80050008000100000014000700200100000000f3ffffffffffffff00011800028014000180080021000600000008000f00030d9b4a04000a80200002801c00018008000800f4ffffff080009000000000008000e000200000004001c000400070004000700bcb527149c9c2e6940f7e8f61afa21dfa53e6280dbbb35"], 0xa4}, 0x1, 0x0, 0x0, 0x24000811}, 0x24040000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r6, 0x0, 0xff2e) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x3, {0x1, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x2, 0x448, {0x2, 0x8, 0x679c, 0x401}, 0x0, 0x0}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f68"], 0xfc}}, 0x20000004) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) dup3(0xffffffffffffffff, r6, 0x0) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x0) recvmmsg(r2, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/138, 0x8a}, 0xa}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/4, 0x4}, {0x0}], 0x5}, 0x5330601c}, {{&(0x7f0000000800)=@isdn, 0x80, 0x0}, 0x709a}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x10022, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000980)) 620.352901ms ago: executing program 3 (id=7568): socket$netlink(0x10, 0x3, 0xf) socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0], 0x20) 552.893842ms ago: executing program 3 (id=7570): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x2000000000000019, &(0x7f0000000440)=ANY=[], 0x0, 0x2c9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2000008, 0x11, r1, 0x10952000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x33, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000700)="7225175963c41d5e5f640c5e39013d51e2df937b4005198cb908971834bad34b64d6f0e9c3dbedba61123b28038efd7e7d61c6ff707393ac6d0708b231504f489930eecff790b521fc1975884f9143d397111713aa7390d8596c7e73429ccad40ec2ddca2d49f722193d61dc32e25eab6f5d0cf3f779a37c0d96a7ca6a1bca353dfc82763bd3ed25514ac3", 0xfffffffffffffe24}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES8=r5], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r9, &(0x7f0000000040)='\x00', 0x1, 0x1300) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) write$UHID_DESTROY(r6, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0xfffffffffffffce6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 415.034073ms ago: executing program 5 (id=7577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 364.480494ms ago: executing program 5 (id=7578): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1, 0x0, 0x4}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0), 0x802, 0x0) 363.426104ms ago: executing program 0 (id=7579): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 350.014805ms ago: executing program 5 (id=7580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 326.168925ms ago: executing program 5 (id=7581): memfd_create(0x0, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) clock_gettime(0x0, &(0x7f0000000040)) r2 = msgget(0x2, 0x60c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_STAT(r2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xa6, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 322.012195ms ago: executing program 0 (id=7582): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 296.242585ms ago: executing program 0 (id=7583): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) eventfd(0x101) 277.296826ms ago: executing program 2 (id=7584): memfd_create(0x0, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) clock_gettime(0x0, &(0x7f0000000040)) r2 = msgget(0x2, 0x60c) msgctl$IPC_STAT(r2, 0x2, 0x0) 275.774466ms ago: executing program 0 (id=7585): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, 0x0}, 0x40000) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x2}, {0x10000001, 0x0, 0x0, 0x4}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, 0x0, 0x80d1) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891d, &(0x7f0000000000)={'sit0\x00', @remote}) r6 = perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000001400000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 237.878877ms ago: executing program 2 (id=7586): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 215.378187ms ago: executing program 0 (id=7587): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 207.414597ms ago: executing program 2 (id=7588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 158.477458ms ago: executing program 2 (id=7589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 157.957587ms ago: executing program 2 (id=7590): socket$netlink(0x10, 0x3, 0xf) socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYBLOB="ed"], 0x20) 133.019288ms ago: executing program 2 (id=7591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa681, 0x80) unlink(&(0x7f0000000180)='./file1\x00') unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xf}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 130.363258ms ago: executing program 5 (id=7592): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) eventfd(0x101) 106.211839ms ago: executing program 5 (id=7593): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000008000008500000075000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) clock_adjtime(0x0, &(0x7f0000000b00)={0xfd0, 0x0, 0x4100, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xae, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xfe, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast2, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef01"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 0s ago: executing program 1 (id=7594): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x4}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000880)="2e06deabb6ffcea81abcf59de8ddc11f5c438cceeca1ffdab4b57075883ac9986e8f9e778c5ba08bf81552f7c70eb8281bdd7bcff930a6855cb11c7838b986b71bab939b62b5e9cb46410754f691d98cba232839e5d3a05d36dfbe4effc08fedd3ecf6954edabfd3d4428f2366172f8ccd2719b09e0ec018509fb7f1c4a1f987d6ee6a", 0x83}, {&(0x7f0000000540)="2bfcc2ca9adf850d211306a3e37fcbac2c0d3e9e076c", 0x16}], 0x2, &(0x7f0000000940)="1cebd111cfc7556586ef17b17e67a00198a125e6639e80de21e9230b13a7f053b87fc5cb73dfbd61893f0bc741cd4d56544a974adadfedf0337a9f21ed3161d42f14cc24b233cac01a1db3c5", 0x4c, 0x1}, 0x20000040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x5, 0x8, 0x0, 0x6, 0x2118}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, &(0x7f0000000080)) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x11, 0x3, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000680)=""/236, 0xec}], 0x2, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x140) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) kernel console output (not intermixed with test programs): z.1.6830: corrupted in-inode xattr: invalid ea_ino [ 1064.601929][T24581] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.6830: couldn't read orphan inode 15 (err -117) [ 1064.615401][T24581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.708642][T24581] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.6830: invalid fast symlink length 39 [ 1064.777844][T24538] bio_check_eod: 284 callbacks suppressed [ 1064.777888][T24538] syz.2.6812: attempt to access beyond end of device [ 1064.777888][T24538] loop2: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1064.855380][T24538] syz.2.6812: attempt to access beyond end of device [ 1064.855380][T24538] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1064.946302][T24594] loop0: detected capacity change from 0 to 512 [ 1064.970877][T24594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1064.994135][T24538] syz.2.6812: attempt to access beyond end of device [ 1064.994135][T24538] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1065.011348][T24594] EXT4-fs (loop0): 1 truncate cleaned up [ 1065.025837][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.035628][T24594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.072505][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.092497][T24538] syz.2.6812: attempt to access beyond end of device [ 1065.092497][T24538] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1065.106446][T24538] syz.2.6812: attempt to access beyond end of device [ 1065.106446][T24538] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1065.120337][T24538] syz.2.6812: attempt to access beyond end of device [ 1065.120337][T24538] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1065.134134][T24538] syz.2.6812: attempt to access beyond end of device [ 1065.134134][T24538] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1065.148074][T24538] syz.2.6812: attempt to access beyond end of device [ 1065.148074][T24538] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1065.161749][T24538] syz.2.6812: attempt to access beyond end of device [ 1065.161749][T24538] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1065.212396][T24538] syz.2.6812: attempt to access beyond end of device [ 1065.212396][T24538] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1065.228585][T22382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.538075][T24619] 9pnet_fd: Insufficient options for proto=fd [ 1065.614668][T24622] FAULT_INJECTION: forcing a failure. [ 1065.614668][T24622] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.627437][T24622] CPU: 0 UID: 0 PID: 24622 Comm: syz.4.6845 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1065.627473][T24622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1065.627541][T24622] Call Trace: [ 1065.627549][T24622] [ 1065.627555][T24622] __dump_stack+0x1d/0x30 [ 1065.627577][T24622] dump_stack_lvl+0xe8/0x140 [ 1065.627595][T24622] dump_stack+0x15/0x1b [ 1065.627611][T24622] should_fail_ex+0x265/0x280 [ 1065.627648][T24622] should_failslab+0x8c/0xb0 [ 1065.627736][T24622] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1065.627786][T24622] ? dup_task_struct+0x70/0x6a0 [ 1065.627820][T24622] dup_task_struct+0x70/0x6a0 [ 1065.627851][T24622] ? path_openat+0x1bf8/0x2170 [ 1065.627935][T24622] copy_process+0x399/0x1fe0 [ 1065.627971][T24622] ? copy_clone_args_from_user+0x3ce/0x490 [ 1065.628012][T24622] kernel_clone+0x16c/0x5b0 [ 1065.628105][T24622] __se_sys_clone3+0x1c2/0x200 [ 1065.628223][T24622] __x64_sys_clone3+0x31/0x40 [ 1065.628249][T24622] x64_sys_call+0x10c9/0x2fb0 [ 1065.628272][T24622] do_syscall_64+0xd2/0x200 [ 1065.628294][T24622] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1065.628399][T24622] ? clear_bhb_loop+0x40/0x90 [ 1065.628488][T24622] ? clear_bhb_loop+0x40/0x90 [ 1065.628509][T24622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.628580][T24622] RIP: 0033:0x7fe87bb7e929 [ 1065.628595][T24622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.628613][T24622] RSP: 002b:00007fe87a1e6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1065.628631][T24622] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe87bb7e929 [ 1065.628724][T24622] RDX: 00007fe87a1e6f20 RSI: 0000000000000058 RDI: 00007fe87a1e6f20 [ 1065.628741][T24622] RBP: 00007fe87a1e7090 R08: 0000000000000000 R09: 0000000000000058 [ 1065.628757][T24622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.628773][T24622] R13: 0000000000000001 R14: 00007fe87bda5fa0 R15: 00007ffe47d6dcd8 [ 1065.628820][T24622] [ 1066.105240][T24634] syzkaller1: entered promiscuous mode [ 1066.110848][T24634] syzkaller1: entered allmulticast mode [ 1066.327357][T24637] __nla_validate_parse: 6 callbacks suppressed [ 1066.327376][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6850'. [ 1066.359427][T24637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.367366][T24637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.375111][T24637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.382638][T24637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.664357][T24651] loop3: detected capacity change from 0 to 512 [ 1066.881383][T24658] FAULT_INJECTION: forcing a failure. [ 1066.881383][T24658] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.894225][T24658] CPU: 1 UID: 0 PID: 24658 Comm: syz.4.6858 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1066.894252][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1066.894265][T24658] Call Trace: [ 1066.894270][T24658] [ 1066.894338][T24658] __dump_stack+0x1d/0x30 [ 1066.894436][T24658] dump_stack_lvl+0xe8/0x140 [ 1066.894467][T24658] dump_stack+0x15/0x1b [ 1066.894488][T24658] should_fail_ex+0x265/0x280 [ 1066.894564][T24658] should_failslab+0x8c/0xb0 [ 1066.894596][T24658] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1066.894646][T24658] ? dup_task_struct+0x70/0x6a0 [ 1066.894675][T24658] dup_task_struct+0x70/0x6a0 [ 1066.894706][T24658] ? path_openat+0x1bf8/0x2170 [ 1066.894773][T24658] copy_process+0x399/0x1fe0 [ 1066.894803][T24658] ? copy_clone_args_from_user+0x3ce/0x490 [ 1066.894834][T24658] kernel_clone+0x16c/0x5b0 [ 1066.894865][T24658] __se_sys_clone3+0x1c2/0x200 [ 1066.894923][T24658] __x64_sys_clone3+0x31/0x40 [ 1066.894948][T24658] x64_sys_call+0x10c9/0x2fb0 [ 1066.894975][T24658] do_syscall_64+0xd2/0x200 [ 1066.894997][T24658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1066.895041][T24658] ? clear_bhb_loop+0x40/0x90 [ 1066.895067][T24658] ? clear_bhb_loop+0x40/0x90 [ 1066.895187][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.895208][T24658] RIP: 0033:0x7fe87bb7e929 [ 1066.895227][T24658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.895249][T24658] RSP: 002b:00007fe87a1e6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1066.895310][T24658] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe87bb7e929 [ 1066.895321][T24658] RDX: 00007fe87a1e6f20 RSI: 0000000000000058 RDI: 00007fe87a1e6f20 [ 1066.895333][T24658] RBP: 00007fe87a1e7090 R08: 0000000000000000 R09: 0000000000000058 [ 1066.895344][T24658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.895356][T24658] R13: 0000000000000001 R14: 00007fe87bda5fa0 R15: 00007ffe47d6dcd8 [ 1066.895380][T24658] [ 1067.358077][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6859'. [ 1067.485370][T24651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1067.497531][T24651] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1067.505597][T24651] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6853: bg 0: block 248: padding at end of block bitmap is not set [ 1067.531235][T24651] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6853: Failed to acquire dquot type 1 [ 1067.544091][T24651] EXT4-fs (loop3): 1 truncate cleaned up [ 1067.563592][T24651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1067.628444][T24671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6860'. [ 1067.653060][T24669] loop4: detected capacity change from 0 to 2048 [ 1067.714941][T24669] EXT4-fs: Ignoring removed bh option [ 1067.862828][T24669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.941191][T24683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6865'. [ 1068.005588][T24683] loop1: detected capacity change from 0 to 512 [ 1068.023893][T24683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1068.057124][T24683] EXT4-fs (loop1): 1 truncate cleaned up [ 1068.080341][T24683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.099896][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.167547][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.236389][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.397499][T24697] loop3: detected capacity change from 0 to 2048 [ 1068.432800][T24697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.457422][T24697] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.6868: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1068.475523][T24705] netlink: 'syz.2.6873': attribute type 21 has an invalid length. [ 1068.486268][T24697] EXT4-fs (loop3): Remounting filesystem read-only [ 1068.505325][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.696944][T24723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6879'. [ 1068.750675][T24733] loop3: detected capacity change from 0 to 512 [ 1068.796761][T24733] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.6883: corrupted in-inode xattr: invalid ea_ino [ 1068.858435][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6884'. [ 1068.868872][T24733] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.6883: couldn't read orphan inode 15 (err -117) [ 1068.881797][T24733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.923171][T24733] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.6883: invalid fast symlink length 39 [ 1068.957269][T24741] loop0: detected capacity change from 0 to 512 [ 1068.981892][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.001915][T24741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1069.015628][T24741] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.157479][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 1069.157498][ T29] audit: type=1326 audit(1749929935.558:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.187462][ T29] audit: type=1326 audit(1749929935.558:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.210998][ T29] audit: type=1326 audit(1749929935.558:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.234599][ T29] audit: type=1326 audit(1749929935.568:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.258234][ T29] audit: type=1326 audit(1749929935.568:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.281770][ T29] audit: type=1326 audit(1749929935.568:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.305331][ T29] audit: type=1326 audit(1749929935.568:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.328869][ T29] audit: type=1326 audit(1749929935.568:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.352411][ T29] audit: type=1326 audit(1749929935.568:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.375957][ T29] audit: type=1326 audit(1749929935.568:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24752 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1069.520271][T24765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6893'. [ 1069.838969][T24793] loop3: detected capacity change from 0 to 512 [ 1069.859325][T24793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1069.913330][T24793] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1070.087600][T24793] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6902: bg 0: block 248: padding at end of block bitmap is not set [ 1070.150152][T24793] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6902: Failed to acquire dquot type 1 [ 1070.239187][T24793] EXT4-fs (loop3): 1 truncate cleaned up [ 1070.288830][T24793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1070.391683][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1070.508672][T24815] loop1: detected capacity change from 0 to 512 [ 1070.563131][T24741] syz.0.6886 (24741) used greatest stack depth: 5824 bytes left [ 1070.608585][T22382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.669053][T24815] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6913: Failed to acquire dquot type 1 [ 1070.681867][T24820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6914'. [ 1070.703169][T24815] EXT4-fs (loop1): 1 truncate cleaned up [ 1070.719821][T24815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.747557][T24820] loop4: detected capacity change from 0 to 512 [ 1070.774800][T24815] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.804979][T24815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.820952][T24815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.875693][T24820] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1070.914618][T24820] EXT4-fs (loop4): 1 truncate cleaned up [ 1070.925050][T24820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.945631][T24829] pim6reg1: entered promiscuous mode [ 1070.951117][T24829] pim6reg1: entered allmulticast mode [ 1071.004374][T24829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6918'. [ 1071.037947][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.186531][T24840] loop2: detected capacity change from 0 to 512 [ 1071.200938][T24840] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1071.226263][T24840] EXT4-fs (loop2): 1 truncate cleaned up [ 1071.264936][T24840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.323412][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.395098][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.439671][T24855] netlink: 'syz.0.6930': attribute type 27 has an invalid length. [ 1071.448551][T24857] __nla_validate_parse: 1 callbacks suppressed [ 1071.448567][T24857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6931'. [ 1071.471356][T24855] sit0: left promiscuous mode [ 1071.476171][T24855] sit0: left allmulticast mode [ 1071.498763][T24855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.506017][T24855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.582874][T24855] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.591817][T24855] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.600848][T24855] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.609787][T24855] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.915737][T24890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6938'. [ 1071.933992][T24891] loop0: detected capacity change from 0 to 2048 [ 1071.949702][T24890] loop4: detected capacity change from 0 to 512 [ 1071.959148][T24890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1071.962890][T24891] EXT4-fs: Ignoring removed bh option [ 1071.998487][T24890] EXT4-fs (loop4): 1 truncate cleaned up [ 1072.020128][T24891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.040186][T24890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.121065][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.158077][T22382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.400443][T24906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6944'. [ 1072.765162][T24917] loop1: detected capacity change from 0 to 512 [ 1072.798993][T24917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.816101][T24914] loop2: detected capacity change from 0 to 128 [ 1072.900004][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.928039][T24917] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.036020][T24917] serio: Serial port ptm0 [ 1073.131487][T24923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6950'. [ 1073.203319][T24914] bio_check_eod: 36 callbacks suppressed [ 1073.203334][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.203334][T24914] loop2: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1073.366833][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.366833][T24914] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1073.470405][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.470405][T24914] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1073.516845][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.537158][T24934] loop4: detected capacity change from 0 to 512 [ 1073.560309][T24934] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.6954: corrupted in-inode xattr: invalid ea_ino [ 1073.601586][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.601586][T24914] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1073.616662][T24939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.625137][T24934] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6954: couldn't read orphan inode 15 (err -117) [ 1073.674915][T24939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.682964][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.682964][T24914] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1073.707397][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.707397][T24914] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1073.725238][T24934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.770401][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.770401][T24914] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1073.786107][T24934] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.6954: invalid fast symlink length 39 [ 1073.799591][T24939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6955'. [ 1073.808657][T24939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6955'. [ 1073.850747][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.850747][T24914] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1073.867583][T24939] syz_tun: entered promiscuous mode [ 1073.877632][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.888860][T24939] syz_tun: left promiscuous mode [ 1073.915187][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.915187][T24914] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1073.948065][T24914] syz.2.6947: attempt to access beyond end of device [ 1073.948065][T24914] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1074.201131][T24945] loop2: detected capacity change from 0 to 2048 [ 1074.210541][T24945] EXT4-fs: Ignoring removed bh option [ 1074.226377][T24945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.313554][T24949] loop0: detected capacity change from 0 to 512 [ 1074.321629][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 1074.321698][ T29] audit: type=1326 audit(1749929945.730:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24950 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1074.351036][ T29] audit: type=1326 audit(1749929945.740:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24950 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1074.374067][ T29] audit: type=1326 audit(1749929945.740:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24950 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1074.395997][T24949] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.6960: corrupted in-inode xattr: invalid ea_ino [ 1074.397122][ T29] audit: type=1326 audit(1749929945.740:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24950 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1074.416819][T24949] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6960: couldn't read orphan inode 15 (err -117) [ 1074.433374][ T29] audit: type=1326 audit(1749929945.740:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24950 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1074.446805][T24949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.468519][ T29] audit: type=1326 audit(1749929945.740:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24950 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1074.499807][T24949] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.6960: invalid fast symlink length 39 [ 1074.503575][ T29] audit: type=1326 audit(1749929945.740:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24950 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1074.617297][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.663392][T22382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.663883][T24964] loop1: detected capacity change from 0 to 512 [ 1074.682949][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6965'. [ 1074.698654][T24964] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.6967: corrupted in-inode xattr: invalid ea_ino [ 1074.733212][T24964] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.6967: couldn't read orphan inode 15 (err -117) [ 1074.738419][T24966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.752679][T24966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.763281][T24966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.770871][T24966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.797994][T24964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.828749][T24964] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.6967: invalid fast symlink length 39 [ 1074.843868][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6968'. [ 1074.904950][ T29] audit: type=1400 audit(1749929946.320:6452): avc: denied { create } for pid=24978 comm="syz.0.6970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1074.975734][T24988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6972'. [ 1074.977433][ T29] audit: type=1400 audit(1749929946.370:6453): avc: denied { mounton } for pid=24978 comm="syz.0.6970" path="/133/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1075.047305][T24991] loop2: detected capacity change from 0 to 512 [ 1075.054922][T24991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1075.144848][T24991] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1075.151832][T24991] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6971: bg 0: block 248: padding at end of block bitmap is not set [ 