last executing test programs: 6m12.652981311s ago: executing program 32 (id=2282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) close(r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x20) modify_ldt$write2(0x11, &(0x7f0000000040)={0xd, 0x20001000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x1000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 4m46.917500981s ago: executing program 33 (id=3468): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m40.166258316s ago: executing program 34 (id=3669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x1000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 4m39.529473637s ago: executing program 35 (id=3687): io_uring_setup(0x100, &(0x7f0000000140)={0x0, 0x96aa, 0x80, 0x3, 0x202c0}) socket$inet6(0xa, 0x3, 0xff) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x127d, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) sync() 4m36.849450383s ago: executing program 36 (id=3734): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000c53d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328562b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaeaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509afd15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4df92cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2571f67a7c7819b0889d7614ab5e25b468ab3102cab53f312f2e29075891bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r4, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086ddeff913e613c26d42000000fbac", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x2, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x5f, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x0, 0x86}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 4m23.039521636s ago: executing program 37 (id=4399): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x1946}, 0x8, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) r4 = openat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000280)=r1, 0x12) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = syz_clone(0xc220000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x7, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0xfff}, 0x11eda, 0x4, 0x9a, 0x0, 0x6, 0xfffff271, 0x4, 0x0, 0x0, 0x0, 0x20}, r6, 0x3, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000000002110020071900000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r9 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='cpu&\t\t') 4m22.902201127s ago: executing program 9 (id=4404): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioperm(0x5, 0xee8, 0x163f) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2$9p(0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10000000000016, 0x0) 4m22.853601071s ago: executing program 9 (id=4406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) 4m22.850518071s ago: executing program 9 (id=4408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 4m22.821559743s ago: executing program 9 (id=4410): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) creat(0x0, 0x0) 4m22.603641161s ago: executing program 9 (id=4415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4m22.274943547s ago: executing program 9 (id=4427): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c, 0x0}, 0x10) 4m22.235151471s ago: executing program 38 (id=4427): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c, 0x0}, 0x10) 3m49.723947741s ago: executing program 0 (id=5069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m49.61968736s ago: executing program 0 (id=5072): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 3m49.560531284s ago: executing program 0 (id=5074): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m49.49293987s ago: executing program 0 (id=5078): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") mknod$loop(0x0, 0x0, 0x1) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) fspick(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x2, &(0x7f0000000200)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m48.940052524s ago: executing program 0 (id=5088): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x60}}, 0x40000) 3m48.162414457s ago: executing program 0 (id=5105): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[], 0x124}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m48.159604457s ago: executing program 39 (id=5105): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[], 0x124}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m33.623283168s ago: executing program 1 (id=6145): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x0, 0x787e, 0x3, "00a6400d00000000000000f8ffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r1, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x3, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bond_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0xfffffffd, @loopback, 0x40000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "7ba11d27a9e02909", "7d70211c7bf1ac7a0d742ecbc81422f4", "d01f1c43", "cadea6b75a9723ce"}, 0x28) close(r2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) 2m32.72509248s ago: executing program 1 (id=6149): io_uring_setup(0x3bbf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x48}, 0x1, 0x7}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2m31.552103055s ago: executing program 1 (id=6157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}], 0x10}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2m31.295115726s ago: executing program 1 (id=6163): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000380), 0xc1, 0x7da, &(0x7f0000000fc0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file2'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2088, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x28011, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r5 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000001c0), 0x81, 0x7d2, &(0x7f00000007c0)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = io_uring_setup(0x6ecd, &(0x7f00000017c0)={0x0, 0x4a00, 0x1, 0x3, 0x185}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1], &(0x7f00000004c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r8, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0xeffffffd, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x2, 0xe, 0x10, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe1085989488affd54a07c21d875397bdb22d0008b420a1000084ffffffffffffffff00170000580000000000000000000000000100", "90be8bf4bd001000002100000010001f00", [0x0, 0x4]}}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x3, 0x4) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) 2m30.63738899s ago: executing program 1 (id=6171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.552125517s ago: executing program 1 (id=6176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000380)="aa0441d94deb5179d39cbca496d5fe18357140ceb54019d37aea6255def2afd9210d778233515c52eaebfdcf86e618caed7d1a505be6e892973d085d2f5ab6fafcc3b587e685989e9c5b5d0c06459aa65d8eaf5e871dc30007309638e82f7ba48ed481c52dd5060a7bf6b773cf7844eacd1933de06f8277c4e5c3dc93a853e20291c32fb09e18555f3fd7816baedbc1c6d34ba4e3910ff8f1a96a182ba2cfe2cca319bfb6fcea66ce25db99d27ce92ccce2c626971c43b982fb701d63ee781bfa649b41502d6cca191ca220a465e9308fc305654a24e5372a31ee281e10809c8cbae30c1c6641b3525", 0xe9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x100000004, 0xa}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) write$P9_RREADDIR(r5, &(0x7f0000000900)={0x68, 0x29, 0x2, {0x80, [{{0x1, 0x3, 0x7}, 0x9, 0xa, 0x7, './file1'}, {{0x2, 0x3, 0x4}, 0x1, 0x3, 0x7, './file0'}, {{0x40, 0x103, 0x3}, 0x100000000, 0x0, 0x7, './file0'}]}}, 0x68) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@data_journal}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$eJzs281rHOUfAPDvTJK26csv+dX60hc1WsXgS9KkVXvwoih4UBC81GNM0lKbNtJEsCVoFalHKQgexaPgX+BJL6KeBK96l0KRXKxeHJndmWSz3WzSdpNps58PTPZ5Zp7Zeb7zzLP7zDzZALrWUP4nidgdEb9FxEA9u7LAUP3l+uLC5N+LC5NJZNmbfya1cn8tLkyWRcv9dhWZ4TQi/SSJgy2OO3fh4pmJmZnp80V+dP7su6NzFy4+c/rsxKnpU9Pnxo8fP3Z07Pnnxp/tSJz/z+t64IPZQ/tffevK65Mnrrz90zdJGX9THB0y1G7j41nW4cNVa09DOuldxw49G1gZ1i1vhry5+mr9fyB6YrnxBuKVjyutHLChssIqmy9ljeLfDNhKkqi6BkA1yi/6/P63XDZv9FG9ay/Wb4DyuK8XS31Lb6RFmb6m+9tOGoqIE5f++TJfYmOeQwAArPBdPv55utX4L437Gsr9L7bX5oYGi7mUvRFxT0Tsi4h7I2pl74+IB1odpM2EQPMkyY3jn/TqrUe3tnz890Ixt7Vy/FeO/mKwp8jtqcXfl5w8PTN9pHZOIoajb3ueH2tzjO9f/vWz1bY1jv/yJT9+ORYs6nG1d/vKfaYm5iduJ+ZG1z6KONDbKv5kaSYgiYj9EXHgFo9x+smvD622be3421jPPNMasq8inoiI/sWFS9EUfylpPz85uiNmpo+MllfFjX7+5fIbqx3/tuLvgLz9d7a8/pfiH0wa52vnbubd67378u+frnpPM3JL1//yim3F6/sT8/PnxyK2Ja/VK924fnx53zJfls/jHz7cEH9/LPX/vbF8Jg5GRH4RPxgRD0XEw0V0j0TEoxFxuM1Z+PGlx95pd4aqbv+ppvYfXFmkqf2XE9uieU3rRM+ZH75d+Y7LyfV9/h2rpYaLNbXPvy/ax7Weet3s1QwAAAB3qzQidkeSjiyl03RkpP4//PtiZzozOzf/1MnZ985N1X8jMBh9afmka6DheehYLb1jKT9e3OaX+aPFc+PPe/pr+ZHJ2ZmpqoOHLrdrlf6f+8NvNGDr68A8GnCX0v+he+n/0L30f+heLfp/fxX1ADZfq+//DyuoB7D5mvq/aT/oIu7/oXvp/9C9Gvt/UmE9gE011x9r/0h+KySyLMvugGpsnUSkd0Q1OpNINrgX7K46wJtPVP3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA//8mc+gQ") open(0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x6, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x7}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) close(r4) 2m29.500777251s ago: executing program 40 (id=6176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000380)="aa0441d94deb5179d39cbca496d5fe18357140ceb54019d37aea6255def2afd9210d778233515c52eaebfdcf86e618caed7d1a505be6e892973d085d2f5ab6fafcc3b587e685989e9c5b5d0c06459aa65d8eaf5e871dc30007309638e82f7ba48ed481c52dd5060a7bf6b773cf7844eacd1933de06f8277c4e5c3dc93a853e20291c32fb09e18555f3fd7816baedbc1c6d34ba4e3910ff8f1a96a182ba2cfe2cca319bfb6fcea66ce25db99d27ce92ccce2c626971c43b982fb701d63ee781bfa649b41502d6cca191ca220a465e9308fc305654a24e5372a31ee281e10809c8cbae30c1c6641b3525", 0xe9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x100000004, 0xa}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) write$P9_RREADDIR(r5, &(0x7f0000000900)={0x68, 0x29, 0x2, {0x80, [{{0x1, 0x3, 0x7}, 0x9, 0xa, 0x7, './file1'}, {{0x2, 0x3, 0x4}, 0x1, 0x3, 0x7, './file0'}, {{0x40, 0x103, 0x3}, 0x100000000, 0x0, 0x7, './file0'}]}}, 0x68) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@data_journal}, {@block_validity}, {@grpjquota}]}, 0x5, 0x468, &(0x7f0000001540)="$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") open(0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x6, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x7}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000140)) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) close(r4) 1m54.648844014s ago: executing program 3 (id=6474): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x34}}, 0x4) 1m54.356895768s ago: executing program 3 (id=6479): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x6c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m54.009205436s ago: executing program 3 (id=6483): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94010000100001000000000000000000fc0000000000000000000000000000000000000000000000000100000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000048000200656362286369"], 0x194}}, 0x0) r0 = socket(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20002) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000000012ba1ee76fa7e43fbb2c2700000000000000"], 0x18, 0x48d1}, 0x8850) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c) recvmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}, 0x20}], 0x1, 0x2, 0x0) 1m53.144929626s ago: executing program 3 (id=6492): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0x5}, 0x0, 0x1010000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x2ba, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2ac, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa6, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@mptcp=@remove_addr={0x1e, 0x281, 0x3, 0x0, "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"}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x40004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1m52.931592003s ago: executing program 3 (id=6498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0) 1m50.858288221s ago: executing program 3 (id=6523): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x0, 0x787e, 0x3, "00a6400d00000000000000f8ffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r1, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x3, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bond_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0xfffffffd, @loopback, 0x40000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "7ba11d27a9e02909", "7d70211c7bf1ac7a0d742ecbc81422f4", "d01f1c43", "cadea6b75a9723ce"}, 0x28) close(r2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) 1m50.858075041s ago: executing program 41 (id=6523): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x0, 0x787e, 0x3, "00a6400d00000000000000f8ffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r1, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x3, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bond_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0xfffffffd, @loopback, 0x40000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "7ba11d27a9e02909", "7d70211c7bf1ac7a0d742ecbc81422f4", "d01f1c43", "cadea6b75a9723ce"}, 0x28) close(r2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) 1m6.087698508s ago: executing program 7 (id=6960): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xa0, 0x0, 0x0, 0xffffffff, 0xd8e, 0x0, 0x0, 0x0, 0x0}) 1m6.001670855s ago: executing program 7 (id=6961): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008100000b704000000000400850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'team_slave_1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r4, 0x1, 0x6, @multicast}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r5 = syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x2880, 0x2, 0xfffffffd, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r5, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r10, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) 1m5.869096695s ago: executing program 7 (id=6962): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = io_uring_setup(0x556d, &(0x7f0000000180)={0x0, 0x8d48, 0x400, 0x1, 0x2b2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040), 0x1) 1m5.801409561s ago: executing program 7 (id=6963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000340)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYBLOB="6219f4f3eaf12d6e3a1bd2fbe3"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r7, 0x0, 0xfffffffff7fffffc}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000618000/0x3000)=nil, 0x3000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000091e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m5.430258281s ago: executing program 7 (id=6966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0) 1m4.881763185s ago: executing program 7 (id=6968): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000006d00), 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m4.881334205s ago: executing program 42 (id=6968): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000006d00), 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7.15901656s ago: executing program 6 (id=7774): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000340), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 5.941758659s ago: executing program 6 (id=7790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}], [], 0x6b}}) 5.92921091s ago: executing program 6 (id=7791): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000065d8455626438091d004c6302b5818d75e0a5bfc708b822bf7d24dff6dbf80a3fff3aaf7258d53354045a1b22b8962e3f2e423cc0dddc8bf4ccf9a20ba604146c77bff0db05a688c69c4208703653ed4786857041f9f77c9d637f7acd6b3294839d0c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0xfe, 0xad, 0x103b, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0xff57, 0x4, 0xb2}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@delqdisc={0xa8, 0x25, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x6}, {0xa2e9934f5fb502eb, 0xb}, {0xd, 0x4}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb43}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x12}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff8c}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x40800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 5.894157683s ago: executing program 6 (id=7792): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)={[{@shortname_lower}]}, 0x11, 0x258, &(0x7f0000000440)="$eJzs2r9vG2UYB/DnQktCotRB/FIrIV7BUFhOTWaGZmglRAYEDVJBQr0SBywfdhRbkVwhmglW/gRmxMiGhDqyZOEvYGAiS8YOiEOO7bRBRqhxGkfo81n8yK+/d8+r1zo9w+2//e0Xzc1Ovll0YybLYuZ67MbDLJZiJkZ2462rt3959YPbH727urZ24/2Ubq7eWl5JKV167eePv/zh9QfdhQ9/vPTTbOwtfbJ/sPL73st7l/f/uvV5o5MandRqd1OR7rbb3eJuWU8bjU4zT+m9sl506qnR6tS3j61vlu2trV4qWhuL81ujFlKz3kvddupu91LxWdFopTzP0+J8MIn17x9WVRxUF+9EVVXPfRcLD2Lxt6hF9nzKXrievXQne2U3u3xQVbVpt8pTMcH5X12YRsOcqqOH+myaiyi/2VnfWR98DtZXG1VVlVGPa1GLP6P/Nxka1DffWbtxLR1aiq/L+8P8/Z31Zwb5zWhEP78ctVgan18e5NPx/GzMP55fiVq8OD6/MjY/F2++8Vg+j1r8+mm0o4yN6Gcf5b9aTuliv9lj+SuHvwMA+L/J05Gx81ue/9v60Sg2mK/+ez78x3x2Ia5cmPbu6fTuNYuyrG+fvBhd6vCbbFRMcMFTLOYi4kTxjROlnj1Pe5+omB0e6nnp53SLP4a7e/r3uje809S3/MTF2T+LOHuPDn3anQAAAAAAAAAAAPAkzuJ1wmnvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAON/+DgAA///L38qv") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.782569392s