last executing test programs: 3m47.147764381s ago: executing program 2 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[], 0xfe44, 0x0) 3m46.826784576s ago: executing program 2 (id=667): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000240)=""/141, 0x8d, 0x0, &(0x7f0000000300)=""/133, 0x85}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='xs_stream_read_request\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x5dc, 0xa, 0x55, 0x7f}, 0x9c) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2, 0x0, 0x0, 0x40005}, 0x24000895) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x628, 0x0, 0x208, 0xffffffff, 0x2f8, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)=""/125, 0x7d) 3m46.780632107s ago: executing program 2 (id=668): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) memfd_create(&(0x7f00000001c0)='GPL\x00', 0x1) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00'/10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0xa86, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000002300)=[{0x7, &(0x7f0000000300)=0x100000000, 0x2}, {0x81, &(0x7f0000000740)=0x10001, 0x82}, {0x1, &(0x7f0000000780)=0x80000000, 0x2}, {0x2, &(0x7f00000007c0)=0x243}, {0x3, &(0x7f00000008c0)=0xd0c, 0x82}, {0x8, &(0x7f0000000900)=0x2}, {0xb5, &(0x7f0000000940)=0xd80, 0x2}, {0x4335, &(0x7f0000000980)=0x5, 0x2}, {0x9, &(0x7f0000001cc0)=0xc0, 0x82}, {0x9, &(0x7f0000001d00)=0x3, 0x2}, {0x2, &(0x7f0000001d40)=0x4, 0x82}, {0x2, &(0x7f0000001d80)=0x347cc9f4, 0x82}, {0x7fffffff, &(0x7f0000001dc0)=0x1, 0x82}, {0x5, &(0x7f0000001e00)=0x9, 0x2}, {0x6, &(0x7f0000001e40)=0x6, 0x2}, {0x9, &(0x7f0000001e80)=0x7, 0x2}, {0xa24, 0x0, 0x2}, {0x5, &(0x7f0000001f00)=0x7, 0x82}, {0x6, &(0x7f0000001f40)=0x6d53, 0x2}, {0x1000, &(0x7f0000001f80)=0x4, 0x82}, {0x3, &(0x7f0000001fc0)=0x4, 0x82}, {0xb9, &(0x7f0000002000)=0x100, 0x82}, {0x5, &(0x7f0000002040)=0x7, 0x2}, {0x10000, &(0x7f0000002080)=0xffffffffffff887d, 0x2}, {0x1, &(0x7f00000020c0)=0x9, 0x82}, {0x9, &(0x7f0000002100)=0x7, 0x82}, {0xffffffffffffffff, &(0x7f0000002140)=0x9be3, 0x2}, {0x4, &(0x7f0000002180)=0x8, 0x2}, {0xe22, &(0x7f00000021c0)=0x5, 0x2}, {0x9, &(0x7f0000002200)=0x1, 0x82}, {0x2, &(0x7f0000002240)=0x2, 0x2}, {0x3, &(0x7f0000002280)=0x3, 0x82}, {0x2, &(0x7f00000022c0)=0x5, 0x2}], 0x21, 0x0, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m46.740202737s ago: executing program 2 (id=671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='percpu_free_percpu\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r2) rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0xc8000000, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000540)) syz_clone3(&(0x7f00000006c0)={0x101102380, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x40) openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000040)={0x5, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) socket$packet(0x11, 0x2, 0x300) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4fef76c8936103783296be7718aaaaaaaadc029078000000"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000f50000000002000007400004803c0001800c0001007061796c6f6164002c000280080003400000005f08000540000000000800044000000000080002400000000008000640000800020900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 3m46.589153039s ago: executing program 2 (id=673): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000140), 0x1, 0x775, &(0x7f0000001180)="$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") setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x0, @private=0xa010102, 0x4e24, 0x0, 'wlc\x00', 0x30, 0x7f, 0x43}, {@remote, 0x4e24, 0x3, 0x80000000, 0x7, 0x5}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001e000100ffffffff0004000000000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000000000000000bb0800070001000000"], 0x38}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x6, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 3m44.348847412s ago: executing program 2 (id=711): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) 3m44.299201843s ago: executing program 32 (id=711): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) 2m23.921507197s ago: executing program 4 (id=2036): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x78) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x2, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e23}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m22.941304222s ago: executing program 4 (id=2057): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x0, @private=0xa010102, 0x4e24, 0x0, 'wlc\x00', 0x30, 0x7f, 0x43}, {@remote, 0x4e24, 0x3, 0x80000000, 0x7, 0x5}}, 0x44) utime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000000000000000bb0800070001000000"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8844) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x6, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 2m22.853465923s ago: executing program 4 (id=2059): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x174) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0500000004000000ff0f000007", @ANYRES16=r2, @ANYRESHEX=r1, @ANYBLOB="d34117e9a583dc5a5c80581b26657c762fd5d69c0ca6548cc08ce8da3d724d5a520b8704bcc72c6a7f3b3bd5069e75ca0c1a4449b0e8bac58bf72ae344d9f44fb15f03a063fecce4bd9512d00ba38dc0c020be7ebef2c1bacfab390fde9bcf04216dfc2a6949e078c5b34d5887451fa4609acbf726ba5971b81ae91f68396063b6fa34352c83a1658b569dbf64d0887369de23bebc14baa824e0d427ca8703ac0d6071ac4c0f201a481e26aa57ba61ad14ca1c715cd63feafa3531a5045fbaafe9369bb048ec6e0894b6d31b4feea2c1a2099bfe73bc8836db5cf0c13eaeb84c0cde5f434d4f564db2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="92cab6108361d23dca95d8072257f63f7fd435f14620ca40f21071c821ec2fb336ddf9d9a8d9ffe7c49128695e9ba8443bc9a2c0e69092a7f204cd8086516facf24d913f5f5589afb22ee2a7819271d59d434112bd955f6b669b8d7e45c37649dd23f40942637bc4cb697d2b80a9b4750a92279ec61564786db3c78464c33bb5df871e7018ae19f573c6535cfb133d99066c68", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000110001000000001d000000000100000a"], 0x28}}, 0x0) 2m22.713170025s ago: executing program 4 (id=2065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') getdents(r4, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x800000009) r6 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone3(&(0x7f0000000a00)={0x12000, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f00000003c0), {0x13}, &(0x7f0000000640)=""/238, 0xee, &(0x7f00000008c0)=""/232, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0xa}, 0x58) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169a82, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r8, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) io_setup(0x7d, &(0x7f0000000600)) close_range(r7, r7, 0x0) 2m22.491011068s ago: executing program 4 (id=2067): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40ff, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) 2m22.019758865s ago: executing program 4 (id=2074): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) 2m21.762204209s ago: executing program 33 (id=2074): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) 25.98293257s ago: executing program 3 (id=4103): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000940), 0x1, 0x79d, &(0x7f0000000980)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x7}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000480)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x64, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x7, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x40004}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x19e5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10001}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb8) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x811}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x3b}, @map_val={0x18, 