last executing test programs: 4m53.544989089s ago: executing program 0 (id=3661): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x9) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x32600) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x2, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$xdp(0x2c, 0x3, 0x0) 4m52.561043447s ago: executing program 0 (id=3665): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) io_setup(0xffff, &(0x7f0000001080)) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4m52.349010281s ago: executing program 0 (id=3669): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) mknod(&(0x7f00000002c0)='./file1\x00', 0x200, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {}], 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x0, 0x17, 0x7b, 0x200, 0x1f, 0x800, &(0x7f0000000080)="c15b89713d1c11250f81153e6ddaf7ff243d495cb528f354ea9cbf0b6f3b87"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r6, &(0x7f0000001280), 0x0}, 0x20) sigaltstack(&(0x7f0000000300)={&(0x7f0000000580)=""/144, 0x80000002, 0x90}, &(0x7f0000000400)={&(0x7f0000000d00)=""/67, 0x0, 0x43}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3018406, &(0x7f0000000c00)={[{@quota}, {@data_err_abort}, {@discard}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@usrjquota}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@dioread_nolock}, {@bh}, {@dioread_nolock}, {@data_err_ignore}, {@data_journal}, {@usrquota}, {@max_dir_size_kb}, {@i_version}, {@norecovery}]}, 0x1, 0x55a, &(0x7f0000000680)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypVs+HzjlfXNO+p4n5zxv3pP3hAQwtCayP4WIlyPimyTiYEQk+brRyFdOrG23ev/qbLYk0Wh8+lfS3C6rt/5X63n788pLEfHbVxHHCxvbrS2vLJTK5XQxr0/WK5cma8srJy5USvPpfHpxembm1Nsz0++9+07fYn3j7D/ff3L7w1NfH1397pe7h24mcToO5Ova43gC19orEzGRvyZjcfqRDaf60NhOkgx6B9iWkTzPxyLrAw7GSJ71wIvvy4hoAEMqkf8wpCJiT7Rd2/fpOvi5ce+DtQugjfGPrn02Enua10b7VpOHroyy693xPrSftfHrn7duZkv073MIgC1dux4RJ0dHN/Z/Sd7/bd/JHrZ5tA39Hzw7t7Pxz5udxj+F9fFPdBj/7O+Qu9uxdf4X7vahma6y8d/7Hce/65NW4yN57X/NMd9Ycv5COc36tv9HxLEY253VN5vPObV6p9FtXfv4L1uy9ltjwXw/7o7ufvg5c6V66UlibnfvesQrHce/yfrxTzoc/+z1ONtjG0fSW691W7d1/E9X46eI1zse/wczWsnm85OTzfNhsnVWbPT3jSO/d2t/0PFnx3/f5vGPJ+3ztbXHb+PHPf+m3dY9FH/0fv7vSj5rlnflj10p1euLUxG7ko83Pj794Lmtemv7LP5jRzfv/zqd/3sj4vMe479x+OdXe4p/QMd/7rGO/+MX7nz0xQ/d2u+t/3urWTqWP9JL/9frDj7JawcAAAAAAAA7TSEiDkRSKK6XC4Vice3+jsOxr1Cu1urHz1eXLs5F87uy4zFWaM10H2y7H2Iqvx+2VZ9+pD4TEYci4tuRvc16cbZanht08AAAAAAAAAAAAAAAAAAAALBD7O/y/f/MHyOD3jvgqfOT3zC8tsz/fvzSE7Ajef+H4SX/YXjJfxhe8h+Gl/yH4SX/YXj1nv/uCIIXjfd/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KuzZ85kS2P1/tXZrD53eXlpoXr5xFxaWyhWlmaLs9XFS8X5anW+nBZnq5Wt/l+5Wr00NR1LVybraa0+WVteOVepLl2sn7tQKc2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF9qyysLpXI5XVRQ2FZhdGfshkKfC4PumQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggf8CAAD//2BrN7w=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r7, 0x0, 0x478) r8 = socket$inet(0x2, 0x1, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r8) syz_open_procfs$pagemap(0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') 4m51.772886611s ago: executing program 0 (id=3678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xca2a704b59ca2f4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r2}, 0x10) ppoll(&(0x7f0000000d40)=[{}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200183afffe8000000000000000000000000002000000000000000000000000000188009078d7000000fe8000000000000000000000000000bb000000"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff74c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0x192}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[], 0x15) r11 = dup(r10) write$P9_RLERRORu(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) stat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x3}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 4m50.937416956s ago: executing program 0 (id=3689): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4m50.669206171s ago: executing program 0 (id=3696): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800120001040000080003000000000008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m50.668840031s ago: executing program 32 (id=3696): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800120001040000080003000000000008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m6.413951688s ago: executing program 2 (id=6242): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000), 0x0) 2m6.326876229s ago: executing program 2 (id=6244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100002c34c027000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='nilfs2_segment_usage_freed\x00', r1, 0x0, 0x8000}, 0x18) set_robust_list(&(0x7f0000000380)={0x0, 0x4}, 0x18) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x112) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000015c0)='vm_unmapped_area\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) io_setup(0x5, &(0x7f0000000600)) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00') syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES8], 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000004028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m5.912827497s ago: executing program 2 (id=6247): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="643c87cf08d21d994efea03321af0c6c7715a604", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 2m5.891034577s ago: executing program 2 (id=6249): syz_io_uring_setup(0xbc3, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e00)={0xffffffffffffffff, 0x20, &(0x7f0000001dc0)={&(0x7f0000001d40)=""/86, 0x56, 0x0, &(0x7f0000001c00)=""/3, 0x3}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) creat(&(0x7f0000001c40)='./file0/file1\x00', 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) r6 = gettid() r7 = eventfd2(0x0, 0x0) write$eventfd(r7, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r7, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='security.ext4'], 0x0, 0x0, 0x1) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m5.257519689s ago: executing program 2 (id=6264): syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c80), 0x14b181) write$sndseq(r0, &(0x7f0000000100)=[{0xd9, 0xdb, 0x2, 0xfd, @time={0x4, 0x2}, {0x0, 0x1}, {0x81, 0x81}, @raw8={"8c73dcba3d036e056aeda0c9"}}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0x310) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m4.193555918s ago: executing program 2 (id=6274): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) 2m4.193441958s ago: executing program 33 (id=6274): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) 1m59.109798889s ago: executing program 6 (id=6355): syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c80), 0x14b181) write$sndseq(r0, &(0x7f0000000100)=[{0xd9, 0xdb, 0x2, 0xfd, @time={0x4, 0x2}, {0x0, 0x1}, {0x81, 0x81}, @raw8={"8c73dcba3d036e056aeda0c9"}}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0x310) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m58.54997203s ago: executing program 6 (id=6360): syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c80), 0x14b181) write$sndseq(r0, &(0x7f0000000100)=[{0xd9, 0xdb, 0x2, 0xfd, @time={0x4, 0x2}, {0x0, 0x1}, {0x81, 0x81}, @raw8={"8c73dcba3d036e056aeda0c9"}}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0x310) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m57.932196971s ago: executing program 6 (id=6366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x0) 1m57.902171561s ago: executing program 6 (id=6367): syz_io_uring_setup(0xbc3, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e00)={0xffffffffffffffff, 0x20, &(0x7f0000001dc0)={&(0x7f0000001d40)=""/86, 0x56, 0x0, &(0x7f0000001c00)=""/3, 0x3}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) creat(&(0x7f0000001c40)='./file0/file1\x00', 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) r6 = gettid() r7 = eventfd2(0x0, 0x0) write$eventfd(r7, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r7, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='security.ext4'], 0x0, 0x0, 0x1) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 1m57.577666487s ago: executing program 6 (id=6370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x29, 0x78, 0x8, 0x5, 0x2a, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x40, 0x700, 0x6, 0x3}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ef", 0x1}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f00000002c0)="102146a17cf5a2e9ecbab52a20a895adeb2a0bacb450ab06f033fa5a18585ad66acdbf4913fc0daf266d949a3a841978cddc13bd0f3f1013cef4670b00e264373d5ae1af4d9c5a4ad4c3722101b1e9fa136d3900930ca1aa7c17223482644875058a753e98b53d2fd2bc853d1e3ef6d0761b2cf64f7c6f127530b7e691acd4c8607969d40716674a7fc49f2c1afbc763600321c5f762df8ab9eddc08e2001d984facfbd48a82121bdd940df76e382d2adf93e613472b9959770ca52e7a5d989f4fa28ca6219988a3b82712e2c6a38321f3d4696944efa8643234e4dfb4610a89f312197b707470de582d23686dcfda", 0xef}], 0x3, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa0f8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x58800000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x108}}, {{&(0x7f0000001740)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001780)="fd30debca65aa0b8c5936a087dfd542f8300a3e3407bec5e4cb608ea46193525150f6f32f347bd9bb72fa946deb51917b5af8376810a2d03e52652fae7e26f3b8a76844089cac391b66816a7ef6700ad1798bd2f07374d529817734df14acf572bbc663556b88ea7bf405484a16524f7aea896738bc115d5ea127f69e96bd9813c96ce60697360a614f016789182989f1873dd5c9a58e3e84fd27eadc944ff53b24eaba34f4e91d8d52c22a9283c2268262635e2662db579ed0183b0bf3238403f72dd86dd0961b924d07adabf3cb0a8db7b5fc412ce8207d8ca3adc90aa5de1b626d1600bc9", 0xe6}, {&(0x7f0000001880)="f8124055c17d8e7e2383daedb926d2312d1239c0571668e8d06c2063193865b6d67675ea1133a3be9e037c8f0dd672db6b6cc08eda3513b7199a4ba884f3b13553147611dbb62237108173400f9229d6463f1207da2dd4f9f7fe493f3da611547e7cf4bf6767c9fd8c7005679b5bb1c92f27d8471c37bf6d61e14857902fc48f04e8c59b7ce40a6f7f829d5941432a5f2d35070367050f0b16f7ad4779d9ca85691eafcd18bb0ce57875ed3eaf381043f228ee063a2b28cdffabd0d06a310c98a3adffd3ab114a6296693a36a0c8121a414b39b387330520f65ccdde9d27a594e40e", 0xe2}, {&(0x7f0000001980)="c3b4aef96b141b435e0aced1710cf949b6661d015b1e08295db3c54c2edca8a9e4fb9df41ab0e9327db70714d3cd7fe89ff8cf64fcd4", 0x36}, {&(0x7f00000019c0)="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", 0xfd}, {&(0x7f0000001ac0)="52e329bdfc09a151c61e05", 0xb}, {&(0x7f0000001b00)="11", 0x1}, {&(0x7f0000001b40)="e151d7f4dc965631c1f2c79485f7b961039ea8698926d946570df3ca5750eace5c88648d9f4ada66e927b01229533e27fb9c1e3eadb186b7cb150b9ca995c25798d43b", 0x43}, {&(0x7f0000001bc0)="3480e8d75ccb31e2d0936f0b9e4fca4e0b03fd57d92437792f8cb1f4c57f0baf03d55a5ceda6b7f523ce8f0eff0b95f3d90a9a52f1857740b3419a1a7aedeb", 0x3f}, {&(0x7f0000001c00)="bdd8ccb55e86d13d6dcd236df80651d2f36f209a13b30a1ea131e1348ec655a4a3d3864336e24bcd0cd08c1b2ead72bd8866260036f0a6b48776c953a5e78af7a464b16167bef97bd6c31b1199089d78c06a9884c08c2d6524d3513db9bab6ce85cb2e60a8f9aa513344cda332f25f2eb283ce0ac88d26932f6371843ca672bc7bd2250029b695cf5252730eb891444f9cd60e0af390c68bd21098f220ef43daa176161c280a1536fc38300d719be8ce81", 0xb1}, {&(0x7f0000001cc0)="8fe05b53fbc81b06dea580eab39f719299ebf2636f5a7892264c23a06a73fb9a61c26b947d9ce31b4d954654e3f92d22363b9bda6094362ea34bc7ca7aa31a7802e6de7f980c3e2212293c14287cd5b51606004ebc529150399a6d2fab70d149cf1b7f67f1ab63cebb5e002d1b09cf27ee34f73e5546077d814a8665e9c497cd5aca31b25de3bc3cb05dbe28c7506efe4a3ddd314aae289b33e7d25fa61a841d1c25de25aed1dfdd555865df8b0731bf239ac5af0587003c2a5825fc7c41fd38d24c1d721db541d18e71a670f928fb727793514fdf95591b0349031d54282663611a73", 0xe3}], 0xa, &(0x7f0000002280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0xa6, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x24, 0xc7, 0x0, 0x0, [0x1, 0x5, 0x0, 0x7, 0xc, 0x0, 0x4, 0x9]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0xffffffffffffffa6, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001fc0)="b2685bc6fe0ffa2ce1a727acd7cbeae5d6780b319cc3454ff0611163148ba6ad59c1176bc332", 0x26}], 0x1}}], 0x3, 0x0) 1m56.829540451s ago: executing program 6 (id=6378): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) 1m56.762055491s ago: executing program 34 (id=6378): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) 1m47.821900803s ago: executing program 4 (id=6428): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="643c87cf08d21d994efea03321af0c6c7715a604", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 1m47.791788053s ago: executing program 4 (id=6489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = io_uring_setup(0x7a4, &(0x7f00000003c0)={0x0, 0xdf09, 0x800, 0x5}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x8957) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1m47.759555614s ago: executing program 4 (id=6491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r2, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) 1m47.712458115s ago: executing program 4 (id=6492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(r2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\t', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x340, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x14040, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1m47.359868862s ago: executing program 4 (id=6496): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153d3000000000005"]) 1m44.038400701s ago: executing program 4 (id=6558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 1m43.998311552s ago: executing program 35 (id=6558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 3.181452153s ago: executing program 5 (id=8355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000004028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.070197635s ago: executing program 5 (id=8362): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa0f8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x90}}], 0x1, 0x0) 2.983909257s ago: executing program 5 (id=8365): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4a0, 0xffffffff, 0x248, 0x0, 0x248, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x3}}}}, {{@ipv6={@private2, @local, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x1d0, 0x5}}, @common=@srh1={{0x90}, {0x2b, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) statfs(&(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000b103000000000000000dc2ba9fbbe9c9b8cae47fbb24e492ca70c2db50162706d1f02d0202a0b6987c2bfea57c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x2, &(0x7f0000003ac0)={0x0, 0x15, 0x1}, &(0x7f0000003b00)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0xc0603d0f, &(0x7f0000000000)={0xa1b, 0xd}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) socket$netlink(0x10, 0x3, 0x0) timer_settime(r5, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000500"/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r9}, 0x18) timer_gettime(r5, &(0x7f0000003bc0)) 2.896803618s ago: executing program 5 (id=8368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = dup(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2.813891179s ago: executing program 5 (id=8370): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xfff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) timer_create(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x97, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 2.76125888s ago: executing program 5 (id=8372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000004028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.471963544s ago: executing program 8 (id=8400): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB="00db095c9d"], 0x48) 1.451582244s ago: executing program 8 (id=8402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000015c0)='vm_unmapped_area\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x5, &(0x7f0000000600)) 1.366893386s ago: executing program 8 (id=8407): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e64000000240103"], 0x150}}, 0x0) 1.340165536s ago: executing program 8 (id=8409): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r0, &(0x7f0000009100)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x1, 0x0, 0x12}, 0x80, 0x0}}], 0x1, 0x24000005) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000000)={0x0, 0x1, 0x14}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='rpcb_setport\x00', 0xffffffffffffffff, 0x0, 0x4000000000000000}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x24, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000400)='.