ago: executing program 6 (id=7796): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 4.890651444s ago: executing program 6 (id=7806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x100]}, 0x8, 0x0) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8001, r1, &(0x7f0000000a00)="b237bc21e038c9cc8febff7f1873ca6b912e66520fc7a53efc16647848cbff880ce7256d2d7b9dcc862ed3956ee9a7e3c14c1d4c29336509d0461a75bcbb00bb1a96e811fb38a2ca16c0cb3b717ea942d3d8afc43bf427ce5371fee8b19a54689efb21e8174db2f6732c0e2f77e931d38adfc9415194017543718a2ace0a8b97ab1aa7ac4ca8e0879209c33393bb436af96b8f9e66172cb4caa6874a8a3a488c573bcc02eb1678e1bf02c578bcfb88e087834008d92054a064d421325c0f07d727ce10a4c114dd", 0xc7, 0x3d52, 0x0, 0x2, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x60, r0, &(0x7f0000001a40)="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", 0xfe0, 0x5, 0x0, 0x0, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xff, r1, 0x0, 0x0, 0xffffffff, 0x0, 0x3, r1}]) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x3, &(0x7f0000000300)={[], [{@seclabel}]}, 0x1, 0x639, &(0x7f0000000e40)="$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") 4.842203858s ago: executing program 43 (id=7806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x100]}, 0x8, 0x0) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8001, r1, &(0x7f0000000a00)="b237bc21e038c9cc8febff7f1873ca6b912e66520fc7a53efc16647848cbff880ce7256d2d7b9dcc862ed3956ee9a7e3c14c1d4c29336509d0461a75bcbb00bb1a96e811fb38a2ca16c0cb3b717ea942d3d8afc43bf427ce5371fee8b19a54689efb21e8174db2f6732c0e2f77e931d38adfc9415194017543718a2ace0a8b97ab1aa7ac4ca8e0879209c33393bb436af96b8f9e66172cb4caa6874a8a3a488c573bcc02eb1678e1bf02c578bcfb88e087834008d92054a064d421325c0f07d727ce10a4c114dd", 0xc7, 0x3d52, 0x0, 0x2, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x60, r0, &(0x7f0000001a40)="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", 0xfe0, 0x5, 0x0, 0x0, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xff, r1, 0x0, 0x0, 0xffffffff, 0x0, 0x3, r1}]) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x3, &(0x7f0000000300)={[], [{@seclabel}]}, 0x1, 0x639, &(0x7f0000000e40)="$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") 4.272975944s ago: executing program 8 (id=7820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x99b, 0x8, 0xc051, 0x3, 0x2, 0xff}, 0xc) bind$rds(r3, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x80000000, 0x7fff}, {0x0}, 0x0, 0x0, 0x16, 0x5}}], 0x90}, 0x0) close(r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r4, 0x5d9e) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x83}, @control={0xda, 0x0, 0x5}}], 0x38) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x400, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0xd, 0x64, 0x0, @void, @void, @void, @value=r9}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="310000003800000003000040", @ANYRES32=r9, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) 4.136623935s ago: executing program 4 (id=7822): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0xfffffffc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRESOCT, @ANYRESHEX=r3], 0x48) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf2ff, 0x0, 0x0, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x1400) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200a00) 4.07777278s ago: executing program 5 (id=7823): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00'}, 0x18) creat(&(0x7f0000000800)='./file0\x00', 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x52}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) 4.052470782s ago: executing program 5 (id=7824): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init() ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7ffff000) fallocate(r6, 0x0, 0x0, 0x1001f0) 3.125208387s ago: executing program 8 (id=7830): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001200010a0000f4ff0000000080"], 0x14}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 3.124201018s ago: executing program 4 (id=7831): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (fail_nth: 3) 3.057703863s ago: executing program 8 (id=7832): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@remote, @in6=@private2}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)=ANY=[], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r4, 0x0, 0x80d4) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 3.031706255s ago: executing program 5 (id=7833): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00'}, 0x18) creat(&(0x7f0000000800)='./file0\x00', 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x52}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) 2.991173178s ago: executing program 4 (id=7834): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x8037fffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x9ea, 0x13, &(0x7f00000001c0)=""/19, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xd, 0x800, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='rxrpc_rx_packet\x00', r2, 0x0, 0x6}, 0x18) 2.801778473s ago: executing program 5 (id=7836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032abd7000fddbdf25050000000e0001006e657464467673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800001, 0x6, 0x51, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x48) 2.709379851s ago: executing program 2 (id=7837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}], [], 0x6b}}) 2.466114521s ago: executing program 5 (id=7838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000003f80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 2) 2.11025096s ago: executing program 4 (id=7839): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000086dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.087099032s ago: executing program 4 (id=7840): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='fsi_master_aspeed_cfam_reset\x00', r0, 0x0, 0x10}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3f, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r7, 0x7, '\x00', 0x0, r6, 0x0, 0x3}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.807595424s ago: executing program 4 (id=7841): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0xfffffffc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRESOCT, @ANYRESHEX=r3], 0x48) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf2ff, 0x0, 0x0, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x1400) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200a00) 1.804939174s ago: executing program 2 (id=7842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7ff}]}}}]}, 0x3c}}, 0x0) 1.711569432s ago: executing program 5 (id=7843): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init() ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7ffff000) fallocate(r6, 0x0, 0x0, 0x1001f0) 1.557566044s ago: executing program 2 (id=7844): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000000020000009500001600000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x3, 0x0) 1.48121378s ago: executing program 2 (id=7845): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00'}, 0x18) creat(&(0x7f0000000800)='./file0\x00', 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x52}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) 1.468762521s ago: executing program 2 (id=7846): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r1}, 0x18) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x200100, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES64=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x5, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000007c0)={{r0}, 0x0, 0x0, @unused=[0x689, 0x5, 0x8, 0x3ff], @name="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"}) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x1, 0x5) r9 = syz_pidfd_open(r5, 0x0) setns(r9, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 786.746146ms ago: executing program 8 (id=7847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032abd7000fddbdf25050000000e0001006e657464467673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800001, 0x6, 0x51, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x48) 607.095321ms ago: executing program 2 (id=7848): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x468302, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00') r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000540)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x5, 0x1, 0x1, 'queue0\x00', 0x9}) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) getrandom(0xfffffffffffffffe, 0x0, 0x2) connect$pppoe(r7, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 45.477606ms ago: executing program 8 (id=7849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000065d8455626438091d004c6302b5818d75e0a5bfc708b822bf7d24dff6dbf80a3fff3aaf7258d53354045a1b22b8962e3f2e423cc0dddc8bf4ccf9a20ba604146c77bff0db05a688c69c4208703653ed4786857041f9f77c9d637f7acd6b3294839d0c", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0xfe, 0xad, 0x103b, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0xff57, 0x4, 0xb2}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@delqdisc={0xa8, 0x25, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x6}, {0xa2e9934f5fb502eb, 0xb}, {0xd, 0x4}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb43}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x12}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff8c}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 0s ago: executing program 8 (id=7850): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_io_uring_setup(0x1c84, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='writeback_sb_inodes_requeue\x00', r5}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa6402a6c6a1130800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037a00c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r7, @ANYRES8=r7], 0x0, 0x3}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x600c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) kernel console output (not intermixed with test programs): id=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.2.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 537.695875][ T29] audit: type=1326 audit(1755740475.601:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.2.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 537.706732][T25857] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7126'. [ 537.728503][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7126'. [ 537.737537][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7126'. [ 537.742615][T25860] fido_id[25860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 537.776618][ T29] audit: type=1326 audit(1755740475.701:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.2.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 537.794172][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7126'. [ 537.825294][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7126'. [ 537.834991][T25863] loop2: detected capacity change from 0 to 128 [ 537.859154][ T29] audit: type=1326 audit(1755740475.851:9604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.2.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 537.908840][T25863] FAT-fs (loop2): Directory bread(block 162) failed [ 537.915539][T25863] FAT-fs (loop2): Directory bread(block 163) failed [ 537.928438][T25863] FAT-fs (loop2): Directory bread(block 164) failed [ 537.973247][T25863] FAT-fs (loop2): Directory bread(block 165) failed [ 537.980057][T25863] FAT-fs (loop2): Directory bread(block 166) failed [ 538.007764][T25863] FAT-fs (loop2): Directory bread(block 167) failed [ 538.015026][T25863] FAT-fs (loop2): Directory bread(block 168) failed [ 538.059095][T25874] pim6reg: entered allmulticast mode [ 538.066256][T25874] pim6reg: left allmulticast mode [ 538.172144][T25883] netlink: 'syz.8.7127': attribute type 11 has an invalid length. [ 538.240803][T25863] FAT-fs (loop2): Directory bread(block 169) failed [ 538.340539][T25887] loop4: detected capacity change from 0 to 512 [ 538.453573][T25857] FAT-fs (loop2): Directory bread(block 162) failed [ 538.468061][T25857] FAT-fs (loop2): Directory bread(block 163) failed [ 538.482678][T25887] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7133: casefold flag without casefold feature [ 538.503580][T25857] bio_check_eod: 16 callbacks suppressed [ 538.503595][T25857] syz.2.7126: attempt to access beyond end of device [ 538.503595][T25857] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 538.522896][T25887] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7133: couldn't read orphan inode 15 (err -117) [ 538.523492][T25857] syz.2.7126: attempt to access beyond end of device [ 538.523492][T25857] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 538.552719][T25887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.847324][T25903] loop8: detected capacity change from 0 to 128 [ 538.900567][T25903] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 538.932962][T25903] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.151937][T25911] netlink: 'syz.6.7142': attribute type 4 has an invalid length. [ 539.171921][T25911] loop6: detected capacity change from 0 to 764 [ 539.184199][T25911] iso9660: Unknown parameter '€' [ 539.230672][T25899] loop5: detected capacity change from 0 to 1024 [ 539.246578][T25916] pim6reg: entered allmulticast mode [ 539.253508][T25916] pim6reg: left allmulticast mode [ 539.262862][T25899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.277455][T25899] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.295833][T25899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.305192][T25899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.387802][T25924] loop6: detected capacity change from 0 to 512 [ 539.411837][T25924] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.7144: casefold flag without casefold feature [ 539.425909][T25924] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7144: couldn't read orphan inode 15 (err -117) [ 539.441953][T25924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.455821][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.685243][T25353] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.728524][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.783193][T25938] 9pnet_fd: Insufficient options for proto=fd [ 539.976792][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.121397][T25958] netlink: 'syz.6.7153': attribute type 11 has an invalid length. [ 540.143923][T25956] loop5: detected capacity change from 0 to 512 [ 540.271964][T25962] FAULT_INJECTION: forcing a failure. [ 540.271964][T25962] name failslab, interval 1, probability 0, space 0, times 0 [ 540.284663][T25962] CPU: 1 UID: 0 PID: 25962 Comm: syz.4.7156 Not tainted syzkaller #0 PREEMPT(voluntary) [ 540.284687][T25962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.284699][T25962] Call Trace: [ 540.284720][T25962] [ 540.284748][T25962] __dump_stack+0x1d/0x30 [ 540.284769][T25962] dump_stack_lvl+0xe8/0x140 [ 540.284811][T25962] dump_stack+0x15/0x1b [ 540.284829][T25962] should_fail_ex+0x265/0x280 [ 540.284898][T25962] ? alloc_pipe_info+0xae/0x350 [ 540.284922][T25962] should_failslab+0x8c/0xb0 [ 540.284946][T25962] __kmalloc_cache_noprof+0x4c/0x320 [ 540.284981][T25962] alloc_pipe_info+0xae/0x350 [ 540.285023][T25962] splice_direct_to_actor+0x592/0x680 [ 540.285044][T25962] ? kstrtouint_from_user+0x9f/0xf0 [ 540.285100][T25962] ? __pfx_direct_splice_actor+0x10/0x10 [ 540.285121][T25962] ? __rcu_read_unlock+0x4f/0x70 [ 540.285139][T25962] ? __rcu_read_unlock+0x4f/0x70 [ 540.285156][T25962] ? avc_policy_seqno+0x15/0x30 [ 540.285245][T25962] ? selinux_file_permission+0x1e4/0x320 [ 540.285318][T25962] do_splice_direct+0xda/0x150 [ 540.285334][T25962] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 540.285359][T25962] do_sendfile+0x380/0x650 [ 540.285384][T25962] __x64_sys_sendfile64+0x105/0x150 [ 540.285480][T25962] x64_sys_call+0x2bb0/0x2ff0 [ 540.285580][T25962] do_syscall_64+0xd2/0x200 [ 540.285602][T25962] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 540.285646][T25962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 540.285744][T25962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.285767][T25962] RIP: 0033:0x7f24eda1ebe9 [ 540.285782][T25962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.285796][T25962] RSP: 002b:00007f24ec487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 540.285830][T25962] RAX: ffffffffffffffda RBX: 00007f24edc45fa0 RCX: 00007f24eda1ebe9 [ 540.285843][T25962] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 540.285856][T25962] RBP: 00007f24ec487090 R08: 0000000000000000 R09: 0000000000000000 [ 540.285869][T25962] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 540.285883][T25962] R13: 00007f24edc46038 R14: 00007f24edc45fa0 R15: 00007ffe3a4b2d88 [ 540.285902][T25962] [ 540.583868][T25956] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.7155: casefold flag without casefold feature [ 540.616051][T25956] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7155: couldn't read orphan inode 15 (err -117) [ 