0x3, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xd7, &(0x7f00000004c0)=""/215, 0x41100, 0x2, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r11, r11, r11, r11, r10, r11], 0x0, 0x10, 0xd0ad}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='iocost_iocg_forgive_debt\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) 25.744126594s ago: executing program 3 (id=4108): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00da1ff00880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 25.657697705s ago: executing program 3 (id=4109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x1e}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8f, 0x2, 0x800, 0x1ff, 0x42400002, r3}) 25.536351207s ago: executing program 3 (id=4113): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20008040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000640)='io_uring_create\x00', 0xffffffffffffffff, 0x0, 0x410e}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000006e1f01d60f06a34ced3d3659392500000000009763000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0xc8000000, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000540)) syz_clone3(&(0x7f00000006c0)={0x101102380, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000040100000f1f7000095"], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r5, 0x2000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa000d0000002027000000c6f824e01d3411e11d7ea345c238e93ef875347b65001718d33864d1b25a2eaa53793e74854861cb81f5c661285852abab48432b86fad1f9d9bf883a68d614ef"], &(0x7f0000000580)={0x0, 0x3, [0x1e1, 0x311, 0x41, 0x9fe]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r7 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r7, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={&(0x7f0000000600), 0x4}, 0x1000, 0x0, 0x409, 0x4, 0x0, 0x3c, 0xfffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sync_file_range(r7, 0x6, 0x10000000000000, 0x2) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) 25.362850069s ago: executing program 3 (id=4115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x6850, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='kfree\x00', r5, 0x0, 0x81}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9fd374ccc5d09a8c220e4ceb01001800000000000000240000001100000008000000ffffffff00000009040000000c000000000000100c0000000000000051005f0067e1a8a2b9c93b3fdfe6fbf2c41f544e29c697f685eb7c80a349c1f5ec3705ff857c54483c62891f42d8e9076d32971294ec5c6ed7b4ca1c43ba8a80ea061d589047d1586f0f48a0b95b1ba09c10feb00d96759b12f03b2a61cfadbe0ef6656ad9"], 0x0, 0x44, 0xfffffebe}, 0x28) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x707e, &(0x7f0000000380)={0x0, 0x4e1e, 0x20000, 0x2, 0x2c9, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000400)=0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$unix(r8, &(0x7f0000000240)=@abs, 0x10) syz_io_uring_submit(r3, r7, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0xa, 0x0, @fd_index=0x2000006, 0x8d9, 0x0, 0x10, 0x6, 0x1}) r9 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r9, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r12, 0x0, 0x0) 25.362306559s ago: executing program 3 (id=4116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x40044) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 25.33167189s ago: executing program 34 (id=4116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x40044) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 2.087586169s ago: executing program 6 (id=4524): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000008000000000000000400000002200000", @ANYBLOB="06000000000000000000000000000010e76a9300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000010000000a00"/28], 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="e4abb163318d5616be92149b743631f25238b442b4bf33a07cbd8ed7791ab7b9163e61ba23b4ce330844e51a1912458f26e7b706f3fc4cdc0f6016beefaca3ba45994deb18411362c9481000", @ANYRES64=0x0], 0x10) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x9, &(0x7f00000061c0)=ANY=[@ANYBLOB='uni_xlate=0,shortname=win95,shortname=winnt,uni_xlate=1,shortname=lower,shortname=lower,rodir,utf8=1,nfs=nostale_ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c7379735f696d6d757461626c652c696f636861727365743d61736369692c666d61736b3d30303030303030303030303030303030303030313737372c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c736d61636b6673666c6f6f723d73686f72746e616d653d6c6f7765722c66756e633d46494c455f4d4d41502c0058a017666822a0964ba929ec69fb775c0ca6183ede26af80c1d6b7e4518e1879b3765102308c538138ce1494a22e641b"], 0x1, 0x2b0, &(0x7f0000000140)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3050024, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000540)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000180)=[{}, {}], 0xfccb, 0x10, &(0x7f00000001c0), &(0x7f0000000280), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x10, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20000080) socket$kcm(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010100000000000000000500000014000000110001000000000000e0abd723cb1d5e"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a090c0000000000000000020000000900010073797a30000000000900020073797a320000000014000000020a010300000000000000000000000014000000110001"], 0x68}}, 0x0) 2.08701148s ago: executing program 6 (id=4525): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) (fail_nth: 3) 1.806983544s ago: executing program 6 (id=4526): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) 1.522816448s ago: executing program 6 (id=4536): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000940), 0x1, 0x79d, &(0x7f0000000980)="$eJzs3d9rW2UfAPDvSdt16/a+7QsvvNt7VRB0MJbaWTcFLypeiOBgoNduJc3KbNqUJh1rKcwhgjeCDi8Evdm1P+adt/641X9Bb2TIxtRuOFGQyEmTJmuTNtv6Y7OfD5zteXKe9DnfnPP8SM5DEsCuNZj+k4k4FBHvJhH9tceTiOipprojRmNfWu7O0mIu3ZKoVF75JamWub20mIum56T21zIHoze+fiviSGZtvaX5hcmxQiE/GxEzETFUnpoZKs0vHD03NTaRn8hPHx8eGTl24ukTvZsX62/fLRy48d6LT3w2+seb/7v6zjdJjMaB2r7mODbLYAzWXpOeGF2174XNrmyHJTt9ANyXtGl2LbfyOBT90VVNdabzkgDAw+RiRFQAgF0mMf4DwC5T/xzg9tJiLt0qF3f284jtdvP5iNi7HH/9/ubynu7aPbu91fugfbeTu+53JBExsAn1D0bER1+89km6xRbdhwRo5Y1LEXFmYLDe/zf6n2TNmoVlnS/IeLKDMoOr8vo/2D5fpvOfZxrzv0b7y6zMf6LF/Ke3Rdu9H4MRe5rza9t/5vomVNNWOv97rqextu1OU/w1A1213L+qc76e5Oy5Qj7t2/4dEYejpzfND69Tx+Fbf92664GuRrJ5/vfr5dc/TutP/2+UyFzvXtXljo+Vxx407rqblyL+390q/mTl/Cdt5r+nOqzjpWff/rDdvjT+NN76dnf8W7+qrHIl4vFoHX9dst76xOND1cthqH5RtPD5jx/0tau/+fynW1p//b3AdkjPf9/68Q8kzes1SxHd1+6tjm+v9H/Vbt/G8be+/vckr1bT9c7jwli5PDscsSd5ee3jxxrPrefr5dP4Dz/Wuv2vd/2n7wnPdBh/942fP73/+LdWGv/4PZ3/e09cvTPZ1a7+zs7/SET8ufKJRSf9X6cH+OCvIAAAAAAAAAAAAAAAAAAAAAAAAABsLBMRByLJZFfSmUw2u/wb3v+NvkyhWCofOVucmx6P6m9lD0RPpv5Vl/1N34c6XPs+/Hr+2Kr8UxHxn4h4v3dfNZ/NFQvjOx08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTsb/P7/6mfenf66ACALbN3wxK38ttyIADAttl4/AcA/mmM/wCw+xj/AWD3Mf4DwO5j/AcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCLnTp5Mt0qvy8t5tL8+Pn5ucni+aPj+dJkdmoul80VZ2eyE8XiRCGfzRWnmp76fau/VygWZ0Zieu7CUDlfKg+V5hdOTxXnpsunz02NTeRP53u2LTIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FxpfmFyrFDIz0o8KolK//Kpe1iOZ+sT147+cHC9Mpddxpuf2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR8HcAAAD//2khMfk=") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendfile(r6, r7, &(0x7f0000000480)=0x2, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x64, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x7, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x40004}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x19e5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10001}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb8) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x811}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x3b}, @map_val={0x18, 