\x00', 0xa4000021) read(r10, 0x0, 0x0) close(r10) 1.039309021s ago: executing program 3 (id=8418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000015c0)='vm_unmapped_area\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x5, &(0x7f0000000600)) 1.027170652s ago: executing program 1 (id=8419): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e64000000240103"], 0x150}}, 0x0) 1.011035542s ago: executing program 1 (id=8420): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa0f8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}}}], 0x38}}], 0x1, 0x0) 980.929123ms ago: executing program 1 (id=8421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x000\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0xa0}, 0x4004881) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x1104) 930.103594ms ago: executing program 3 (id=8422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r2}, &(0x7f0000000ec0), &(0x7f0000000d80)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{r2}, &(0x7f0000000f80), &(0x7f0000000fc0)='%pi6 \x00'}, 0x20) 901.674474ms ago: executing program 3 (id=8423): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="00db095c9d"], 0x48) 901.094494ms ago: executing program 3 (id=8424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001e00010000000000ffdbdf2507000000", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000007c0)='ext4_ext_convert_to_initialized_enter\x00'}, 0x18) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffff"], 0x6f4}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000009569ab675518b66a43f6a98499f42b236244e10968e912f6fe8bac40cf6f7711bc1d9e7400c10e2ca7d6fbeb73828e478fec9b8ed5b1c657cb73dfa7f901a7d5cc4a98417de1170ca5af777add717c102017e6e9ec30f12b85883c6168399be01403fec281854bb8ac16272b4c46a6ca3938d8057e5a9de24ea346b686e277ac3a4f045f3c56f61fc48468784b5c63adc102d721d269057334df77e98098520a6e9d33e6ca57c24f930403baf0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x752, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) 867.813885ms ago: executing program 3 (id=8425): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x406}, 0x400, 0xfffffffd, 0x6, 0x3, 0x1, 0x41, 0xfff6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000500)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000040)={0x103, 0xd, 0x1, 0x2}) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 521.506731ms ago: executing program 7 (id=8426): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32=0x1, @ANYBLOB="00e003010000fa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r1, @ANYRESDEC=r2, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x48, r7, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x48}}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x200408c0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000400)=@gcm_128={{0x304}, "fc37f04f2d44b406", "7e3eb6ae1020eebcb60c6c4d1f73cca7", "32f6502d", "e13a9e8a46256dcb"}, 0x28) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r10) r12 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r13}, &(0x7f0000000180), &(0x7f00000001c0)=r12}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r14}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, r11, 0x1, 0x7ffffc, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c011}, 0x40000) bind$rds(r4, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x41}}], 0x30}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3005690d000f69c9fb931e9685174de50c0a93694fb9a41757b34ef618d1c30738bebed016fbe27932bb3c75454a70614b45441a432511acd2212648ce32c8a12ecc5d29c7dce2c5899295ff41cf055cc30aee25b2ea76ddd22ef5e949c24606e7f35a3cefd53a253a04bceb93d35ca6372c5c54aaedd226762ff1b40e17b2347c058e8167405d780956a917f625f2456503ab", @ANYRES16=r2, @ANYBLOB="050027bd7000fbdbdf251b00000010002e800c00040000000000000000000c0006000100000001000000"], 0x30}, 0x1, 0x0, 0x0, 0x60000084}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 463.823782ms ago: executing program 8 (id=8427): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 463.205972ms ago: executing program 8 (id=8428): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x28, r5, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc}}}}}, 0x28}}, 0x0) 385.989723ms ago: executing program 7 (id=8429): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x10000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xfff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) timer_create(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x97, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa207020000f8ffffffb703000008000000b704000000000000850000000300000095712d79592271d8baa4d2088fdaa008808d3f8d8a835a278e4a7e2f221e06cf5fc9c506fcbd80171f701d4b4b3b93b1c5bc5a561fd23f816b2acedd3400d57c90b38d50a012082482d11ed7ba0a6a22df1f115f4cace1321fd616c86163c1a1c7cb284244000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='fscache_access\x00', r6}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='dax_insert_mapping\x00', r8, 0x0, 0x9}, 0xfffffffffffffee5) r9 = memfd_create(&(0x7f0000001380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) clock_gettime(0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0xc0603d0f, &(0x7f0000000000)={0xa1b, 0xd}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) socket$netlink(0x10, 0x3, 0x0) timer_settime(r5, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000500"/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r9}, 0x18) timer_gettime(r5, &(0x7f0000003bc0)) 281.028895ms ago: executing program 7 (id=8433): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xfff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) timer_create(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x97, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 144.368318ms ago: executing program 1 (id=8434): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1, @ANYRES32=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xd53a8774358d4da3}, 0xc, &(0x7f00000004c0)={&(0x7f0000001300)={0x78, r7, 0x320, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x12}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x43}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xce}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x85}, @NL80211_ATTR_BANDS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x1c, r7, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000009c0)=ANY=[@ANYBLOB="e904a2f7ffff002253f853ecc3ffe7b0e528bc0ae0bfa4ad588e4b1868c78e80c20000000800450000140000e00000119078000000000000000000000020214bedde0691280514f02c84d58e9e129a6ed3da562d4ad23dcbf80add0869ec7aa2a0d21b52e89b9d5128662d14f87696e27b84b5885f5ba1662564084fbcf2b43a632e4b765635c5e6b0d9c4c82eaf6893aeccc0f0e78cd623782a26b8e4194788a831f13f1101a4f9f015326ae858f82ff4269070b80acd9717f59fe1e8abde944547260b6364975f32a222cfa5439078835b9949a3fa4ba52ec95f827f693378b0be336e0eb558cc06"], 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r12, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x8082, &(0x7f00000005c0)={[{@noinit_itable}, {@journal_async_commit}, {@usrjquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@commit={'commit', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@commit={'commit', 0x3d, 0xd000000000000}}, {@inlinecrypt}], [{@dont_appraise}, {@seclabel}, {@permit_directio}, {@dont_measure}, {@audit}]}, 0xf6, 0x5ef, &(0x7f00000017c0)="$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") r13 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r13, 0xc0404806, 0x0) 37.43706ms ago: executing program 1 (id=8435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r2}, &(0x7f0000000ec0), &(0x7f0000000d80)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{r2}, &(0x7f0000000f80), &(0x7f0000000fc0)='%pi6 \x00'}, 0x20) 37.05072ms ago: executing program 1 (id=8436): syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c80), 0x14b181) write$sndseq(r0, &(0x7f0000000100)=[{0xd9, 0xdb, 0x2, 0xfd, @time={0x4, 0x2}, {0x0, 0x1}, {0x81, 0x81}, @raw8={"8c73dcba3d036e056aeda0c9"}}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0x310) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=8437): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) dup(r1) (async) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, 0x0) (async) kernel console output (not intermixed with test programs): .098167][T23239] ? clear_bhb_loop+0x25/0x80 [ 463.098195][T23239] ? clear_bhb_loop+0x25/0x80 [ 463.098221][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.098244][T23239] RIP: 0033:0x7f737512e969 [ 463.098262][T23239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.098358][T23239] RSP: 002b:00007f7373797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 463.098381][T23239] RAX: ffffffffffffffda RBX: 00007f7375355fa0 RCX: 00007f737512e969 [ 463.098393][T23239] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000200000000440 [ 463.098486][T23239] RBP: 00007f7373797090 R08: 0000000000000000 R09: 0000000000000000 [ 463.098501][T23239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.098516][T23239] R13: 0000000000000000 R14: 00007f7375355fa0 R15: 00007ffe4a3f0db8 [ 463.098541][T23239] [ 463.320791][T23244] siw: device registration error -23 [ 463.367314][T23244] loop5: detected capacity change from 0 to 2048 [ 463.402401][T23244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.496838][T23257] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7593'. [ 463.505982][T23257] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7593'. [ 463.733074][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.763722][T23270] siw: device registration error -23 [ 463.803953][T23270] loop7: detected capacity change from 0 to 2048 [ 463.828814][T23270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.921510][T23276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2321 sclass=netlink_route_socket pid=23276 comm=syz.5.7602 [ 464.046325][ T29] kauditd_printk_skb: 1029 callbacks suppressed [ 464.046343][ T29] audit: type=1400 audit(1745455058.509:55836): avc: denied { create } for pid=23268 comm="syz.8.7600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 464.075624][T23269] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7600'. [ 464.086422][T23283] FAULT_INJECTION: forcing a failure. [ 464.086422][T23283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.086634][ T29] audit: type=1400 audit(1745455058.539:55837): avc: denied { write } for pid=23268 comm="syz.8.7600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 464.099512][T23283] CPU: 0 UID: 0 PID: 23283 Comm: syz.3.7594 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 464.099546][T23283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.099624][T23283] Call Trace: [ 464.099633][T23283] [ 464.099641][T23283] dump_stack_lvl+0xf6/0x150 [ 464.099672][T23283] dump_stack+0x15/0x1a [ 464.099694][T23283] should_fail_ex+0x261/0x270 [ 464.099727][T23283] should_fail+0xb/0x10 [ 464.099752][T23283] should_fail_usercopy+0x1a/0x20 [ 464.099803][T23283] _copy_from_user+0x1c/0xa0 [ 464.099914][T23283] copy_msghdr_from_user+0x54/0x2b0 [ 464.099955][T23283] ? __fget_files+0x186/0x1c0 [ 464.100039][T23283] __sys_sendmmsg+0x1eb/0x4b0 [ 464.100101][T23283] __x64_sys_sendmmsg+0x57/0x70 [ 464.100134][T23283] x64_sys_call+0x2b53/0x2e10 [ 464.100216][T23283] do_syscall_64+0xc9/0x1a0 [ 464.100249][T23283] ? clear_bhb_loop+0x25/0x80 [ 464.100276][T23283] ? clear_bhb_loop+0x25/0x80 [ 464.100370][T23283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.100396][T23283] RIP: 0033:0x7faea619e969 [ 464.100416][T23283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.100447][T23283] RSP: 002b:00007faea4807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 464.100470][T23283] RAX: ffffffffffffffda RBX: 00007faea63c5fa0 RCX: 00007faea619e969 [ 464.100487][T23283] RDX: 0000000000000003 RSI: 0000200000004540 RDI: 0000000000000006 [ 464.100564][T23283] RBP: 00007faea4807090 R08: 0000000000000000 R09: 0000000000000000 [ 464.100579][T23283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.100594][T23283] R13: 0000000000000000 R14: 00007faea63c5fa0 R15: 00007ffcbc24d7b8 [ 464.100618][T23283] [ 464.298565][ T29] audit: type=1326 audit(1745455058.659:55838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.3.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 464.322412][ T29] audit: type=1326 audit(1745455058.659:55839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.3.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 464.346263][ T29] audit: type=1326 audit(1745455058.659:55840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.3.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 464.369914][ T29] audit: type=1326 audit(1745455058.659:55841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.3.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 464.393541][ T29] audit: type=1326 audit(1745455058.659:55842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.3.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 464.417238][ T29] audit: type=1326 audit(1745455058.659:55843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.3.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 464.440741][ T29] audit: type=1326 audit(1745455058.659:55844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.3.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 464.464346][ T29] audit: type=1326 audit(1745455058.659:55845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz.3.7605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 464.489195][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.506174][T23289] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7606'. [ 464.515464][T23289] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7606'. [ 464.544289][T23295] loop8: detected capacity change from 0 to 128 [ 464.552079][T23295] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 464.565121][T23295] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 464.669765][T23306] netlink: 3 bytes leftover after parsing attributes in process `syz.8.7608'. [ 464.715264][T23306] 0ªX¹¦À: renamed from 61ªX¹¦À [ 464.730789][T23306] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 464.752714][T23311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7610'. [ 465.542846][T23330] loop3: detected capacity change from 0 to 512 [ 465.565481][T23330] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.7622: corrupted inode contents [ 465.590382][T23330] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #16: comm syz.3.7622: mark_inode_dirty error [ 465.634134][T23330] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.7622: corrupted inode contents [ 465.683796][T23330] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.7622: mark_inode_dirty error [ 465.723495][T23330] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.7622: corrupted inode contents [ 465.748536][T23330] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 465.782297][T23330] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.7622: corrupted inode contents [ 465.818158][T23330] EXT4-fs error (device loop3): ext4_truncate:4255: inode #16: comm syz.3.7622: mark_inode_dirty error [ 465.849671][T23330] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 465.877198][T23330] EXT4-fs (loop3): 1 truncate cleaned up [ 465.883353][T23330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.898347][T23347] sd 0:0:1:0: device reset [ 465.903099][T15503] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 1 [ 465.915330][T23330] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.917915][T23347] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 465.949106][T23330] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 466.007321][T23351] loop7: detected capacity change from 0 to 512 [ 466.014450][T23351] EXT4-fs: Ignoring removed oldalloc option [ 466.044230][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.054061][T23351] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7629: Parent and EA inode have the same ino 15 [ 466.081200][T23351] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7629: Parent and EA inode have the same ino 15 [ 466.147025][T23351] EXT4-fs (loop7): 1 orphan inode deleted [ 466.163366][T23351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.179422][T23361] sd 0:0:1:0: device reset [ 466.225796][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.306285][ T3379] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 466.316246][T23363] loop3: detected capacity change from 0 to 1024 [ 466.323137][T23363] ext2: Bad value for 'commit' [ 466.341845][ T3379] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 466.357134][T23370] loop1: detected capacity change from 0 to 128 [ 466.363777][T23370] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 466.394498][T23370] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 466.437188][T23375] loop8: detected capacity change from 0 to 512 [ 466.443836][T23375] EXT4-fs: Ignoring removed oldalloc option [ 466.459737][T23375] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.7638: Parent and EA inode have the same ino 15 [ 466.481346][T23375] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.7638: Parent and EA inode have the same ino 15 [ 466.494447][T23380] 0ªX¹¦À: renamed from 61ªX¹¦À [ 466.494660][T23375] EXT4-fs (loop8): 1 orphan inode deleted [ 466.507250][T23380] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 466.507359][T23375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.554003][T23381] sd 0:0:1:0: device reset [ 466.578668][T20598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.644703][T23386] __nla_validate_parse: 9 callbacks suppressed [ 466.644723][T23386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7641'. [ 466.708342][T23390] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7643'. [ 466.717523][T23390] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7643'. [ 466.866913][T23397] siw: device registration error -23 [ 466.889290][T23397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.905467][T23397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.932685][T23397] loop8: detected capacity change from 0 to 2048 [ 466.969007][T23397] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.263165][T23410] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 467.322521][T23412] loop7: detected capacity change from 0 to 512 [ 467.332907][T23412] journal_path: Lookup failure for './file0' [ 467.338955][T23412] EXT4-fs: error: could not find journal device path [ 467.386770][T23416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7654'. [ 467.413403][T23419] netlink: 964 bytes leftover after parsing attributes in process `syz.7.7656'. [ 467.707633][T20598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.729550][T23429] loop7: detected capacity change from 0 to 128 [ 467.740129][T23429] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 467.783867][T23429] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 467.982378][T23431] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7659'. [ 467.991766][T23431] 0ªX¹¦À: renamed from 61ªX¹¦À [ 468.018347][T23431] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 468.331742][T23435] loop8: detected capacity change from 0 to 512 [ 468.359816][T23435] EXT4-fs: Ignoring removed oldalloc option [ 468.410880][T23435] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.7660: Parent and EA inode have the same ino 15 [ 468.425672][T23435] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.7660: Parent and EA inode have the same ino 15 [ 468.466855][T23435] EXT4-fs (loop8): 1 orphan inode deleted [ 468.475652][T23435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.549492][T20598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.577777][T23449] FAULT_INJECTION: forcing a failure. [ 468.577777][T23449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.590902][T23449] CPU: 0 UID: 0 PID: 23449 Comm: syz.7.7668 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 468.590955][T23449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.590970][T23449] Call Trace: [ 468.590978][T23449] [ 468.590987][T23449] dump_stack_lvl+0xf6/0x150 [ 468.591015][T23449] dump_stack+0x15/0x1a [ 468.591035][T23449] should_fail_ex+0x261/0x270 [ 468.591062][T23449] should_fail+0xb/0x10 [ 468.591136][T23449] should_fail_usercopy+0x1a/0x20 [ 468.591166][T23449] _copy_from_iter+0xd8/0xd10 [ 468.591255][T23449] ? skb_set_owner_w+0x164/0x1b0 [ 468.591283][T23449] ? __virt_addr_valid+0x1ed/0x250 [ 468.591303][T23449] ? __check_object_size+0x367/0x510 [ 468.591333][T23449] skb_copy_datagram_from_iter+0xbb/0x490 [ 468.591414][T23449] ? mntput+0x49/0x70 [ 468.591442][T23449] ? skb_put+0xba/0x100 [ 468.591480][T23449] tun_get_user+0x10ea/0x2640 [ 468.591564][T23449] ? avc_has_perm+0xd6/0x150 [ 468.591600][T23449] ? ref_tracker_alloc+0x1ff/0x310 [ 468.591630][T23449] tun_chr_write_iter+0x188/0x240 [ 468.591649][T23449] vfs_write+0x79b/0x950 [ 468.591676][T23449] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 468.591698][T23449] ksys_write+0xeb/0x1b0 [ 468.591716][T23449] __x64_sys_write+0x42/0x50 [ 468.591732][T23449] x64_sys_call+0x2a45/0x2e10 [ 468.591757][T23449] do_syscall_64+0xc9/0x1a0 [ 468.591784][T23449] ? clear_bhb_loop+0x25/0x80 [ 468.591881][T23449] ? clear_bhb_loop+0x25/0x80 [ 468.591904][T23449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.591929][T23449] RIP: 0033:0x7efe9c65e969 [ 468.591943][T23449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.591966][T23449] RSP: 002b:00007efe9acc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.591987][T23449] RAX: ffffffffffffffda RBX: 00007efe9c885fa0 RCX: 00007efe9c65e969 [ 468.592001][T23449] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 468.592015][T23449] RBP: 00007efe9acc7090 R08: 0000000000000000 R09: 0000000000000000 [ 468.592029][T23449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.592078][T23449] R13: 0000000000000000 R14: 00007efe9c885fa0 R15: 00007ffe847f7a68 [ 468.592102][T23449] [ 468.874658][T23453] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7669'. [ 469.021160][T23467] sd 0:0:1:0: device reset [ 469.028566][T23466] loop7: detected capacity change from 0 to 512 [ 469.035925][T23466] EXT4-fs: Ignoring removed oldalloc option [ 469.043489][T23466] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7674: Parent and EA inode have the same ino 15 [ 469.058063][T23466] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7674: Parent and EA inode have the same ino 15 [ 469.071001][T23466] EXT4-fs (loop7): 1 orphan inode deleted [ 469.078307][T23466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.103615][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 469.103633][ T29] audit: type=1400 audit(1745455063.559:56131): avc: denied { create } for pid=23465 comm="syz.3.7675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 469.152158][T23471] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 469.193867][ T29] audit: type=1400 audit(1745455063.599:56132): avc: denied { create } for pid=23465 comm="syz.3.7675" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 469.214918][ T29] audit: type=1326 audit(1745455063.609:56133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.7676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 469.238622][ T29] audit: type=1326 audit(1745455063.609:56134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.7676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 469.262232][ T29] audit: type=1326 audit(1745455063.609:56135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.7676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 469.286021][ T29] audit: type=1326 audit(1745455063.609:56136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.7676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 469.309656][ T29] audit: type=1326 audit(1745455063.609:56137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.7676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 469.333368][ T29] audit: type=1326 audit(1745455063.609:56138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.7676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 469.357051][ T29] audit: type=1326 audit(1745455063.609:56139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.7676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 469.380705][ T29] audit: type=1326 audit(1745455063.609:56140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23470 comm="syz.1.7676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 469.407143][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.428707][T23481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7681'. [ 469.454033][T23483] binfmt_misc: register: failed to install interpreter file ./file0 [ 469.474407][T23478] loop5: detected capacity change from 0 to 512 [ 469.516534][T23478] EXT4-fs (loop5): 1 orphan inode deleted [ 469.533940][T23478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.674355][T23508] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7691'. [ 469.701053][T23510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7692'. [ 469.882345][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.901328][T23522] FAULT_INJECTION: forcing a failure. [ 469.901328][T23522] name failslab, interval 1, probability 0, space 0, times 0 [ 469.914143][T23522] CPU: 1 UID: 0 PID: 23522 Comm: syz.5.7697 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 469.914175][T23522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.914191][T23522] Call Trace: [ 469.914198][T23522] [ 469.914206][T23522] dump_stack_lvl+0xf6/0x150 [ 469.914236][T23522] dump_stack+0x15/0x1a [ 469.914309][T23522] should_fail_ex+0x261/0x270 [ 469.914340][T23522] should_failslab+0x8f/0xb0 [ 469.914367][T23522] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 469.914463][T23522] ? sidtab_sid2str_get+0xb8/0x140 [ 469.914493][T23522] ? vsnprintf+0x84d/0x8a0 [ 469.914544][T23522] kmemdup_noprof+0x2b/0x70 [ 469.914602][T23522] sidtab_sid2str_get+0xb8/0x140 [ 469.914628][T23522] security_sid_to_context_core+0x1eb/0x2f0 [ 469.914717][T23522] security_sid_to_context+0x27/0x30 [ 469.914756][T23522] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 469.914816][T23522] security_lsmprop_to_secctx+0x40/0x80 [ 469.914851][T23522] audit_log_task_context+0x7a/0x180 [ 469.914891][T23522] audit_log_task+0xfb/0x250 [ 469.914918][T23522] ? kstrtouint+0x7b/0xc0 [ 469.914945][T23522] audit_seccomp+0x62/0x100 [ 469.915030][T23522] __seccomp_filter+0x694/0x10e0 [ 469.915109][T23522] ? vfs_write+0x669/0x950 [ 469.915141][T23522] __secure_computing+0x7e/0x150 [ 469.915169][T23522] syscall_trace_enter+0xcf/0x1f0 [ 469.915200][T23522] do_syscall_64+0xaa/0x1a0 [ 469.915227][T23522] ? clear_bhb_loop+0x25/0x80 [ 469.915311][T23522] ? clear_bhb_loop+0x25/0x80 [ 469.915422][T23522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.915449][T23522] RIP: 0033:0x7f4b773fe969 [ 469.915544][T23522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.915565][T23522] RSP: 002b:00007f4b75a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 469.915588][T23522] RAX: ffffffffffffffda RBX: 00007f4b77625fa0 RCX: 00007f4b773fe969 [ 469.915604][T23522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 469.915617][T23522] RBP: 00007f4b75a67090 R08: 0000000000000000 R09: 0000000000000000 [ 469.915631][T23522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.915645][T23522] R13: 0000000000000000 R14: 00007f4b77625fa0 R15: 00007ffe89246938 [ 469.915669][T23522] [ 470.174428][T23526] loop5: detected capacity change from 0 to 512 [ 470.181174][T23526] EXT4-fs: Ignoring removed oldalloc option [ 470.189036][T23526] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.7699: Parent and EA inode have the same ino 15 [ 470.205508][T23526] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.7699: Parent and EA inode have the same ino 15 [ 470.218683][T23526] EXT4-fs (loop5): 1 orphan inode deleted [ 470.240935][T23526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.269439][T23534] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 470.282073][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.322850][T23538] loop8: detected capacity change from 0 to 128 [ 470.338429][T23538] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 470.350465][T23538] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 470.394094][T23549] sd 0:0:1:0: device reset [ 470.430506][T23552] 1ªX¹¦À: renamed from 60ªX¹¦À [ 470.437480][T23552] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 470.441377][T23553] siw: device registration error -23 [ 470.481456][T23553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.490025][T23553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.507266][T23553] loop5: detected capacity change from 0 to 2048 [ 470.527030][T23553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.157071][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.217836][T23572] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 471.437032][T23595] loop3: detected capacity change from 0 to 128 [ 471.444182][T23595] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.458950][T23595] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 471.544664][T23599] 1ªX¹¦À: renamed from 60ªX¹¦À [ 471.751120][T23599] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 472.078647][T23612] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 472.129775][T23615] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 472.142223][T23616] sd 0:0:1:0: device reset [ 472.444252][T23633] __nla_validate_parse: 7 callbacks suppressed [ 472.444274][T23633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7740'. [ 472.459573][T23633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7740'. [ 472.470878][T23633] bond0: entered promiscuous mode [ 472.475942][T23633] bond_slave_0: entered promiscuous mode [ 472.481644][T23633] bond_slave_1: entered promiscuous mode [ 472.488972][T23633] batadv_slave_1: entered promiscuous mode [ 472.512092][T23633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7740'. [ 472.522089][T23633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7740'. [ 472.988173][T23648] sd 0:0:1:0: device reset [ 473.053992][T23648] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 473.084266][T23651] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 473.243019][T23656] loop5: detected capacity change from 0 to 128 [ 473.289295][T23656] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 473.311322][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7750'. [ 473.350320][T23656] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 473.434871][T23665] sd 0:0:1:0: device reset [ 473.462459][T23665] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 473.531640][T23669] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7748'. [ 473.568588][T23669] 1ªX¹¦À: renamed from 60ªX¹¦À [ 473.588230][T23669] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 473.895672][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.282508][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 474.282526][ T29] audit: type=1400 audit(1745455068.739:56756): avc: denied { setopt } for pid=23684 comm="syz.5.7758" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 474.353974][T23685] loop1: detected capacity change from 0 to 1024 [ 474.387661][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7762'. [ 474.416015][T23685] EXT4-fs: quotafile must be on filesystem root [ 474.436829][ T29] audit: type=1404 audit(1745455068.779:56757): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 474.452080][ T29] audit: type=1400 audit(1745455068.779:56758): avc: denied { prog_load } for pid=23688 comm="syz.7.7761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 474.471368][ T29] audit: type=1400 audit(1745455068.779:56759): avc: denied { write } for pid=23684 comm="syz.5.7758" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 474.492146][ T29] audit: type=1400 audit(1745455068.779:56760): avc: denied { create } for pid=23688 comm="syz.7.7761" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 474.513066][ T29] audit: type=1400 audit(1745455068.779:56761): avc: denied { prog_load } for pid=23688 comm="syz.7.7761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 474.532350][ T29] audit: type=1400 audit(1745455068.779:56762): avc: denied { map_create } for pid=23688 comm="syz.7.7761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 474.551868][ T29] audit: type=1400 audit(1745455068.779:56763): avc: denied { prog_load } for pid=23688 comm="syz.7.7761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 474.571585][ T29] audit: type=1400 audit(1745455068.779:56764): avc: denied { open } for pid=23688 comm="syz.7.7761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 474.591019][ T29] audit: type=1400 audit(1745455068.789:56765): avc: denied { prog_load } for pid=23688 comm="syz.7.7761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 474.649586][T23694] sd 0:0:1:0: device reset [ 474.706470][T23694] syz!: rxe_newlink: already configured on team_slave_0 [ 474.827843][T23689] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7761'. [ 474.907897][T23707] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 475.064751][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7776'. [ 475.074601][T23728] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7775'. [ 475.250522][T23733] loop5: detected capacity change from 0 to 512 [ 475.257452][T23733] EXT4-fs: Ignoring removed oldalloc option [ 475.266478][T23733] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.7778: Parent and EA inode have the same ino 15 [ 475.280819][T23733] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.7778: Parent and EA inode have the same ino 15 [ 475.304296][T23733] EXT4-fs (loop5): 1 orphan inode deleted [ 475.351117][T23743] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 475.384608][T23745] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 475.508597][T23762] loop1: detected capacity change from 0 to 1024 [ 475.515396][T23762] EXT4-fs: quotafile must be on filesystem root [ 475.669368][T23769] loop8: detected capacity change from 0 to 512 [ 475.676786][T23769] EXT4-fs: test_dummy_encryption option not supported [ 476.001194][T23777] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 476.276904][T23786] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 476.309646][T23788] binfmt_misc: register: failed to install interpreter file ./file0 [ 476.455700][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.530272][T23797] loop3: detected capacity change from 0 to 512 [ 476.559795][T23797] EXT4-fs: test_dummy_encryption option not supported [ 476.591813][T23797] loop3: detected capacity change from 0 to 512 [ 476.652259][T23797] EXT4-fs (loop3): 1 orphan inode deleted [ 476.670786][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 476.678779][T23797] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.183768][T23797] netlink: 'syz.3.7804': attribute type 39 has an invalid length. [ 477.411614][T23824] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 477.513647][T23797] __nla_validate_parse: 4 callbacks suppressed [ 477.513667][T23797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7804'. [ 477.593321][T23830] siw: device registration error -23 [ 477.803546][T23830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.816908][T23830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.829079][T23818] SELinux: failed to load policy [ 477.881457][T23841] loop3: detected capacity change from 0 to 1024 [ 477.882555][T23830] loop5: detected capacity change from 0 to 2048 [ 477.898815][T23841] EXT4-fs: quotafile must be on filesystem root [ 477.910208][T23842] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7817'. [ 478.373646][T23854] SELinux: failed to load policy [ 479.311102][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 479.311117][ T29] audit: type=1326 audit(1745455073.769:57372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23863 comm="syz.8.7824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f737512e969 code=0x0 [ 479.343073][T23868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7825'. [ 479.559351][ T29] audit: type=1326 audit(1745455074.019:57373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.5.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 479.583229][ T29] audit: type=1326 audit(1745455074.019:57374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.5.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 479.611056][T23871] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 479.695138][ T29] audit: type=1326 audit(1745455074.069:57375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.5.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 479.718889][ T29] audit: type=1326 audit(1745455074.069:57376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.5.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 479.742602][ T29] audit: type=1326 audit(1745455074.069:57377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.5.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 479.766491][ T29] audit: type=1326 audit(1745455074.069:57378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.5.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 479.776080][T23875] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.790129][ T29] audit: type=1326 audit(1745455074.069:57379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23870 comm="syz.5.7827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 479.796677][T23875] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 479.900559][T23882] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 479.909895][T23884] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 480.037636][T23888] loop5: detected capacity change from 0 to 512 [ 480.082724][T23888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.127631][T23888] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.159140][T23877] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7829'. [ 480.211240][T23897] siw: device registration error -23 [ 480.257950][T23897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.266525][T23897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.283148][T23897] loop7: detected capacity change from 0 to 2048 [ 480.467873][T23913] siw: device registration error -23 [ 480.488782][T23913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.497559][T23913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.510089][T23912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7841'. [ 480.528958][T23913] loop8: detected capacity change from 0 to 2048 [ 480.769950][T23922] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 480.777383][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7843'. [ 480.855271][ T3379] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 480.862932][T23927] loop1: detected capacity change from 0 to 1024 [ 480.863562][ T3379] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 480.879703][T23927] ext2: Bad value for 'commit' [ 480.922816][T19894] EXT4-fs unmount: 9 callbacks suppressed [ 480.922831][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 480.977589][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.227201][T23954] loop1: detected capacity change from 0 to 1024 [ 481.234505][ T3379] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 481.242411][T23954] ext2: Bad value for 'commit' [ 481.253290][T20598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.266985][ T3379] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 481.332779][T23963] sd 0:0:1:0: device reset [ 481.416057][T23969] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7861'. [ 481.459837][T23970] siw: device registration error -23 [ 481.502163][T23970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.510833][T23970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.527347][T23970] loop5: detected capacity change from 0 to 2048 [ 481.564261][T23970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.699672][T23978] sd 0:0:1:0: device reset [ 481.750920][T23984] loop1: detected capacity change from 0 to 512 [ 481.774561][T23984] EXT4-fs: Ignoring removed oldalloc option [ 481.784841][T23986] loop7: detected capacity change from 0 to 128 [ 481.795066][T23984] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7865: Parent and EA inode have the same ino 15 [ 481.809344][T23984] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7865: Parent and EA inode have the same ino 15 [ 481.823082][T23986] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 481.835299][T23984] EXT4-fs (loop1): 1 orphan inode deleted [ 481.841229][T23986] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 481.851283][T23984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.878975][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.890799][T23990] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 481.938064][T23993] loop1: detected capacity change from 0 to 512 [ 481.945630][T23998] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7868'. [ 481.954853][T23998] 1ªX¹¦À: renamed from 60ªX¹¦À [ 481.962016][T23998] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 481.988155][T23993] EXT4-fs (loop1): 1 orphan inode deleted [ 481.994394][T23993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.007173][T15503] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:35: Failed to release dquot type 1 [ 482.007412][T23993] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.033683][T23993] netlink: '+}[@': attribute type 1 has an invalid length. [ 482.041039][T23993] netlink: '+}[@': attribute type 2 has an invalid length. [ 482.062226][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.178020][T24008] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7875'. [ 482.320019][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.341882][T24012] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 482.484500][T24022] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7881'. [ 482.493604][T24022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.500867][T24022] IPv6: NLM_F_CREATE should be set when creating new route [ 482.589310][T24029] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.683606][T24043] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 482.701638][ T3379] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 482.721562][T24042] loop7: detected capacity change from 0 to 1024 [ 482.731334][ T3379] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 482.749304][T24042] ext2: Bad value for 'commit' [ 482.761788][T24029] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.812072][T24051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7893'. [ 482.833303][T24051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.840628][T24051] IPv6: NLM_F_CREATE should be set when creating new route [ 482.881707][T24029] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.921026][T24062] loop3: detected capacity change from 0 to 128 [ 482.936881][T24062] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 482.968332][T24062] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 483.021572][T24056] SELinux: ebitmap: truncated map [ 483.031684][T24056] SELinux: failed to load policy [ 483.051318][T24029] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.070273][T24071] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7898'. [ 483.090067][T24074] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 483.109711][T24071] 0ªX¹¦À: renamed from 61ªX¹¦À [ 483.118963][T24071] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 483.270645][ T36] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 483.284351][ T36] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.294893][T24083] loop7: detected capacity change from 0 to 1024 [ 483.303309][T24083] ext2: Bad value for 'commit' [ 483.304093][T24029] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.358997][T24029] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.386486][T24029] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.399758][T24029] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.414375][T24093] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7909'. [ 483.425012][T24093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.432263][T24093] IPv6: NLM_F_CREATE should be set when creating new route [ 483.458647][T24097] FAULT_INJECTION: forcing a failure. [ 483.458647][T24097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 483.472121][T24097] CPU: 0 UID: 0 PID: 24097 Comm: syz.7.7911 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 483.472205][T24097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 483.472217][T24097] Call Trace: [ 483.472223][T24097] [ 483.472231][T24097] dump_stack_lvl+0xf6/0x150 [ 483.472252][T24097] dump_stack+0x15/0x1a [ 483.472267][T24097] should_fail_ex+0x261/0x270 [ 483.472310][T24097] should_fail_alloc_page+0xfd/0x110 [ 483.472332][T24097] __alloc_frozen_pages_noprof+0x11d/0x360 [ 483.472353][T24097] alloc_pages_mpol+0xb6/0x260 [ 483.472380][T24097] vma_alloc_folio_noprof+0x19c/0x300 [ 483.472486][T24097] handle_mm_fault+0xdda/0x2e80 [ 483.472559][T24097] ? __rcu_read_lock+0x36/0x50 [ 483.472577][T24097] ? __pte_offset_map_lock+0x1d3/0x290 [ 483.472615][T24097] __get_user_pages+0xf4e/0x2340 [ 483.472652][T24097] __gup_longterm_locked+0x2ec/0xfb0 [ 483.472732][T24097] ? ___pte_offset_map+0xc8/0x140 [ 483.472762][T24097] gup_fast_fallback+0x1561/0x1f70 [ 483.472840][T24097] ? ___kmalloc_large_node+0xc3/0x130 [ 483.472870][T24097] pin_user_pages_fast+0x64/0xa0 [ 483.472897][T24097] io_pin_pages+0xb4/0x170 [ 483.472939][T24097] io_sqe_buffer_register+0x18b/0x12a0 [ 483.472962][T24097] ? __memcg_slab_post_alloc_hook+0x473/0x5a0 [ 483.472992][T24097] ? __kvmalloc_node_noprof+0x39b/0x520 [ 483.473083][T24097] ? io_sqe_buffers_register+0xcf/0x550 [ 483.473155][T24097] io_sqe_buffers_register+0x2bd/0x550 [ 483.473190][T24097] __se_sys_io_uring_register+0xb04/0x1f50 [ 483.473225][T24097] ? kstrtouint_from_user+0xbf/0x100 [ 483.473247][T24097] ? 0xffffffff81000000 [ 483.473258][T24097] ? __rcu_read_unlock+0x4e/0x70 [ 483.473275][T24097] ? get_pid_task+0x94/0xd0 [ 483.473292][T24097] ? proc_fail_nth_write+0x12d/0x160 [ 483.473323][T24097] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 483.473352][T24097] ? vfs_write+0x669/0x950 [ 483.473367][T24097] ? putname+0xe1/0x100 [ 483.473418][T24097] ? __fget_files+0x186/0x1c0 [ 483.473436][T24097] ? fput+0x99/0xd0 [ 483.473457][T24097] ? ksys_write+0x180/0x1b0 [ 483.473525][T24097] __x64_sys_io_uring_register+0x55/0x70 [ 483.473555][T24097] x64_sys_call+0xb9d/0x2e10 [ 483.473651][T24097] do_syscall_64+0xc9/0x1a0 [ 483.473673][T24097] ? clear_bhb_loop+0x25/0x80 [ 483.473747][T24097] ? clear_bhb_loop+0x25/0x80 [ 483.473773][T24097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.473798][T24097] RIP: 0033:0x7efe9c65e969 [ 483.473814][T24097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.473830][T24097] RSP: 002b:00007efe9acc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 483.473846][T24097] RAX: ffffffffffffffda RBX: 00007efe9c885fa0 RCX: 00007efe9c65e969 [ 483.473911][T24097] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 483.473922][T24097] RBP: 00007efe9acc7090 R08: 0000000000000000 R09: 0000000000000000 [ 483.473932][T24097] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 483.473948][T24097] R13: 0000000000000000 R14: 00007efe9c885fa0 R15: 00007ffe847f7a68 [ 483.473965][T24097] [ 483.946821][ T36] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 483.964502][T24099] SELinux: ebitmap: truncated map [ 483.969837][T24111] loop7: detected capacity change from 0 to 1024 [ 483.981977][T24099] SELinux: failed to load policy [ 483.987250][ T36] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 484.003021][T24111] ext2: Bad value for 'commit' [ 484.048746][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7921'. [ 484.088361][T24128] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 484.149085][T24122] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.213511][T24108] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7916'. [ 484.226744][T24133] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 484.226744][T24133] program syz.1.7922 not setting count and/or reply_len properly [ 484.276585][T24122] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.341298][ T29] kauditd_printk_skb: 1298 callbacks suppressed [ 484.341316][ T29] audit: type=1400 audit(1745455078.799:58676): avc: denied { unlink } for pid=20598 comm="syz-executor" name="file0" dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 484.373961][ T29] audit: type=1326 audit(1745455078.829:58677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24138 comm="syz.1.