540.645142][T25956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.695203][T25977] loop8: detected capacity change from 0 to 1024 [ 540.729746][T25977] EXT4-fs: Invalid want_extra_isize 7 [ 540.739870][T25977] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7162'. [ 540.756079][T25980] lo speed is unknown, defaulting to 1000 [ 540.776222][T25984] binfmt_misc: register: failed to install interpreter file ./file0 [ 540.785210][T25980] lo speed is unknown, defaulting to 1000 [ 540.804611][T25980] lo speed is unknown, defaulting to 1000 [ 540.818435][T25980] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 540.857394][T25980] lo speed is unknown, defaulting to 1000 [ 540.867344][T25986] loop2: detected capacity change from 0 to 1024 [ 540.887881][T25980] lo speed is unknown, defaulting to 1000 [ 540.893908][T25980] lo speed is unknown, defaulting to 1000 [ 540.914980][T25986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.916893][T25980] lo speed is unknown, defaulting to 1000 [ 540.933076][T25980] lo speed is unknown, defaulting to 1000 [ 540.939579][T25980] lo speed is unknown, defaulting to 1000 [ 540.945932][T25986] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.011091][T25997] pim6reg: entered allmulticast mode [ 541.040182][T25986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.044563][T25999] vlan2: entered allmulticast mode [ 541.063779][T25986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.078244][T25997] pim6reg: left allmulticast mode [ 541.266488][T26017] binfmt_misc: register: failed to install interpreter file ./file0 [ 541.333692][T26021] loop8: detected capacity change from 0 to 4096 [ 541.345944][T26021] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 541.374947][T26021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.400218][T26025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7180'. [ 541.459154][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.494560][T26029] siw: device registration error -23 [ 541.577349][T26027] loop6: detected capacity change from 0 to 512 [ 541.686900][T20144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.752159][T26037] pim6reg: entered allmulticast mode [ 541.910042][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.922168][T26055] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7192'. [ 541.973826][T26057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7194'. [ 542.002549][T26061] loop6: detected capacity change from 0 to 2048 [ 542.020076][T26061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.025598][T26065] FAULT_INJECTION: forcing a failure. [ 542.025598][T26065] name failslab, interval 1, probability 0, space 0, times 0 [ 542.044792][T26065] CPU: 1 UID: 0 PID: 26065 Comm: syz.5.7195 Not tainted syzkaller #0 PREEMPT(voluntary) [ 542.044808][T26065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.044815][T26065] Call Trace: [ 542.044819][T26065] [ 542.044824][T26065] __dump_stack+0x1d/0x30 [ 542.044837][T26065] dump_stack_lvl+0xe8/0x140 [ 542.044927][T26065] dump_stack+0x15/0x1b [ 542.044936][T26065] should_fail_ex+0x265/0x280 [ 542.045017][T26065] should_failslab+0x8c/0xb0 [ 542.045030][T26065] kmem_cache_alloc_node_noprof+0x57/0x320 [ 542.045046][T26065] ? __alloc_skb+0x101/0x320 [ 542.045064][T26065] __alloc_skb+0x101/0x320 [ 542.045138][T26065] ? audit_log_start+0x365/0x6c0 [ 542.045156][T26065] audit_log_start+0x380/0x6c0 [ 542.045214][T26065] audit_seccomp+0x48/0x100 [ 542.045228][T26065] ? __seccomp_filter+0x68c/0x10d0 [ 542.045278][T26065] __seccomp_filter+0x69d/0x10d0 [ 542.045291][T26065] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 542.045306][T26065] ? vfs_write+0x7e8/0x960 [ 542.045357][T26065] __secure_computing+0x82/0x150 [ 542.045368][T26065] syscall_trace_enter+0xcf/0x1e0 [ 542.045382][T26065] do_syscall_64+0xac/0x200 [ 542.045397][T26065] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 542.045428][T26065] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 542.045505][T26065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.045517][T26065] RIP: 0033:0x7ffb1572ebe9 [ 542.045526][T26065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.045570][T26065] RSP: 002b:00007ffb14197038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 542.045595][T26065] RAX: ffffffffffffffda RBX: 00007ffb15955fa0 RCX: 00007ffb1572ebe9 [ 542.045661][T26065] RDX: 0000000000000000 RSI: ffffffff80000400 RDI: ffffffffffffffff [ 542.045668][T26065] RBP: 00007ffb14197090 R08: 0000000000000000 R09: 0000000000000000 [ 542.045675][T26065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.045683][T26065] R13: 00007ffb15956038 R14: 00007ffb15955fa0 R15: 00007ffd51c68d88 [ 542.045693][T26065] [ 542.322449][T26069] lo speed is unknown, defaulting to 1000 [ 542.328721][T26069] lo speed is unknown, defaulting to 1000 [ 542.649596][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 542.649673][ T29] audit: type=1326 audit(1755740480.261:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26062 comm="syz.5.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ffb1572d5fc code=0x7ffc0000 [ 542.679082][ T29] audit: type=1326 audit(1755740480.261:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26062 comm="syz.5.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffb1572d69f code=0x7ffc0000 [ 542.702369][ T29] audit: type=1326 audit(1755740480.261:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26062 comm="syz.5.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffb1572d84a code=0x7ffc0000 [ 542.725679][ T29] audit: type=1326 audit(1755740480.261:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26062 comm="syz.5.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1572ebe9 code=0x7ffc0000 [ 542.749379][ T29] audit: type=1326 audit(1755740480.261:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26062 comm="syz.5.7195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1572ebe9 code=0x7ffc0000 [ 542.963461][T26078] netlink: 'syz.4.7198': attribute type 39 has an invalid length. [ 543.191082][T26080] loop5: detected capacity change from 0 to 512 [ 543.275113][T26088] loop8: detected capacity change from 0 to 1024 [ 543.283963][T26080] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.7199: casefold flag without casefold feature [ 543.296748][T26088] EXT4-fs: Invalid want_extra_isize 7 [ 543.306290][T26088] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7202'. [ 543.357250][T26080] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7199: couldn't read orphan inode 15 (err -117) [ 543.412613][T26080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.438425][T26093] netlink: 'syz.2.7204': attribute type 4 has an invalid length. [ 543.449652][T26093] loop2: detected capacity change from 0 to 764 [ 543.449974][T26093] iso9660: Unknown parameter '€' [ 543.467361][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.484139][ T29] audit: type=1326 audit(1755740481.481:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.4.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 543.507677][ T29] audit: type=1326 audit(1755740481.481:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.4.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 543.531171][ T29] audit: type=1326 audit(1755740481.481:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.4.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 543.567478][ T29] audit: type=1326 audit(1755740481.561:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.4.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 543.591011][ T29] audit: type=1326 audit(1755740481.561:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26098 comm="syz.4.7207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 543.712696][T26104] loop6: detected capacity change from 0 to 512 [ 543.950226][T26116] lo speed is unknown, defaulting to 1000 [ 543.956407][T26116] lo speed is unknown, defaulting to 1000 [ 544.304325][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7213'. [ 544.354744][T26125] netlink: 'syz.2.7212': attribute type 11 has an invalid length. [ 544.573368][T26133] siw: device registration error -23 [ 544.656351][T26136] loop2: detected capacity change from 0 to 1024 [ 544.669414][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.686723][T26136] EXT4-fs: Invalid want_extra_isize 7 [ 544.726784][T26136] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7218'. [ 544.776968][T26140] netlink: 220 bytes leftover after parsing attributes in process `syz.5.7219'. [ 544.786033][T26140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7219'. [ 544.795054][T26140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7219'. [ 544.816519][T26140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7219'. [ 544.840237][T26140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7219'. [ 544.946083][T26152] loop8: detected capacity change from 0 to 2048 [ 545.018084][T26152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.051029][ T3388] hid_parser_main: 17 callbacks suppressed [ 545.051045][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.064660][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.117748][T26163] netlink: 'syz.2.7225': attribute type 39 has an invalid length. [ 545.133051][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.140525][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.148100][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.155470][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.162885][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.170382][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.177873][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.185261][ T3388] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.215272][T26159] loop6: detected capacity change from 0 to 512 [ 545.240577][T26159] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.7224: casefold flag without casefold feature [ 545.259461][T26159] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7224: couldn't read orphan inode 15 (err -117) [ 545.281563][T26159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.305704][ T3388] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 545.316205][T26171] loop5: detected capacity change from 0 to 512 [ 545.356097][T26174] pim6reg: left allmulticast mode [ 545.390618][T26171] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.7229: casefold flag without casefold feature [ 545.436941][T26171] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7229: couldn't read orphan inode 15 (err -117) [ 545.485031][T26171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.559017][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.669642][T26194] loop8: detected capacity change from 0 to 1024 [ 545.710529][T26194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.736300][T26194] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.773260][T26194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.802027][T26194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.928994][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 545.974909][T26209] fido_id[26209]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 546.062376][T26214] loop2: detected capacity change from 0 to 4096 [ 546.077530][T26214] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 546.107476][T26214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.154741][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.166066][T20144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.247240][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7248'. [ 546.338247][T26228] loop4: detected capacity change from 0 to 2048 [ 546.588121][T26249] pim6reg: entered allmulticast mode [ 546.604810][T26249] pim6reg: left allmulticast mode [ 546.658186][T26255] netlink: 'syz.6.7260': attribute type 39 has an invalid length. [ 546.745417][T26261] netlink: 'syz.2.7262': attribute type 4 has an invalid length. [ 546.768701][T26261] loop2: detected capacity change from 0 to 764 [ 546.780025][T26267] pim6reg: entered allmulticast mode [ 546.791572][T26261] iso9660: Unknown parameter '€' [ 546.799537][T26267] pim6reg: left allmulticast mode [ 546.839483][T26259] loop5: detected capacity change from 0 to 512 [ 546.839571][T26269] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7266'. [ 546.883828][T26259] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.7261: casefold flag without casefold feature [ 546.913817][T26259] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7261: couldn't read orphan inode 15 (err -117) [ 547.004962][T26284] pim6reg: entered allmulticast mode [ 547.041861][T26284] pim6reg: left allmulticast mode [ 547.216155][T26294] loop2: detected capacity change from 0 to 512 [ 547.349417][T26302] lo speed is unknown, defaulting to 1000 [ 547.355952][T26302] lo speed is unknown, defaulting to 1000 [ 547.646815][T26304] netlink: 'syz.8.7276': attribute type 4 has an invalid length. [ 547.655351][T26290] loop4: detected capacity change from 0 to 512 [ 547.732393][T26310] loop8: detected capacity change from 0 to 764 [ 547.778077][T26310] iso9660: Unknown parameter '€' [ 547.926284][T26314] pim6reg: entered allmulticast mode [ 547.962890][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 547.962952][ T29] audit: type=1326 audit(1755740485.961:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 547.992780][ T29] audit: type=1326 audit(1755740485.961:9693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.027116][T26317] pim6reg: left allmulticast mode [ 548.170018][ T29] audit: type=1326 audit(1755740486.041:9694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.193550][ T29] audit: type=1326 audit(1755740486.041:9695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.217082][ T29] audit: type=1326 audit(1755740486.041:9696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.240529][ T29] audit: type=1326 audit(1755740486.041:9697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.264111][ T29] audit: type=1326 audit(1755740486.051:9698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.287563][ T29] audit: type=1326 audit(1755740486.051:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.311058][ T29] audit: type=1326 audit(1755740486.051:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.334540][ T29] audit: type=1326 audit(1755740486.051:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26315 comm="syz.6.7280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 548.434240][T26326] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.488999][T26326] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.508088][T26336] loop6: detected capacity change from 0 to 128 [ 548.524735][T26327] loop4: detected capacity change from 0 to 2048 [ 548.569289][T26336] ext4 filesystem being mounted at /400/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 548.584580][T26326] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.667944][T26326] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.733703][T26342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.751524][ T9980] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.777239][ T9980] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.785569][ T9980] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.815121][ T9980] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.960940][T26352] __nla_validate_parse: 4 callbacks suppressed [ 548.961026][T26352] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7290'. [ 549.005965][T26356] pim6reg: entered allmulticast mode [ 549.012230][T26356] pim6reg: left allmulticast mode [ 549.105361][T26361] netlink: 'syz.8.7293': attribute type 4 has an invalid length. [ 549.153690][T26367] loop5: detected capacity change from 0 to 128 [ 549.168399][T26363] loop6: detected capacity change from 0 to 1024 [ 549.176681][T26367] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.247979][T26363] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.270971][T26370] netlink: 220 bytes leftover after parsing attributes in process `syz.8.7297'. [ 549.280056][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7297'. [ 549.289055][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7297'. [ 549.332784][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7297'. [ 549.352623][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7297'. [ 549.435296][T26380] loop8: detected capacity change from 0 to 4096 [ 549.457702][T26380] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 549.594304][T26388] netlink: 'syz.4.7301': attribute type 4 has an invalid length. [ 549.618411][T26388] loop4: detected capacity change from 0 to 764 [ 549.620272][T26394] pim6reg: entered allmulticast mode [ 549.632994][T26394] pim6reg: left allmulticast mode [ 549.636830][T26388] iso9660: Unknown parameter '€' [ 549.717016][T26399] siw: device registration error -23 [ 549.749753][T26396] loop4: detected capacity change from 0 to 512 [ 549.829862][T26396] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7304: casefold flag without casefold feature [ 549.871080][T26396] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7304: couldn't read orphan inode 15 (err -117) [ 550.021333][T26408] lo speed is unknown, defaulting to 1000 [ 550.027775][T26408] lo speed is unknown, defaulting to 1000 [ 550.228540][T26411] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7308'. [ 550.237811][T26411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7308'. [ 550.246749][T26411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7308'. [ 550.301240][T26412] loop6: detected capacity change from 0 to 128 [ 550.320381][T26411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7308'. [ 550.331108][T22490] EXT4-fs unmount: 16 callbacks suppressed [ 550.331121][T22490] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.362965][T26412] FAT-fs (loop6): Directory bread(block 162) failed [ 550.388506][T26412] FAT-fs (loop6): Directory bread(block 163) failed [ 550.411019][T26412] FAT-fs (loop6): Directory bread(block 164) failed [ 550.432428][T26412] FAT-fs (loop6): Directory bread(block 165) failed [ 550.453945][T26412] FAT-fs (loop6): Directory bread(block 166) failed [ 550.475380][T26412] FAT-fs (loop6): Directory bread(block 167) failed [ 550.497081][T26412] FAT-fs (loop6): Directory bread(block 168) failed [ 550.519731][T26412] FAT-fs (loop6): Directory bread(block 169) failed [ 550.542442][T26411] FAT-fs (loop6): Directory bread(block 162) failed [ 550.565068][T26411] FAT-fs (loop6): Directory bread(block 163) failed [ 550.625241][T26411] syz.6.7308: attempt to access beyond end of device [ 550.625241][T26411] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 550.692439][T26411] syz.6.7308: attempt to access beyond end of device [ 550.692439][T26411] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 550.883773][T26425] pim6reg: entered allmulticast mode [ 550.904691][T26428] netlink: 'syz.6.7314': attribute type 4 has an invalid length. [ 550.959088][T26423] loop6: detected capacity change from 0 to 764 [ 550.986684][T26430] pim6reg: left allmulticast mode [ 550.993433][T26423] iso9660: Unknown parameter '€' [ 551.061040][ T3357] hid_parser_main: 44 callbacks suppressed [ 551.061058][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.074580][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.125631][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.133097][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.140543][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.148006][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.155524][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.163016][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.170597][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.178009][ T3357] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 551.193011][ T3357] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 551.338957][T26444] fido_id[26444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 551.473869][T26451] lo speed is unknown, defaulting to 1000 [ 551.480306][T26451] lo speed is unknown, defaulting to 1000 [ 551.989358][T26468] netlink: 'syz.2.7328': attribute type 4 has an invalid length. [ 552.010284][T26463] loop6: detected capacity change from 0 to 4096 [ 552.066159][T26463] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 552.154131][T26472] loop8: detected capacity change from 0 to 128 [ 552.173357][T26463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.208808][T26472] FAT-fs (loop8): Directory bread(block 162) failed [ 552.215419][T26472] FAT-fs (loop8): Directory bread(block 163) failed [ 552.278678][T26472] FAT-fs (loop8): Directory bread(block 164) failed [ 552.316149][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.325968][T26472] FAT-fs (loop8): Directory bread(block 165) failed [ 552.364387][T26472] FAT-fs (loop8): Directory bread(block 166) failed [ 552.395732][T26472] FAT-fs (loop8): Directory bread(block 167) failed [ 552.430431][T26472] FAT-fs (loop8): Directory bread(block 168) failed [ 552.430453][T26472] FAT-fs (loop8): Directory bread(block 169) failed [ 552.432119][T26472] FAT-fs (loop8): Directory bread(block 162) failed [ 552.432209][T26472] FAT-fs (loop8): Directory bread(block 163) failed [ 552.432482][T26472] syz.8.7330: attempt to access beyond end of device [ 552.432482][T26472] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 552.432548][T26472] syz.8.7330: attempt to access beyond end of device [ 552.432548][T26472] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 552.541968][T26486] loop6: detected capacity change from 0 to 512 [ 552.580513][T26485] loop8: detected capacity change from 0 to 128 [ 552.592138][T26485] FAT-fs (loop8): Directory bread(block 162) failed [ 552.592228][T26485] FAT-fs (loop8): Directory bread(block 163) failed [ 552.592303][T26485] FAT-fs (loop8): Directory bread(block 164) failed [ 552.592321][T26485] FAT-fs (loop8): Directory bread(block 165) failed [ 552.592339][T26485] FAT-fs (loop8): Directory bread(block 166) failed [ 552.592357][T26485] FAT-fs (loop8): Directory bread(block 167) failed [ 552.592375][T26485] FAT-fs (loop8): Directory bread(block 168) failed [ 552.592392][T26485] FAT-fs (loop8): Directory bread(block 169) failed [ 552.608543][T26485] FAT-fs (loop8): Directory bread(block 162) failed [ 552.608564][T26485] FAT-fs (loop8): Directory bread(block 163) failed [ 552.609497][T26485] syz.8.7335: attempt to access beyond end of device [ 552.609497][T26485] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 552.609578][T26485] syz.8.7335: attempt to access beyond end of device [ 552.609578][T26485] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 552.684238][T26489] netlink: 'syz.8.7336': attribute type 39 has an invalid length. [ 552.759242][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.769874][T26495] pim6reg: entered allmulticast mode [ 552.782138][T26497] binfmt_misc: register: failed to install interpreter file ./file0 [ 552.814430][T26502] pim6reg: left allmulticast mode [ 552.873179][T26501] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.965173][T26501] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.995005][T26517] loop6: detected capacity change from 0 to 1024 [ 553.003287][T26517] EXT4-fs: Invalid want_extra_isize 7 [ 553.028181][T26501] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.109453][T26501] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.180159][T26541] pim6reg: entered allmulticast mode [ 553.190041][ T9988] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.231004][ T9988] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.257104][ T9988] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.280018][T26559] siw: device registration error -23 [ 553.285901][ T9988] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.403053][T26568] loop6: detected capacity change from 0 to 1024 [ 553.419932][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 553.419943][ T29] audit: type=1326 audit(1755740491.421:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26572 comm="syz.8.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4117b2ebe9 code=0x7ffc0000 [ 553.476971][T26573] loop4: detected capacity change from 0 to 4096 [ 553.508954][T26576] pim6reg: entered allmulticast mode [ 553.570836][T26579] lo speed is unknown, defaulting to 1000 [ 553.577305][T26579] lo speed is unknown, defaulting to 1000 [ 553.774792][ T29] audit: type=1326 audit(1755740491.541:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26572 comm="syz.8.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4117b2ebe9 code=0x7ffc0000 [ 553.816556][ T29] audit: type=1326 audit(1755740491.811:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26572 comm="syz.8.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4117b2ebe9 code=0x7ffc0000 [ 553.840076][ T29] audit: type=1326 audit(1755740491.811:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26572 comm="syz.8.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4117b2ebe9 code=0x7ffc0000 [ 553.863543][ T29] audit: type=1326 audit(1755740491.811:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26572 comm="syz.8.7373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4117b2ebe9 code=0x7ffc0000 [ 553.895039][T26573] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 553.987613][T26573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.003414][T26568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.022990][T26582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 554.041628][T26568] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.137176][T26600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.189027][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.208442][T26600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.504280][ T29] audit: type=1326 audit(1755740492.501:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26616 comm="syz.4.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 554.576404][ T29] audit: type=1326 audit(1755740492.541:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26616 comm="syz.4.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 554.599967][ T29] audit: type=1326 audit(1755740492.541:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26616 comm="syz.4.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 554.623545][ T29] audit: type=1326 audit(1755740492.541:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26616 comm="syz.4.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 554.772678][T26621] loop8: detected capacity change from 0 to 2048 [ 554.807208][ T29] audit: type=1326 audit(1755740492.801:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.4.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 554.807501][T26621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.867067][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.953795][T26637] binfmt_misc: register: failed to install interpreter file ./file0 [ 555.149865][T26645] loop6: detected capacity change from 0 to 4096 [ 555.201874][T26645] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 555.221555][T26645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.279939][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.482431][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.549185][T26660] loop6: detected capacity change from 0 to 1024 [ 555.571608][T26663] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.584845][T26660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.616540][T26660] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.629488][T26666] loop8: detected capacity change from 0 to 128 [ 555.639946][T26663] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.662055][T26666] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 555.664355][T26660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.682966][T26666] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 555.702638][T26660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.759230][T26663] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.886105][T26663] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.958768][T12071] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.981288][T12071] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.999681][T12071] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.026836][T12071] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.046874][T25353] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 556.101237][T26675] binfmt_misc: register: failed to install interpreter file ./file0 [ 556.184665][T26685] loop8: detected capacity change from 0 to 1024 [ 556.193583][T26685] EXT4-fs: Invalid want_extra_isize 7 [ 556.211963][T26688] __nla_validate_parse: 20 callbacks suppressed [ 556.211975][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7411'. [ 556.228978][T26688] 9pnet_fd: Insufficient options for proto=fd [ 556.275741][T26693] loop5: detected capacity change from 0 to 4096 [ 556.289562][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7416'. [ 556.299290][T26698] 9pnet_fd: Insufficient options for proto=fd [ 556.316982][T26693] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 556.339099][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.351960][T26693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.381542][T26707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7421'. [ 556.427671][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.480237][T26713] netlink: 'syz.2.7422': attribute type 4 has an invalid length. [ 556.537121][T26723] loop8: detected capacity change from 0 to 1024 [ 556.543859][T26723] EXT4-fs: Invalid want_extra_isize 7 [ 556.582426][T26731] loop4: detected capacity change from 0 to 1024 [ 556.598772][T26731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.621115][T26731] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.658172][T26731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.666703][T26731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.969086][T26733] loop8: detected capacity change from 0 to 512 [ 557.026184][T26733] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.7432: casefold flag without casefold feature [ 557.040664][T26733] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.7432: couldn't read orphan inode 15 (err -117) [ 557.058828][T26733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.248482][T26765] loop5: detected capacity change from 0 to 1024 [ 557.255205][T26765] EXT4-fs: Invalid want_extra_isize 7 [ 557.264331][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.290734][T26767] netlink: 'syz.4.7443': attribute type 39 has an invalid length. [ 557.505922][T26780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7448'. [ 557.516775][T26780] 9pnet_fd: Insufficient options for proto=fd [ 557.601932][T26785] netlink: 'syz.6.7445': attribute type 11 has an invalid length. [ 557.721686][T26791] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.833594][T26788] loop4: detected capacity change from 0 to 128 [ 557.864962][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.879995][T26791] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.900180][T26788] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.927063][T26788] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 557.956683][T26798] lo speed is unknown, defaulting to 1000 [ 557.962803][T26798] lo speed is unknown, defaulting to 1000 [ 558.150203][T26805] loop8: detected capacity change from 0 to 2048 [ 558.262988][T26791] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.287687][T26805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.426745][T26791] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.502926][ T9988] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.526400][ T9988] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.544818][ T9988] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.588749][ T9988] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.597930][T23793] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 559.038231][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.135059][T26839] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7463'. [ 559.173628][T26843] loop8: detected capacity change from 0 to 1024 [ 559.180708][T26843] EXT4-fs: Invalid want_extra_isize 7 [ 559.219961][T26834] loop4: detected capacity change from 0 to 512 [ 559.251553][T26834] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7461: casefold flag without casefold feature [ 559.281837][T26834] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7461: couldn't read orphan inode 15 (err -117) [ 559.315964][T26848] loop8: detected capacity change from 0 to 512 [ 559.325907][T26834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.573445][T26869] loop6: detected capacity change from 0 to 1024 [ 559.597481][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 559.597495][ T29] audit: type=1326 audit(1755740497.601:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 559.741019][T26871] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7474'. [ 559.750115][T26871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7474'. [ 559.759115][T26871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7474'. [ 559.817612][T26869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.933393][T26869] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.977721][T26871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7474'. [ 559.983371][ T29] audit: type=1326 audit(1755740497.631:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 559.988081][T26881] loop8: detected capacity change from 0 to 1024 [ 560.010131][ T29] audit: type=1326 audit(1755740497.631:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 560.039982][ T29] audit: type=1326 audit(1755740497.741:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 560.046907][T26871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7474'. [ 560.063515][ T29] audit: type=1326 audit(1755740497.741:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 560.095914][ T29] audit: type=1326 audit(1755740497.741:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 560.119450][ T29] audit: type=1326 audit(1755740497.741:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 560.126740][T26881] EXT4-fs: Invalid want_extra_isize 7 [ 560.150163][T26869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.171061][ T29] audit: type=1326 audit(1755740498.161:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 560.190597][T26869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.194626][ T29] audit: type=1326 audit(1755740498.161:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26870 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70389febe9 code=0x7ffc0000 [ 560.236993][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.269936][ T29] audit: type=1326 audit(1755740498.271:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26890 comm="syz.4.