0x3, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xd7, &(0x7f00000004c0)=""/215, 0x41100, 0x2, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r12, r12, r12, r12, r11, r12], 0x0, 0x10, 0xd0ad}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='iocost_iocg_forgive_debt\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) 1.36223919s ago: executing program 0 (id=4540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4bfb, &(0x7f0000002c80)=""/268) pipe2(&(0x7f0000000840), 0x0) 1.35545337s ago: executing program 1 (id=4541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<\t0||\t') 1.293499351s ago: executing program 6 (id=4543): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4080) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) futex_waitv(&(0x7f0000002740)=[{0xf7, &(0x7f0000000200)=0x2, 0x82}, {0x1, &(0x7f00000002c0)=0x5, 0x82}, {0xffffffffffffffff, &(0x7f0000000300)=0x8000000000000001, 0x82}, {0x922, &(0x7f0000000500)=0x15, 0x82}, {0x3, &(0x7f0000000540)=0xfffffffffffff940}, {0x3f7a, &(0x7f0000000600)=0x73b, 0x82}, {0x6, &(0x7f0000000640)=0x7, 0x82}, {0xa, &(0x7f0000000680)=0x3, 0x2}, {0x2, &(0x7f00000006c0)=0x6, 0x82}, {0x7fffffffffffffff, &(0x7f0000000700)=0x55, 0x82}, {0x8000000000000001, &(0x7f0000000740), 0x82}, {0x8001, &(0x7f0000000780)=0x2, 0x82}, {0x8, &(0x7f0000000940)=0x62, 0x2}, {0x1, &(0x7f00000008c0)=0x7db}, {0x7, &(0x7f0000000900)=0x5, 0x2}, {0x5, &(0x7f0000000e80)=0x9, 0x82}, {0xbe, &(0x7f0000000ec0)=0x2, 0x82}, {0x2, &(0x7f0000000f00)=0x3, 0x82}, {0xfffffffffffffff8, &(0x7f0000000f40)=0x4ab, 0x82}, {0xac2, &(0x7f0000000f80)=0x80000001, 0x2}, {0x1, &(0x7f0000000fc0)=0x8000, 0x2}, {0x0, &(0x7f0000001000)=0x80, 0x2}, {0x2, &(0x7f0000001040)=0x5, 0x82}, {0x35c, &(0x7f0000001080)=0x2, 0x2}, {0x8, &(0x7f00000010c0)=0x9, 0x2}, {0x9, &(0x7f0000001100)=0x1, 0x82}, {0x7, &(0x7f0000001140)=0x45610860, 0x82}, {0x0, &(0x7f0000001180)=0x7fffffff, 0x2}, {0x4, &(0x7f00000011c0)=0xfffffffffffffffd, 0x2}, {0x8000, &(0x7f0000001200)=0x5, 0x82}, {0x7ff, &(0x7f0000001240)=0x4, 0x82}, {0x0, &(0x7f0000001280)=0x4, 0x2}, {0x4, &(0x7f00000012c0)=0x3, 0x82}, {0xc1, &(0x7f0000001300)=0x5, 0x2}, {0xe02, &(0x7f0000001340)=0x9, 0x2}, {0xa2e, &(0x7f0000001380)=0xffffffffffffffd7, 0x2}, {0x1, &(0x7f00000013c0)=0x1, 0x2}, {0x13, &(0x7f0000001400)=0xea, 0x2}, {0x3, &(0x7f0000001440)=0xffffffffffffffff, 0x2}, {0x3, &(0x7f0000001480)=0x6c6, 0x82}, {0x9, &(0x7f00000014c0)=0x8, 0x2}, {0x1, &(0x7f0000001500)=0xa8d, 0x2}, {0x5, &(0x7f0000001540)=0x6, 0x82}, {0x2, &(0x7f0000001580)=0x40, 0x2}, {0x2, &(0x7f00000015c0)=0x7, 0x2}, {0x3, &(0x7f0000001600), 0x82}, {0x100000001, &(0x7f0000001640)=0x5, 0x2}, {0x2, &(0x7f0000001680), 0x2}, {0x3, &(0x7f00000016c0)=0x3ff, 0x2}, {0x2, &(0x7f0000001700)=0x1, 0x82}, {0x3, &(0x7f0000001740)=0x8, 0x2}, {0x81, &(0x7f0000001780)=0x8001, 0x2}, {0x9, &(0x7f00000017c0)=0xac4c, 0x82}, {0x2, &(0x7f0000001800), 0x82}, {0xe, &(0x7f0000001840)=0x10001}, {0x9, &(0x7f0000001880)=0x2, 0x82}, {0x9, &(0x7f00000018c0)=0x8000000000000001, 0x2}, {0x80000000, &(0x7f0000001900)=0x3, 0x82}, {0x1, &(0x7f0000001940)=0x10001, 0x82}, {0x5, &(0x7f0000001980)=0x4, 0x82}, {0x7fff, &(0x7f00000019c0)=0x41287768, 0x2}, {0x101, &(0x7f0000001a00)=0x861c, 0x2}, {0x64, &(0x7f0000001a40)=0x5, 0x82}, {0xb9, &(0x7f0000001a80)=0x3, 0x82}, {0xc, &(0x7f0000001ac0)=0x200, 0x2}, {0xbf19, &(0x7f0000001b00)=0x81, 0x82}, {0x8, &(0x7f0000001b40)=0x2, 0x2}, {0x6699, &(0x7f0000001b80), 0x82}, {0x5, &(0x7f0000001bc0)=0xd, 0x82}, {0x8001, &(0x7f0000001c00)=0x1, 0x82}, {0xfffffffffffffff7, &(0x7f0000001c40)=0xfffffffffffffffe, 0x82}, {0x101, &(0x7f0000001c80)=0x1, 0x2}, {0x8000, &(0x7f0000001cc0)=0x4, 0x80}, {0x1, &(0x7f0000001d00)=0x10000, 0x2}, {0x4, &(0x7f0000001d40)=0x4, 0x2}, {0xfffffffffffffffa, &(0x7f0000001d80)=0x81, 0x2}, {0x44eb3fe0, &(0x7f0000001dc0)=0x2, 0x2}, {0x8, &(0x7f0000001e00)=0x6, 0x82}, {0x5, &(0x7f0000001e40)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000001ec0)=0x3, 0x2}, {0x7, &(0x7f0000001f00)=0x8, 0x2}, {0xff, &(0x7f0000001f40), 0x2}, {0x400, &(0x7f0000001f80)=0x4, 0x2}, {0xf, &(0x7f0000001fc0)=0x6a, 0x82}, {0xc, &(0x7f0000002000)=0x17a8, 0x2}, {0x6, &(0x7f0000002040)=0x5, 0x82}, {0x2, &(0x7f0000002080)=0x3, 0x82}, {0x1, &(0x7f00000020c0)=0x8, 0x2}, {0x1, &(0x7f00000007c0)=0x2, 0x80}, {0x100000001, &(0x7f0000002140)=0x8, 0x2}, {0x8000000000000001, &(0x7f0000002180)=0x3, 0x2}, {0x1000, &(0x7f00000021c0)=0x3, 0x2}, {0x6, &(0x7f0000002200)=0x6, 0x82}, {0x74, &(0x7f0000002240)=0x8000, 0x82}, {0x57, &(0x7f0000002280)=0x9, 0x82}, {0x80000001, &(0x7f00000022c0)=0x8, 0x82}, {0xb2c, &(0x7f0000002300)=0x5, 0x80}, {0xc, 0x0, 0x82}, {0x9, &(0x7f0000002380), 0x80}, {0xfffffffffffffff2, &(0x7f00000023c0)=0xffffffff80000001, 0x82}, {0x1, &(0x7f0000002400)=0xf6d3, 0x80}, {0x455980c8, &(0x7f0000002440)=0x9, 0x2}, {0x7fffffff, &(0x7f0000002480)=0x4, 0x80}, {0x2, &(0x7f00000024c0)=0x42, 0x82}, {0x101, &(0x7f0000002500), 0x82}, {0x5, &(0x7f0000002540)=0x7, 0x2}, {0x7, &(0x7f0000002580)=0x3, 0x82}, {0xc6, &(0x7f00000025c0)=0x4, 0x2}, {0x1, &(0x7f0000002600)=0x5}, {0xa220, 0x0}, {0x6, &(0x7f0000002680)=0x6, 0x82}, {0x3, &(0x7f00000026c0)=0x10}, {0x8, &(0x7f0000002700)=0x9, 0x82}], 0x71, 0x0, &(0x7f0000003200)={0x77359400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = msgget$private(0x0, 0x10c) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) syz_clone3(&(0x7f0000000580)={0x8000000, 0x0, 0x0, 0x0, {0x4}, &(0x7f00000002c0), 0x0, 0x0, 0x0}, 0x58) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) 1.283749221s ago: executing program 0 (id=4544): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.277749991s ago: executing program 1 (id=4545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1.243944472s ago: executing program 0 (id=4546): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9fd374ccc5d09a8c220e4ceb01001800000000000000240000001100000008000000ffffffff00000009040000000c000000000000100c0000000000000051005f0067e1a8a2b9c93b3fdfe6fbf2c41f544e29c697f685eb7c80a349c1f5ec3705ff857c54483c62891f42d8e9076d32971294ec5c6ed7b4ca1c43ba8a80ea061d589047d1586f0f48a0b95b1ba09c10feb00d96759b12f03b2a61cfadbe0ef6656ad9"], 0x0, 0x44, 0xfffffebe}, 0x28) close_range(r1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r2, 0x0, 0x0) 1.144752873s ago: executing program 7 (id=4547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x85481, 0x104) (fail_nth: 9) 1.128365173s ago: executing program 0 (id=4548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r1, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r1, 0x2, 0xf, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.123425424s ago: executing program 7 (id=4549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x160, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg0\x00', {0x10, 0x9, 0x1004, 0x4, 0x6, 0x140, 0x4, 0x80, 0x78}, {0x2}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0x4}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x600000000000000}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r4, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 1.102709114s ago: executing program 1 (id=4550): r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000280)=0x400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x200008, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1c5, &(0x7f0000000a00)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 533.533032ms ago: executing program 5 (id=4554): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4bfb, &(0x7f0000002c80)=""/268) pipe2(&(0x7f0000000840), 0x0) 533.280662ms ago: executing program 5 (id=4555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<\t0||\t') 