1075.167048][T24991] Quota error (device loop2): write_blk: dquota write failed [ 1075.174682][T24991] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6971: Failed to acquire dquot type 1 [ 1075.187449][T24991] EXT4-fs (loop2): 1 truncate cleaned up [ 1075.634368][T25003] loop3: detected capacity change from 0 to 2048 [ 1075.671019][T25003] EXT4-fs: Ignoring removed bh option [ 1075.990687][T25017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.048024][T25019] loop3: detected capacity change from 0 to 512 [ 1076.072185][T25017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.107418][T25019] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.135795][T25017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6973'. [ 1076.159851][T25019] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.6983: corrupted xattr block 19: overlapping e_value [ 1076.195727][T25017] ip6gretap0: entered promiscuous mode [ 1076.208917][T25017] syz_tun: entered promiscuous mode [ 1076.235191][T25019] EXT4-fs (loop3): Remounting filesystem read-only [ 1076.241769][T25019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 1076.251823][T25017] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1076.280810][T25017] Cannot create hsr debugfs directory [ 1076.296639][T25019] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 1076.618315][T25027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.631457][T25027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.744206][T25027] loop3: detected capacity change from 0 to 1024 [ 1076.795998][T25027] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1076.831105][T25027] __nla_validate_parse: 1 callbacks suppressed [ 1076.831126][T25027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6985'. [ 1076.909868][T25039] loop2: detected capacity change from 0 to 512 [ 1076.940753][T25039] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.6989: corrupted in-inode xattr: invalid ea_ino [ 1077.028408][T25039] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.6989: couldn't read orphan inode 15 (err -117) [ 1077.130334][T25039] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.6989: invalid fast symlink length 39 [ 1077.282457][T25048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.321482][T25048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.344955][T25048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6992'. [ 1077.354188][T25048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6992'. [ 1077.431370][T25048] syz_tun: entered promiscuous mode [ 1077.444294][T25048] syz_tun: left promiscuous mode [ 1077.462443][T25053] loop1: detected capacity change from 0 to 512 [ 1077.490364][T25053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1077.522409][T25053] EXT4-fs (loop1): 1 truncate cleaned up [ 1077.627248][T25061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6996'. [ 1077.641639][T25063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1077.710590][T25067] loop1: detected capacity change from 0 to 2048 [ 1077.742753][T25067] EXT4-fs: Ignoring removed bh option [ 1077.867160][T25074] loop3: detected capacity change from 0 to 512 [ 1077.926496][T25074] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.963858][T25074] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.7001: corrupted xattr block 19: overlapping e_value [ 1078.015864][T25074] EXT4-fs (loop3): Remounting filesystem read-only [ 1078.022462][T25074] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 1078.074974][T25074] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 1078.155174][T25088] loop1: detected capacity change from 0 to 512 [ 1078.218789][T25088] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.234900][T25088] FAULT_INJECTION: forcing a failure. [ 1078.234900][T25088] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.247687][T25088] CPU: 1 UID: 0 PID: 25088 Comm: syz.1.7006 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1078.247715][T25088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1078.247800][T25088] Call Trace: [ 1078.247808][T25088] [ 1078.247817][T25088] __dump_stack+0x1d/0x30 [ 1078.247838][T25088] dump_stack_lvl+0xe8/0x140 [ 1078.247858][T25088] dump_stack+0x15/0x1b [ 1078.247875][T25088] should_fail_ex+0x265/0x280 [ 1078.247942][T25088] should_failslab+0x8c/0xb0 [ 1078.247972][T25088] __kmalloc_noprof+0xa5/0x3e0 [ 1078.248039][T25088] ? ext4_find_extent+0x16b/0x7a0 [ 1078.248070][T25088] ext4_find_extent+0x16b/0x7a0 [ 1078.248127][T25088] ext4_ext_map_blocks+0x11f/0x38a0 [ 1078.248237][T25088] ? htab_map_hash+0x1cc/0x1d0 [ 1078.248304][T25088] ? bcmp+0x5e/0x90 [ 1078.248328][T25088] ? delete_node+0x176/0x5e0 [ 1078.248362][T25088] ? xas_load+0x2d6/0x430 [ 1078.248396][T25088] ? try_charge_memcg+0x200/0x9e0 [ 1078.248419][T25088] ? __account_obj_stock+0x211/0x350 [ 1078.248470][T25088] ext4_map_query_blocks+0xa8/0x480 [ 1078.248494][T25088] ext4_map_blocks+0x3a1/0xd70 [ 1078.248518][T25088] ? xas_load+0x413/0x430 [ 1078.248602][T25088] ? xa_load+0xb1/0xe0 [ 1078.248630][T25088] ext4_getblk+0x114/0x510 [ 1078.248657][T25088] ext4_bread_batch+0x5c/0x320 [ 1078.248740][T25088] __ext4_find_entry+0x840/0xf40 [ 1078.248776][T25088] ? __d_lookup_rcu+0x251/0x2a0 [ 1078.248805][T25088] ? d_alloc_parallel+0xb9a/0xc40 [ 1078.248900][T25088] ext4_lookup+0xbb/0x390 [ 1078.248931][T25088] __lookup_slow+0x190/0x250 [ 1078.248958][T25088] lookup_slow+0x3c/0x60 [ 1078.248987][T25088] walk_component+0x1ec/0x220 [ 1078.249028][T25088] path_lookupat+0xfe/0x2a0 [ 1078.249058][T25088] filename_lookup+0x147/0x340 [ 1078.249103][T25088] path_listxattrat+0xd1/0x2a0 [ 1078.249145][T25088] __x64_sys_listxattr+0x4a/0x60 [ 1078.249171][T25088] x64_sys_call+0xfff/0x2fb0 [ 1078.249246][T25088] do_syscall_64+0xd2/0x200 [ 1078.249264][T25088] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1078.249297][T25088] ? clear_bhb_loop+0x40/0x90 [ 1078.249317][T25088] ? clear_bhb_loop+0x40/0x90 [ 1078.249366][T25088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.249391][T25088] RIP: 0033:0x7f276cd4e929 [ 1078.249409][T25088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.249428][T25088] RSP: 002b:00007f276b3b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 1078.249446][T25088] RAX: ffffffffffffffda RBX: 00007f276cf75fa0 RCX: 00007f276cd4e929 [ 1078.249458][T25088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1078.249473][T25088] RBP: 00007f276b3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.249514][T25088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.249526][T25088] R13: 0000000000000000 R14: 00007f276cf75fa0 R15: 00007ffe72f7f2c8 [ 1078.249584][T25088] [ 1078.255783][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7008'. [ 1078.502804][T25105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7012'. [ 1078.574530][T25102] loop2: detected capacity change from 0 to 1024 [ 1078.595644][T25102] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 1078.630529][T25102] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1078.652508][T25102] System zones: 0-1, 3-36 [ 1078.657454][T25102] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1078.666610][T25102] EXT4-fs (loop2): 1 orphan inode deleted [ 1078.675143][T25114] loop4: detected capacity change from 0 to 512 [ 1078.686500][T25114] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.7014: corrupted in-inode xattr: invalid ea_ino [ 1078.711023][T25114] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.7014: couldn't read orphan inode 15 (err -117) [ 1078.749605][T25116] loop3: detected capacity change from 0 to 512 [ 1078.792944][T25108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.805048][T25108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.820401][T25108] loop1: detected capacity change from 0 to 1024 [ 1078.827461][T25108] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1078.836338][T25108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7011'. [ 1078.844683][T25114] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.7014: invalid fast symlink length 39 [ 1078.876673][T25116] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.7015: corrupted in-inode xattr: invalid ea_ino [ 1078.901962][T25116] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.7015: couldn't read orphan inode 15 (err -117) [ 1078.934934][T25116] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.7015: invalid fast symlink length 39 [ 1078.947176][T25123] netlink: 'syz.0.7017': attribute type 21 has an invalid length. [ 1078.955132][T25123] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1079.035544][T25128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7020'. [ 1079.058322][T25128] loop3: detected capacity change from 0 to 512 [ 1079.092420][T25128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1079.127207][T25128] EXT4-fs (loop3): 1 truncate cleaned up [ 1079.364467][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 1079.364529][ T29] audit: type=1326 audit(1749929955.740:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25146 comm="syz.3.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1079.422251][ T29] audit: type=1326 audit(1749929955.830:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25146 comm="syz.3.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1079.445821][ T29] audit: type=1326 audit(1749929955.830:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25146 comm="syz.3.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1079.470804][ T29] audit: type=1326 audit(1749929955.880:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25146 comm="syz.3.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1079.494252][ T29] audit: type=1326 audit(1749929955.880:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25146 comm="syz.3.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1079.517994][ T29] audit: type=1326 audit(1749929955.880:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25146 comm="syz.3.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1079.537417][T25157] loop4: detected capacity change from 0 to 128 [ 1079.541501][ T29] audit: type=1326 audit(1749929955.880:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25146 comm="syz.3.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1079.548488][ T29] audit: type=1326 audit(1749929955.930:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.4.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1079.595168][ T29] audit: type=1326 audit(1749929955.930:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.4.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1079.618757][ T29] audit: type=1326 audit(1749929955.930:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25156 comm="syz.4.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe87bb7e929 code=0x7ffc0000 [ 1079.885253][T25167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.898549][T25164] loop1: detected capacity change from 0 to 2048 [ 1079.931156][T25164] EXT4-fs: Ignoring removed bh option [ 1079.958315][T25167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.012256][T25167] ip6gretap0: entered promiscuous mode [ 1080.027872][T25167] syz_tun: entered promiscuous mode [ 1080.034063][T25167] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1080.043020][T25167] Cannot create hsr debugfs directory [ 1081.317269][T25187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.340667][T25187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.377842][T25187] loop3: detected capacity change from 0 to 1024 [ 1081.407423][T25187] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1081.485619][T25198] loop1: detected capacity change from 0 to 2048 [ 1081.495429][T25200] loop4: detected capacity change from 0 to 2048 [ 1081.506232][T25198] EXT4-fs: Ignoring removed bh option [ 1081.511989][T25200] EXT4-fs: Ignoring removed bh option [ 1081.528340][T25200] EXT4-fs mount: 27 callbacks suppressed [ 1081.528355][T25200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.572723][T25198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.696093][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.713533][T25212] loop0: detected capacity change from 0 to 1024 [ 1081.796376][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.832068][T25212] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 1081.849439][T25219] loop1: detected capacity change from 0 to 128 [ 1081.875684][T25219] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1081.892031][T25212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1081.929949][T25212] System zones: 0-1, 3-36 [ 1081.935058][T25219] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1081.951640][T25222] loop4: detected capacity change from 0 to 1024 [ 1081.958333][T25212] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1082.003207][T25224] __nla_validate_parse: 6 callbacks suppressed [ 1082.003221][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7052'. [ 1082.035885][T25212] EXT4-fs (loop0): 1 orphan inode deleted [ 1082.052334][T25212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1082.064935][T25222] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1082.113528][T25212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.145229][T25222] loop4: detected capacity change from 0 to 1024 [ 1082.179158][T25222] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 1082.304314][T25235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7057'. [ 1082.334923][T25237] loop3: detected capacity change from 0 to 512 [ 1082.385942][T25237] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.7058: corrupted in-inode xattr: invalid ea_ino [ 1082.414857][T25235] loop1: detected capacity change from 0 to 512 [ 1082.435040][T25235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1082.441956][T25237] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.7058: couldn't read orphan inode 15 (err -117) [ 1082.460363][T25235] EXT4-fs (loop1): 1 truncate cleaned up [ 1082.478468][T25235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.567981][T25237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.582823][T25249] loop2: detected capacity change from 0 to 1024 [ 1082.592935][T25249] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 