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 560.338838][T26891] loop4: detected capacity change from 0 to 128 [ 560.367438][T26891] FAT-fs (loop4): Directory bread(block 162) failed [ 560.390098][T26891] FAT-fs (loop4): Directory bread(block 163) failed [ 560.390121][T26891] FAT-fs (loop4): Directory bread(block 164) failed [ 560.390139][T26891] FAT-fs (loop4): Directory bread(block 165) failed [ 560.390155][T26891] FAT-fs (loop4): Directory bread(block 166) failed [ 560.390170][T26891] FAT-fs (loop4): Directory bread(block 167) failed [ 560.390245][T26891] FAT-fs (loop4): Directory bread(block 168) failed [ 560.390264][T26891] FAT-fs (loop4): Directory bread(block 169) failed [ 560.395243][T26891] FAT-fs (loop4): Directory bread(block 162) failed [ 560.395263][T26891] FAT-fs (loop4): Directory bread(block 163) failed [ 560.395538][T26891] syz.4.7478: attempt to access beyond end of device [ 560.395538][T26891] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 560.395558][T26891] syz.4.7478: attempt to access beyond end of device [ 560.395558][T26891] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 560.407310][T26897] pim6reg: left allmulticast mode [ 560.463999][T26898] loop8: detected capacity change from 0 to 512 [ 560.615808][T26911] netlink: 'syz.4.7487': attribute type 39 has an invalid length. [ 560.632707][T26913] FAULT_INJECTION: forcing a failure. [ 560.632707][T26913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.645790][T26913] CPU: 0 UID: 0 PID: 26913 Comm: syz.5.7486 Not tainted syzkaller #0 PREEMPT(voluntary) [ 560.645818][T26913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.645830][T26913] Call Trace: [ 560.645836][T26913] [ 560.645843][T26913] __dump_stack+0x1d/0x30 [ 560.645861][T26913] dump_stack_lvl+0xe8/0x140 [ 560.645923][T26913] dump_stack+0x15/0x1b [ 560.645941][T26913] should_fail_ex+0x265/0x280 [ 560.646026][T26913] should_fail+0xb/0x20 [ 560.646045][T26913] should_fail_usercopy+0x1a/0x20 [ 560.646067][T26913] _copy_to_user+0x20/0xa0 [ 560.646093][T26913] simple_read_from_buffer+0xb5/0x130 [ 560.646113][T26913] proc_fail_nth_read+0x10e/0x150 [ 560.646253][T26913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.646278][T26913] vfs_read+0x1a8/0x770 [ 560.646298][T26913] ? __rcu_read_unlock+0x4f/0x70 [ 560.646368][T26913] ? __fget_files+0x184/0x1c0 [ 560.646387][T26913] ? finish_task_switch+0xad/0x2b0 [ 560.646409][T26913] ksys_read+0xda/0x1a0 [ 560.646432][T26913] __x64_sys_read+0x40/0x50 [ 560.646454][T26913] x64_sys_call+0x27bc/0x2ff0 [ 560.646544][T26913] do_syscall_64+0xd2/0x200 [ 560.646596][T26913] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 560.646620][T26913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 560.646699][T26913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.646761][T26913] RIP: 0033:0x7ffb1572d5fc [ 560.646776][T26913] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 560.646840][T26913] RSP: 002b:00007ffb14176030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 560.646861][T26913] RAX: ffffffffffffffda RBX: 00007ffb15956090 RCX: 00007ffb1572d5fc [ 560.646896][T26913] RDX: 000000000000000f RSI: 00007ffb141760a0 RDI: 0000000000000007 [ 560.646907][T26913] RBP: 00007ffb14176090 R08: 0000000000000000 R09: 0000000000000000 [ 560.646918][T26913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.646929][T26913] R13: 00007ffb15956128 R14: 00007ffb15956090 R15: 00007ffd51c68d88 [ 560.646944][T26913] [ 560.902865][ T3406] hid_parser_main: 17 callbacks suppressed [ 560.902883][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 560.916268][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 560.978697][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.990203][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 560.997716][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 561.005108][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 561.012498][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 561.019891][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 561.027320][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 561.034716][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 561.042111][ T3406] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 561.050983][ T3406] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 561.093443][T26923] loop5: detected capacity change from 0 to 4096 [ 561.104682][T26928] loop6: detected capacity change from 0 to 1024 [ 561.114334][T26923] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 561.126139][T26928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.139202][T26923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.159522][T26928] FAULT_INJECTION: forcing a failure. [ 561.159522][T26928] name failslab, interval 1, probability 0, space 0, times 0 [ 561.172247][T26928] CPU: 0 UID: 0 PID: 26928 Comm: syz.6.7493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 561.172270][T26928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.172280][T26928] Call Trace: [ 561.172288][T26928] [ 561.172296][T26928] __dump_stack+0x1d/0x30 [ 561.172318][T26928] dump_stack_lvl+0xe8/0x140 [ 561.172377][T26928] dump_stack+0x15/0x1b [ 561.172391][T26928] should_fail_ex+0x265/0x280 [ 561.172409][T26928] should_failslab+0x8c/0xb0 [ 561.172457][T26928] kmem_cache_alloc_noprof+0x50/0x310 [ 561.172485][T26928] ? __es_insert_extent+0x508/0xee0 [ 561.172512][T26928] __es_insert_extent+0x508/0xee0 [ 561.172559][T26928] ? try_to_wake_up+0x3e7/0x630 [ 561.172587][T26928] ? should_fail_ex+0xdb/0x280 [ 561.172606][T26928] ext4_es_insert_extent+0x435/0x1c10 [ 561.172635][T26928] ? ext4_find_extent+0x16b/0x7a0 [ 561.172730][T26928] ext4_ext_map_blocks+0x172b/0x38a0 [ 561.172755][T26928] ? filemap_get_entry+0x34b/0x390 [ 561.172785][T26928] ? folio_mark_accessed+0x240/0x3d0 [ 561.173018][T26928] ? __filemap_get_folio+0x47f/0x6b0 [ 561.173106][T26928] ? folio_unlock+0xd9/0x120 [ 561.173197][T26928] ext4_map_query_blocks+0xa8/0x480 [ 561.173228][T26928] ext4_map_blocks+0x330/0xd00 [ 561.173253][T26928] ? ext4_get_group_desc+0x16b/0x190 [ 561.173303][T26928] ? __ext4_journal_start_sb+0x131/0x300 [ 561.173321][T26928] ext4_iomap_begin+0x88d/0xe00 [ 561.173421][T26928] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 561.173450][T26928] iomap_iter+0x332/0x730 [ 561.173478][T26928] ? should_failslab+0x8c/0xb0 [ 561.173500][T26928] __iomap_dio_rw+0x708/0x1250 [ 561.173599][T26928] ? ext4_journal_check_start+0x11a/0x1b0 [ 561.173621][T26928] iomap_dio_rw+0x40/0x90 [ 561.173644][T26928] ext4_file_write_iter+0xad9/0xf00 [ 561.173676][T26928] do_iter_readv_writev+0x499/0x540 [ 561.173736][T26928] vfs_writev+0x2df/0x8b0 [ 561.173770][T26928] __se_sys_pwritev2+0xfc/0x1c0 [ 561.173808][T26928] __x64_sys_pwritev2+0x67/0x80 [ 561.173890][T26928] x64_sys_call+0x2c55/0x2ff0 [ 561.173909][T26928] do_syscall_64+0xd2/0x200 [ 561.173932][T26928] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 561.173957][T26928] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 561.174007][T26928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.174029][T26928] RIP: 0033:0x7fcd7752ebe9 [ 561.174042][T26928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.174056][T26928] RSP: 002b:00007fcd75f8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 561.174073][T26928] RAX: ffffffffffffffda RBX: 00007fcd77755fa0 RCX: 00007fcd7752ebe9 [ 561.174084][T26928] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000008 [ 561.174138][T26928] RBP: 00007fcd75f8f090 R08: 0000000000000000 R09: 0000000000000003 [ 561.174151][T26928] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 561.174165][T26928] R13: 00007fcd77756038 R14: 00007fcd77755fa0 R15: 00007ffe7a34b108 [ 561.174181][T26928] [ 561.546916][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.582012][T26948] loop4: detected capacity change from 0 to 2048 [ 561.591336][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.601792][T26948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.617666][T26945] loop8: detected capacity change from 0 to 128 [ 561.636652][T26945] netlink: 'syz.8.7501': attribute type 21 has an invalid length. [ 561.644459][T26945] netlink: 'syz.8.7501': attribute type 6 has an invalid length. [ 561.652222][T26945] __nla_validate_parse: 5 callbacks suppressed [ 561.652231][T26945] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7501'. [ 561.708827][ T3357] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 561.833130][T26970] sctp: [Deprecated]: syz.6.7499 (pid 26970) Use of int in max_burst socket option deprecated. [ 561.833130][T26970] Use struct sctp_assoc_value instead [ 562.069421][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.682684][T26992] lo speed is unknown, defaulting to 1000 [ 562.688987][T26992] lo speed is unknown, defaulting to 1000 [ 563.627479][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 563.887552][T27032] loop8: detected capacity change from 0 to 2048 [ 563.898873][T27032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.984393][T27047] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7538'. [ 563.993607][T27047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7538'. [ 564.002571][T27047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7538'. [ 564.016640][T27047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7538'. [ 564.074279][T27047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7538'. [ 564.358350][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.409937][T27068] sctp: [Deprecated]: syz.8.7546 (pid 27068) Use of int in max_burst socket option deprecated. [ 564.409937][T27068] Use struct sctp_assoc_value instead [ 564.471308][T27076] loop8: detected capacity change from 0 to 2048 [ 564.535834][T27076] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.558123][T27076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.928311][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 564.928323][ T29] audit: type=1400 audit(1755740502.931:10077): avc: denied { bind } for pid=27089 comm="syz.4.7554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 564.983822][ T29] audit: type=1400 audit(1755740502.981:10078): avc: denied { accept } for pid=27089 comm="syz.4.7554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.003924][ T29] audit: type=1400 audit(1755740502.981:10079): avc: denied { write } for pid=27089 comm="syz.4.7554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.023622][ T29] audit: type=1400 audit(1755740502.981:10080): avc: denied { read } for pid=27089 comm="syz.4.7554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 565.076199][T27094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7555'. [ 565.490904][T27114] lo speed is unknown, defaulting to 1000 [ 565.497202][T27114] lo speed is unknown, defaulting to 1000 [ 566.372095][T27122] loop6: detected capacity change from 0 to 128 [ 566.417626][T27122] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.437897][T27127] FAULT_INJECTION: forcing a failure. [ 566.437897][T27127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.451152][T27127] CPU: 1 UID: 0 PID: 27127 Comm: syz.2.7568 Not tainted syzkaller #0 PREEMPT(voluntary) [ 566.451187][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.451200][T27127] Call Trace: [ 566.451207][T27127] [ 566.451215][T27127] __dump_stack+0x1d/0x30 [ 566.451279][T27127] dump_stack_lvl+0xe8/0x140 [ 566.451300][T27127] dump_stack+0x15/0x1b [ 566.451340][T27127] should_fail_ex+0x265/0x280 [ 566.451415][T27127] should_fail+0xb/0x20 [ 566.451433][T27127] should_fail_usercopy+0x1a/0x20 [ 566.451508][T27127] _copy_from_user+0x1c/0xb0 [ 566.451540][T27127] ___sys_sendmsg+0xc1/0x1d0 [ 566.451619][T27127] __x64_sys_sendmsg+0xd4/0x160 [ 566.451785][T27127] x64_sys_call+0x191e/0x2ff0 [ 566.451803][T27127] do_syscall_64+0xd2/0x200 [ 566.451824][T27127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 566.451924][T27127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 566.451949][T27127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.451971][T27127] RIP: 0033:0x7f70389febe9 [ 566.451987][T27127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.452005][T27127] RSP: 002b:00007f7037467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.452023][T27127] RAX: ffffffffffffffda RBX: 00007f7038c25fa0 RCX: 00007f70389febe9 [ 566.452063][T27127] RDX: 0000000000004012 RSI: 0000200000000000 RDI: 0000000000000006 [ 566.452076][T27127] RBP: 00007f7037467090 R08: 0000000000000000 R09: 0000000000000000 [ 566.452090][T27127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.452103][T27127] R13: 00007f7038c26038 R14: 00007f7038c25fa0 R15: 00007ffe64f0d6b8 [ 566.452130][T27127] [ 566.666415][T27122] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.724710][T19203] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 566.808229][T27138] netlink: 'syz.4.7570': attribute type 4 has an invalid length. [ 566.828993][T27138] loop4: detected capacity change from 0 to 764 [ 566.876711][T27138] iso9660: Unknown parameter '€' [ 566.930807][T27142] loop6: detected capacity change from 0 to 512 [ 567.121316][T27148] loop4: detected capacity change from 0 to 512 [ 567.142109][T27156] loop6: detected capacity change from 0 to 1024 [ 567.178701][T27156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.193369][T27148] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7577: casefold flag without casefold feature [ 567.219109][T27156] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.237437][T27148] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7577: couldn't read orphan inode 15 (err -117) [ 567.258920][T27148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.281409][T27156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.290146][T27156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.647452][T27035] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 567.729628][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.862304][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.898160][T27174] loop6: detected capacity change from 0 to 128 [ 567.937182][T27174] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 567.955290][T27182] sctp: [Deprecated]: syz.5.7588 (pid 27182) Use of int in max_burst socket option deprecated. [ 567.955290][T27182] Use struct sctp_assoc_value instead [ 567.973857][T27174] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.025829][T27183] netlink: 'syz.2.7587': attribute type 4 has an invalid length. [ 568.063673][T19203] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.231740][T27199] loop8: detected capacity change from 0 to 2048 [ 568.248455][T27199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.274532][T27202] loop5: detected capacity change from 0 to 1024 [ 568.368262][T27202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.394495][T27202] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.440570][T27202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.457584][T27202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.877413][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.907213][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.957037][T27223] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7598'. [ 568.968780][T27227] loop4: detected capacity change from 0 to 1024 [ 568.975713][T27227] EXT4-fs: Invalid want_extra_isize 7 [ 568.984175][T27227] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7601'. [ 568.993316][T27227] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7601'. [ 569.005082][T27229] sctp: [Deprecated]: syz.6.7602 (pid 27229) Use of int in max_burst socket option deprecated. [ 569.005082][T27229] Use struct sctp_assoc_value instead [ 569.035522][T27231] loop8: detected capacity change from 0 to 128 [ 569.035988][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.065047][T27231] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 569.088112][T27231] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.164074][T25353] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 569.164323][T27234] loop6: detected capacity change from 0 to 8192 [ 569.190017][T27240] loop5: detected capacity change from 0 to 512 [ 569.207925][T27244] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7608'. [ 569.416944][T27260] loop5: detected capacity change from 0 to 1024 [ 569.448111][T27260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.491433][T27260] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.930151][T27271] lo speed is unknown, defaulting to 1000 [ 569.936267][T27271] lo speed is unknown, defaulting to 1000 [ 569.997011][T27272] loop4: detected capacity change from 0 to 2048 [ 570.104751][T27275] loop6: detected capacity change from 0 to 128 [ 570.118644][T27272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.137944][T27276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.201853][T27275] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 