501.041722ms ago: executing program 5 (id=4556): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (fail_nth: 10) 185.297947ms ago: executing program 7 (id=4557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 148.196078ms ago: executing program 5 (id=4558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9fd374ccc5d09a8c220e4ceb01001800000000000000240000001100000008000000ffffffff00000009040000000c000000000000100c0000000000000051005f0067e1a8a2b9c93b3fdfe6fbf2c41f544e29c697f685eb7c80a349c1f5ec3705ff857c54483c62891f42d8e9076d32971294ec5c6ed7b4ca1c43ba8a80ea061d589047d1586f0f48a0b95b1ba09c10feb00d96759b12f03b2a61cfadbe0ef6656ad9"], 0x0, 0x44, 0xfffffebe}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r1, 0x0, 0x0) 147.612028ms ago: executing program 0 (id=4559): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r6, 0x0, 0x4840) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000"], 0x84}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000001cc0)={'erspan0\x00', 0x0, 0x8, 0x40, 0xfff, 0x1, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x64, 0x0, 0x7, 0x6, 0x0, @empty, @remote, {[@noop, @rr={0x7, 0x1b, 0xbb, [@local, @multicast2, @empty, @private=0xa010101, @multicast1, @local]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x7, 0x7, "e5f2b6f77f"}]}, @end, @generic={0x7, 0x4, "8cbd"}, @generic={0x0, 0x5, "3136b1"}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000226bd7000fddbdf258a000000050005000700000008000300040000000500050000000000080003020005000000080003000100000024000680060001000a0000000800070000000000000000", @ANYRES32=r8, @ANYBLOB="06000500fae1000008000700", @ANYRES32=r9], 0x78}, 0x1, 0x0, 0x0, 0x48400}, 0x4800) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x80800, 0x4a) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="07ad000000000000000001000000000000000b40"], 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x8b, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000700070000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10800000000000701ff03f8ff0008000000b7030000000000008500000006000000181100000000000000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xcd}, @generic={0x2, 0x1, 0x2, 0x7ff, 0x10000}], &(0x7f0000000040)='GPL\x00', 0xfff, 0x8f, &(0x7f0000000080)=""/143, 0x41000, 0x10, '\x00', r8, @sched_cls=0x37, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x6, 0xf}, 0x10, r13, r0, 0x8, &(0x7f0000000500)=[0xffffffffffffffff, r0, r14], &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xa}, {0x5, 0x2, 0x8, 0x4}, {0x1, 0x5, 0x2, 0x5}, {0x0, 0x4, 0xb, 0x5}, {0x0, 0x3, 0x1, 0xa}, {0x2, 0x5, 0xd, 0xa}, {0x5, 0x3, 0xa, 0xc}, {0x5, 0x4, 0xe, 0x1}], 0x10, 0xfffffffb}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={'wg2\x00', {0x2, 0x4e20, @multicast2}}) 146.181338ms ago: executing program 1 (id=4560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 141.605978ms ago: executing program 6 (id=4561): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x7a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 137.193548ms ago: executing program 7 (id=4562): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff940200000000000040000000000000000000000000000000000000002c8f3800010000000200000003000000970f00000400000000"], 0xe6) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 115.793678ms ago: executing program 7 (id=4563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4bfb, &(0x7f0000002c80)=""/268) pipe2(&(0x7f0000000840), 0x0) 67.073579ms ago: executing program 5 (id=4564): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000200)=@raw=[@func, @func={0x85, 0x0, 0x1, 0x300, 0x8}, @func, @snprintf], &(0x7f0000000780)='GPL\x00'}, 0x94) 66.638369ms ago: executing program 0 (id=4565): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x24, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x5]}, 0x8) name_to_handle_at(r8, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1400) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r8}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000040)='cpu<\t0||\t\xdep\x03Z\xe64IJ\xbd\x02\x00\x00\x00\xfd\xfe\xd4\xea \xc8\xba\xa8\x98j_\xcaW\xdd\xf3-f}\xcfP:\x8f\x1c\x1b\f\x96\xb2i~\xae\x0fl5\xc3\xe2\xa1[[n\xbc\x8f\x8c\xd4\x10\xad\xfb\xbfC\x99\xf2\xc8\x11\xe9\xa9\x87\x1ec\xc0*\x16\xf1\x01\x84\x88\xf9\x1c\x0e\xae\xfb\xf0~w\xeaN\x03\x06{;\xb0\xb7\xec\xc25IfE\vJ3!\xaa\x8f\xe97\xcbs\xe6\x8de<\x99;\x80\xed6]}P{\xedS\rq\xd9+#\xa8\x1c5\xc3\x8abn\xa9|;]\x8dV:\xb1\v9d\x9f$d\xa7\x7f\xf1)\x8e\x8b\xa0\xfeB\xc7\"rY\xd5\r?\xc7\x83\x16\x8b\x04\xd20\xe2\xa6\xcd\xa2\x00\xd9\xbe\xfcF\x11\xbe2\t\xbeP\x90\xd7DW\x9f\xf6\xaa\x83\xf1\xb2\xe6]\x83\x82\xc1\xde\'2+|\xd5\b\xb4\xe2\x92v\xf1\xba\xe9\x87@:-\xe4\xe82\xfa\xbbp\xb1\xa1\xef\xa0\xb2\x06\xd3\xbf\xb7\xd8\xe2\x927\x849\xd8F\xc5\xf0h\x81\xf6n\xa9') openat(r8, &(0x7f0000001040)='./file0\x00', 0x8000, 0x10c) 40.172929ms ago: executing program 1 (id=4566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4bfb, &(0x7f0000002c80)=""/268) pipe2(&(0x7f0000000840), 0x0) 39.132229ms ago: executing program 5 (id=4567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<\t0||\t') 13.56064ms ago: executing program 7 (id=4568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x160, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg0\x00', {0x10, 0x9, 0x1004, 0x4, 0x6, 0x140, 0x4, 0x80, 0x78}, {0x2}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0x4}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x600000000000000}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r4, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 0s ago: executing program 1 (id=4569): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x1018e58, &(0x7f0000001700)={[{@debug_want_extra_isize}, {@journal_path={'journal_path', 0x3d, './cgroup'}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@dioread_nolock}, {@i_version}]}, 0x6, 0x611, &(0x7f00000017c0)="$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") (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) (async, rerun: 32) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000000ffffffffffffffeb000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRESOCT, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c0000"], 0xfc}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000e80)={0xa, 0x4e24, 0x1c1, @mcast1, 0xdd8}, 0x1c) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002080)=ANY=[], 0x138}}, 0x0) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80041, &(0x7f0000000540)={[{@noacl}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@bsdgroups}, {@orlov}, {@abort}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (async, rerun: 32) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000080)=@filename='./bus\x00', 0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xffffffffffff6242, 0x1, 0x60cf, 0x401, 0x5, 0xffffffff}) (rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x460000, 0x100) (rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000005c0)={r7, 0x8, 0x6, 0x1ff, 0x0, 0x9}, 0x14) (async) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000000706010200000000000000000700000945e58c7158c1926d000000000900020073797a300000000054abf4b4c0"], 0x2c}, 0x1, 0x0, 0x0, 0x4018040}, 0x11) kernel console output (not intermixed with test programs): 64 89 01 48 [ 264.004794][T21956] RSP: 002b:00007f1b8ba87038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 264.004811][T21956] RAX: ffffffffffffffda RBX: 00007f1b8d645fa0 RCX: 00007f1b8d41e929 [ 264.004822][T21956] RDX: 0000000008000000 RSI: 0000000000003516 RDI: 0000000000000003 [ 264.004834][T21956] RBP: 00007f1b8ba87090 R08: 0000000000000000 R09: 0000000000000000 [ 264.004845][T21956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.004857][T21956] R13: 