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 484.374723][T24139] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 484.397678][ T29] audit: type=1326 audit(1745455078.829:58678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24138 comm="syz.1.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 484.428090][ T29] audit: type=1326 audit(1745455078.829:58679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24138 comm="syz.1.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 484.451842][ T29] audit: type=1326 audit(1745455078.829:58680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24138 comm="syz.1.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 484.471422][T24141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 484.475483][ T29] audit: type=1326 audit(1745455078.829:58681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24138 comm="syz.1.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 484.481985][T24141] audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 [ 484.506390][ T29] audit: type=1326 audit(1745455078.829:58682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24138 comm="syz.1.7929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 484.513209][T24141] audit: backlog limit exceeded [ 484.547098][T24122] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.570138][T24143] netlink: 'syz.8.7928': attribute type 9 has an invalid length. [ 484.577986][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7928'. [ 484.632163][ T23] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 484.640268][ T23] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 484.662545][T24148] loop1: detected capacity change from 0 to 1024 [ 484.685648][T24148] ext2: Bad value for 'commit' [ 484.685762][T24122] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.726214][T24154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7934'. [ 484.850694][T24122] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.866617][T24147] SELinux: ebitmap: truncated map [ 484.873747][T24147] SELinux: failed to load policy [ 484.904205][T24122] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.923196][T24122] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.937085][T24122] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.033702][T24165] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7938'. [ 485.099119][T24174] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 485.133639][T24178] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 485.772370][T24192] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.864586][T24192] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.882796][T24196] sd 0:0:1:0: device reset [ 486.004081][T24192] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.101449][T24203] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 486.129827][T24192] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.192629][T24198] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7952'. [ 486.221855][T24209] loop8: detected capacity change from 0 to 1024 [ 486.239648][T24209] EXT4-fs: quotafile must be on filesystem root [ 486.350568][T24192] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.435682][T24192] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.573111][T24192] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.613034][T24192] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.798781][T24214] SELinux: ebitmap: truncated map [ 486.806117][T24214] SELinux: failed to load policy [ 486.966858][T24225] siw: device registration error -23 [ 486.999556][T24225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.025594][T24225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.064572][T24225] loop1: detected capacity change from 0 to 2048 [ 487.110570][T24225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.692586][T24237] sd 0:0:1:0: device reset [ 487.700212][T24237] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 487.739125][T24239] loop7: detected capacity change from 0 to 512 [ 487.754577][T24239] EXT4-fs: Ignoring removed oldalloc option [ 487.766683][T24239] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7967: Parent and EA inode have the same ino 15 [ 487.779466][T24239] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7967: Parent and EA inode have the same ino 15 [ 487.793904][T24239] EXT4-fs (loop7): 1 orphan inode deleted [ 487.800654][T24239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.853767][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.931096][T24246] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7970'. [ 487.963461][T24242] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7968'. [ 487.976222][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.057361][T24256] loop1: detected capacity change from 0 to 512 [ 488.068589][T24256] EXT4-fs: Ignoring removed oldalloc option [ 488.087471][T24256] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7974: Parent and EA inode have the same ino 15 [ 488.106155][T24256] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7974: Parent and EA inode have the same ino 15 [ 488.129922][T24256] EXT4-fs (loop1): 1 orphan inode deleted [ 488.142650][T24256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.198742][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.225598][T24248] SELinux: ebitmap: truncated map [ 488.242796][T24248] SELinux: failed to load policy [ 488.320200][T24279] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7983'. [ 488.333443][T24280] sd 0:0:1:0: device reset [ 488.341464][T24280] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 488.365194][T24282] siw: device registration error -23 [ 488.372415][T24282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.380963][T24282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.398851][T24282] loop5: detected capacity change from 0 to 2048 [ 488.437690][T24282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.499869][T24290] siw: device registration error -23 [ 488.507291][T24290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.540068][T24290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.548653][T24292] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 488.607018][T24290] loop1: detected capacity change from 0 to 2048 [ 488.671503][T24290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.747756][T24300] sd 0:0:1:0: device reset [ 488.859900][T24289] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7985'. [ 488.928555][T24312] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 488.946957][T24313] loop8: detected capacity change from 0 to 1024 [ 488.953853][T24313] EXT4-fs: quotafile must be on filesystem root [ 489.011291][T24319] loop7: detected capacity change from 0 to 512 [ 489.021070][T24319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 489.040983][T24319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 489.055793][T24319] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.210968][T24327] loop3: detected capacity change from 0 to 512 [ 489.217857][T24327] EXT4-fs: Ignoring removed oldalloc option [ 489.227042][T24327] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.7999: Parent and EA inode have the same ino 15 [ 489.241860][T24327] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.7999: Parent and EA inode have the same ino 15 [ 489.257276][T24327] EXT4-fs (loop3): 1 orphan inode deleted [ 489.263738][T24327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.289732][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.300104][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.331181][T24333] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8001'. [ 489.373657][ T29] kauditd_printk_skb: 1273 callbacks suppressed [ 489.373671][ T29] audit: type=1400 audit(1745455083.829:59956): avc: denied { write } for pid=24336 comm="syz.5.8003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 489.410825][ T29] audit: type=1400 audit(1745455083.869:59957): avc: denied { read } for pid=24336 comm="syz.5.8003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 489.474274][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.487249][ T29] audit: type=1326 audit(1745455083.949:59958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.3.8005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 489.511081][ T29] audit: type=1326 audit(1745455083.949:59959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.3.8005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 489.534991][ T29] audit: type=1326 audit(1745455083.979:59960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.3.8005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 489.558766][ T29] audit: type=1326 audit(1745455083.979:59961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.3.8005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 489.558795][ T29] audit: type=1326 audit(1745455083.979:59962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.3.8005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 489.558827][ T29] audit: type=1326 audit(1745455083.979:59963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.3.8005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 489.559048][ T29] audit: type=1326 audit(1745455083.979:59964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.3.8005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 489.559082][ T29] audit: type=1326 audit(1745455083.979:59965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24340 comm="syz.3.8005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea619e969 code=0x7ffc0000 [ 489.708618][T24347] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 489.774470][T24343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8006'. [ 489.898849][T24352] loop3: detected capacity change from 0 to 512 [ 489.915843][T24352] EXT4-fs: Ignoring removed oldalloc option [ 489.949111][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 489.959756][T24352] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.8011: Parent and EA inode have the same ino 15 [ 490.085120][T24352] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.8011: Parent and EA inode have the same ino 15 [ 490.110110][T24352] EXT4-fs (loop3): 1 orphan inode deleted [ 490.137500][T24361] FAULT_INJECTION: forcing a failure. [ 490.137500][T24361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.150696][T24361] CPU: 0 UID: 0 PID: 24361 Comm: syz.1.8013 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 490.150723][T24361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 490.150794][T24361] Call Trace: [ 490.150801][T24361] [ 490.150809][T24361] dump_stack_lvl+0xf6/0x150 [ 490.150833][T24361] dump_stack+0x15/0x1a [ 490.150849][T24361] should_fail_ex+0x261/0x270 [ 490.150872][T24361] should_fail+0xb/0x10 [ 490.150893][T24361] should_fail_usercopy+0x1a/0x20 [ 490.150924][T24361] strncpy_from_user+0x25/0x230 [ 490.150978][T24361] ? getname_flags+0x81/0x3b0 [ 490.151005][T24361] getname_flags+0xb0/0x3b0 [ 490.151047][T24361] __se_sys_move_mount+0x183/0x410 [ 490.151112][T24361] __x64_sys_move_mount+0x67/0x80 [ 490.151136][T24361] x64_sys_call+0x1dce/0x2e10 [ 490.151222][T24361] do_syscall_64+0xc9/0x1a0 [ 490.151253][T24361] ? clear_bhb_loop+0x25/0x80 [ 490.151280][T24361] ? clear_bhb_loop+0x25/0x80 [ 490.151323][T24361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.151381][T24361] RIP: 0033:0x7ff87001e969 [ 490.151397][T24361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.151417][T24361] RSP: 002b:00007ff86e687038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 490.151434][T24361] RAX: ffffffffffffffda RBX: 00007ff870245fa0 RCX: 00007ff87001e969 [ 490.151446][T24361] RDX: ffffffffffffff9c RSI: 0000200000000400 RDI: 0000000000000003 [ 490.151458][T24361] RBP: 00007ff86e687090 R08: 0000000000000000 R09: 0000000000000000 [ 490.151469][T24361] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 490.151482][T24361] R13: 0000000000000000 R14: 00007ff870245fa0 R15: 00007fff07265e88 [ 490.151506][T24361] [ 490.152385][T24352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.356460][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.368898][T24372] sd 0:0:1:0: device reset [ 490.375387][T24372] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 490.412327][T24379] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 490.412812][T24377] loop8: detected capacity change from 0 to 1024 [ 490.443026][T24377] EXT4-fs: quotafile must be on filesystem root [ 490.533073][T24386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8023'. [ 490.813805][T24386] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8023'. [ 490.847624][T24383] block device autoloading is deprecated and will be removed. [ 490.865700][T24383] bio_check_eod: 276 callbacks suppressed [ 490.865716][T24383] syz.5.8021: attempt to access beyond end of device [ 490.865716][T24383] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 490.930685][T24394] loop1: detected capacity change from 0 to 128 [ 490.938030][T24394] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 490.951792][T24394] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 491.069503][T24398] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8025'. [ 491.078576][T24398] 1ªX¹¦À: renamed from 60ªX¹¦À [ 491.086926][T24398] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 491.315693][T24411] sd 0:0:1:0: device reset [ 491.400116][T24413] loop5: detected capacity change from 0 to 8192 [ 491.921951][T24461] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8047'. [ 491.947147][T24432] syz.3.8042: attempt to access beyond end of device [ 491.947147][T24432] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 492.082143][T24467] loop7: detected capacity change from 0 to 128 [ 492.117652][T24467] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 492.249079][T24467] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 492.575446][T24467] 0ªX¹¦À: renamed from 61ªX¹¦À [ 492.600484][T24467] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 492.696678][T24478] siw: device registration error -23 [ 492.750729][T24478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.794076][T24478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.883709][T24478] loop8: detected capacity change from 0 to 2048 [ 492.963553][T24478] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.126396][T24495] FAULT_INJECTION: forcing a failure. [ 493.126396][T24495] name failslab, interval 1, probability 0, space 0, times 0 [ 493.139121][T24495] CPU: 1 UID: 0 PID: 24495 Comm: syz.3.8065 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 493.139155][T24495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.139170][T24495] Call Trace: [ 493.139177][T24495] [ 493.139185][T24495] dump_stack_lvl+0xf6/0x150 [ 493.139214][T24495] dump_stack+0x15/0x1a [ 493.139290][T24495] should_fail_ex+0x261/0x270 [ 493.139365][T24495] should_failslab+0x8f/0xb0 [ 493.139392][T24495] kmem_cache_alloc_noprof+0x59/0x340 [ 493.139426][T24495] ? alloc_empty_file+0x78/0x200 [ 493.139458][T24495] ? _raw_spin_unlock+0x26/0x50 [ 493.139488][T24495] alloc_empty_file+0x78/0x200 [ 493.139514][T24495] alloc_file_pseudo+0xcb/0x160 [ 493.139619][T24495] __shmem_file_setup+0x1bb/0x1f0 [ 493.139643][T24495] shmem_file_setup+0x3b/0x50 [ 493.139671][T24495] __se_sys_memfd_create+0x2e1/0x5a0 [ 493.139713][T24495] __x64_sys_memfd_create+0x31/0x40 [ 493.139765][T24495] x64_sys_call+0x1163/0x2e10 [ 493.139788][T24495] do_syscall_64+0xc9/0x1a0 [ 493.139816][T24495] ? clear_bhb_loop+0x25/0x80 [ 493.139876][T24495] ? clear_bhb_loop+0x25/0x80 [ 493.139903][T24495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.139929][T24495] RIP: 0033:0x7faea619e969 [ 493.139943][T24495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.140032][T24495] RSP: 