570.231205][T27276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.253852][T27275] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.291362][T19203] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 570.328924][ T29] audit: type=1400 audit(1755740508.331:10081): avc: denied { prog_load } for pid=27292 comm="syz.8.7623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 570.348325][ T29] audit: type=1400 audit(1755740508.331:10082): avc: denied { bpf } for pid=27292 comm="syz.8.7623" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 570.415295][T27293] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7623'. [ 570.424331][T27293] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7623'. [ 570.446603][ T29] audit: type=1400 audit(1755740508.371:10083): avc: denied { perfmon } for pid=27289 comm="syz.2.7621" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 570.467705][ T29] audit: type=1400 audit(1755740508.381:10084): avc: denied { map_create } for pid=27292 comm="syz.8.7623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 570.487057][ T29] audit: type=1400 audit(1755740508.401:10085): avc: denied { prog_run } for pid=27289 comm="syz.2.7621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 570.506184][ T29] audit: type=1400 audit(1755740508.401:10086): avc: denied { compute_member } for pid=27289 comm="syz.2.7621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 570.526781][ T29] audit: type=1400 audit(1755740508.401:10087): avc: denied { map_read map_write } for pid=27292 comm="syz.8.7623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 570.553084][T27293] vlan3: entered allmulticast mode [ 570.605557][ T29] audit: type=1400 audit(1755740508.551:10088): avc: denied { read write } for pid=19203 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 570.630017][ T29] audit: type=1400 audit(1755740508.551:10089): avc: denied { open } for pid=19203 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 570.654344][ T29] audit: type=1400 audit(1755740508.551:10090): avc: denied { ioctl } for pid=19203 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 570.708135][T27296] 8021q: adding VLAN 0 to HW filter on device bond6 [ 570.857506][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.139697][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.285707][T27328] FAULT_INJECTION: forcing a failure. [ 571.285707][T27328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.299454][T27328] CPU: 0 UID: 0 PID: 27328 Comm: syz.5.7632 Not tainted syzkaller #0 PREEMPT(voluntary) [ 571.299496][T27328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.299507][T27328] Call Trace: [ 571.299512][T27328] [ 571.299518][T27328] __dump_stack+0x1d/0x30 [ 571.299536][T27328] dump_stack_lvl+0xe8/0x140 [ 571.299552][T27328] dump_stack+0x15/0x1b [ 571.299616][T27328] should_fail_ex+0x265/0x280 [ 571.299638][T27328] should_fail+0xb/0x20 [ 571.299657][T27328] should_fail_usercopy+0x1a/0x20 [ 571.299679][T27328] _copy_from_user+0x1c/0xb0 [ 571.299722][T27328] ___sys_sendmsg+0xc1/0x1d0 [ 571.299755][T27328] __x64_sys_sendmsg+0xd4/0x160 [ 571.299809][T27328] x64_sys_call+0x191e/0x2ff0 [ 571.299831][T27328] do_syscall_64+0xd2/0x200 [ 571.299912][T27328] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 571.299931][T27328] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 571.300026][T27328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.300043][T27328] RIP: 0033:0x7ffb1572ebe9 [ 571.300065][T27328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.300081][T27328] RSP: 002b:00007ffb14197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.300101][T27328] RAX: ffffffffffffffda RBX: 00007ffb15955fa0 RCX: 00007ffb1572ebe9 [ 571.300114][T27328] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 571.300128][T27328] RBP: 00007ffb14197090 R08: 0000000000000000 R09: 0000000000000000 [ 571.300140][T27328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.300151][T27328] R13: 00007ffb15956038 R14: 00007ffb15955fa0 R15: 00007ffd51c68d88 [ 571.300171][T27328] [ 571.542690][T27329] lo speed is unknown, defaulting to 1000 [ 571.555267][T27329] lo speed is unknown, defaulting to 1000 [ 572.010576][T27340] lo speed is unknown, defaulting to 1000 [ 572.017388][T27340] lo speed is unknown, defaulting to 1000 [ 572.973114][T27353] lo speed is unknown, defaulting to 1000 [ 572.979312][T27353] lo speed is unknown, defaulting to 1000 [ 573.953502][T27370] lo speed is unknown, defaulting to 1000 [ 573.959654][T27370] lo speed is unknown, defaulting to 1000 [ 574.472511][T27373] loop4: detected capacity change from 0 to 512 [ 574.749341][T27382] netlink: 'syz.5.7644': attribute type 4 has an invalid length. [ 574.807660][T27378] loop5: detected capacity change from 0 to 764 [ 574.832288][T27384] FAULT_INJECTION: forcing a failure. [ 574.832288][T27384] name failslab, interval 1, probability 0, space 0, times 0 [ 574.844947][T27384] CPU: 1 UID: 0 PID: 27384 Comm: syz.8.7646 Not tainted syzkaller #0 PREEMPT(voluntary) [ 574.844974][T27384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.845061][T27384] Call Trace: [ 574.845066][T27384] [ 574.845121][T27384] __dump_stack+0x1d/0x30 [ 574.845143][T27384] dump_stack_lvl+0xe8/0x140 [ 574.845163][T27384] dump_stack+0x15/0x1b [ 574.845180][T27384] should_fail_ex+0x265/0x280 [ 574.845202][T27384] should_failslab+0x8c/0xb0 [ 574.845224][T27384] __kmalloc_noprof+0xa5/0x3e0 [ 574.845251][T27384] ? unix_bind+0x1a0/0x920 [ 574.845267][T27384] unix_bind+0x1a0/0x920 [ 574.845288][T27384] __sys_bind+0x1d1/0x2a0 [ 574.845363][T27384] __x64_sys_bind+0x3f/0x50 [ 574.845389][T27384] x64_sys_call+0x2b6e/0x2ff0 [ 574.845412][T27384] do_syscall_64+0xd2/0x200 [ 574.845437][T27384] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 574.845462][T27384] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 574.845557][T27384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.845580][T27384] RIP: 0033:0x7f4117b2ebe9 [ 574.845595][T27384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.845612][T27384] RSP: 002b:00007f411658f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 574.845632][T27384] RAX: ffffffffffffffda RBX: 00007f4117d55fa0 RCX: 00007f4117b2ebe9 [ 574.845645][T27384] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000005 [ 574.845719][T27384] RBP: 00007f411658f090 R08: 0000000000000000 R09: 0000000000000000 [ 574.845730][T27384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.845741][T27384] R13: 00007f4117d56038 R14: 00007f4117d55fa0 R15: 00007ffc17a2f3b8 [ 574.845757][T27384] [ 574.857634][T27378] iso9660: Unknown parameter '€' [ 575.143421][T27394] loop4: detected capacity change from 0 to 128 [ 575.238099][T27394] FAT-fs (loop4): Directory bread(block 162) failed [ 575.258302][T27400] sctp: [Deprecated]: syz.5.7651 (pid 27400) Use of int in max_burst socket option deprecated. [ 575.258302][T27400] Use struct sctp_assoc_value instead [ 575.279746][T27394] FAT-fs (loop4): Directory bread(block 163) failed [ 575.303425][T27394] FAT-fs (loop4): Directory bread(block 164) failed [ 575.328662][T27394] FAT-fs (loop4): Directory bread(block 165) failed [ 575.353335][T27402] loop5: detected capacity change from 0 to 2048 [ 575.363058][T27394] FAT-fs (loop4): Directory bread(block 166) failed [ 575.380952][T27394] FAT-fs (loop4): Directory bread(block 167) failed [ 575.397988][T27394] FAT-fs (loop4): Directory bread(block 168) failed [ 575.471109][T27394] FAT-fs (loop4): Directory bread(block 169) failed [ 575.481589][T27402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.488933][T27394] FAT-fs (loop4): Directory bread(block 162) failed [ 575.493713][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 575.493726][ T29] audit: type=1400 audit(1755740513.491:10161): avc: denied { mount } for pid=27393 comm="syz.4.7649" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 575.500953][T27394] FAT-fs (loop4): Directory bread(block 163) failed [ 575.506329][ T29] audit: type=1326 audit(1755740513.491:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24eda1d550 code=0x7ffc0000 [ 575.506397][ T29] audit: type=1326 audit(1755740513.491:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f24eda1d937 code=0x7ffc0000 [ 575.529560][T27394] syz.4.7649: attempt to access beyond end of device [ 575.529560][T27394] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 575.535051][ T29] audit: type=1326 audit(1755740513.491:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24eda1d550 code=0x7ffc0000 [ 575.558691][T27394] syz.4.7649: attempt to access beyond end of device [ 575.558691][T27394] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 575.582080][ T29] audit: type=1326 audit(1755740513.491:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 575.655618][ T29] audit: type=1326 audit(1755740513.491:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 575.679266][ T29] audit: type=1326 audit(1755740513.491:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 575.702955][ T29] audit: type=1326 audit(1755740513.491:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 575.726580][ T29] audit: type=1326 audit(1755740513.491:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 575.761576][ T29] audit: type=1326 audit(1755740513.601:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.4.7649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24eda1ebe9 code=0x7ffc0000 [ 575.842892][T27409] loop6: detected capacity change from 0 to 128 [ 575.949338][T27402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.196116][T27432] netlink: 'syz.8.7661': attribute type 4 has an invalid length. [ 576.251770][T27432] loop8: detected capacity change from 0 to 764 [ 576.272115][T27432] iso9660: Unknown parameter '€' [ 576.601594][T27454] lo speed is unknown, defaulting to 1000 [ 576.607990][T27454] lo speed is unknown, defaulting to 1000 [ 576.794046][T27451] loop8: detected capacity change from 0 to 128 [ 576.862053][T27451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7667'. [ 576.889198][T27458] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 577.560182][T27487] sctp: [Deprecated]: syz.2.7681 (pid 27487) Use of int in max_burst socket option deprecated. [ 577.560182][T27487] Use struct sctp_assoc_value instead [ 577.710325][T27501] loop4: detected capacity change from 0 to 1024 [ 577.723647][T27501] EXT4-fs: Invalid want_extra_isize 7 [ 577.752253][T27501] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7685'. [ 577.767638][T27507] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7689'. [ 577.906788][T27518] netlink: 'syz.4.7693': attribute type 4 has an invalid length. [ 577.918338][T27518] loop4: detected capacity change from 0 to 764 [ 577.925622][T27518] iso9660: Unknown parameter '€' [ 577.944565][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.052338][T27543] loop4: detected capacity change from 0 to 1024 [ 578.064252][T27543] EXT4-fs: Invalid want_extra_isize 7 [ 578.072789][T27543] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7703'. [ 578.085330][T27542] loop8: detected capacity change from 0 to 512 [ 578.255101][T27555] netlink: 'syz.8.7706': attribute type 4 has an invalid length. [ 578.290613][T27551] loop8: detected capacity change from 0 to 764 [ 578.312449][T27551] iso9660: Unknown parameter '€' [ 578.400005][T27557] loop8: detected capacity change from 0 to 2048 [ 578.439716][T27557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.487757][T27557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.556731][T27572] 9pnet_fd: Insufficient options for proto=fd [ 578.613721][T27577] loop4: detected capacity change from 0 to 1024 [ 578.620413][T27577] EXT4-fs: inline encryption not supported [ 578.626223][T27577] EXT4-fs: Ignoring removed i_version option [ 578.633118][T27577] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 578.771953][T27577] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.7714: lblock 2 mapped to illegal pblock 2 (length 1) [ 578.906524][T27577] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.7714: lblock 0 mapped to illegal pblock 48 (length 1) [ 578.967861][T27577] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.7714: Failed to acquire dquot type 0 [ 579.058548][T27577] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 579.178567][T27577] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.7714: mark_inode_dirty error [ 579.186511][T27405] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 579.216082][T27577] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 579.255638][T27577] EXT4-fs (loop4): 1 orphan inode deleted [ 579.266534][T10846] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 579.270193][T27577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.343574][T10846] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:64: Failed to release dquot type 0 [ 579.404820][T27606] 9pnet_fd: Insufficient options for proto=fd [ 579.411909][T27577] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.7714: lblock 0 mapped to illegal pblock 16 (length 1) [ 579.483562][T27612] loop8: detected capacity change from 0 to 2048 [ 579.718032][T27577] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.7714: Invalid inode table block 1 in block_group 0 [ 579.739366][T27577] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 579.758588][T27577] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.7714: mark_inode_dirty error [ 580.246476][T27638] loop8: detected capacity change from 0 to 2048 [ 580.510232][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 580.510255][ T29] audit: type=1326 audit(1755740518.491:10407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd77525ba7 code=0x7ffc0000 [ 580.540019][ T29] audit: type=1326 audit(1755740518.491:10408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd774cadd9 code=0x7ffc0000 [ 580.563511][ T29] audit: type=1326 audit(1755740518.491:10409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 580.587238][ T29] audit: type=1326 audit(1755740518.491:10410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd77525ba7 code=0x7ffc0000 [ 580.610786][ T29] audit: type=1326 audit(1755740518.491:10411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd774cadd9 code=0x7ffc0000 [ 580.634325][ T29] audit: type=1326 audit(1755740518.491:10412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 580.657901][ T29] audit: type=1326 audit(1755740518.501:10413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd77525ba7 code=0x7ffc0000 [ 580.681416][ T29] audit: type=1326 audit(1755740518.501:10414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd774cadd9 code=0x7ffc0000 [ 580.705084][ T29] audit: type=1326 audit(1755740518.501:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27621 comm="syz.6.7730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fcd7752ebe9 code=0x7ffc0000 [ 580.746258][T27660] lo speed is unknown, defaulting to 1000 [ 580.752382][T27660] lo speed is unknown, defaulting to 1000 [ 581.754744][T27666] netlink: 'syz.2.7743': attribute type 11 has an invalid length. [ 581.843801][T27668] loop5: detected capacity change from 0 to 512 [ 581.986375][ T29] audit: type=1400 audit(1755740519.651:10416): avc: denied { mounton } for pid=27656 comm="syz.2.7743" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 582.107039][T27674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7744'. [ 582.254552][ T10] hid_parser_main: 71 callbacks suppressed [ 582.254571][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.267947][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.286153][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.293780][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.301282][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.308679][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.316057][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.323517][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.331038][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.338506][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 582.351856][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 582.442776][T27695] loop4: detected capacity change from 0 to 1024 [ 582.449492][T27695] EXT4-fs: inline encryption not supported [ 582.455297][T27695] EXT4-fs: Ignoring removed i_version option [ 582.468595][T25353] EXT4-fs unmount: 5 callbacks suppressed [ 582.468609][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.469065][T27695] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 582.538497][T27695] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.7754: lblock 2 mapped to illegal pblock 2 (length 1) [ 582.562584][T27695] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.7754: lblock 0 mapped to illegal pblock 48 (length 1) [ 582.580665][T27695] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.7754: Failed to acquire dquot type 0 [ 582.592561][T27695] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 582.602240][T27695] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.7754: mark_inode_dirty error [ 582.614237][T27695] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 582.624545][T27695] EXT4-fs (loop4): 1 orphan inode deleted [ 582.640933][T27709] loop6: detected capacity change