0000000000000000 R14: 00007f1b8d645fa0 R15: 00007ffec91ba0d8 [ 264.004947][T21956] [ 264.006638][T21961] IPv4: Oversized IP packet from 127.202.26.0 [ 264.566487][T22040] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 264.668797][ T29] kauditd_printk_skb: 706 callbacks suppressed [ 264.668812][ T29] audit: type=1326 audit(1751614630.593:32917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b8d4158e7 code=0x7ffc0000 [ 264.703678][ T29] audit: type=1326 audit(1751614630.613:32918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b8d3bab19 code=0x7ffc0000 [ 264.727365][ T29] audit: type=1326 audit(1751614630.613:32919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1b8d41e929 code=0x7ffc0000 [ 264.750907][ T29] audit: type=1326 audit(1751614630.633:32921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16930a58e7 code=0x7ffc0000 [ 264.774536][ T29] audit: type=1326 audit(1751614630.633:32920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b8d4158e7 code=0x7ffc0000 [ 264.798079][ T29] audit: type=1326 audit(1751614630.633:32923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b8d3bab19 code=0x7ffc0000 [ 264.821663][ T29] audit: type=1326 audit(1751614630.633:32924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1b8d41e929 code=0x7ffc0000 [ 264.845225][ T29] audit: type=1326 audit(1751614630.633:32922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f169304ab19 code=0x7ffc0000 [ 264.874513][ T29] audit: type=1326 audit(1751614630.633:32925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f16930ae929 code=0x7ffc0000 [ 264.898093][ T29] audit: type=1326 audit(1751614630.633:32926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16930a58e7 code=0x7ffc0000 [ 265.194100][T22126] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 265.350540][T22161] IPv4: Oversized IP packet from 127.202.26.0 [ 265.533802][T22197] loop6: detected capacity change from 0 to 512 [ 265.554172][T22197] EXT4-fs (loop6): 1 orphan inode deleted [ 265.560760][T22197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.573637][ T7303] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 1 [ 265.574068][T22197] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.617860][T13795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.776325][T22243] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 265.812230][T22250] loop6: detected capacity change from 0 to 2048 [ 265.819473][T22250] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 265.910788][T22269] loop6: detected capacity change from 0 to 256 [ 266.043811][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 266.074152][T22300] loop5: detected capacity change from 0 to 256 [ 266.210288][T22318] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 266.307576][T22331] loop5: detected capacity change from 0 to 256 [ 266.330513][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 266.358016][T22345] ALSA: seq fatal error: cannot create timer (-16) [ 266.408587][T22356] IPv4: Oversized IP packet from 127.202.26.0 [ 266.603245][T22351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.618813][T22351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.686725][T22400] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 266.840149][T22429] loop3: detected capacity change from 0 to 2048 [ 266.847638][T22429] EXT4-fs (loop3): #clusters per group too big: 151011328 [ 266.907971][T22429] __nla_validate_parse: 19 callbacks suppressed [ 266.908051][T22429] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3937'. [ 266.950414][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3937'. [ 266.988858][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 267.023439][T22456] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 267.032269][T22456] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 267.084897][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3941'. [ 267.108214][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3941'. [ 267.170798][T22483] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3944'. [ 267.171709][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 267.310689][T22512] veth0: entered promiscuous mode [ 267.319926][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3951'. [ 267.358594][T22515] loop3: detected capacity change from 0 to 2048 [ 267.359940][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3954'. [ 267.379937][T22520] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 267.418609][T22515] Alternate GPT is invalid, using primary GPT. [ 267.424941][T22515] loop3: p1 p2 p3 [ 267.477361][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 267.602692][T22541] loop1: detected capacity change from 0 to 2048 [ 267.609807][T22541] EXT4-fs (loop1): #clusters per group too big: 151011328 [ 267.767741][T22558] loop1: detected capacity change from 0 to 128 [ 267.777033][T22558] loop1: detected capacity change from 0 to 164 [ 267.783610][T22558] iso9660: Unexpected value for 'nojoliet' [ 268.402726][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 268.626024][T22589] tipc: Started in network mode [ 268.631015][T22589] tipc: Node identity , cluster identity 4711 [ 268.637225][T22589] tipc: Failed to set node id, please configure manually [ 268.644369][T22589] tipc: Enabling of bearer rejected, failed to enable media [ 268.680221][T22595] loop1: detected capacity change from 0 to 1024 [ 268.693525][T22595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.711388][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 269.043117][T22615] loop6: detected capacity change from 0 to 512 [ 269.046434][T22606] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 269.064557][T22606] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 269.076855][T22606] EXT4-fs (loop1): This should not happen!! Data will be lost [ 269.076855][T22606] [ 269.086518][T22606] EXT4-fs (loop1): Total free blocks count 0 [ 269.092527][T22606] EXT4-fs (loop1): Free/Dirty block details [ 269.096275][T22615] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 269.098470][T22606] EXT4-fs (loop1): free_blocks=68451041280 [ 269.098487][T22606] EXT4-fs (loop1): dirty_blocks=16432 [ 269.109383][T22615] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3987: invalid indirect mapped block 2683928664 (level 1) [ 269.112280][T22606] EXT4-fs (loop1): Block reservation details [ 269.112323][T22606] EXT4-fs (loop1): i_reserved_data_blocks=1027 [ 269.119549][T22615] EXT4-fs (loop6): Remounting filesystem read-only [ 269.150653][T22615] EXT4-fs (loop6): 1 truncate cleaned up [ 269.157032][T22615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.172927][ T7303] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 269.196229][T13795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.221306][T22618] loop6: detected capacity change from 0 to 2048 [ 269.228396][T22618] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 269.304781][T22624] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 269.351058][T22630] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 269.399471][T22636] ALSA: seq fatal error: cannot create timer (-16) [ 269.546626][T22645] loop1: detected capacity change from 0 to 2048 [ 269.554068][T22645] EXT4-fs (loop1): #clusters per group too big: 151011328 [ 269.692737][T22653] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 269.779536][ T29] kauditd_printk_skb: 1318 callbacks suppressed [ 269.779555][ T29] audit: type=1326 audit(1751614635.703:34244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 269.782202][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 269.787876][ T29] audit: type=1326 audit(1751614635.703:34245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 269.839090][ T29] audit: type=1326 audit(1751614635.703:34246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 269.862716][ T29] audit: type=1326 audit(1751614635.703:34247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 269.886340][ T29] audit: type=1326 audit(1751614635.703:34248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 269.909980][ T29] audit: type=1326 audit(1751614635.703:34249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 269.933664][ T29] audit: type=1326 audit(1751614635.703:34250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 269.957315][ T29] audit: type=1326 audit(1751614635.703:34251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 269.980920][ T29] audit: type=1326 audit(1751614635.703:34252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 270.004647][ T29] audit: type=1326 audit(1751614635.703:34253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22660 comm="syz.0.