1082.610311][T25237] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.7058: invalid fast symlink length 39 [ 1082.622363][T25249] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1082.630754][T25249] System zones: 0-1, 3-36 [ 1082.635442][T25249] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1082.645996][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.659655][T25249] EXT4-fs (loop2): 1 orphan inode deleted [ 1082.677590][T25249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1082.683031][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.736995][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.884894][T25271] FAULT_INJECTION: forcing a failure. [ 1082.884894][T25271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.898039][T25271] CPU: 1 UID: 0 PID: 25271 Comm: syz.3.7073 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1082.898074][T25271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1082.898088][T25271] Call Trace: [ 1082.898096][T25271] [ 1082.898177][T25271] __dump_stack+0x1d/0x30 [ 1082.898199][T25271] dump_stack_lvl+0xe8/0x140 [ 1082.898224][T25271] dump_stack+0x15/0x1b [ 1082.898261][T25271] should_fail_ex+0x265/0x280 [ 1082.898298][T25271] should_fail+0xb/0x20 [ 1082.898334][T25271] should_fail_usercopy+0x1a/0x20 [ 1082.898414][T25271] _copy_to_user+0x20/0xa0 [ 1082.898442][T25271] simple_read_from_buffer+0xb5/0x130 [ 1082.898555][T25271] proc_fail_nth_read+0x100/0x140 [ 1082.898582][T25271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.898691][T25271] vfs_read+0x1a0/0x6f0 [ 1082.898733][T25271] ? __rcu_read_unlock+0x4f/0x70 [ 1082.898762][T25271] ? __fget_files+0x184/0x1c0 [ 1082.898786][T25271] ? vfs_fsync_range+0x81/0x130 [ 1082.898814][T25271] ksys_read+0xda/0x1a0 [ 1082.898896][T25271] __x64_sys_read+0x40/0x50 [ 1082.898938][T25271] x64_sys_call+0x2d77/0x2fb0 [ 1082.898967][T25271] do_syscall_64+0xd2/0x200 [ 1082.899055][T25271] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1082.899089][T25271] ? clear_bhb_loop+0x40/0x90 [ 1082.899173][T25271] ? clear_bhb_loop+0x40/0x90 [ 1082.899199][T25271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.899307][T25271] RIP: 0033:0x7f8cc55ed33c [ 1082.899328][T25271] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1082.899352][T25271] RSP: 002b:00007f8cc3c57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1082.899381][T25271] RAX: ffffffffffffffda RBX: 00007f8cc5815fa0 RCX: 00007f8cc55ed33c [ 1082.899394][T25271] RDX: 000000000000000f RSI: 00007f8cc3c570a0 RDI: 0000000000000004 [ 1082.899415][T25271] RBP: 00007f8cc3c57090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.899431][T25271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.899446][T25271] R13: 0000000000000000 R14: 00007f8cc5815fa0 R15: 00007ffe84574ad8 [ 1082.899472][T25271] [ 1082.903266][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1083.189441][T25269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.197024][T25269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.206462][T25269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.208933][T25284] loop3: detected capacity change from 0 to 512 [ 1083.213889][T25269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.228154][T25284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1083.240513][T25284] EXT4-fs (loop3): 1 truncate cleaned up [ 1083.247001][T25284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.280399][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.333156][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7078'. [ 1083.468949][T25301] loop1: detected capacity change from 0 to 512 [ 1083.478455][T25295] loop3: detected capacity change from 0 to 2048 [ 1083.501345][T25295] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1083.523204][T25306] loop2: detected capacity change from 0 to 512 [ 1083.534083][T25306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1083.547430][T25301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.560175][T25305] loop0: detected capacity change from 0 to 1024 [ 1083.568112][T25305] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 1083.579439][T25306] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1083.580693][T25301] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.615403][T25306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7083: bg 0: block 248: padding at end of block bitmap is not set [ 1083.633168][T25305] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1083.644908][T25305] System zones: 0-1, 3-36 [ 1083.653538][T25305] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1083.661906][T25306] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7083: Failed to acquire dquot type 1 [ 1083.673363][T25305] EXT4-fs (loop0): 1 orphan inode deleted [ 1083.680358][T25306] EXT4-fs (loop2): 1 truncate cleaned up [ 1083.687735][T25305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.693645][T25306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.701076][T25305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.716879][T25313] loop4: detected capacity change from 0 to 512 [ 1083.739886][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.751967][T25313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1083.761796][T25313] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1083.783498][T25313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7086: bg 0: block 248: padding at end of block bitmap is not set [ 1083.799545][T25313] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7086: Failed to acquire dquot type 1 [ 1083.814803][T25313] EXT4-fs (loop4): 1 truncate cleaned up [ 1083.825117][T25313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.846701][T25322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.855873][T25322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.865632][T25322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7089'. [ 1083.874783][T25322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7089'. [ 1084.292158][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.322472][T25332] loop2: detected capacity change from 0 to 2048 [ 1084.329519][T25332] EXT4-fs: Ignoring removed bh option [ 1084.350452][T25332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.446178][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.473458][T25337] loop0: detected capacity change from 0 to 512 [ 1084.481470][T25337] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7095: corrupted in-inode xattr: invalid ea_ino [ 1084.500350][T25337] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7095: couldn't read orphan inode 15 (err -117) [ 1084.522578][T25337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.547818][T25337] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.7095: invalid fast symlink length 39 [ 1084.560171][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.591204][T25342] loop2: detected capacity change from 0 to 512 [ 1084.604851][T22382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.640531][T25342] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.7097: corrupted in-inode xattr: invalid ea_ino [ 1084.700346][T25342] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7097: couldn't read orphan inode 15 (err -117) [ 1084.749595][T25351] loop0: detected capacity change from 0 to 512 [ 1084.797906][T25342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.813524][T25351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1084.833313][T25351] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1084.840940][T25351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7098: bg 0: block 248: padding at end of block bitmap is not set [ 1084.855737][T25351] __quota_error: 202 callbacks suppressed [ 1084.855755][T25351] Quota error (device loop0): write_blk: dquota write failed [ 1084.868952][T25351] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1084.878891][T25351] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.7098: Failed to acquire dquot type 1 [ 1084.893413][T25351] EXT4-fs (loop0): 1 truncate cleaned up [ 1084.979534][T25342] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.7097: invalid fast symlink length 39 [ 1085.085472][T25362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=25362 comm=syz.3.7102 [ 1085.143049][ T29] audit: type=1400 audit(1749929966.547:6759): avc: denied { ioctl } for pid=25361 comm="syz.3.7102" path="socket:[81930]" dev="sockfs" ino=81930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1085.333751][T25366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7105'. [ 1085.422805][ T29] audit: type=1326 audit(1749929966.827:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25371 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276cd4e929 code=0x7ffc0000 [ 1085.547476][ T29] audit: type=1326 audit(1749929966.857:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25371 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276cd4e929 code=0x7ffc0000 [ 1085.571072][ T29] audit: type=1326 audit(1749929966.857:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25371 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276cd4e929 code=0x7ffc0000 [ 1085.594573][ T29] audit: type=1326 audit(1749929966.857:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25371 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276cd4e929 code=0x7ffc0000 [ 1085.618192][ T29] audit: type=1326 audit(1749929966.857:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25371 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276cd4e929 code=0x7ffc0000 [ 1085.641711][ T29] audit: type=1326 audit(1749929966.857:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25371 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f276cd4e929 code=0x7ffc0000 [ 1085.665251][ T29] audit: type=1326 audit(1749929966.857:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25371 comm="syz.1.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276cd4e929 code=0x7ffc0000 [ 1085.723126][T25351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1085.791052][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.996146][T25388] loop1: detected capacity change from 0 to 512 [ 1086.010098][T25388] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.7114: corrupted in-inode xattr: invalid ea_ino [ 1086.029010][T25388] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.7114: couldn't read orphan inode 15 (err -117) [ 1086.070572][T25388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.103288][T25391] loop4: detected capacity change from 0 to 512 [ 1086.115384][T25388] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.7114: invalid fast symlink length 39 [ 1086.156915][T25391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1086.192092][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.213576][T25391] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1086.232838][T25391] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7112: bg 0: block 248: padding at end of block bitmap is not set [ 1086.270768][T25391] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7112: Failed to acquire dquot type 1 [ 1086.284091][T22382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.360392][T25391] EXT4-fs (loop4): 1 truncate cleaned up [ 1086.375680][T25391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1086.519458][T25405] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1086.549200][T25405] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1086.737617][T25414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.773772][T25414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.787904][T25414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7122'. [ 1086.796958][T25414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7122'. [ 1086.884866][T25421] loop3: detected capacity change from 0 to 512 [ 1086.925143][T25421] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.7125: corrupted in-inode xattr: invalid ea_ino [ 1086.968523][T25421] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.7125: couldn't read orphan inode 15 (err -117) [ 1086.994827][T25424] loop1: detected capacity change from 0 to 2048 [ 1087.004110][T25421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.019402][T25424] EXT4-fs: Ignoring removed bh option [ 1087.076501][T25421] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.7125: invalid fast symlink length 39 [ 1087.101922][T25424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.161284][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.217856][T25428] loop3: detected capacity change from 0 to 512 [ 1087.234962][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.288543][T25428] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.7127: corrupted in-inode xattr: invalid ea_ino [ 1087.335894][T25428] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.7127: couldn't read orphan inode 15 (err -117) [ 1087.394070][T25428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.492547][T25428] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.7127: invalid fast symlink length 39 [ 1087.559250][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.640110][T25452] loop2: detected capacity change from 0 to 512 [ 1087.655559][T25452] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.7137: corrupted in-inode xattr: invalid ea_ino [ 1087.683657][T25452] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7137: couldn't read orphan inode 15 (err -117) [ 1087.702458][T25452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.726388][T25452] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.7137: invalid fast symlink length 39 [ 1087.749718][T25461] loop1: detected capacity change from 0 to 512 [ 1087.785875][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.830453][T25461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1087.846282][T25461] EXT4-fs (loop1): 1 truncate cleaned up [ 1087.865972][T25467] loop0: detected capacity change from 0 to 512 [ 1087.873160][T25461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.895259][T25467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1087.922871][T25470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.965117][T25467] EXT4-fs (loop0): 1 truncate cleaned up [ 