from 0 to 2048 [ 582.648143][T27695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.667505][T10842] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 582.697952][T10842] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:63: Failed to release dquot type 0 [ 582.711620][T27695] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.721859][T27695] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.7754: Invalid inode table block 1 in block_group 0 [ 582.754003][T27717] loop5: detected capacity change from 0 to 1024 [ 582.762395][T27709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.867594][T27717] EXT4-fs: Invalid want_extra_isize 7 [ 582.873141][T27695] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 582.895802][T27717] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7759'. [ 582.906969][T27695] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.7754: mark_inode_dirty error [ 582.982214][T27729] sctp: [Deprecated]: syz.4.7764 (pid 27729) Use of int in max_burst socket option deprecated. [ 582.982214][T27729] Use struct sctp_assoc_value instead [ 583.049359][T27737] FAULT_INJECTION: forcing a failure. [ 583.049359][T27737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.062538][T27737] CPU: 0 UID: 0 PID: 27737 Comm: syz.4.7767 Not tainted syzkaller #0 PREEMPT(voluntary) [ 583.062563][T27737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.062610][T27737] Call Trace: [ 583.062617][T27737] [ 583.062625][T27737] __dump_stack+0x1d/0x30 [ 583.062646][T27737] dump_stack_lvl+0xe8/0x140 [ 583.062663][T27737] dump_stack+0x15/0x1b [ 583.062677][T27737] should_fail_ex+0x265/0x280 [ 583.062695][T27737] should_fail+0xb/0x20 [ 583.062761][T27737] should_fail_usercopy+0x1a/0x20 [ 583.062782][T27737] _copy_from_user+0x1c/0xb0 [ 583.062804][T27737] vmemdup_user+0x59/0xd0 [ 583.062856][T27737] path_setxattrat+0x1b6/0x310 [ 583.062895][T27737] __x64_sys_fsetxattr+0x6b/0x80 [ 583.062994][T27737] x64_sys_call+0x1ced/0x2ff0 [ 583.063012][T27737] do_syscall_64+0xd2/0x200 [ 583.063038][T27737] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 583.063134][T27737] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 583.063216][T27737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.063235][T27737] RIP: 0033:0x7f24eda1ebe9 [ 583.063248][T27737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.063263][T27737] RSP: 002b:00007f24ec487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 583.063280][T27737] RAX: ffffffffffffffda RBX: 00007f24edc45fa0 RCX: 00007f24eda1ebe9 [ 583.063362][T27737] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 583.063376][T27737] RBP: 00007f24ec487090 R08: 0000000000000001 R09: 0000000000000000 [ 583.063388][T27737] R10: 000000000000ffd7 R11: 0000000000000246 R12: 0000000000000001 [ 583.063402][T27737] R13: 00007f24edc46038 R14: 00007f24edc45fa0 R15: 00007ffe3a4b2d88 [ 583.063447][T27737] [ 583.646828][T19203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.685704][T27751] loop4: detected capacity change from 0 to 1024 [ 583.726003][T27751] EXT4-fs: Invalid want_extra_isize 7 [ 583.749986][T27760] sctp: [Deprecated]: syz.8.7777 (pid 27760) Use of int in max_burst socket option deprecated. [ 583.749986][T27760] Use struct sctp_assoc_value instead [ 583.769858][T27751] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7773'. [ 583.807256][T27762] lo speed is unknown, defaulting to 1000 [ 583.813338][T27762] lo speed is unknown, defaulting to 1000 [ 583.933110][T27767] lo speed is unknown, defaulting to 1000 [ 583.939637][T27767] lo speed is unknown, defaulting to 1000 [ 584.290776][T27778] netlink: 'syz.2.7779': attribute type 4 has an invalid length. [ 584.604002][T27793] loop5: detected capacity change from 0 to 4096 [ 584.702427][T27795] 8021q: adding VLAN 0 to HW filter on device bond7 [ 584.710888][T27793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.868508][T27808] sctp: [Deprecated]: syz.6.7791 (pid 27808) Use of int in max_burst socket option deprecated. [ 584.868508][T27808] Use struct sctp_assoc_value instead [ 584.906200][T27810] loop6: detected capacity change from 0 to 128 [ 584.909128][T27812] loop8: detected capacity change from 0 to 128 [ 584.927450][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.946324][T27814] loop4: detected capacity change from 0 to 2048 [ 584.961677][T27814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.273896][T27830] netlink: 'syz.5.7794': attribute type 11 has an invalid length. [ 585.699316][T27841] loop8: detected capacity change from 0 to 512 [ 585.793725][T27813] syz_tun (unregistering): left allmulticast mode [ 585.801140][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 585.801153][ T29] audit: type=1400 audit(1755740523.801:10451): avc: denied { create } for pid=27848 comm="syz.8.7805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.827138][T27813] bond0: (slave syz_tun): Releasing backup interface [ 585.885813][T10833] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.916472][ T29] audit: type=1400 audit(1755740523.801:10452): avc: denied { ioctl } for pid=27848 comm="syz.8.7805" path="socket:[95526]" dev="sockfs" ino=95526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.941341][ T29] audit: type=1400 audit(1755740523.801:10453): avc: denied { bind } for pid=27848 comm="syz.8.7805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.960875][ T29] audit: type=1326 audit(1755740523.911:10454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27850 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4117b2ebe9 code=0x7ffc0000 [ 585.984620][ T29] audit: type=1326 audit(1755740523.911:10455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27850 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4117b2ebe9 code=0x7ffc0000 [ 586.008254][ T29] audit: type=1326 audit(1755740523.911:10456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27850 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4117b2ebe9 code=0x7ffc0000 [ 586.082185][ T29] audit: type=1400 audit(1755740524.061:10457): avc: denied { mounton } for pid=27857 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 586.107313][T10833] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.159085][T10833] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.181913][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.191730][ T29] audit: type=1400 audit(1755740524.181:10458): avc: denied { block_suspend } for pid=27860 comm="syz.5.7811" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 586.237233][T27874] FAULT_INJECTION: forcing a failure. [ 586.237233][T27874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.237896][T10833] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.250305][T27874] CPU: 1 UID: 0 PID: 27874 Comm: syz.8.7816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 586.250400][T27874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.250484][T27874] Call Trace: [ 586.250491][T27874] [ 586.250498][T27874] __dump_stack+0x1d/0x30 [ 586.250520][T27874] dump_stack_lvl+0xe8/0x140 [ 586.250539][T27874] dump_stack+0x15/0x1b [ 586.250562][T27874] should_fail_ex+0x265/0x280 [ 586.250583][T27874] should_fail+0xb/0x20 [ 586.250600][T27874] should_fail_usercopy+0x1a/0x20 [ 586.250621][T27874] _copy_from_user+0x1c/0xb0 [ 586.250651][T27874] __copy_msghdr+0x244/0x300 [ 586.250706][T27874] ___sys_sendmsg+0x109/0x1d0 [ 586.250738][T27874] __x64_sys_sendmsg+0xd4/0x160 [ 586.250762][T27874] x64_sys_call+0x191e/0x2ff0 [ 586.250814][T27874] do_syscall_64+0xd2/0x200 [ 586.250887][T27874] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 586.250910][T27874] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 586.251007][T27874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.251027][T27874] RIP: 0033:0x7f4117b2ebe9 [ 586.251043][T27874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.251131][T27874] RSP: 002b:00007f411658f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.251150][T27874] RAX: ffffffffffffffda RBX: 00007f4117d55fa0 RCX: 00007f4117b2ebe9 [ 586.251163][T27874] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 586.251176][T27874] RBP: 00007f411658f090 R08: 0000000000000000 R09: 0000000000000000 [ 586.251189][T27874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.251201][T27874] R13: 00007f4117d56038 R14: 00007f4117d55fa0 R15: 00007ffc17a2f3b8 [ 586.251218][T27874] [ 586.435476][ T29] audit: type=1400 audit(1755740524.231:10459): avc: denied { create } for pid=27872 comm="syz.8.7816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 586.455630][ T29] audit: type=1400 audit(1755740524.231:10460): avc: denied { setopt } for pid=27872 comm="syz.8.7816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 586.483006][T27878] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7818'. [ 586.530775][T27857] lo speed is unknown, defaulting to 1000 [ 586.540671][T27878] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7818'. [ 586.573756][T27857] lo speed is unknown, defaulting to 1000 [ 586.620444][T27888] syzkaller0: entered promiscuous mode [ 586.625965][T27888] syzkaller0: entered allmulticast mode [ 586.626050][T27892] loop4: detected capacity change from 0 to 2048 [ 586.642877][T10833] bridge_slave_1: left allmulticast mode [ 586.648638][T10833] bridge_slave_1: left promiscuous mode [ 586.654407][T10833] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.668057][T10833] bridge_slave_0: left allmulticast mode [ 586.673699][T10833] bridge_slave_0: left promiscuous mode [ 586.679479][T10833] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.689928][T27892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.716967][T27888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7820'. [ 586.862096][T10833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.880004][T10833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.902323][T10833] bond0 (unregistering): Released all slaves [ 586.920327][T10833] bond1 (unregistering): Released all slaves [ 586.939239][T10833] bond2 (unregistering): Released all slaves [ 586.967352][T27892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.991751][T27888] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 587.016660][T10833] tipc: Left network mode [ 587.094540][T27906] loop5: detected capacity change from 0 to 2048 [ 587.107733][T27906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.295036][T27857] chnl_net:caif_netlink_parms(): no params data found [ 587.395355][T10833] hsr_slave_0: left promiscuous mode [ 587.407244][T10833] hsr_slave_1: left promiscuous mode [ 587.412870][T10833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.420290][T10833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.433139][T10833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.440542][T10833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.455148][T10833] veth1_macvtap: left promiscuous mode [ 587.457602][T27921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7828'. [ 587.460664][T10833] veth0_macvtap: left promiscuous mode [ 587.475200][T10833] veth1_vlan: left promiscuous mode [ 587.480458][T10833] veth0_vlan: left promiscuous mode [ 587.535553][T27921] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 587.545664][T10833] team0 (unregistering): Port device team_slave_1 removed [ 587.559039][T10833] team0 (unregistering): Port device team_slave_0 removed [ 587.668898][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.682349][T27857] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.689446][T27857] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.696545][T27857] bridge_slave_0: entered allmulticast mode [ 587.703314][T27857] bridge_slave_0: entered promiscuous mode [ 587.711138][T27857] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.711607][T27930] FAULT_INJECTION: forcing a failure. [ 587.711607][T27930] name failslab, interval 1, probability 0, space 0, times 0 [ 587.718241][T27857] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.730874][T27930] CPU: 1 UID: 0 PID: 27930 Comm: syz.4.7831 Not tainted syzkaller #0 PREEMPT(voluntary) [ 587.731011][T27930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.731051][T27930] Call Trace: [ 587.731057][T27930] [ 587.731074][T27930] __dump_stack+0x1d/0x30 [ 587.731096][T27930] dump_stack_lvl+0xe8/0x140 [ 587.731120][T27930] dump_stack+0x15/0x1b [ 587.731137][T27930] should_fail_ex+0x265/0x280 [ 587.731157][T27930] ? sctp_add_bind_addr+0x71/0x1e0 [ 587.731181][T27930] should_failslab+0x8c/0xb0 [ 587.731214][T27930] __kmalloc_cache_noprof+0x4c/0x320 [ 587.731318][T27930] sctp_add_bind_addr+0x71/0x1e0 [ 587.731341][T27930] sctp_do_bind+0x427/0x4b0 [ 587.731484][T27930] ? __pfx_sctp_bind+0x10/0x10 [ 587.731510][T27930] sctp_bind+0x6f/0x90 [ 587.731535][T27930] inet6_bind+0x62/0xb0 [ 587.731640][T27930] __sys_bind+0x1d1/0x2a0 [ 587.731757][T27930] __x64_sys_bind+0x3f/0x50 [ 587.731783][T27930] x64_sys_call+0x2b6e/0x2ff0 [ 587.731804][T27930] do_syscall_64+0xd2/0x200 [ 587.731869][T27930] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 587.731891][T27930] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 587.731989][T27930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.732010][T27930] RIP: 0033:0x7f24eda1ebe9 [ 587.732025][T27930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.732042][T27930] RSP: 002b:00007f24ec487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 587.732127][T27930] RAX: ffffffffffffffda RBX: 00007f24edc45fa0 RCX: 00007f24eda1ebe9 [ 587.732157][T27930] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000003 [ 587.732169][T27930] RBP: 00007f24ec487090 R08: 0000000000000000 R09: 0000000000000000 [ 587.732182][T27930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.732194][T27930] R13: 00007f24edc46038 R14: 00007f24edc45fa0 R15: 00007ffe3a4b2d88 [ 587.732211][T27930] [ 587.930286][T27857] bridge_slave_1: entered allmulticast mode [ 587.931064][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.936701][T27857] bridge_slave_1: entered promiscuous mode [ 587.969358][T27929] loop8: detected capacity change from 0 to 1024 [ 587.978512][T27857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.992471][T27857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.007194][T27940] loop5: detected capacity change from 0 to 128 [ 588.008795][T27929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.014501][T27940] FAT-fs (loop5): Directory bread(block 162) failed [ 588.025637][T27929] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.033383][T27940] FAT-fs (loop5): Directory bread(block 163) failed [ 588.049743][T27940] FAT-fs (loop5): Directory bread(block 164) failed [ 588.063930][T27940] FAT-fs (loop5): Directory bread(block 165) failed [ 588.070651][T27940] FAT-fs (loop5): Directory bread(block 166) failed [ 588.078013][T27857] team0: Port device team_slave_0 added [ 588.084581][T27857] team0: Port device team_slave_1 added [ 588.084862][T10833] ------------[ cut here ]------------ [ 588.095020][T27940] FAT-fs (loop5): Directory bread(block 167) failed [ 588.095650][T10833] WARNING: CPU: 1 PID: 10833 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100 [ 588.102308][T27940] FAT-fs (loop5): Directory bread(block 168) failed [ 588.112493][T10833] Modules linked in: [ 588.119078][T27940] FAT-fs (loop5): Directory bread(block 169) failed [ 588.129569][T10833] CPU: 1 UID: 0 PID: 10833 Comm: kworker/u8:54 Not tainted syzkaller #0 PREEMPT(voluntary) [ 588.134899][T27940] FAT-fs (loop5): Directory bread(block 162) failed [ 588.139680][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.147480][T27940] FAT-fs (loop5): Directory bread(block 163) failed [ 588.156358][T10833] Workqueue: netns cleanup_net [ 588.163994][T27940] syz.5.7836: attempt to access beyond end of device [ 588.163994][T27940] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 588.167794][T10833] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100 [ 588.181594][T27940] syz.5.7836: attempt to access beyond end of device [ 588.181594][T27940] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 588.186794][T10833] Code: 05 52 ab fc 4b 83 3c 3e 00 75 19 e8 b9 80 90 fc 49 81 ff f8 07 00 00 74 1d e8 ab 80 90 fc 49 83 c7 08 eb d7 e8 a0 80 90 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 588.219786][T10833] RSP: 0018:ffffc90011f97c78 EFLAGS: 00010293 [ 588.225852][T10833] RAX: ffffffff84c779f0 RBX: ffff88810a8c4740 RCX: ffff888103460000 [ 588.233843][T10833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811a572000 [ 588.241828][T10833] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 588.249811][T10833] R10: ffffc90011f97bf8 R11: 0001c90011f97bf8 R12: ffffffff86c93940 [ 588.257826][T10833] R13: ffff88810a8c4768 R14: ffff88811a572000 R15: 0000000000000000 [ 588.265809][T10833] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 588.274862][T10833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.276005][T27948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.281477][T10833] CR2: 00007f70397556c0 CR3: 0000000115a7c000 CR4: 00000000003506f0 [ 588.281497][T10833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.290898][T27948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.297817][T10833] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 588.321473][T10833] Call Trace: [ 588.324850][T10833] [ 