002b:00007faea4806e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 493.140050][T24495] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007faea619e969 [ 493.140064][T24495] RDX: 00007faea4806ef0 RSI: 0000000000000000 RDI: 00007faea6221444 [ 493.140109][T24495] RBP: 0000200000000400 R08: 00007faea4806bb7 R09: 00007faea4806e40 [ 493.140123][T24495] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 493.140136][T24495] R13: 00007faea4806ef0 R14: 00007faea4806eb0 R15: 0000200000000040 [ 493.140159][T24495] [ 493.488370][T24507] loop1: detected capacity change from 0 to 8192 [ 493.535570][T24507] loop1: p1 p3 p4 [ 493.539361][T24507] loop1: p1 size 8390912 extends beyond EOD, truncated [ 493.546878][T24507] loop1: p3 size 589824 extends beyond EOD, truncated [ 493.962764][T24526] netlink: 'syz.5.8079': attribute type 3 has an invalid length. [ 493.988237][T20598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.126869][T24545] siw: device registration error -23 [ 494.163643][T24545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.173395][T24545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.211004][T24545] loop8: detected capacity change from 0 to 2048 [ 494.241561][T24545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.246837][T24548] __nla_validate_parse: 1 callbacks suppressed [ 494.246856][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8087'. [ 494.278931][T24553] sd 0:0:1:0: device reset [ 494.392780][T24548] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8087'. [ 494.478859][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 494.478874][ T29] audit: type=1326 audit(1745455088.939:60481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.573697][ T29] audit: type=1326 audit(1745455088.939:60482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.597387][ T29] audit: type=1326 audit(1745455088.939:60483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.621043][ T29] audit: type=1326 audit(1745455088.939:60484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.644676][ T29] audit: type=1326 audit(1745455088.939:60485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.668475][ T29] audit: type=1326 audit(1745455088.939:60486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.692291][ T29] audit: type=1326 audit(1745455088.939:60487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.715815][ T29] audit: type=1326 audit(1745455088.939:60488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.739540][ T29] audit: type=1326 audit(1745455088.939:60489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.763248][ T29] audit: type=1326 audit(1745455088.939:60490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24566 comm="syz.1.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 494.859016][T24578] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 494.905125][T24580] loop5: detected capacity change from 0 to 1024 [ 494.912612][T24580] EXT4-fs: quotafile must be on filesystem root [ 494.971683][T24589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=24589 comm=syz.3.8101 [ 495.084284][T24602] sd 0:0:1:0: device reset [ 495.192645][T24611] loop7: detected capacity change from 0 to 512 [ 495.199635][T24611] EXT4-fs: Ignoring removed oldalloc option [ 495.209560][T24611] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 161 vs 220 free clusters [ 495.224167][T24611] EXT4-fs (loop7): Remounting filesystem read-only [ 495.232153][T24611] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 495.242458][T24611] EXT4-fs (loop7): 1 orphan inode deleted [ 495.249964][T24611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.280018][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.316186][T20598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.337359][T24617] FAULT_INJECTION: forcing a failure. [ 495.337359][T24617] name failslab, interval 1, probability 0, space 0, times 0 [ 495.350174][T24617] CPU: 1 UID: 0 PID: 24617 Comm: syz.3.8113 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 495.350201][T24617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 495.350217][T24617] Call Trace: [ 495.350226][T24617] [ 495.350234][T24617] dump_stack_lvl+0xf6/0x150 [ 495.350261][T24617] dump_stack+0x15/0x1a [ 495.350298][T24617] should_fail_ex+0x261/0x270 [ 495.350329][T24617] should_failslab+0x8f/0xb0 [ 495.350356][T24617] __kmalloc_cache_noprof+0x55/0x320 [ 495.350466][T24617] ? audit_log_d_path+0x8e/0x150 [ 495.350499][T24617] audit_log_d_path+0x8e/0x150 [ 495.350579][T24617] audit_log_d_path_exe+0x42/0x70 [ 495.350659][T24617] audit_log_task+0x1f1/0x250 [ 495.350689][T24617] ? kstrtouint+0x7b/0xc0 [ 495.350717][T24617] audit_seccomp+0x62/0x100 [ 495.350785][T24617] __seccomp_filter+0x694/0x10e0 [ 495.350807][T24617] ? vfs_write+0x669/0x950 [ 495.350843][T24617] __secure_computing+0x7e/0x150 [ 495.350868][T24617] syscall_trace_enter+0xcf/0x1f0 [ 495.350898][T24617] do_syscall_64+0xaa/0x1a0 [ 495.350977][T24617] ? clear_bhb_loop+0x25/0x80 [ 495.351003][T24617] ? clear_bhb_loop+0x25/0x80 [ 495.351037][T24617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.351063][T24617] RIP: 0033:0x7faea619e969 [ 495.351082][T24617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.351101][T24617] RSP: 002b:00007faea4807038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 495.351141][T24617] RAX: ffffffffffffffda RBX: 00007faea63c5fa0 RCX: 00007faea619e969 [ 495.351155][T24617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.351170][T24617] RBP: 00007faea4807090 R08: 0000000000000000 R09: 0000000000000000 [ 495.351184][T24617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.351197][T24617] R13: 0000000000000000 R14: 00007faea63c5fa0 R15: 00007ffcbc24d7b8 [ 495.351221][T24617] [ 495.637837][ T3372] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 495.646069][ T3372] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 495.660374][T24632] loop3: detected capacity change from 0 to 1024 [ 495.668109][T24632] ext2: Bad value for 'commit' [ 496.158844][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8124'. [ 496.548545][ T3549] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 496.563357][T24666] loop1: detected capacity change from 0 to 1024 [ 496.591138][ T3549] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 496.614324][T24666] ext2: Bad value for 'commit' [ 496.968789][T24685] loop5: detected capacity change from 0 to 512 [ 496.977737][T24685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 497.024779][T24685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 497.046983][T24685] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.366974][ T36] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 497.388165][ T36] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 497.404638][T24707] loop7: detected capacity change from 0 to 1024 [ 497.412451][T24707] ext2: Bad value for 'commit' [ 497.561428][T24710] FAULT_INJECTION: forcing a failure. [ 497.561428][T24710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.574565][T24710] CPU: 1 UID: 0 PID: 24710 Comm: syz.1.8146 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 497.574598][T24710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.574687][T24710] Call Trace: [ 497.574696][T24710] [ 497.574705][T24710] dump_stack_lvl+0xf6/0x150 [ 497.574736][T24710] dump_stack+0x15/0x1a [ 497.574755][T24710] should_fail_ex+0x261/0x270 [ 497.574808][T24710] should_fail+0xb/0x10 [ 497.574833][T24710] should_fail_usercopy+0x1a/0x20 [ 497.574857][T24710] _copy_from_user+0x1c/0xa0 [ 497.574886][T24710] do_seccomp+0x11c/0xa10 [ 497.574910][T24710] __x64_sys_seccomp+0x40/0x50 [ 497.575012][T24710] x64_sys_call+0x2152/0x2e10 [ 497.575039][T24710] do_syscall_64+0xc9/0x1a0 [ 497.575130][T24710] ? clear_bhb_loop+0x25/0x80 [ 497.575156][T24710] ? clear_bhb_loop+0x25/0x80 [ 497.575176][T24710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.575275][T24710] RIP: 0033:0x7ff87001e969 [ 497.575342][T24710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.575359][T24710] RSP: 002b:00007ff86e687038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 497.575377][T24710] RAX: ffffffffffffffda RBX: 00007ff870245fa0 RCX: 00007ff87001e969 [ 497.575429][T24710] RDX: 0000200000000280 RSI: 0000000000000008 RDI: 0000000000000001 [ 497.575443][T24710] RBP: 00007ff86e687090 R08: 0000000000000000 R09: 0000000000000000 [ 497.575458][T24710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.575472][T24710] R13: 0000000000000000 R14: 00007ff870245fa0 R15: 00007fff07265e88 [ 497.575491][T24710] [ 497.752610][T24713] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 497.830204][T24712] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8144'. [ 497.849469][T24712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8144'. [ 497.858522][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8144'. [ 498.050040][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 498.178909][T24725] siw: device registration error -23 [ 498.204263][T24725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.212870][T24725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.243930][T24725] loop5: detected capacity change from 0 to 2048 [ 498.268965][T24725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.273521][T24732] loop7: detected capacity change from 0 to 2048 [ 498.316146][T24732] Alternate GPT is invalid, using primary GPT. [ 498.322549][T24732] loop7: p1 p2 p3 [ 498.357813][T24740] sd 0:0:1:0: device reset [ 498.405803][T24742] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 498.587946][T24756] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 498.588665][T24754] sd 0:0:1:0: device reset [ 498.633486][T24760] loop7: detected capacity change from 0 to 512 [ 498.641160][T24760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 498.657406][T24760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 498.660780][T24762] netlink: 'syz.3.8162': attribute type 3 has an invalid length. [ 498.671839][T24760] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.037450][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.191326][T24784] sd 0:0:1:0: device reset [ 499.197228][T24785] sd 0:0:1:0: device reset [ 499.225443][ T3372] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 499.233362][ T3372] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 499.233348][T24789] loop3: detected capacity change from 0 to 1024 [ 499.249963][T24789] ext2: Bad value for 'commit' [ 499.363009][T24798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8175'. [ 499.491995][ T29] kauditd_printk_skb: 2162 callbacks suppressed [ 499.492032][ T29] audit: type=1326 audit(1745455093.949:62644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b773f5927 code=0x7ffc0000 [ 499.522078][ T29] audit: type=1326 audit(1745455093.949:62645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b7739ab39 code=0x7ffc0000 [ 499.545644][ T29] audit: type=1326 audit(1745455093.949:62646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 499.546192][T24803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.599742][ T29] audit: type=1326 audit(1745455093.959:62647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b773f5927 code=0x7ffc0000 [ 499.610727][T24803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.623482][ T29] audit: type=1326 audit(1745455093.959:62648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b7739ab39 code=0x7ffc0000 [ 499.654738][ T29] audit: type=1326 audit(1745455093.959:62649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 499.678442][ T29] audit: type=1326 audit(1745455093.969:62650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b773f5927 code=0x7ffc0000 [ 499.702041][ T29] audit: type=1326 audit(1745455093.969:62651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b7739ab39 code=0x7ffc0000 [ 499.725582][ T29] audit: type=1326 audit(1745455093.969:62652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4b773fe969 code=0x7ffc0000 [ 499.734458][T24803] loop8: detected capacity change from 0 to 2048 [ 499.749216][ T29] audit: type=1326 audit(1745455093.979:62653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24786 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b773f5927 code=0x7ffc0000 [ 499.786599][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 499.817828][T24803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.838281][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8178'. [ 500.007985][T24818] sd 0:0:1:0: device reset [ 500.037741][T15240] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 500.045646][T15240] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 500.060707][T24821] loop1: detected capacity change from 0 to 1024 [ 500.069654][T24821] ext2: Bad value for 'commit' [ 500.078642][T24823] sd 0:0:1:0: device reset [ 500.490645][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8190'. [ 500.538610][T20598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.583243][T24847] sd 0:0:1:0: device reset [ 500.681475][T24852] sd 0:0:1:0: device reset [ 500.824824][T24854] FAULT_INJECTION: forcing a failure. [ 500.824824][T24854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.838102][T24854] CPU: 1 UID: 0 PID: 24854 Comm: syz.3.8195 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 500.838126][T24854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 500.838136][T24854] Call Trace: [ 500.838141][T24854] [ 500.838147][T24854] dump_stack_lvl+0xf6/0x150 [ 500.838223][T24854] dump_stack+0x15/0x1a [ 500.838238][T24854] should_fail_ex+0x261/0x270 [ 500.838259][T24854] should_fail+0xb/0x10 [ 500.838276][T24854] should_fail_usercopy+0x1a/0x20 [ 500.838318][T24854] _copy_from_user+0x1c/0xa0 [ 500.838345][T24854] move_addr_to_kernel+0x8c/0x130 [ 500.838420][T24854] __sys_connect+0x6c/0x1b0 [ 500.838471][T24854] __x64_sys_connect+0x41/0x50 [ 500.838488][T24854] x64_sys_call+0x2030/0x2e10 [ 500.838506][T24854] do_syscall_64+0xc9/0x1a0 [ 500.838527][T24854] ? clear_bhb_loop+0x25/0x80 [ 500.838550][T24854] ? clear_bhb_loop+0x25/0x80 [ 500.838604][T24854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.838623][T24854] RIP: 0033:0x7faea619e969 [ 500.838636][T24854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.838651][T24854] RSP: 002b:00007faea4807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 500.838667][T24854] RAX: ffffffffffffffda RBX: 00007faea63c5fa0 RCX: 00007faea619e969 [ 500.838736][T24854] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000006 [ 500.838746][T24854] RBP: 00007faea4807090 R08: 0000000000000000 R09: 0000000000000000 [ 500.838756][T24854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.838766][T24854] R13: 0000000000000000 R14: 00007faea63c5fa0 R15: 00007ffcbc24d7b8 [ 500.838839][T24854] [ 501.032820][ T36] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 501.040488][T24858] loop5: detected capacity change from 0 to 1024 [ 501.042342][ T36] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 501.047432][T24858] ext2: Bad value for 'commit' [ 501.224036][T24862] loop5: detected capacity change from 0 to 1024 [ 501.230835][T24862] EXT4-fs: Ignoring removed nobh option [ 501.236657][T24862] EXT4-fs: inline encryption not supported [ 501.242527][T24862] EXT4-fs: Ignoring removed i_version option [ 501.249087][T24862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.257918][T24862] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 501.270162][T24862] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.8199: lblock 1 mapped to illegal pblock 1 (length 1) [ 501.284337][T24862] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.8199: Failed to acquire dquot type 0 [ 501.295920][T24862] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.8199: Freeing blocks not in datazone - block = 0, count = 4096 [ 501.309485][T24862] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.8199: Invalid inode bitmap blk 0 in block_group 0 [ 501.322261][ T289] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 501.322379][T24862] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 501.337759][ T289] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 501.345125][T24862] EXT4-fs (loop5): 1 orphan inode deleted [ 501.362538][T24862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.380138][T24862] EXT4-fs error (device loop5): ext4_search_dir:1476: inode #2: block 16: comm syz.5.8199: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 501.420893][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.500420][T24872] FAULT_INJECTION: forcing a failure. [ 501.500420][T24872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.513683][T24872] CPU: 1 UID: 0 PID: 24872 Comm: syz.8.8204 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 501.513716][T24872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 501.513740][T24872] Call Trace: [ 501.513748][T24872] [ 501.513758][T24872] dump_stack_lvl+0xf6/0x150 [ 501.513788][T24872] dump_stack+0x15/0x1a [ 501.513808][T24872] should_fail_ex+0x261/0x270 [ 501.513832][T24872] should_fail+0xb/0x10 [ 501.513851][T24872] should_fail_usercopy+0x1a/0x20 [ 501.513901][T24872] _copy_from_user+0x1c/0xa0 [ 501.513937][T24872] copy_msghdr_from_user+0x54/0x2b0 [ 501.513979][T24872] ? __sys_sendmmsg+0x246/0x4b0 [ 501.514007][T24872] ? __sys_sendmmsg+0x246/0x4b0 [ 501.514036][T24872] __sys_sendmmsg+0x1eb/0x4b0 [ 501.514091][T24872] __x64_sys_sendmmsg+0x57/0x70 [ 501.514170][T24872] x64_sys_call+0x2b53/0x2e10 [ 501.514214][T24872] do_syscall_64+0xc9/0x1a0 [ 501.514244][T24872] ? clear_bhb_loop+0x25/0x80 [ 501.514270][T24872] ? clear_bhb_loop+0x25/0x80 [ 501.514296][T24872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.514320][T24872] RIP: 0033:0x7f737512e969 [ 501.514414][T24872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.514464][T24872] RSP: 002b:00007f7373797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 501.514486][T24872] RAX: ffffffffffffffda RBX: 00007f7375355fa0 RCX: 00007f737512e969 [ 501.514501][T24872] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 501.514516][T24872] RBP: 00007f7373797090 R08: 0000000000000000 R09: 0000000000000000 [ 501.514530][T24872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.514584][T24872] R13: 0000000000000000 R14: 00007f7375355fa0 R15: 00007ffe4a3f0db8 [ 501.514603][T24872] [ 501.750950][T24879] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 501.846668][T24886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.864078][T24886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.888586][T24886] loop1: detected capacity change from 0 to 2048 [ 501.893964][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8211'. [ 501.916330][T24886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.997199][T24898] sd 0:0:1:0: device reset [ 502.108084][T24902] netlink: 'syz.3.8215': attribute type 3 has an invalid length. [ 502.285983][T24912] loop3: detected capacity change from 0 to 512 [ 502.292888][T24912] EXT4-fs: Ignoring removed orlov option [ 502.298710][T24912] EXT4-fs: Ignoring removed oldalloc option [ 502.323979][T24912] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 502.346148][T24912] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.8219: Parent and EA inode have the same ino 15 [ 502.382757][T24906] bond1: entered promiscuous mode [ 502.388753][T24906] bond1: entered allmulticast mode [ 502.395826][T24906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.430415][T24906] bond1 (unregistering): Released all slaves [ 502.437130][T24912] EXT4-fs (loop3): 1 orphan inode deleted [ 502.443454][T24912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.506672][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.616797][T18566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.719063][T24925] loop7: detected capacity change from 0 to 512 [ 502.726333][T24925] EXT4-fs: Ignoring removed oldalloc option [ 502.739233][T24925] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.8224: Parent and EA inode have the same ino 15 [ 502.760698][T24928] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 502.771806][T24925] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.8224: Parent and EA inode have the same ino 15 [ 502.811998][T24930] loop3: detected capacity change from 0 to 512 [ 502.819212][T24930] EXT4-fs: Ignoring removed oldalloc option [ 502.828815][T24925] EXT4-fs (loop7): 1 orphan inode deleted [ 502.836074][T24930] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.8226: Parent and EA inode have the same ino 15 [ 502.848814][T24930] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.8226: Parent and EA inode have the same ino 15 [ 502.855863][T24925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.875227][T24930] EXT4-fs (loop3): 1 orphan inode deleted [ 502.888265][T24930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.901719][T15240] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 502.913672][T24935] loop8: detected capacity change from 0 to 1024 [ 502.923781][T15240] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 502.940105][T24935] ext2: Bad value for 'commit' [ 502.947266][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.960104][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.995017][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8229'. [ 503.004039][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8229'. [ 503.023155][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8229'. [ 503.050559][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8229'. [ 503.059495][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8229'. [ 503.073673][T24946] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8230'. [ 503.204433][T24951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.222402][T24951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.274630][T24951] loop3: detected capacity change from 0 to 2048 [ 503.316859][T24951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.605562][T24970] sd 0:0:1:0: device reset [ 503.894017][T24985] loop5: detected capacity change from 0 to 512 [ 503.900858][T24985] EXT4-fs: Ignoring removed oldalloc option [ 503.918987][T24985] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.8245: Parent and EA inode have the same ino 15 [ 503.931638][T24985] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.8245: Parent and EA inode have the same ino 15 [ 503.944346][T24985] EXT4-fs (loop5): 1 orphan inode deleted [ 503.950481][T24985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.974534][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.021860][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.101992][T25000] loop5: detected capacity change from 0 to 512 [ 504.108800][T25000] EXT4-fs: Ignoring removed oldalloc option [ 504.118235][T25000] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.8251: Parent and EA inode have the same ino 15 [ 504.131671][T25000] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.8251: Parent and EA inode have the same ino 15 [ 504.145312][T25000] EXT4-fs (loop5): 1 orphan inode deleted [ 504.150434][T25003] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 504.151589][T25000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.189709][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.235535][T25009] loop5: detected capacity change from 0 to 1024 [ 504.244983][T25009] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.8255: Failed to acquire dquot type 0 [ 504.257972][T25009] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 504.272626][T25009] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.8255: corrupted inode contents [ 504.284820][T25009] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.8255: mark_inode_dirty error [ 504.296602][T25009] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.8255: corrupted inode contents [ 504.308805][T25009] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.8255: mark_inode_dirty error [ 504.324463][T25009] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.8255: corrupted inode contents [ 504.340871][T25009] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 504.343275][T25016] loop1: detected capacity change from 0 to 128 [ 504.356845][T25009] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.8255: corrupted inode contents [ 504.357857][T25016] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 504.391791][T25009] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.8255: mark_inode_dirty error [ 504.411371][T25009] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 504.411568][T25016] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 504.426933][T25020] __nla_validate_parse: 6 callbacks suppressed [ 504.426953][T25020] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8260'. [ 504.432980][T25009] EXT4-fs (loop5): 1 truncate cleaned up [ 504.450970][T25009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.514406][ T29] kauditd_printk_skb: 724 callbacks suppressed [ 504.514425][ T29] audit: type=1400 audit(1745455098.969:63373): avc: denied { create } for pid=25024 comm="syz.3.8263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 504.542071][T25028] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8258'. [ 504.552394][T25029] siw: device registration error -23 [ 504.553458][T25028] 0ªX¹¦À: renamed from 61ªX¹¦À [ 504.572413][T25029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.581042][T25028] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 504.582867][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8263'. [ 504.597760][T25029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.631734][T25029] loop7: detected capacity change from 0 to 2048 [ 504.635229][ T29] audit: type=1400 audit(1745455099.079:63374): avc: denied { write } for pid=25024 comm="syz.3.8263" name="file0" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 504.638682][T25029] /dev/loop7: Can't open blockdev [ 504.660762][ T29] audit: type=1400 audit(1745455099.089:63375): avc: denied { open } for pid=25024 comm="syz.3.8263" path="/348/file0" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 504.723753][ T29] audit: type=1326 audit(1745455099.179:63376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25031 comm="syz.8.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737512e969 code=0x7ffc0000 [ 504.752090][T25032] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 504.780801][ T29] audit: type=1326 audit(1745455099.179:63377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25031 comm="syz.8.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737512e969 code=0x7ffc0000 [ 504.804459][ T29] audit: type=1326 audit(1745455099.209:63378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25031 comm="syz.8.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f737512e969 code=0x7ffc0000 [ 504.814367][T25033] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8263'. [ 504.828173][ T29] audit: type=1326 audit(1745455099.209:63379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25031 comm="syz.8.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737512e969 code=0x7ffc0000 [ 504.828218][ T29] audit: type=1326 audit(1745455099.209:63380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25031 comm="syz.8.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737512e969 code=0x7ffc0000 [ 504.884551][ T29] audit: type=1326 audit(1745455099.209:63381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25031 comm="syz.8.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f737512e969 code=0x7ffc0000 [ 504.908289][ T29] audit: type=1326 audit(1745455099.209:63382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25031 comm="syz.8.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737512e969 code=0x7ffc0000 [ 504.975136][T25038] loop8: detected capacity change from 0 to 512 [ 504.988967][T25038] EXT4-fs (loop8): 1 orphan inode deleted [ 504.995539][T25038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.008149][ T289] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 505.021648][T25038] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.022465][T19894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.148598][T20598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.196706][T25055] sd 0:0:1:0: device reset [ 505.262577][T25054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8272'. [ 505.417713][T25071] sd 0:0:1:0: device reset [ 505.424424][T25071] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 505.433986][T25074] sd 0:0:1:0: device reset [ 505.441186][T25074] syz!: rxe_newlink: already configured on team_slave_0 [ 505.492675][T25078] Cannot find add_set index 0 as target [ 505.524934][T25080] loop8: detected capacity change from 0 to 1024 [ 505.531927][T25080] EXT4-fs: quotafile must be on filesystem root [ 505.578848][T25084] loop7: detected capacity change from 0 to 512 [ 505.586270][T25084] EXT4-fs: Ignoring removed oldalloc option [ 505.606953][T25084] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.8285: Parent and EA inode have the same ino 15 [ 505.619750][T25084] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.8285: Parent and EA inode have the same ino 15 [ 505.633625][T25084] EXT4-fs (loop7): 1 orphan inode deleted [ 505.640066][T25084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.665756][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.155907][T25103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.168123][T25103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.194399][T25103] loop3: detected capacity change from 0 to 2048 [ 506.224513][T25103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.404812][T25118] loop7: detected capacity change from 0 to 512 [ 506.448414][T25118] EXT4-fs: Ignoring removed oldalloc option [ 506.472873][T25118] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.8297: Parent and EA inode have the same ino 15 [ 506.488192][T25118] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.8297: Parent and EA inode have the same ino 15 [ 506.505340][T25118] EXT4-fs (loop7): 1 orphan inode deleted [ 506.517005][T25118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.564275][T20022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.662743][T25140] sd 0:0:1:0: device reset [ 506.669294][T25140] syz!: rxe_newlink: already configured on team_slave_0 [ 506.837026][T25152] loop8: detected capacity change from 0 to 512 [ 506.846660][T25153] FAULT_INJECTION: forcing a failure. [ 506.846660][T25153] name failslab, interval 1, probability 0, space 0, times 0 [ 506.859394][T25153] CPU: 0 UID: 0 PID: 25153 Comm: syz.1.8312 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 506.859486][T25153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 506.859499][T25153] Call Trace: [ 506.859505][T25153] [ 506.859513][T25153] dump_stack_lvl+0xf6/0x150 [ 506.859604][T25153] dump_stack+0x15/0x1a [ 506.859621][T25153] should_fail_ex+0x261/0x270 [ 506.859647][T25153] should_failslab+0x8f/0xb0 [ 506.859673][T25153] kmem_cache_alloc_noprof+0x59/0x340 [ 506.859707][T25153] ? getname_flags+0x81/0x3b0 [ 506.859726][T25152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 506.859807][T25153] getname_flags+0x81/0x3b0 [ 506.859924][T25153] user_path_at+0x26/0x140 [ 506.859959][T25153] __se_sys_mount+0x25e/0x2e0 [ 506.859988][T25153] __x64_sys_mount+0x67/0x80 [ 506.860011][T25153] x64_sys_call+0xd11/0x2e10 [ 506.860039][T25153] do_syscall_64+0xc9/0x1a0 [ 506.860126][T25153] ? clear_bhb_loop+0x25/0x80 [ 506.860229][T25153] ? clear_bhb_loop+0x25/0x80 [ 506.860256][T25153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.860317][T25153] RIP: 0033:0x7ff87001e969 [ 506.860337][T25153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.860367][T25153] RSP: 002b:00007ff86e687038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 506.860390][T25153] RAX: ffffffffffffffda RBX: 00007ff870245fa0 RCX: 00007ff87001e969 [ 506.860405][T25153] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 506.860422][T25153] RBP: 00007ff86e687090 R08: 0000200000000600 R09: 0000000000000000 [ 506.860436][T25153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.860451][T25153] R13: 0000000000000000 R14: 00007ff870245fa0 R15: 00007fff07265e88 [ 506.860537][T25153] [ 507.078215][T25152] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.139403][T25167] loop7: detected capacity change from 0 to 512 [ 507.147736][T25167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 