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 270.529330][T22675] loop5: detected capacity change from 0 to 2048 [ 270.536456][T22675] EXT4-fs (loop5): #clusters per group too big: 151011328 [ 270.822527][T22682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.708185][T22703] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 271.716500][T22706] loop6: detected capacity change from 0 to 512 [ 271.742958][T22706] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 271.790290][T22698] loop1: detected capacity change from 0 to 8192 [ 271.802394][T22706] EXT4-fs (loop6): 1 truncate cleaned up [ 271.808524][T22706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.825400][T22698] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.849035][T22715] loop5: detected capacity change from 0 to 512 [ 271.861948][T22715] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 271.882164][T22698] SELinux: policydb version -2036616218 does not match my version range 15-34 [ 271.891547][T22718] 9pnet_fd: Insufficient options for proto=fd [ 271.891987][T22715] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4026: invalid indirect mapped block 2683928664 (level 1) [ 271.911794][T22698] SELinux: failed to load policy [ 271.918783][T22715] EXT4-fs (loop5): Remounting filesystem read-only [ 271.929535][T22715] EXT4-fs (loop5): 1 truncate cleaned up [ 271.935821][T22715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.992559][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.062212][T22739] sg_write: data in/out 768/210 bytes for SCSI command 0x0-- guessing data in; [ 272.062212][T22739] program syz.3.4036 not setting count and/or reply_len properly [ 272.077735][T22740] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 272.113803][T13795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.126500][T22744] __nla_validate_parse: 29 callbacks suppressed [ 272.126514][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4038'. [ 272.155264][T22748] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 272.169536][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4038'. [ 272.178754][T22748] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 272.266778][T22771] loop5: detected capacity change from 0 to 512 [ 272.276530][T22771] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 272.285188][T22771] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4048: invalid indirect mapped block 2683928664 (level 1) [ 272.306961][T22771] EXT4-fs (loop5): Remounting filesystem read-only [ 272.314214][T22771] EXT4-fs (loop5): 1 truncate cleaned up [ 272.320331][T22771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.333882][ T9] IPVS: starting estimator thread 0... [ 272.351518][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.373993][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 272.383695][T22783] FAULT_INJECTION: forcing a failure. [ 272.383695][T22783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.396872][T22783] CPU: 1 UID: 0 PID: 22783 Comm: syz.3.4050 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 272.396910][T22783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.396927][T22783] Call Trace: [ 272.396935][T22783] [ 272.396945][T22783] __dump_stack+0x1d/0x30 [ 272.397043][T22783] dump_stack_lvl+0xe8/0x140 [ 272.397081][T22783] dump_stack+0x15/0x1b [ 272.397103][T22783] should_fail_ex+0x265/0x280 [ 272.397185][T22783] should_fail+0xb/0x20 [ 272.397220][T22783] should_fail_usercopy+0x1a/0x20 [ 272.397276][T22783] strncpy_from_user+0x25/0x230 [ 272.397341][T22783] strncpy_from_user_nofault+0x68/0xf0 [ 272.397380][T22783] bpf_probe_read_user_str+0x2a/0x70 [ 272.397491][T22783] bpf_prog_b1bc9f7c1f89903c+0x41/0x47 [ 272.397511][T22783] bpf_trace_run3+0x10f/0x1d0 [ 272.397617][T22783] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 272.397682][T22783] ? audit_log_end+0x1d7/0x1f0 [ 272.397705][T22783] ? audit_log_end+0x1d7/0x1f0 [ 272.397750][T22783] kmem_cache_free+0x257/0x300 [ 272.397783][T22783] audit_log_end+0x1d7/0x1f0 [ 272.397801][T22783] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 272.397834][T22783] common_lsm_audit+0x1ca/0x230 [ 272.397886][T22783] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 272.397915][T22783] slow_avc_audit+0x104/0x140 [ 272.398015][T22783] avc_has_perm+0x128/0x150 [ 272.398108][T22783] selinux_socket_getsockopt+0x175/0x1b0 [ 272.398150][T22783] security_socket_getsockopt+0x46/0x80 [ 272.398206][T22783] do_sock_getsockopt+0x57/0x240 [ 272.398244][T22783] __x64_sys_getsockopt+0x11e/0x1a0 [ 272.398340][T22783] x64_sys_call+0x12aa/0x2fb0 [ 272.398404][T22783] do_syscall_64+0xd2/0x200 [ 272.398439][T22783] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.398499][T22783] ? clear_bhb_loop+0x40/0x90 [ 272.398542][T22783] ? clear_bhb_loop+0x40/0x90 [ 272.398568][T22783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.398651][T22783] RIP: 0033:0x7f1b8d41e929 [ 272.398679][T22783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.398704][T22783] RSP: 002b:00007f1b8ba87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 272.398728][T22783] RAX: ffffffffffffffda RBX: 00007f1b8d645fa0 RCX: 00007f1b8d41e929 [ 272.398744][T22783] RDX: 0000000000000004 RSI: 0000000000000113 RDI: 0000000000000003 [ 272.398760][T22783] RBP: 00007f1b8ba87090 R08: 0000200000000080 R09: 0000000000000000 [ 272.398857][T22783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.398875][T22783] R13: 0000000000000000 R14: 00007f1b8d645fa0 R15: 00007ffec91ba0d8 [ 272.398922][T22783] [ 272.421673][T22779] IPVS: using max 2064 ests per chain, 103200 per kthread [ 272.486048][T22787] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 272.697688][T22790] loop6: detected capacity change from 0 to 1024 [ 272.713140][T22790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.786725][T22796] loop3: detected capacity change from 0 to 2048 [ 272.793785][T22796] EXT4-fs (loop3): #clusters per group too big: 151011328 [ 272.801618][T22798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.810075][T22798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.858999][T22796] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4055'. [ 272.889115][T22796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 272.915250][T22796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4055'. [ 272.999015][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 273.068048][T22815] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.122724][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 273.124965][T22797] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 273.145404][T22797] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 273.157937][T22797] EXT4-fs (loop6): This should not happen!! Data will be lost [ 273.157937][T22797] [ 