1087.975548][T25470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.986642][T25467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.020044][T25470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7143'. [ 1088.029137][T25470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7143'. [ 1088.049430][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.116875][T22382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.187248][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1088.216727][T25479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7149'. [ 1088.228906][T25482] netlink: 'syz.0.7150': attribute type 21 has an invalid length. [ 1088.237011][T25482] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7150'. [ 1088.288672][T25485] netlink: 'syz.0.7152': attribute type 21 has an invalid length. [ 1088.296827][T25485] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7152'. [ 1088.435514][T25489] loop1: detected capacity change from 0 to 512 [ 1088.462679][T25489] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.7153: corrupted in-inode xattr: invalid ea_ino [ 1088.496537][T25489] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.7153: couldn't read orphan inode 15 (err -117) [ 1088.520589][T25489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.548417][T25489] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz.1.7153: invalid fast symlink length 39 [ 1088.561246][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.581234][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.657923][T25500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1088.685994][T25500] loop0: detected capacity change from 0 to 512 [ 1088.698911][T25505] loop2: detected capacity change from 0 to 512 [ 1088.716392][T25505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1088.729895][T25500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1088.736742][T25502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7156'. [ 1088.751498][T25505] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1088.775871][T25500] EXT4-fs (loop0): 1 truncate cleaned up [ 1088.792036][T25505] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7157: bg 0: block 248: padding at end of block bitmap is not set [ 1088.797240][T25512] loop1: detected capacity change from 0 to 512 [ 1088.813897][T25500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.833679][T25512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1088.854253][T25505] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7157: Failed to acquire dquot type 1 [ 1088.871688][T22382] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.904312][T25512] EXT4-fs (loop1): 1 truncate cleaned up [ 1088.910477][T25512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.927995][T25505] EXT4-fs (loop2): 1 truncate cleaned up [ 1088.938613][T25505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1088.964280][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.028171][T25526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.050778][T25528] loop4: detected capacity change from 0 to 1764 [ 1089.057730][T25526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.070289][T25526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7168'. [ 1089.079334][T25526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7168'. [ 1089.088402][T25528] ISOFS: Unable to identify CD-ROM format. [ 1089.098803][T25531] loop1: detected capacity change from 0 to 2048 [ 1089.114309][T25531] EXT4-fs: Ignoring removed bh option [ 1089.141536][T25531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.173466][T25539] loop3: detected capacity change from 0 to 2048 [ 1089.183285][T25539] EXT4-fs: Ignoring removed bh option [ 1089.197305][T25539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.221015][T20493] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.269757][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.386617][T25556] loop4: detected capacity change from 0 to 512 [ 1089.400951][T25558] loop3: detected capacity change from 0 to 1024 [ 1089.408674][T25556] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1089.419206][T25558] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 1089.430202][T25556] EXT4-fs (loop4): 1 truncate cleaned up [ 1089.432017][T25558] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1089.436371][T25556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.482729][T25558] System zones: 0-1, 3-36 [ 1089.487370][T25558] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1089.496960][T25558] EXT4-fs (loop3): 1 orphan inode deleted [ 1089.514974][T22547] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.524715][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.524987][T25558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1089.587743][T21934] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.654923][T25572] netlink: 'syz.4.7188': attribute type 21 has an invalid length. [ 1089.672391][T25574] loop2: detected capacity change from 0 to 2048 [ 1089.679325][T25574] EXT4-fs: Ignoring removed bh option [ 1089.717652][T25574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.817399][T25566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.846905][T25566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.860670][T25566] loop1: detected capacity change from 0 to 1024 [ 1089.867894][T25566] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1089.868978][T21622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.887740][T25590] loop4: detected capacity change from 0 to 512 [ 1089.895642][T25590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1089.914382][T25591] loop3: detected capacity change from 0 to 512 [ 1089.919676][T25590] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1089.928532][T25591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1089.936801][T25590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7192: bg 0: block 248: padding at end of block bitmap is not set [ 1089.947158][T25579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.960830][T25579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.973297][T25591] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1089.975114][T25590] __quota_error: 38 callbacks suppressed [ 1089.975196][T25590] Quota error (device loop4): write_blk: dquota write failed [ 1089.992782][T25590] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1089.993101][T25579] loop0: detected capacity change from 0 to 1024 [ 1090.002832][T25590] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7192: Failed to acquire dquot type 1 [ 1090.009662][T25579] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1090.038342][T25591] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7193: bg 0: block 248: padding at end of block bitmap is not set [ 1090.055909][T25590] EXT4-fs (loop4): 1 truncate cleaned up [ 1090.056106][T25591] Quota error (device loop3): write_blk: dquota write failed [ 1090.069050][T25591] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1090.079084][T25591] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.7193: Failed to acquire dquot type 1 [ 1090.091240][T25591] EXT4-fs (loop3): 1 truncate cleaned up [ 1090.392407][ T29] audit: type=1326 audit(1749929971.797:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25609 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086f0de929 code=0x7ffc0000 [ 1090.416592][ T29] audit: type=1326 audit(1749929971.797:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25609 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f086f0de929 code=0x7ffc0000 [ 1090.440261][ T29] audit: type=1326 audit(1749929971.797:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25609 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f086f0de963 code=0x7ffc0000 [ 1090.440684][T25610] loop2: detected capacity change from 0 to 512 [ 1090.463730][ T29] audit: type=1326 audit(1749929971.797:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25609 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f086f0dd3df code=0x7ffc0000 [ 1090.493322][ T29] audit: type=1326 audit(1749929971.797:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25609 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f086f0de9b7 code=0x7ffc0000 [ 1090.517680][ T29] audit: type=1326 audit(1749929971.857:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25609 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f086f0dd290 code=0x7ffc0000 [ 1090.521228][T25610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1090.555522][T25610] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 1090.563564][T25610] System zones: 0-2, 18-18, 34-34 [ 1090.569590][T25610] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.645260][T25620] loop0: detected capacity change from 0 to 512 [ 1090.702724][T25620] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1090.708134][T25624] loop4: detected capacity change from 0 to 2048 [ 1090.720809][T25624] EXT4-fs: Ignoring removed bh option [ 1090.747596][T25620] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 1090.781006][T25620] System zones: 0-2, 18-18, 34-34 [ 1090.789133][T25633] netlink: 'syz.3.7207': attribute type 21 has an invalid length. [ 1090.802619][T25620] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.842893][T25636] loop2: detected capacity change from 0 to 512 [ 1090.853589][T25620] FAULT_INJECTION: forcing a failure. [ 1090.853589][T25620] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.866325][T25620] CPU: 1 UID: 0 PID: 25620 Comm: syz.0.7203 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1090.866354][T25620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1090.866367][T25620] Call Trace: [ 1090.866373][T25620] [ 1090.866381][T25620] __dump_stack+0x1d/0x30 [ 1090.866403][T25620] dump_stack_lvl+0xe8/0x140 [ 1090.866462][T25620] dump_stack+0x15/0x1b [ 1090.866484][T25620] should_fail_ex+0x265/0x280 [ 1090.866522][T25620] should_failslab+0x8c/0xb0 [ 1090.866551][T25620] kmem_cache_alloc_noprof+0x50/0x310 [ 1090.866645][T25620] ? audit_log_start+0x365/0x6c0 [ 1090.866680][T25620] audit_log_start+0x365/0x6c0 [ 1090.866735][T25620] audit_seccomp+0x48/0x100 [ 1090.866770][T25620] ? __seccomp_filter+0x68c/0x10d0 [ 1090.866799][T25620] __seccomp_filter+0x69d/0x10d0 [ 1090.866923][T25620] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1090.866957][T25620] ? vfs_write+0x75e/0x8e0 [ 1090.867007][T25620] __secure_computing+0x82/0x150 [ 1090.867037][T25620] syscall_trace_enter+0xcf/0x1e0 [ 1090.867062][T25620] do_syscall_64+0xac/0x200 [ 1090.867079][T25620] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1090.867214][T25620] ? clear_bhb_loop+0x40/0x90 [ 1090.867236][T25620] ? clear_bhb_loop+0x40/0x90 [ 1090.867294][T25620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.867322][T25620] RIP: 0033:0x7f6f9cb0e929 [ 1090.867338][T25620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.867359][T25620] RSP: 002b:00007f6f9b177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 1090.867384][T25620] RAX: ffffffffffffffda RBX: 00007f6f9cd35fa0 RCX: 00007f6f9cb0e929 [ 1090.867400][T25620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 1090.867438][T25620] RBP: 00007f6f9b177090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.867450][T25620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.867463][T25620] R13: 0000000000000000 R14: 00007f6f9cd35fa0 R15: 00007ffe11700718 [ 1090.867487][T25620] [ 1090.884987][T25636] ext4: Unknown parameter 'nouser_xattr' [ 1091.110995][T25636] loop2: detected capacity change from 0 to 512 [ 1091.121758][T25636] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1091.146126][T25636] EXT4-fs (loop2): 1 truncate cleaned up [ 1091.159210][T25643] loop3: detected capacity change from 0 to 2048 [ 1091.166252][T25643] EXT4-fs: Ignoring removed bh option [ 1091.199171][T25636] EXT4-fs error (device loop2): __ext4_iget:5379: inode #12: block 2: comm syz.2.7208: invalid block [ 1091.232050][T25636] EXT4-fs (loop2): Remounting filesystem read-only [ 1091.383614][T25666] loop1: detected capacity change from 0 to 512 [ 1091.397513][T25667] loop2: detected capacity change from 0 to 512 [ 1091.415262][T25666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1091.424307][T25667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1091.439417][T25654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.448271][T25654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.457285][T25666] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1091.463872][T25667] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1091.464350][T25669] loop3: detected capacity change from 0 to 2048 [ 1091.480895][T25667] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7216: bg 0: block 248: padding at end of block bitmap is not set [ 1091.496376][T25666] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7217: bg 0: block 248: padding at end of block bitmap is not set [ 1091.505180][T25669] EXT4-fs: Ignoring removed bh option [ 1091.511306][T25667] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7216: Failed to acquire dquot type 1 [ 1091.520405][T25654] loop4: detected capacity change from 0 to 1024 [ 1091.534897][T25666] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7217: Failed to acquire dquot type 1 [ 1091.550508][T25654] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1091.551108][T25667] EXT4-fs (loop2): 1 truncate cleaned up [ 1091.574119][T25666] EXT4-fs (loop1): 1 truncate cleaned up [ 1091.687525][T25677] loop3: detected capacity change from 0 to 512 [ 1091.697383][T25677] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1091.709415][T25677] EXT4-fs (loop3): 1 truncate cleaned up [ 1091.749215][T25677] hub 6-0:1.0: USB hub found [ 1091.754865][T25677] hub 6-0:1.0: 8 ports detected [ 1092.200346][T25695] FAULT_INJECTION: forcing a failure. [ 1092.200346][T25695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.213491][T25695] CPU: 0 UID: 0 PID: 25695 Comm: syz.4.7227 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1092.213574][T25695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1092.213588][T25695] Call Trace: [ 1092.213594][T25695] [ 1092.213602][T25695] __dump_stack+0x1d/0x30 [ 1092.213624][T25695] dump_stack_lvl+0xe8/0x140 [ 1092.213645][T25695] dump_stack+0x15/0x1b [ 1092.213662][T25695] should_fail_ex+0x265/0x280 [ 1092.213791][T25695] should_fail+0xb/0x20 [ 1092.213820][T25695] should_fail_usercopy+0x1a/0x20 [ 1092.213854][T25695] _copy_from_user+0x1c/0xb0 [ 1092.213875][T25695] get_sg_io_hdr+0x82/0x360 [ 1092.213903][T25695] ? path_openat+0x1bf8/0x2170 [ 1092.213996][T25695] ? __rcu_read_unlock+0x4f/0x70 [ 1092.214023][T25695] sg_new_write+0xc3/0x890 [ 1092.214066][T25695] sg_ioctl+0xb81/0x1360 [ 1092.214130][T25695] ? __pfx_sg_ioctl+0x10/0x10 [ 1092.214158][T25695] __se_sys_ioctl+0xce/0x140 [ 1092.214188][T25695] __x64_sys_ioctl+0x43/0x50 [ 1092.214216][T25695] x64_sys_call+0x19a8/0x2fb0 [ 1092.214245][T25695] do_syscall_64+0xd2/0x200 [ 1092.214263][T25695] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1092.214290][T25695] ? clear_bhb_loop+0x40/0x90 [ 1092.214357][T25695] ? clear_bhb_loop+0x40/0x90 [ 1092.214379][T25695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.214410][T25695] RIP: 0033:0x7fe87bb7e929 [ 1092.214427][T25695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.214481][T25695] RSP: 002b:00007fe87a1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.214500][T25695] RAX: ffffffffffffffda RBX: 00007fe87bda5fa0 RCX: 00007fe87bb7e929 [ 1092.214537][T25695] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000004 [ 1092.214552][T25695] RBP: 00007fe87a1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.214565][T25695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.214578][T25695] R13: 0000000000000000 R14: 00007fe87bda5fa0 R15: 00007ffe47d6dcd8 [ 1092.214597][T25695] [ 1092.506874][T25704] loop2: detected capacity change from 0 to 512 [ 1092.534218][T25704] loop2: detected capacity change from 0 to 256 [ 1092.548755][T25704] FAT-fs (loop2): bogus number of FAT sectors [ 1092.554999][T25704] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1092.673274][T25702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.683566][T25702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.722716][T25702] loop4: detected capacity change from 0 to 1024 [ 1092.752385][T25702] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1092.778658][T25711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.787557][T25711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.801328][T25711] loop3: detected capacity change from 0 to 1024 [ 1092.808492][T25711] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1092.927869][T25726] loop1: detected capacity change from 0 to 512 [ 1092.948640][T25726] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.7239: corrupted in-inode xattr: invalid ea_ino [ 1092.962659][T25726] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.7239: couldn't read orphan inode 15 (err -117) [ 1092.992297][T25729] FAULT_INJECTION: forcing a failure. [ 1092.992297][T25729] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.005283][T25729] CPU: 0 UID: 0 PID: 25729 Comm: syz.0.7240 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1093.005316][T25729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1093.005331][T25729] Call Trace: [ 1093.005339][T25729] [ 1093.005347][T25729] __dump_stack+0x1d/0x30 [ 1093.005368][T25729] dump_stack_lvl+0xe8/0x140 [ 1093.005431][T25729] dump_stack+0x15/0x1b [ 1093.005450][T25729] should_fail_ex+0x265/0x280 [ 1093.005487][T25729] should_failslab+0x8c/0xb0 [ 1093.005515][T25729] kmem_cache_alloc_noprof+0x50/0x310 [ 1093.005618][T25729] ? security_file_alloc+0x32/0x100 [ 1093.005642][T25729] security_file_alloc+0x32/0x100 [ 1093.005667][T25729] init_file+0x5c/0x1d0 [ 1093.005699][T25729] alloc_empty_file+0x8b/0x200 [ 1093.005805][T25729] path_openat+0x68/0x2170 [ 1093.005836][T25729] ? mntput+0x4b/0x80 [ 1093.005882][T25729] ? terminate_walk+0x27f/0x2a0 [ 1093.005911][T25729] ? path_openat+0x1bf8/0x2170 [ 1093.005945][T25729] ? _parse_integer_limit+0x170/0x190 [ 1093.005975][T25729] do_filp_open+0x109/0x230 [ 1093.006088][T25729] do_open_execat+0xd8/0x260 [ 1093.006126][T25729] alloc_bprm+0x25/0x350 [ 1093.006164][T25729] do_execveat_common+0x12e/0x750 [ 1093.006278][T25729] ? getname_flags+0x154/0x3b0 [ 1093.006306][T25729] __x64_sys_execveat+0x73/0x90 [ 1093.006366][T25729] x64_sys_call+0x2dae/0x2fb0 [ 1093.006388][T25729] do_syscall_64+0xd2/0x200 [ 1093.006409][T25729] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1093.006440][T25729] ? clear_bhb_loop+0x40/0x90 [ 1093.006525][T25729] ? clear_bhb_loop+0x40/0x90 [ 1093.006552][T25729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.006574][T25729] RIP: 0033:0x7f6f9cb0e929 [ 1093.006588][T25729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.006606][T25729] RSP: 002b:00007f6f9b177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1093.006626][T25729] RAX: ffffffffffffffda RBX: 00007f6f9cd35fa0 RCX: 00007f6f9cb0e929 [ 1093.006641][T25729] RDX: 0000200000000100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1093.006655][T25729] RBP: 00007f6f9b177090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.006670][T25729] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1093.006684][T25729] R13: 0000000000000000 R14: 00007f6f9cd35fa0 R15: 00007ffe11700718 [ 1093.006707][T25729] [ 1093.258187][T25726] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.7239: deleted inode referenced: 15 [ 1093.301876][T25732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.312591][T25734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.321274][T25734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.332367][T25734] __nla_validate_parse: 12 callbacks suppressed [ 1093.332384][T25734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7242'. [ 1093.347777][T25734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7242'. [ 1093.358532][T25732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.373265][T25732] ref_ctr_offset mismatch. inode: 0x3ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 1093.406714][T25737] netlink: 'syz.3.7244': attribute type 21 has an invalid length. [ 1093.414890][T25737] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7244'. [ 1093.552170][T25742] loop1: detected capacity change from 0 to 512 [ 1093.588579][T25742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1093.615939][T25742] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1093.623729][T25742] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7245: bg 0: block 248: padding at end of block bitmap is not set [ 1093.648271][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7246'. [ 1093.701488][T25750] loop2: detected capacity change from 0 to 512 [ 1093.702547][T25742] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7245: Failed to acquire dquot type 1 [ 1093.709852][T25750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1093.730113][T25742] EXT4-fs (loop1): 1 truncate cleaned up [ 1093.742262][T25750] EXT4-fs (loop2): 1 truncate cleaned up [ 1093.763242][T25752] loop3: detected capacity change from 0 to 2048 [ 1093.770587][T25752] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1093.998142][T25759] loop4: detected capacity change from 0 to 1024 [ 1094.039999][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7251'. [ 1094.128478][T25764] loop2: detected capacity change from 0 to 512 [ 1094.161111][T25764] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.7253: corrupted in-inode xattr: invalid ea_ino [ 1094.178145][T25764] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7253: couldn't read orphan inode 15 (err -117) [ 1094.180765][T25766] loop0: detected capacity change from 0 to 512 [ 1094.203682][T25766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1094.217240][T25766] EXT4-fs (loop0): 1 truncate cleaned up [ 1094.227326][T25764] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.7253: invalid fast symlink length 39 [ 1094.254534][T23122] syz_tun (unregistering): left promiscuous mode [ 1094.317315][T25772] loop2: detected capacity change from 0 to 512 [ 1094.330019][T25772] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1094.366443][T25772] EXT4-fs (loop2): 1 truncate cleaned up [ 1094.438851][T20756] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.499148][T20756] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.580692][T25791] loop0: detected capacity change from 0 to 512 [ 1094.608556][T25791] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7264: corrupted in-inode xattr: invalid ea_ino [ 1094.622831][T20756] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.642327][T25791] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7264: couldn't read orphan inode 15 (err -117) [ 1094.704924][T25791] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.7264: invalid fast symlink length 39 [ 1094.722890][T25803] loop2: detected capacity change from 0 to 512 [ 1094.736651][T25803] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1094.791701][T25803] EXT4-fs (loop2): 1 truncate cleaned up [ 1094.809293][T20756] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.856103][T25809] loop0: detected capacity change from 0 to 512 [ 1094.881445][T25809] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7267: corrupted in-inode xattr: invalid ea_ino [ 1094.895126][T25811] loop2: detected capacity change from 0 to 512 [ 1094.901681][T25809] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7267: couldn't read orphan inode 15 (err -117) [ 1094.950593][T25811] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1095.023082][T25811] EXT4-fs (loop2): 1 truncate cleaned up [ 1095.029937][T25809] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.7267: invalid fast symlink length 39 [ 1095.106686][T25818] loop0: detected capacity change from 0 to 512 [ 1095.118658][T25818] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7270: corrupted in-inode xattr: invalid ea_ino [ 1095.134063][T25818] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7270: couldn't read orphan inode 15 (err -117) [ 1095.158574][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 1095.158590][ T29] audit: type=1326 audit(1749929976.567:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.188483][ T29] audit: type=1326 audit(1749929976.567:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.212078][ T29] audit: type=1326 audit(1749929976.567:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.235656][ T29] audit: type=1326 audit(1749929976.567:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.259440][ T29] audit: type=1326 audit(1749929976.567:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.275041][T25818] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.7270: invalid fast symlink length 39 [ 1095.283209][ T29] audit: type=1326 audit(1749929976.567:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.318420][ T29] audit: type=1326 audit(1749929976.567:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.342106][ T29] audit: type=1326 audit(1749929976.567:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.365679][ T29] audit: type=1326 audit(1749929976.567:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25813 comm="syz.3.7269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1095.421945][ T29] audit: type=1326 audit(1749929976.827:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25830 comm="syz.1.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276cd4e929 code=0x7ffc0000 [ 1095.475606][T25833] loop2: detected capacity change from 0 to 1024 [ 1095.558746][T20756] ip6gretap0 (unregistering): left promiscuous mode [ 1095.620901][T20756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.632141][T20756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.643130][T20756] bond0 (unregistering): Released all slaves [ 1095.707665][T25786] chnl_net:caif_netlink_parms(): no params data found [ 1095.753242][T20756] hsr_slave_0: left promiscuous mode [ 1095.759377][T20756] hsr_slave_1: left promiscuous mode [ 1095.765185][T20756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1095.772616][T20756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.791567][T20756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.799185][T20756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.814049][T20756] veth1_macvtap: left promiscuous mode [ 1095.819895][T20756] veth0_macvtap: left promiscuous mode [ 1095.902580][T20756] team0 (unregistering): Port device team_slave_1 removed [ 1095.922434][T20756] team0 (unregistering): Port device team_slave_0 removed [ 1096.120176][T25866] syzkaller0: entered promiscuous mode [ 1096.125888][T25866] syzkaller0: entered allmulticast mode [ 1096.191040][T25786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.198300][T25786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.205667][T25786] bridge_slave_0: entered allmulticast mode [ 1096.212310][T25786] bridge_slave_0: entered promiscuous mode [ 1096.219079][T25786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.226304][T25786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.233552][T25786] bridge_slave_1: entered allmulticast mode [ 1096.240558][T25786] bridge_slave_1: entered promiscuous mode [ 1096.259173][T25882] netlink: 'syz.2.7293': attribute type 3 has an invalid length. [ 1096.267146][T25882] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7293'. [ 1096.382276][T25888] netlink: 'syz.3.7296': attribute type 21 has an invalid length. [ 1096.405956][T25888] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7296'. [ 1096.421955][T25786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.435969][T25896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1096.449037][T25786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.555902][T25786] team0: Port device team_slave_0 added [ 1096.562818][T25786] team0: Port device team_slave_1 added [ 1096.586285][T25909] netlink: 'syz.3.7303': attribute type 2 has an invalid length. [ 1096.594190][T25909] netlink: 'syz.3.7303': attribute type 8 has an invalid length. [ 1096.602213][T25909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7303'. [ 1096.615777][T25909] netlink: 'syz.3.7303': attribute type 2 has an invalid length. [ 1096.623638][T25909] netlink: 'syz.3.7303': attribute type 8 has an invalid length. [ 1096.631938][T25909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7303'. [ 