507.166824][T25167] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.266509][T25178] program syz.1.8323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.277857][T25178] sctp: [Deprecated]: syz.1.8323 (pid 25178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.277857][T25178] Use struct sctp_sack_info instead [ 507.305074][T25181] netlink: 292 bytes leftover after parsing attributes in process `syz.3.8324'. [ 507.465848][T25190] FAULT_INJECTION: forcing a failure. [ 507.465848][T25190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.479018][T25190] CPU: 1 UID: 0 PID: 25190 Comm: syz.1.8327 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 507.479072][T25190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 507.479084][T25190] Call Trace: [ 507.479090][T25190] [ 507.479097][T25190] dump_stack_lvl+0xf6/0x150 [ 507.479180][T25190] dump_stack+0x15/0x1a [ 507.479250][T25190] should_fail_ex+0x261/0x270 [ 507.479273][T25190] should_fail+0xb/0x10 [ 507.479297][T25190] should_fail_usercopy+0x1a/0x20 [ 507.479459][T25190] _copy_from_user+0x1c/0xa0 [ 507.479493][T25190] copy_msghdr_from_user+0x54/0x2b0 [ 507.479524][T25190] ? __fget_files+0x186/0x1c0 [ 507.479552][T25190] __sys_sendmsg+0x141/0x240 [ 507.479663][T25190] __x64_sys_sendmsg+0x46/0x50 [ 507.479687][T25190] x64_sys_call+0x26f3/0x2e10 [ 507.479713][T25190] do_syscall_64+0xc9/0x1a0 [ 507.479745][T25190] ? clear_bhb_loop+0x25/0x80 [ 507.479770][T25190] ? clear_bhb_loop+0x25/0x80 [ 507.479812][T25190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.479837][T25190] RIP: 0033:0x7ff87001e969 [ 507.479855][T25190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.479879][T25190] RSP: 002b:00007ff86e687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.479935][T25190] RAX: ffffffffffffffda RBX: 00007ff870245fa0 RCX: 00007ff87001e969 [ 507.479949][T25190] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 507.479962][T25190] RBP: 00007ff86e687090 R08: 0000000000000000 R09: 0000000000000000 [ 507.479973][T25190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.479983][T25190] R13: 0000000000000000 R14: 00007ff870245fa0 R15: 00007fff07265e88 [ 507.480062][T25190] [ 507.730260][T25192] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 508.107373][T25200] vhci_hcd: invalid port number 254 [ 508.117556][ T23] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 508.125647][ T23] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 508.141347][T25198] loop5: detected capacity change from 0 to 1024 [ 508.169445][T25198] ext2: Bad value for 'commit' [ 508.258558][T25207] 9pnet_fd: Insufficient options for proto=fd [ 508.313483][T25212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8335'. [ 508.419232][T25219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8339'. [ 508.434825][T25217] loop1: detected capacity change from 0 to 512 [ 508.454193][T25217] EXT4-fs: Ignoring removed oldalloc option [ 508.472084][T25219] netlink: 372 bytes leftover after parsing attributes in process `syz.8.8339'. [ 508.485690][T25222] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 508.493517][T25217] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.8338: Parent and EA inode have the same ino 15 [ 508.542904][T25217] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.8338: Parent and EA inode have the same ino 15 [ 508.567893][T25227] loop7: detected capacity change from 0 to 1024 [ 508.578929][T25217] EXT4-fs (loop1): 1 orphan inode deleted [ 508.583699][T25227] EXT4-fs: quotafile must be on filesystem root [ 508.599479][T25215] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.820838][T25215] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.971054][T25215] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.384447][T25215] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.431006][T25244] loop8: detected capacity change from 0 to 512 [ 509.458672][T25244] EXT4-fs: Ignoring removed oldalloc option [ 509.499824][T25215] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.516628][ T29] kauditd_printk_skb: 974 callbacks suppressed [ 509.516644][ T29] audit: type=1326 audit(1745455103.979:64356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.546592][ T29] audit: type=1326 audit(1745455103.979:64357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.570173][ T29] audit: type=1326 audit(1745455103.979:64358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.593766][ T29] audit: type=1326 audit(1745455103.979:64359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.617428][ T29] audit: type=1326 audit(1745455103.979:64360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.641042][ T29] audit: type=1326 audit(1745455103.979:64361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.664690][ T29] audit: type=1326 audit(1745455103.979:64362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff87001d41f code=0x7ffc0000 [ 509.688283][ T29] audit: type=1326 audit(1745455103.979:64363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.719185][T25215] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.731220][T25215] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.743002][T25215] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.762727][ T29] audit: type=1326 audit(1745455104.169:64364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.786311][ T29] audit: type=1326 audit(1745455104.169:64365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25245 comm="syz.1.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87001e969 code=0x7ffc0000 [ 509.787375][T25251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8350'. [ 509.836659][T25244] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.8346: Parent and EA inode have the same ino 15 [ 509.857417][T25244] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.8346: Parent and EA inode have the same ino 15 [ 509.876973][T25244] EXT4-fs (loop8): 1 orphan inode deleted [ 509.887548][T25256] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 510.008673][T25263] sd 0:0:1:0: device reset [ 510.087046][T25274] loop7: detected capacity change from 0 to 128 [ 510.093976][T25274] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 510.111153][T25274] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 510.179963][T25282] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 510.222817][T25272] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.266032][T25291] netlink: 3 bytes leftover after parsing attributes in process `syz.7.8361'. [ 510.274993][T25291] 1ªX¹¦À: renamed from 60ªX¹¦À [ 510.284158][T25291] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 510.312423][ T3372] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 510.320745][ T3372] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.321852][T25293] loop3: detected capacity change from 0 to 1024 [ 510.338725][T25293] ext2: Bad value for 'commit' [ 510.341504][T25297] sd 0:0:1:0: device reset [ 510.374253][T25272] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.432613][T25305] loop3: detected capacity change from 0 to 512 [ 510.447213][T25305] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.458626][T25272] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.521438][T25272] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.597161][T25272] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.619638][T25272] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.640826][T25272] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.663447][T25272] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.780025][T25316] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 510.849468][T25321] Cannot find add_set index 0 as target [ 510.875006][T25323] sd 0:0:1:0: device reset [ 510.881971][T25323] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 510.944760][ T36] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 510.960392][ T36] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.972079][T25325] loop8: detected capacity change from 0 to 1024 [ 510.981084][T25325] ext2: Bad value for 'commit' [ 511.011521][T25341] FAULT_INJECTION: forcing a failure. [ 511.011521][T25341] name failslab, interval 1, probability 0, space 0, times 0 [ 511.024367][T25341] CPU: 0 UID: 0 PID: 25341 Comm: syz.8.8389 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 511.024394][T25341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 511.024409][T25341] Call Trace: [ 511.024417][T25341] [ 511.024451][T25341] dump_stack_lvl+0xf6/0x150 [ 511.024478][T25341] dump_stack+0x15/0x1a [ 511.024495][T25341] should_fail_ex+0x261/0x270 [ 511.024531][T25341] should_failslab+0x8f/0xb0 [ 511.024558][T25341] __kmalloc_cache_noprof+0x55/0x320 [ 511.024729][T25341] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 511.024770][T25341] __se_sys_memfd_create+0x1ea/0x5a0 [ 511.024805][T25341] __x64_sys_memfd_create+0x31/0x40 [ 511.024871][T25341] x64_sys_call+0x1163/0x2e10 [ 511.024896][T25341] do_syscall_64+0xc9/0x1a0 [ 511.024920][T25341] ? clear_bhb_loop+0x25/0x80 [ 511.024981][T25341] ? clear_bhb_loop+0x25/0x80 [ 511.025001][T25341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.025020][T25341] RIP: 0033:0x7f737512e969 [ 511.025109][T25341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.025136][T25341] RSP: 002b:00007f7373796e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 511.025160][T25341] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f737512e969 [ 511.025171][T25341] RDX: 00007f7373796ef0 RSI: 0000000000000000 RDI: 00007f73751b1444 [ 511.025185][T25341] RBP: 0000200000001100 R08: 00007f7373796bb7 R09: 00007f7373796e40 [ 511.025200][T25341] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 511.025214][T25341] R13: 00007f7373796ef0 R14: 00007f7373796eb0 R15: 0000200000000600 [ 511.025245][T25341] [ 511.275026][T20411] EXT4-fs unmount: 10 callbacks suppressed [ 511.275040][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.403236][T25350] Cannot find add_set index 0 as target [ 511.414140][T25352] sd 0:0:1:0: device reset [ 511.430696][T25354] FAULT_INJECTION: forcing a failure. [ 511.430696][T25354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.443817][T25354] CPU: 0 UID: 0 PID: 25354 Comm: syz.8.8395 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 511.443921][T25354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 511.443937][T25354] Call Trace: [ 511.443946][T25354] [ 511.443955][T25354] dump_stack_lvl+0xf6/0x150 [ 511.443985][T25354] dump_stack+0x15/0x1a [ 511.444005][T25354] should_fail_ex+0x261/0x270 [ 511.444033][T25354] should_fail+0xb/0x10 [ 511.444103][T25354] should_fail_usercopy+0x1a/0x20 [ 511.444134][T25354] strncpy_from_user+0x25/0x230 [ 511.444242][T25354] ? getname_flags+0x81/0x3b0 [ 511.444341][T25354] getname_flags+0xb0/0x3b0 [ 511.444440][T25354] path_setxattrat+0x240/0x320 [ 511.444490][T25354] __x64_sys_lsetxattr+0x71/0x90 [ 511.444589][T25354] x64_sys_call+0x2014/0x2e10 [ 511.444660][T25354] do_syscall_64+0xc9/0x1a0 [ 511.444692][T25354] ? clear_bhb_loop+0x25/0x80 [ 511.444718][T25354] ? clear_bhb_loop+0x25/0x80 [ 511.444744][T25354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.444770][T25354] RIP: 0033:0x7f737512e969 [ 511.444838][T25354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.444858][T25354] RSP: 002b:00007f7373797038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 511.444879][T25354] RAX: ffffffffffffffda RBX: 00007f7375355fa0 RCX: 00007f737512e969 [ 511.444892][T25354] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 00002000000001c0 [ 511.444904][T25354] RBP: 00007f7373797090 R08: 0000000000000000 R09: 0000000000000000 [ 511.444915][T25354] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001 [ 511.444926][T25354] R13: 0000000000000000 R14: 00007f7375355fa0 R15: 00007ffe4a3f0db8 [ 511.444973][T25354] [ 511.623817][T25360] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 511.733397][T25375] sd 0:0:1:0: device reset [ 511.872218][T25388] loop3: detected capacity change from 0 to 512 [ 511.887233][T25388] EXT4-fs: Ignoring removed oldalloc option [ 511.909937][T25392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8411'. [ 511.942365][T25388] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.8410: Parent and EA inode have the same ino 15 [ 511.983428][T25388] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.8410: Parent and EA inode have the same ino 15 [ 511.999225][T25388] EXT4-fs (loop3): 1 orphan inode deleted [ 512.005521][T25388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.029713][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.079616][T25406] sd 0:0:1:0: device reset [ 512.240664][T25420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8424'. [ 512.275336][T25422] loop3: detected capacity change from 0 to 512 [ 512.282708][T25422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 512.297800][T25422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 512.310503][T25422] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.676814][T25432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8426'. [ 512.757749][T25434] sd 0:0:1:0: device reset [ 512.764534][T25434] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 512.827859][T25441] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 512.911647][T25444] sd 0:0:1:0: device reset [ 513.011524][ T3379] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 513.019221][T25446] loop1: detected capacity change from 0 to 1024 [ 513.019438][ T3379] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 513.027687][T25446] ext2: Bad value for 'commit' [ 513.134793][T20411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 513.152829][T25455] ================================================================== [ 513.160941][T25455] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 513.167807][T25455] [ 513.170128][T25455] write to 0xffff8881013abe08 of 8 bytes by task 25453 on cpu 1: [ 513.177840][T25455] call_rcu+0x49/0x430 [ 513.181913][T25455] mas_replace_node+0x2fd/0x430 [ 513.186858][T25455] mas_wr_store_entry+0x1e80/0x2460 [ 513.192065][T25455] mas_store_prealloc+0x6d5/0x960 [ 513.197101][T25455] vma_iter_store_new+0x1d3/0x210 [ 513.202661][T25455] vma_complete+0x12b/0x570 [ 513.207167][T25455] __split_vma+0x56c/0x630 [ 513.211598][T25455] vma_modify+0x105/0x200 [ 513.215931][T25455] vma_modify_flags+0x10a/0x140 [ 513.220785][T25455] mprotect_fixup+0x30f/0x5d0 [ 513.225471][T25455] do_mprotect_pkey+0x6ce/0x9a0 [ 513.230334][T25455] __x64_sys_mprotect+0x48/0x60 [ 513.235195][T25455] x64_sys_call+0x272f/0x2e10 [ 513.239880][T25455] do_syscall_64+0xc9/0x1a0 [ 513.244392][T25455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.250292][T25455] [ 513.252620][T25455] read to 0xffff8881013abe08 of 8 bytes by task 25455 on cpu 0: [ 513.260246][T25455] mtree_range_walk+0x143/0x460 [ 513.265114][T25455] mas_walk+0x16e/0x320 [ 513.269306][T25455] lock_vma_under_rcu+0xa7/0x340 [ 513.274252][T25455] exc_page_fault+0x150/0x6a0 [ 513.278936][T25455] asm_exc_page_fault+0x26/0x30 [ 513.283811][T25455] [ 513.286133][T25455] value changed: 0x000055558dddefff -> 0x0000000000000000 [ 513.293237][T25455] [ 513.295566][T25455] Reported by Kernel Concurrency Sanitizer on: [ 513.301712][T25455] CPU: 0 UID: 0 PID: 25455 Comm: syz.3.8437 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(voluntary) [ 513.314234][T25455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 513.324294][T25455] ================================================================== [ 518.043828][ T29] kauditd_printk_skb: 1020 callbacks suppressed [ 518.043877][ T29] audit: type=1400 audit(1745455112.499:65386): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 518.072423][ T29] audit: type=1400 audit(1745455112.499:65387): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.094101][ T29] audit: type=1400 audit(1745455112.499:65388): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 518.116558][ T29] audit: type=1400 audit(1745455112.499:65389): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 518.139192][ T29] audit: type=1400 audit(1745455112.499:65390): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 520.616304][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)