273.158099][T22822] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 273.167759][T22797] EXT4-fs (loop6): Total free blocks count 0 [ 273.181531][T22797] EXT4-fs (loop6): Free/Dirty block details [ 273.187841][T22797] EXT4-fs (loop6): free_blocks=68451041280 [ 273.193818][T22797] EXT4-fs (loop6): dirty_blocks=16432 [ 273.199242][T22797] EXT4-fs (loop6): Block reservation details [ 273.205290][T22797] EXT4-fs (loop6): i_reserved_data_blocks=1027 [ 273.231362][T22826] loop3: detected capacity change from 0 to 1024 [ 273.231710][ T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 273.261825][T22826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.278923][T22824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.343679][T22824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.374651][T22832] loop6: detected capacity change from 0 to 2048 [ 273.386312][T22824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.406861][T22832] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 273.494971][T22824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.513500][T22839] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4067'. [ 273.559411][T22832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4067'. [ 273.581355][T22824] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.594643][T22832] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4067'. [ 273.597541][T22824] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.622901][T22824] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.640641][T22824] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.780944][T22831] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 273.796533][T22831] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 273.808890][T22831] EXT4-fs (loop3): This should not happen!! Data will be lost [ 273.808890][T22831] [ 273.818617][T22831] EXT4-fs (loop3): Total free blocks count 0 [ 273.824774][T22831] EXT4-fs (loop3): Free/Dirty block details [ 273.830701][T22831] EXT4-fs (loop3): free_blocks=68451041280 [ 273.836555][T22831] EXT4-fs (loop3): dirty_blocks=16432 [ 273.841964][T22831] EXT4-fs (loop3): Block reservation details [ 273.848043][T22831] EXT4-fs (loop3): i_reserved_data_blocks=1027 [ 273.873793][T12140] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 273.908653][T22859] loop6: detected capacity change from 0 to 1024 [ 273.923195][T22859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.993642][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 274.022482][T22866] loop3: detected capacity change from 0 to 512 [ 274.030643][T22866] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 274.040141][T22866] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4077: invalid indirect mapped block 2683928664 (level 1) [ 274.055586][T22866] EXT4-fs (loop3): Remounting filesystem read-only [ 274.062527][T22866] EXT4-fs (loop3): 1 truncate cleaned up [ 274.068697][T22866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.096750][T19714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.175186][T22870] loop3: detected capacity change from 0 to 1024 [ 274.183410][T22870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.206246][T22870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.285315][T22864] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 274.300552][T22864] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 274.312888][T22864] EXT4-fs (loop6): This should not happen!! Data will be lost [ 274.312888][T22864] [ 274.322552][T22864] EXT4-fs (loop6): Total free blocks count 0 [ 274.328545][T22864] EXT4-fs (loop6): Free/Dirty block details [ 274.334447][T22864] EXT4-fs (loop6): free_blocks=68451041280 [ 274.340247][T22864] EXT4-fs (loop6): dirty_blocks=16432 [ 274.345680][T22864] EXT4-fs (loop6): Block reservation details [ 274.351696][T22864] EXT4-fs (loop6): i_reserved_data_blocks=1027 [ 274.375106][ T7303] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 274.465551][T22875] loop6: detected capacity change from 0 to 256 [ 274.666657][T22885] FAULT_INJECTION: forcing a failure. [ 274.666657][T22885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.679958][T22885] CPU: 1 UID: 0 PID: 22885 Comm: syz.6.4083 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 274.679986][T22885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.679996][T22885] Call Trace: [ 274.680001][T22885] [ 274.680006][T22885] __dump_stack+0x1d/0x30 [ 274.680024][T22885] dump_stack_lvl+0xe8/0x140 [ 274.680039][T22885] dump_stack+0x15/0x1b [ 274.680074][T22885] should_fail_ex+0x265/0x280 [ 274.680098][T22885] should_fail+0xb/0x20 [ 274.680118][T22885] should_fail_usercopy+0x1a/0x20 [ 274.680214][T22885] _copy_from_user+0x1c/0xb0 [ 274.680230][T22885] ___sys_sendmsg+0xc1/0x1d0 [ 274.680269][T22885] __x64_sys_sendmsg+0xd4/0x160 [ 274.680299][T22885] x64_sys_call+0x2999/0x2fb0 [ 274.680318][T22885] do_syscall_64+0xd2/0x200 [ 274.680332][T22885] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 274.680353][T22885] ? clear_bhb_loop+0x40/0x90 [ 274.680369][T22885] ? clear_bhb_loop+0x40/0x90 [ 274.680412][T22885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.680428][T22885] RIP: 0033:0x7f16930ae929 [ 274.680440][T22885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.680453][T22885] RSP: 002b:00007f1691717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.680467][T22885] RAX: ffffffffffffffda RBX: 00007f16932d5fa0 RCX: 00007f16930ae929 [ 274.680477][T22885] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000005 [ 274.680534][T22885] RBP: 00007f1691717090 R08: 0000000000000000 R09: 0000000000000000 [ 274.680545][T22885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.680560][T22885] R13: 0000000000000000 R14: 00007f16932d5fa0 R15: 00007ffee1ccbe78 [ 274.680630][T22885] [ 274.966494][ T29] kauditd_printk_skb: 650 callbacks suppressed [ 274.966508][ T29] audit: type=1326 audit(1751614640.893:34902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 274.998622][ T29] audit: type=1326 audit(1751614640.893:34903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.022574][ T29] audit: type=1326 audit(1751614640.893:34904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.046364][ T29] audit: type=1326 audit(1751614640.893:34905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.070172][ T29] audit: type=1326 audit(1751614640.893:34906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.093798][ T29] audit: type=1326 audit(1751614640.893:34907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.117494][ T29] audit: type=1326 audit(1751614640.893:34908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.141068][ T29] audit: type=1326 audit(1751614640.893:34909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.164774][ T29] audit: type=1326 audit(1751614640.893:34910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.188366][ T29] audit: type=1326 audit(1751614640.893:34911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22894 comm="syz.5.