588.327817][T10833] ops_undo_list+0x27b/0x410 [ 588.332453][T10833] cleanup_net+0x2de/0x4d0 [ 588.337014][T10833] process_scheduled_works+0x4ce/0x9d0 [ 588.342649][T10833] worker_thread+0x582/0x770 [ 588.347294][T10833] kthread+0x486/0x510 [ 588.351371][T10833] ? finish_task_switch+0xad/0x2b0 [ 588.356549][T10833] ? __pfx_worker_thread+0x10/0x10 [ 588.361674][T10833] ? __pfx_kthread+0x10/0x10 [ 588.366290][T10833] ret_from_fork+0xda/0x150 [ 588.370874][T10833] ? __pfx_kthread+0x10/0x10 [ 588.375450][T10833] ret_from_fork_asm+0x1a/0x30 [ 588.380243][T10833] [ 588.383294][T10833] ---[ end trace 0000000000000000 ]--- [ 588.389298][T10833] ------------[ cut here ]------------ [ 588.394731][T10833] WARNING: CPU: 1 PID: 10833 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 588.404920][T10833] Modules linked in: [ 588.408875][T10833] CPU: 1 UID: 0 PID: 10833 Comm: kworker/u8:54 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 588.420640][T10833] Tainted: [W]=WARN [ 588.424436][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.434504][T10833] Workqueue: netns cleanup_net [ 588.439322][T10833] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 588.445368][T10833] Code: c1 51 ab fc 49 83 3c 1e 00 75 19 e8 75 80 90 fc 48 81 fb f8 07 00 00 74 1d e8 67 80 90 fc 48 83 c3 08 eb d7 e8 5c 80 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 4a 80 90 fc 5b 41 5e 41 5f [ 588.465045][T10833] RSP: 0018:ffffc90011f97c78 EFLAGS: 00010293 [ 588.471181][T10833] RAX: ffffffff84c77a34 RBX: 0000000000000008 RCX: ffff888103460000 [ 588.479153][T10833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811a572808 [ 588.487123][T10833] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 588.495076][T10833] R10: ffffc90011f97bf8 R11: 0001c90011f97bf8 R12: ffffffff86c93940 [ 588.503098][T10833] R13: ffff88810a8c4768 R14: ffff88811a572800 R15: 00000000000007f8 [ 588.511098][T10833] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 588.520043][T10833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.526702][T10833] CR2: 00007f70397556c0 CR3: 0000000115a7c000 CR4: 00000000003506f0 [ 588.534680][T10833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.542706][T10833] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 588.550681][T10833] Call Trace: [ 588.553972][T10833] [ 588.556936][T10833] ops_undo_list+0x27b/0x410 [ 588.561589][T10833] cleanup_net+0x2de/0x4d0 [ 588.566010][T10833] process_scheduled_works+0x4ce/0x9d0 [ 588.571505][T10833] worker_thread+0x582/0x770 [ 588.576106][T10833] kthread+0x486/0x510 [ 588.580319][T10833] ? finish_task_switch+0xad/0x2b0 [ 588.585412][T10833] ? __pfx_worker_thread+0x10/0x10 [ 588.590537][T10833] ? __pfx_kthread+0x10/0x10 [ 588.595192][T10833] ret_from_fork+0xda/0x150 [ 588.599760][T10833] ? __pfx_kthread+0x10/0x10 [ 588.604395][T10833] ret_from_fork_asm+0x1a/0x30 [ 588.609236][T10833] [ 588.612269][T10833] ---[ end trace 0000000000000000 ]--- [ 588.625097][T27857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.632088][T27857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.658014][T27857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.671516][T10833] ------------[ cut here ]------------ [ 588.677021][T10833] WARNING: CPU: 0 PID: 10833 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 588.686786][T10833] Modules linked in: [ 588.690723][T10833] CPU: 0 UID: 0 PID: 10833 Comm: kworker/u8:54 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 588.702554][T10833] Tainted: [W]=WARN [ 588.706425][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.716493][T10833] Workqueue: netns cleanup_net [ 588.721299][T10833] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 588.726900][T10833] Code: 48 8d bb 30 0e 00 00 e8 25 fe bc fc 48 8b bb 30 0e 00 00 e8 e9 7e c9 fc 5b 41 5e 41 5f 5d e9 0e 90 b3 00 cc e8 78 40 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 6a 40 a2 fc 90 0f 0b 90 4c 89 f7 e8 ee [ 588.746534][T10833] RSP: 0018:ffffc90011f97c60 EFLAGS: 00010293 [ 588.752672][T10833] RAX: ffffffff84b5ba18 RBX: ffff88810a8c4740 RCX: ffff888103460000 [ 588.760656][T10833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a8c5540 [ 588.768714][T10833] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 588.769141][T27857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.776722][T10833] R10: 000188811088700b R11: 0000000000000004 R12: ffffffff86c8b7c0 [ 588.776735][T10833] R13: ffff88810a8c4768 R14: ffff88810a8c5540 R15: ffff88810a8c4740 [ 588.776747][T10833] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 588.776761][T10833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.783679][T27857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.791657][T10833] CR2: 00007ffb157ef5c5 CR3: 0000000134fcc000 CR4: 00000000003506f0 [ 588.799608][T27857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.810840][T27952] loop5: detected capacity change from 0 to 8192 [ 588.815120][T10833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.873763][T10833] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 588.881777][T10833] Call Trace: [ 588.885054][T10833] [ 588.888002][T10833] xfrm_net_exit+0x2d/0x60 [ 588.892429][T10833] ops_undo_list+0x27b/0x410 [ 588.897097][T10833] cleanup_net+0x2de/0x4d0 [ 588.901527][T10833] process_scheduled_works+0x4ce/0x9d0 [ 588.907095][T10833] worker_thread+0x582/0x770 [ 588.911703][T10833] kthread+0x486/0x510 [ 588.915802][T10833] ? finish_task_switch+0xad/0x2b0 [ 588.920952][T10833] ? __pfx_worker_thread+0x10/0x10 [ 588.926071][T10833] ? __pfx_kthread+0x10/0x10 [ 588.930705][T10833] ret_from_fork+0xda/0x150 [ 588.935345][T10833] ? __pfx_kthread+0x10/0x10 [ 588.939997][T10833] ret_from_fork_asm+0x1a/0x30 [ 588.944773][T10833] [ 588.947860][T10833] ---[ end trace 0000000000000000 ]--- [ 588.959577][T27952] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.975641][T27857] hsr_slave_0: entered promiscuous mode [ 588.981848][T27952] FAULT_INJECTION: forcing a failure. [ 588.981848][T27952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.994965][T27952] CPU: 0 UID: 0 PID: 27952 Comm: syz.5.7838 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 588.994993][T27952] Tainted: [W]=WARN [ 588.994999][T27952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.995021][T27952] Call Trace: [ 588.995028][T27952] [ 588.995035][T27952] __dump_stack+0x1d/0x30 [ 588.995062][T27952] dump_stack_lvl+0xe8/0x140 [ 588.995082][T27952] dump_stack+0x15/0x1b [ 588.995179][T27952] should_fail_ex+0x265/0x280 [ 588.995202][T27952] should_fail+0xb/0x20 [ 588.995220][T27952] should_fail_usercopy+0x1a/0x20 [ 588.995243][T27952] strncpy_from_user+0x25/0x230 [ 588.995276][T27952] ? kmem_cache_alloc_noprof+0x186/0x310 [ 588.995304][T27952] ? getname_flags+0x80/0x3b0 [ 588.995407][T27952] getname_flags+0xae/0x3b0 [ 588.995434][T27952] __x64_sys_rename+0x33/0x70 [ 588.995476][T27952] x64_sys_call+0x1f9/0x2ff0 [ 588.995498][T27952] do_syscall_64+0xd2/0x200 [ 588.995524][T27952] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 588.995549][T27952] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 588.995613][T27952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.995665][T27952] RIP: 0033:0x7ffb1572ebe9 [ 588.995682][T27952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.995700][T27952] RSP: 002b:00007ffb14197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 588.995721][T27952] RAX: ffffffffffffffda RBX: 00007ffb15955fa0 RCX: 00007ffb1572ebe9 [ 588.995734][T27952] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000200000000600 [ 588.995748][T27952] RBP: 00007ffb14197090 R08: 0000000000000000 R09: 0000000000000000 [ 588.995795][T27952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.995809][T27952] R13: 00007ffb15956038 R14: 00007ffb15955fa0 R15: 00007ffd51c68d88 [ 588.995828][T27952] [ 588.998034][T27857] hsr_slave_1: entered promiscuous mode [ 589.028268][T27958] loop4: detected capacity change from 0 to 2048 [ 589.032786][T27857] debugfs: 'hsr0' already exists in 'hsr' [ 589.058812][T27958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.059760][T27857] Cannot create hsr debugfs directory [ 589.244457][T27958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 589.260750][T27971] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7844'. [ 589.373288][T27972] loop5: detected capacity change from 0 to 2048 [ 589.447497][T27972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.605271][T27983] lo speed is unknown, defaulting to 1000 [ 589.611832][T27983] lo speed is unknown, defaulting to 1000 [ 589.948563][T27857] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 589.984755][T27857] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 590.003542][T25353] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.025769][T27857] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 590.054427][T27857] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 590.138219][T27857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.208689][T27857] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.230802][T10833] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.237951][T10833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.256869][T10833] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.263946][T10833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.321472][T27857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.436512][T27857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.501934][T28002] loop8: detected capacity change from 0 to 128 [ 590.521813][T28002] FAT-fs (loop8): Directory bread(block 162) failed [ 590.536095][T28002] FAT-fs (loop8): Directory bread(block 163) failed [ 590.551164][T28002] FAT-fs (loop8): Directory bread(block 164) failed [ 590.569031][T28002] FAT-fs (loop8): Directory bread(block 165) failed [ 590.588515][T28002] FAT-fs (loop8): Directory bread(block 166) failed [ 590.595894][T28002] FAT-fs (loop8): Directory bread(block 167) failed [ 590.622950][T28002] FAT-fs (loop8): Directory bread(block 168) failed [ 590.636729][T28002] FAT-fs (loop8): Directory bread(block 169) failed [ 590.654400][T28002] FAT-fs (loop8): Directory bread(block 162) failed [ 590.663634][T28002] FAT-fs (loop8): Directory bread(block 163) failed [ 590.676708][T28002] syz.8.7847: attempt to access beyond end of device [ 590.676708][T28002] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 590.698401][T28002] syz.8.7847: attempt to access beyond end of device [ 590.698401][T28002] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 590.715059][T27857] veth0_vlan: entered promiscuous mode [ 590.723725][T27857] veth1_vlan: entered promiscuous mode [ 590.753476][T27857] veth0_macvtap: entered promiscuous mode [ 590.762795][T27857] veth1_macvtap: entered promiscuous mode [ 590.775568][T27857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.795640][T28017] ================================================================== [ 590.797927][T27857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.803734][T28017] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 590.814427][ T9991] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.818158][T28017] [ 590.818166][T28017] write to 0xffff88811598b300 of 8 bytes by task 28016 on cpu 0: [ 590.818180][T28017] mas_wmb_replace+0x20d/0x14a0 [ 590.827418][ T9991] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.829139][T28017] mas_wr_store_entry+0x1773/0x2b50 [ 590.855480][T28017] mas_store_prealloc+0x74d/0x9e0 [ 590.860512][T28017] vma_iter_store_new+0x1c5/0x200 [ 590.865546][T28017] vma_complete+0x125/0x580 [ 590.870069][T28017] __split_vma+0x5d9/0x650 [ 590.874483][T28017] vma_modify+0x3f2/0xc80 [ 590.878806][T28017] vma_modify_flags+0x101/0x130 [ 590.883656][T28017] mprotect_fixup+0x2cc/0x570 [ 590.888342][T28017] do_mprotect_pkey+0x6d6/0x980 [ 590.893195][T28017] __x64_sys_mprotect+0x48/0x60 [ 590.898040][T28017] x64_sys_call+0x274e/0x2ff0 [ 590.902719][T28017] do_syscall_64+0xd2/0x200 [ 590.907265][T28017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.913154][T28017] [ 590.915463][T28017] read to 0xffff88811598b300 of 8 bytes by task 28017 on cpu 1: [ 590.923080][T28017] mas_state_walk+0x119/0x650 [ 590.927761][T28017] mas_walk+0x60/0x150 [ 590.931827][T28017] lock_vma_under_rcu+0x8d/0x160 [ 590.936761][T28017] do_user_addr_fault+0x233/0x1090 [ 590.941876][T28017] exc_page_fault+0x62/0xa0 [ 590.946382][T28017] asm_exc_page_fault+0x26/0x30 [ 590.951231][T28017] [ 590.953539][T28017] value changed: 0xffff88810005dc41 -> 0xffff88811598b300 [ 590.960637][T28017] [ 590.962952][T28017] Reported by Kernel Concurrency Sanitizer on: [ 590.969089][T28017] CPU: 1 UID: 0 PID: 28017 Comm: syz.8.7850 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 590.980458][T28017] Tainted: [W]=WARN [ 590.984259][T28017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.994319][T28017] ================================================================== [ 591.009474][T22490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.009865][ T9991] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.040770][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 591.040782][ T29] audit: type=1400 audit(1755740529.041:10575): avc: denied { mounton } for pid=27857 comm="syz-executor" path="/root/syzkaller.GCmxBP/syz-tmp" dev="sda1" ino=2081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 591.050107][T28022] FAULT_INJECTION: forcing a failure. [ 591.050107][T28022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.075377][ T9991] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.084680][T28022] CPU: 1 UID: 0 PID: 28022 Comm: syz.5.7851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 591.084709][T28022] Tainted: [W]=WARN [ 591.084716][T28022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.084727][T28022] Call Trace: [ 591.084734][T28022] [ 591.084741][T28022] __dump_stack+0x1d/0x30 [ 591.084758][T28022] dump_stack_lvl+0xe8/0x140 [ 591.084807][T28022] dump_stack+0x15/0x1b [ 591.084824][T28022] should_fail_ex+0x265/0x280 [ 591.084846][T28022] should_fail+0xb/0x20 [ 591.084862][T28022] should_fail_usercopy+0x1a/0x20 [ 591.084883][T28022] _copy_from_user+0x1c/0xb0 [ 591.084954][T28022] bpf_test_init+0xdf/0x160 [ 591.084985][T28022] bpf_prog_test_run_skb+0x144/0xbd0 [ 591.085015][T28022] ? __rcu_read_unlock+0x4f/0x70 [ 591.085084][T28022] ? __fget_files+0x184/0x1c0 [ 591.085142][T28022] ? __rcu_read_unlock+0x4f/0x70 [ 591.085164][T28022] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 591.085205][T28022] bpf_prog_test_run+0x227/0x390 [ 591.085234][T28022] __sys_bpf+0x4b9/0x7b0 [ 591.085281][T28022] __x64_sys_bpf+0x41/0x50 [ 591.085359][T28022] x64_sys_call+0x2aea/0x2ff0 [ 591.085380][T28022] do_syscall_64+0xd2/0x200 [ 591.085450][T28022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 591.085473][T28022] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 591.085496][T28022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.085516][T28022] RIP: 0033:0x7ffb1572ebe9 [ 591.085551][T28022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.085569][T28022] RSP: 002b:00007ffb14197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.085588][T28022] RAX: ffffffffffffffda RBX: 00007ffb15955fa0 RCX: 00007ffb1572ebe9 [ 591.085600][T28022] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 591.085613][T28022] RBP: 00007ffb14197090 R08: 0000000000000000 R09: 0000000000000000 [ 591.085653][T28022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.085666][T28022] R13: 00007ffb15956038 R14: 00007ffb15955fa0 R15: 00007ffd51c68d88 [ 591.085684][T28022] [ 591.276386][ T29] audit: type=1400 audit(1755740529.081:10576): avc: denied { mount } for pid=27857 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 591.324519][ T29] audit: type=1400 audit(1755740529.081:10577): avc: denied { mount } for pid=27857 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 591.346630][ T29] audit: type=1400 audit(1755740529.081:10578): avc: denied { mounton } for pid=27857 comm="syz-executor" path="/root/syzkaller.GCmxBP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 591.373510][ T29] audit: type=1400 audit(1755740529.081:10579): avc: denied { mounton } for pid=27857 comm="syz-executor" path="/root/syzkaller.GCmxBP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=96124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 591.412513][ T29] audit: type=1400 audit(1755740529.331:10580): avc: denied { mounton } for pid=27857 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 591.435740][ T29] audit: type=1400 audit(1755740529.331:10581): avc: denied { mount } for pid=27857 comm="syz-executor" name="/" dev="gadgetfs" ino=3832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 591.462697][ T29] audit: type=1400 audit(1755740529.461:10582): avc: denied { add_name } for pid=27857 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 591.487680][ T29] audit: type=1400 audit(1755740529.461:10583): avc: denied { create } for pid=27857 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 591.508222][ T29] audit: type=1400 audit(1755740529.461:10584): avc: denied { associate } for pid=27857 comm="syz-executor" name="syz9" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 591.540929][T23793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.