1096.641964][T25786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.649175][T25786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.675494][T25786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.688563][T25786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.695646][T25786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.721622][T25786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.777452][T25786] hsr_slave_0: entered promiscuous mode [ 1096.787406][T25786] hsr_slave_1: entered promiscuous mode [ 1096.793461][T25786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.803235][T25786] Cannot create hsr debugfs directory [ 1096.876961][T25928] netlink: 'syz.3.7310': attribute type 10 has an invalid length. [ 1096.917633][T25928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.924965][T25928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.954357][T25931] macsec0: entered promiscuous mode [ 1096.994368][T25786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1097.007354][T25786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1097.027849][T25786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1097.041668][T25786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1097.064700][T25942] netlink: 'syz.0.7317': attribute type 21 has an invalid length. [ 1097.072582][T25942] IPv6: NLM_F_CREATE should be specified when creating new route [ 1097.130722][T25942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1097.138103][T25942] IPv6: NLM_F_CREATE should be set when creating new route [ 1097.145359][T25942] IPv6: NLM_F_CREATE should be set when creating new route [ 1097.152672][T25942] IPv6: NLM_F_CREATE should be set when creating new route [ 1097.169408][T25786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.181188][T25786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.209986][T24484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.217133][T24484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.247418][T24484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.254604][T24484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.346477][T25957] loop1: detected capacity change from 0 to 128 [ 1097.403378][T25971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.418836][T25971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.460352][T25786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.513670][T25957] bio_check_eod: 18 callbacks suppressed [ 1097.513809][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.513809][T25957] loop1: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 1097.549587][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.549587][T25957] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1097.599250][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.599250][T25957] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1097.673826][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.673826][T25957] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1097.796601][T25786] veth0_vlan: entered promiscuous mode [ 1097.806485][T25786] veth1_vlan: entered promiscuous mode [ 1097.814833][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.814833][T25957] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1097.838901][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.838901][T25957] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1097.844945][T25786] veth0_macvtap: entered promiscuous mode [ 1097.867777][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.867777][T25957] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1097.883631][T25786] veth1_macvtap: entered promiscuous mode [ 1097.896448][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.896448][T25957] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1097.910198][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.910198][T25957] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1097.924544][T25957] syz.1.7320: attempt to access beyond end of device [ 1097.924544][T25957] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1097.934764][T25996] loop2: detected capacity change from 0 to 512 [ 1097.956681][T25786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.978009][T25786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.996114][T25786] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.005031][T25786] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.013752][T25786] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.022515][T25786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.054871][T25996] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.7330: corrupted in-inode xattr: invalid ea_ino [ 1098.099482][T25996] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7330: couldn't read orphan inode 15 (err -117) [ 1098.418631][T26022] __nla_validate_parse: 2 callbacks suppressed [ 1098.418648][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7338'. [ 1098.444101][T26024] loop5: detected capacity change from 0 to 512 [ 1098.503513][T26029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.513138][T26024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1098.534440][T26030] loop2: detected capacity change from 0 to 2048 [ 1098.552340][T26030] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1098.562907][T26029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.585348][T26024] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1098.605075][T26029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7341'. [ 1098.614143][T26029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7341'. [ 1098.626205][T26024] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7339: bg 0: block 248: padding at end of block bitmap is not set [ 1098.638053][T26033] loop1: detected capacity change from 0 to 512 [ 1098.647756][T26024] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7339: Failed to acquire dquot type 1 [ 1098.661157][T26024] EXT4-fs (loop5): 1 truncate cleaned up [ 1098.669099][T26033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1098.686272][T26033] EXT4-fs (loop1): 1 truncate cleaned up [ 1098.799501][T26040] netlink: 'syz.1.7345': attribute type 2 has an invalid length. [ 1098.808112][T26040] netlink: 'syz.1.7345': attribute type 8 has an invalid length. [ 1098.816158][T26040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1098.833207][T26040] netlink: 'syz.1.7345': attribute type 2 has an invalid length. [ 1098.841188][T26040] netlink: 'syz.1.7345': attribute type 8 has an invalid length. [ 1098.849124][T26040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1099.044029][T26057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7352'. [ 1099.093663][T26062] loop0: detected capacity change from 0 to 512 [ 1099.118029][T26057] loop1: detected capacity change from 0 to 2048 [ 1099.125361][T26062] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7354: corrupted in-inode xattr: invalid ea_ino [ 1099.139684][T26057] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1099.203208][T26062] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7354: couldn't read orphan inode 15 (err -117) [ 1099.605176][T26076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.613693][T26076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.651713][T26076] loop0: detected capacity change from 0 to 1024 [ 1099.663197][T26076] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1099.703052][T26076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7359'. [ 1099.720931][T26087] loop1: detected capacity change from 0 to 512 [ 1099.732283][T26087] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1099.747141][T26087] EXT4-fs (loop1): 1 truncate cleaned up [ 1099.914234][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7367'. [ 1100.097827][T26102] loop1: detected capacity change from 0 to 2048 [ 1100.112702][T26102] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1100.278787][T26119] loop5: detected capacity change from 0 to 512 [ 1100.286455][T26119] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1100.303528][T26119] EXT4-fs (loop5): 1 truncate cleaned up [ 1100.358433][T26122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7376'. [ 1100.509757][T26139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.521448][T26139] bridge_slave_0 (unregistering): left allmulticast mode [ 1100.528580][T26139] bridge_slave_0 (unregistering): left promiscuous mode [ 1100.535586][T26139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.589256][T26145] loop2: detected capacity change from 0 to 512 [ 1100.602966][T26145] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.7386: corrupted in-inode xattr: invalid ea_ino [ 1100.616883][T26145] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7386: couldn't read orphan inode 15 (err -117) [ 1100.719952][T26153] loop2: detected capacity change from 0 to 2048 [ 1100.728325][T26153] EXT4-fs: Ignoring removed bh option [ 1100.838086][T26172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.847174][T26172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.858065][T26172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1100.889534][T26176] loop2: detected capacity change from 0 to 512 [ 1100.900356][T26176] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.7399: corrupted in-inode xattr: invalid ea_ino [ 1100.916404][T26176] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7399: couldn't read orphan inode 15 (err -117) [ 1101.134534][T26190] loop2: detected capacity change from 0 to 2048 [ 1101.142312][T26190] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1101.249135][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 1101.249153][ T29] audit: type=1326 audit(1749929982.657:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.290923][ T29] audit: type=1326 audit(1749929982.657:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.312141][T26204] loop3: detected capacity change from 0 to 512 [ 1101.314556][ T29] audit: type=1326 audit(1749929982.657:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.314592][ T29] audit: type=1326 audit(1749929982.657:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.352676][T26204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1101.368311][ T29] audit: type=1326 audit(1749929982.657:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.380537][T26204] EXT4-fs (loop3): 1 truncate cleaned up [ 1101.401911][ T29] audit: type=1326 audit(1749929982.657:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.431024][ T29] audit: type=1326 audit(1749929982.657:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.454635][ T29] audit: type=1326 audit(1749929982.657:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.478213][ T29] audit: type=1326 audit(1749929982.657:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.502050][ T29] audit: type=1326 audit(1749929982.657:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26199 comm="syz.0.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1101.547397][T26207] loop1: detected capacity change from 0 to 512 [ 1101.564679][T26211] FAULT_INJECTION: forcing a failure. [ 1101.564679][T26211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.577809][T26211] CPU: 1 UID: 0 PID: 26211 Comm: syz.3.7409 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1101.577933][T26211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1101.577946][T26211] Call Trace: [ 1101.577953][T26211] [ 1101.577960][T26211] __dump_stack+0x1d/0x30 [ 1101.577981][T26211] dump_stack_lvl+0xe8/0x140 [ 1101.578001][T26211] dump_stack+0x15/0x1b [ 1101.578016][T26211] should_fail_ex+0x265/0x280 [ 1101.578098][T26211] should_fail+0xb/0x20 [ 1101.578126][T26211] should_fail_usercopy+0x1a/0x20 [ 1101.578158][T26211] _copy_from_iter+0xcf/0xe40 [ 1101.578349][T26211] ? __build_skb_around+0x1a0/0x200 [ 1101.578379][T26211] ? __alloc_skb+0x223/0x320 [ 1101.578411][T26211] netlink_sendmsg+0x471/0x6b0 [ 1101.578433][T26211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.578481][T26211] __sock_sendmsg+0x142/0x180 [ 1101.578506][T26211] ____sys_sendmsg+0x31e/0x4e0 [ 1101.578562][T26211] ___sys_sendmsg+0x17b/0x1d0 [ 1101.578687][T26211] __x64_sys_sendmsg+0xd4/0x160 [ 1101.578727][T26211] x64_sys_call+0x2999/0x2fb0 [ 1101.578789][T26211] do_syscall_64+0xd2/0x200 [ 1101.578846][T26211] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1101.578874][T26211] ? clear_bhb_loop+0x40/0x90 [ 1101.578898][T26211] ? clear_bhb_loop+0x40/0x90 [ 1101.578921][T26211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.578942][T26211] RIP: 0033:0x7f8cc55ee929 [ 1101.579026][T26211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.579044][T26211] RSP: 002b:00007f8cc3c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.579067][T26211] RAX: ffffffffffffffda RBX: 00007f8cc5815fa0 RCX: 00007f8cc55ee929 [ 1101.579114][T26211] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1101.579126][T26211] RBP: 00007f8cc3c57090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.579138][T26211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.579155][T26211] R13: 0000000000000000 R14: 00007f8cc5815fa0 R15: 00007ffe84574ad8 [ 1101.579176][T26211] [ 1101.585786][T26207] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.7410: corrupted in-inode xattr: invalid ea_ino [ 1101.805336][T26207] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.7410: couldn't read orphan inode 15 (err -117) [ 1101.820423][ T36] hid-generic 0000:0000:8000.0001: unknown main item tag 0x0 [ 1101.828643][ T36] hid-generic 0000:0000:8000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1102.061234][T26238] ip6gretap0: entered promiscuous mode [ 1102.067756][T26238] syz_tun: entered promiscuous mode [ 1102.073417][T26238] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1102.096547][T26238] Cannot create hsr debugfs directory [ 1102.120501][T26240] loop5: detected capacity change from 0 to 512 [ 1102.136561][T26240] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.7422: corrupted in-inode xattr: invalid ea_ino [ 1102.159160][T26240] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.7422: couldn't read orphan inode 15 (err -117) [ 1102.191974][T26247] loop1: detected capacity change from 0 to 512 [ 1102.203988][T26247] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1102.227550][T26247] EXT4-fs (loop1): 1 truncate cleaned up [ 1102.322493][ T3408] hid-generic 0000:0000:8000.0002: unknown main item tag 0x0 [ 1102.331345][ T3408] hid-generic 0000:0000:8000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1102.386227][T26264] fido_id[26264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1102.487940][T26273] netlink: 'syz.3.7435': attribute type 21 has an invalid length. [ 1102.652084][T26278] loop2: detected capacity change from 0 to 2048 [ 1102.665780][T26278] EXT4-fs: Ignoring removed bh option [ 1102.741342][T26290] loop2: detected capacity change from 0 to 512 [ 1102.771283][T26290] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1102.811285][T26290] EXT4-fs (loop2): 1 truncate cleaned up [ 1102.891621][T26311] netlink: 'syz.0.7450': attribute type 21 has an invalid length. [ 1102.968171][T26316] smc: net device bond0 applied user defined pnetid SYZ2 [ 1102.994501][T26316] smc: net device bond0 erased user defined pnetid SYZ2 [ 1103.145541][T26327] loop0: detected capacity change from 0 to 512 [ 1103.194659][T26327] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.7457: corrupted in-inode xattr: invalid ea_ino [ 1103.213721][T26333] loop1: detected capacity change from 0 to 512 [ 1103.223083][T26327] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.7457: couldn't read orphan inode 15 (err -117) [ 1103.237700][T26333] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1103.267321][T26333] EXT4-fs (loop1): 1 truncate cleaned up [ 1103.450228][T26362] loop3: detected capacity change from 0 to 512 [ 1103.478115][T26362] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1103.490738][T26365] loop0: detected capacity change from 0 to 2048 [ 1103.526038][T26365] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1103.540754][T26362] EXT4-fs (loop3): 1 truncate cleaned up [ 1103.576498][T26375] loop5: detected capacity change from 0 to 512 [ 1103.588219][T26375] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.7475: corrupted in-inode xattr: invalid ea_ino [ 1103.608952][T26362] hub 6-0:1.0: USB hub found [ 1103.613684][T26362] hub 6-0:1.0: 8 ports detected [ 1103.619062][T26375] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.7475: couldn't read orphan inode 15 (err -117) [ 1103.761147][T26395] loop1: detected capacity change from 0 to 512 [ 1103.770391][T26395] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1103.782897][T26395] EXT4-fs (loop1): 1 truncate cleaned up [ 1103.869764][T26404] loop5: detected capacity change from 0 to 512 [ 1103.992380][T26418] loop1: detected capacity change from 0 to 512 [ 1104.014066][T26418] EXT4-fs: Ignoring removed nobh option [ 1104.023666][T26404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1104.037244][T26404] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1104.078263][T26418] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.7492: corrupted inode contents [ 1104.102763][T26404] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7484: bg 0: block 248: padding at end of block bitmap is not set [ 1104.117469][T26418] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.7492: mark_inode_dirty error [ 1104.120986][T26404] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7484: Failed to acquire dquot type 1 [ 1104.140671][T26418] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.7492: corrupted inode contents [ 1104.153075][T26418] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.7492: mark_inode_dirty error [ 1104.175271][T26418] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7492: Failed to acquire dquot type 0 [ 1104.187012][T26404] EXT4-fs (loop5): 1 truncate cleaned up [ 1104.199345][T26418] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.7492: corrupted inode contents [ 1104.213432][T26418] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.7492: mark_inode_dirty error [ 1104.226041][T26418] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.7492: corrupted inode contents [ 1104.243088][T26418] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.7492: mark_inode_dirty error [ 1104.255225][T26418] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.7492: corrupted inode contents [ 1104.276589][T26418] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1104.303798][T26418] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.7492: corrupted inode contents [ 1104.371423][T26418] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.7492: mark_inode_dirty error [ 1104.383287][T26418] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1104.393920][T26418] EXT4-fs (loop1): 1 truncate cleaned up [ 1104.400207][T26418] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.498223][T26418] netlink: 'syz.1.7492': attribute type 10 has an invalid length. [ 1104.810526][T26457] netlink: 'syz.1.7507': attribute type 21 has an invalid length. [ 1104.818497][T26457] __nla_validate_parse: 7 callbacks suppressed [ 1104.818542][T26457] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7507'. [ 1104.853614][T26459] loop3: detected capacity change from 0 to 512 [ 1104.861794][T26459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1104.873589][T26459] EXT4-fs (loop3): 1 truncate cleaned up [ 1104.909549][T26459] hub 6-0:1.0: USB hub found [ 1104.915270][T26459] hub 6-0:1.0: 8 ports detected [ 1105.167377][T26470] loop0: detected capacity change from 0 to 2048 [ 1105.175942][T26470] EXT4-fs: Ignoring removed bh option [ 1105.275364][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1105.361347][T26493] loop2: detected capacity change from 0 to 512 [ 1105.382538][T26493] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1105.404025][T26493] EXT4-fs (loop2): 1 truncate cleaned up [ 1105.469699][T26503] loop2: detected capacity change from 0 to 2048 [ 1105.477482][T26503] EXT4-fs: Ignoring removed bh option [ 1105.679294][T26518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.704704][T26518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.728249][T26518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7529'. [ 1105.737405][T26518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7529'. [ 1105.781015][T26518] syz_tun: entered promiscuous mode [ 1105.788187][T26518] syz_tun: left promiscuous mode [ 1106.131249][T26527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7532'. [ 1106.180053][T26530] netlink: 'syz.1.7534': attribute type 2 has an invalid length. [ 1106.188731][T26530] netlink: 'syz.1.7534': attribute type 8 has an invalid length. [ 1106.196992][T26530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7534'. [ 1106.208285][T26530] netlink: 'syz.1.7534': attribute type 2 has an invalid length. [ 1106.216186][T26530] netlink: 'syz.1.7534': attribute type 8 has an invalid length. [ 1106.224051][T26530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7534'. [ 1106.229192][T26532] loop5: detected capacity change from 0 to 2048 [ 1106.240005][T26532] EXT4-fs: Ignoring removed bh option [ 1106.259360][T26533] loop2: detected capacity change from 0 to 2048 [ 1106.267200][T26533] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1106.317385][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 1106.317408][ T29] audit: type=1326 audit(1749929987.727:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1106.412465][T26547] loop3: detected capacity change from 0 to 512 [ 1106.419191][ T29] audit: type=1326 audit(1749929987.757:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1106.432656][T26549] loop5: detected capacity change from 0 to 1024 [ 1106.442251][ T29] audit: type=1326 audit(1749929987.757:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1106.471641][ T29] audit: type=1326 audit(1749929987.757:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1106.494683][ T29] audit: type=1326 audit(1749929987.757:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1106.501346][T26547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1106.517865][ T29] audit: type=1326 audit(1749929987.757:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1106.550507][ T29] audit: type=1326 audit(1749929987.757:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1106.573625][ T29] audit: type=1326 audit(1749929987.757:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cb0e929 code=0x7ffc0000 [ 1106.597506][T26537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.624217][T26547] EXT4-fs (loop3): 1 truncate cleaned up [ 1106.650385][T26537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.695202][T26537] loop1: detected capacity change from 0 to 1024 [ 1106.704059][T26537] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1106.719292][T26537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7537'. [ 1106.799164][ T29] audit: type=1326 audit(1749929988.207:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26555 comm="syz.5.7544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4d24ae929 code=0x0 [ 1106.845929][ T29] audit: type=1326 audit(1749929988.257:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26560 comm="syz.3.7546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cc55ee929 code=0x7ffc0000 [ 1107.002419][T26567] loop2: detected capacity change from 0 to 2048 [ 1107.012639][T26567] EXT4-fs: Ignoring removed bh option [ 1107.182002][T26589] loop0: detected capacity change from 0 to 512 [ 1107.200243][T26589] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1107.212890][T26589] EXT4-fs (loop0): 1 truncate cleaned up [ 1107.258838][T26589] hub 6-0:1.0: USB hub found [ 1107.263716][T26589] hub 6-0:1.0: 8 ports detected [ 1107.316230][T26596] loop1: detected capacity change from 0 to 2048 [ 1107.325103][T26596] EXT4-fs: Ignoring removed bh option [ 1107.412304][T26591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.421066][T26591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.436437][T26591] loop2: detected capacity change from 0 to 1024 [ 1107.457611][T26591] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1107.480510][T26591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7558'. [ 1107.514161][T26605] loop1: detected capacity change from 0 to 512 [ 1107.521401][T26605] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1107.533992][T26605] EXT4-fs (loop1): 1 truncate cleaned up [ 1107.559920][T26605] hub 6-0:1.0: USB hub found [ 1107.584729][T26605] hub 6-0:1.0: 8 ports detected [ 1107.817555][ T3370] hid-generic 0000:0000:8000.0003: unknown main item tag 0x0 [ 1107.825679][ T3370] hid-generic 0000:0000:8000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1108.134334][T26658] netlink: 'syz.0.7585': attribute type 2 has an invalid length. [ 1108.142927][T26658] netlink: 'syz.0.7585': attribute type 8 has an invalid length. [ 1108.151270][T26658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7585'. [ 1108.292415][T26672] loop2: detected capacity change from 0 to 4096 [ 1108.308506][T26672] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.7591: corrupted inode contents [ 1108.337926][T26672] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #15: comm syz.2.7591: mark_inode_dirty error [ 1108.351306][T26672] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.7591: corrupted inode contents [ 1108.364190][T26672] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.7591: mark_inode_dirty error [ 1108.389020][T20493] ================================================================== [ 1108.397181][T20493] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 1108.404805][T20493] [ 1108.407153][T20493] read-write to 0xffff888237d25e68 of 1 bytes by task 26676 on cpu 1: [ 1108.415338][T20493] folio_add_lru+0xa5/0x1f0 [ 1108.419884][T20493] shmem_get_folio_gfp+0x7ab/0xd60 [ 1108.425050][T20493] shmem_fault+0xf6/0x250 [ 1108.428416][T26672] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.7591: corrupted inode contents [ 1108.429413][T20493] __do_fault+0xbc/0x200 [ 1108.429440][T20493] handle_mm_fault+0xf78/0x2be0 [ 1108.441537][T26672] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.7591: mark_inode_dirty error [ 1108.445495][T20493] __get_user_pages+0x1036/0x1fb0 [ 1108.445523][T20493] __mm_populate+0x243/0x3a0 [ 1108.445546][T20493] vm_mmap_pgoff+0x232/0x2e0 [ 1108.445573][T20493] ksys_mmap_pgoff+0xc2/0x310 [ 1108.445609][T20493] x64_sys_call+0x1602/0x2fb0 [ 1108.450784][T26672] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.7591: corrupted inode contents [ 1108.461670][T20493] do_syscall_64+0xd2/0x200 [ 1108.461697][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.461721][T20493] [ 1108.461729][T20493] read to 0xffff888237d25e68 of 1 bytes by task 20493 on cpu 0: [ 1108.467079][T26672] EXT4-fs error (device loop2): ext4_truncate:4597: inode #15: comm syz.2.7591: mark_inode_dirty error [ 1108.471345][T20493] __lru_add_drain_all+0x12b/0x3f0 [ 1108.476381][T26672] EXT4-fs error (device loop2) in ext4_setattr:5986: Corrupt filesystem [ 1108.480696][T20493] lru_add_drain_all+0x10/0x20 [ 1108.486324][T26678] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #15: comm syz.2.7591: corrupted inode contents [ 1108.497194][T20493] invalidate_bdev+0x47/0x70 [ 1108.497228][T20493] ext4_put_super+0x624/0x7d0 [ 1108.497258][T20493] generic_shutdown_super+0xe3/0x210 [ 1108.497289][T20493] kill_block_super+0x2a/0x70 [ 1108.497319][T20493] ext4_kill_sb+0x42/0x80 [ 1108.497338][T20493] deactivate_locked_super+0x72/0x1c0 [ 1108.587977][T20493] deactivate_super+0x97/0xa0 [ 1108.592691][T20493] cleanup_mnt+0x269/0x2e0 [ 1108.597570][T20493] __cleanup_mnt+0x19/0x20 [ 1108.602021][T20493] task_work_run+0x12e/0x1a0 [ 1108.606642][T20493] exit_to_user_mode_loop+0xe4/0x100 [ 1108.611957][T20493] do_syscall_64+0x1d6/0x200 [ 1108.616574][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.622498][T20493] [ 1108.624852][T20493] value changed: 0x17 -> 0x19 [ 1108.629546][T20493] [ 1108.631886][T20493] Reported by Kernel Concurrency Sanitizer on: [ 1108.638063][T20493] CPU: 0 UID: 0 PID: 20493 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 1108.650760][T20493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.660871][T20493] ================================================================== [ 1108.717187][T21622] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)