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d521de929 code=0x7ffc0000 [ 275.214310][T19714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.235976][T22899] loop3: detected capacity change from 0 to 512 [ 275.244264][T22899] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 275.246497][T22901] loop6: detected capacity change from 0 to 256 [ 275.252603][T22899] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4088: invalid indirect mapped block 2683928664 (level 1) [ 275.273129][T22899] EXT4-fs (loop3): Remounting filesystem read-only [ 275.279985][T22899] EXT4-fs (loop3): 1 truncate cleaned up [ 275.286185][T22899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.311116][T19714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.381051][T22910] sch_tbf: burst 32854 is lower than device lo mtu (65550) ! [ 275.901461][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 275.926123][T22928] loop5: detected capacity change from 0 to 1024 [ 275.943983][T22928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.075642][T22934] loop1: detected capacity change from 0 to 2048 [ 276.082844][T22934] EXT4-fs (loop1): #clusters per group too big: 151011328 [ 276.171281][T22940] loop6: detected capacity change from 0 to 512 [ 276.194657][T22940] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 276.212301][T22940] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4102: invalid indirect mapped block 2683928664 (level 1) [ 276.243003][T22940] EXT4-fs (loop6): Remounting filesystem read-only [ 276.249687][T22940] EXT4-fs (loop6): 1 truncate cleaned up [ 276.257029][T22943] loop3: detected capacity change from 0 to 2048 [ 276.262023][T22940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.278214][T22943] EXT4-fs (loop3): #clusters per group too big: 151011328 [ 276.299956][T13795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.472903][T22932] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 276.488468][T22932] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 276.500980][T22932] EXT4-fs (loop5): This should not happen!! Data will be lost [ 276.500980][T22932] [ 276.510705][T22932] EXT4-fs (loop5): Total free blocks count 0 [ 276.516759][T22932] EXT4-fs (loop5): Free/Dirty block details [ 276.522705][T22932] EXT4-fs (loop5): free_blocks=68451041280 [ 276.528586][T22932] EXT4-fs (loop5): dirty_blocks=16432 [ 276.534089][T22932] EXT4-fs (loop5): Block reservation details [ 276.540090][T22932] EXT4-fs (loop5): i_reserved_data_blocks=1027 [ 276.614807][ T7303] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 276.647947][T22973] bridge0: entered promiscuous mode [ 276.654351][T22973] bridge0: port 3(macvlan0) entered blocking state [ 276.660900][T22973] bridge0: port 3(macvlan0) entered disabled state [ 276.667774][T22973] macvlan0: entered allmulticast mode [ 276.673197][T22973] bridge0: entered allmulticast mode [ 276.683637][T22973] macvlan0: left allmulticast mode [ 276.688801][T22973] bridge0: left allmulticast mode [ 276.690695][T22975] loop1: detected capacity change from 0 to 2048 [ 276.701580][T22973] bridge0: left promiscuous mode [ 276.706819][T22975] EXT4-fs (loop1): #clusters per group too big: 151011328 [ 276.724841][T22976] loop3: detected capacity change from 0 to 128 [ 276.743073][T22976] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 276.751187][T22976] FAT-fs (loop3): Filesystem has been set read-only [ 276.758300][T22976] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 276.844253][T12169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.896340][T12169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.922120][T22990] FAULT_INJECTION: forcing a failure. [ 276.922120][T22990] name failslab, interval 1, probability 0, space 0, times 0 [ 276.934955][T22990] CPU: 1 UID: 0 PID: 22990 Comm: syz.5.4120 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 276.934987][T22990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.935001][T22990] Call Trace: [ 276.935008][T22990] [ 276.935016][T22990] __dump_stack+0x1d/0x30 [ 276.935041][T22990] dump_stack_lvl+0xe8/0x140 [ 276.935065][T22990] dump_stack+0x15/0x1b [ 276.935116][T22990] should_fail_ex+0x265/0x280 [ 276.935145][T22990] ? __tcf_chain_get+0x91/0x280 [ 276.935193][T22990] should_failslab+0x8c/0xb0 [ 276.935220][T22990] __kmalloc_cache_noprof+0x4c/0x320 [ 276.935268][T22990] __tcf_chain_get+0x91/0x280 [ 276.935298][T22990] ? __tcf_block_find+0x11a/0x1a0 [ 276.935322][T22990] tc_new_tfilter+0x5ac/0x10a0 [ 276.935364][T22990] ? avc_has_perm_noaudit+0x1b1/0x200 [ 276.935398][T22990] ? __pfx_tc_new_tfilter+0x10/0x10 [ 276.935415][T22990] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 276.935442][T22990] netlink_rcv_skb+0x120/0x220 [ 276.935548][T22990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.935572][T22990] rtnetlink_rcv+0x1c/0x30 [ 276.935589][T22990] netlink_unicast+0x5a1/0x670 [ 276.935625][T22990] netlink_sendmsg+0x58b/0x6b0 [ 276.935648][T22990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.935697][T22990] __sock_sendmsg+0x145/0x180 [ 276.935719][T22990] ____sys_sendmsg+0x31e/0x4e0 [ 276.935758][T22990] ___sys_sendmsg+0x17b/0x1d0 [ 276.935800][T22990] __x64_sys_sendmsg+0xd4/0x160 [ 276.935835][T22990] x64_sys_call+0x2999/0x2fb0 [ 276.935859][T22990] do_syscall_64+0xd2/0x200 [ 276.935939][T22990] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 276.935969][T22990] ? clear_bhb_loop+0x40/0x90 [ 276.935993][T22990] ? clear_bhb_loop+0x40/0x90 [ 276.936018][T22990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.936043][T22990] RIP: 0033:0x7f1d521de929 [ 276.936061][T22990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.936082][T22990] RSP: 002b:00007f1d50847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.936103][T22990] RAX: ffffffffffffffda RBX: 00007f1d52405fa0 RCX: 00007f1d521de929 [ 276.936117][T22990] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000006 [ 276.936132][T22990] RBP: 00007f1d50847090 R08: 0000000000000000 R09: 0000000000000000 [ 276.936145][T22990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.936187][T22990] R13: 0000000000000000 R14: 00007f1d52405fa0 R15: 00007ffd3d3035c8 [ 276.936287][T22990] [ 277.188881][T22994] IPv4: Oversized IP packet from 127.202.26.0 [ 277.203915][T12169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.220272][T22997] loop6: detected capacity change from 0 to 1024 [ 277.233481][T22997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.265341][T12169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.334808][T12169] bridge_slave_1: left allmulticast mode [ 277.339620][T23008] loop5: detected capacity change from 0 to 764 [ 277.340485][T12169] bridge_slave_1: left promiscuous mode [ 277.340607][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.382542][T12169] bridge_slave_0: left allmulticast mode [ 277.388226][T12169] bridge_slave_0: left promiscuous mode [ 277.388371][T23008] loop5: detected capacity change from 0 to 512 [ 277.393952][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.413701][T23008] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 277.437904][T23008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 277.455830][T23008] System zones: 1-12 [ 277.462365][T23008] EXT4-fs (loop5): 1 truncate cleaned up [ 277.468493][T23008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.545153][T12169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.555032][T12169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.566002][T12169] bond0 (unregistering): Released all slaves [ 277.646341][T22991] chnl_net:caif_netlink_parms(): no params data found [ 277.661281][T12169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.668712][T12169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.685896][T12169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.690338][T23007] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 277.693351][T12169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.708462][T23007] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 277.727632][T23007] EXT4-fs (loop6): This should not happen!! Data will be lost [ 277.727632][T23007] [ 277.737352][T23007] EXT4-fs (loop6): Total free blocks count 0 [ 277.743378][T23007] EXT4-fs (loop6): Free/Dirty block details [ 277.749346][T23007] EXT4-fs (loop6): free_blocks=68451041280 [ 277.755174][T23007] EXT4-fs (loop6): dirty_blocks=16432 [ 277.760575][T23007] EXT4-fs (loop6): Block reservation details [ 277.766636][T23007] EXT4-fs (loop6): i_reserved_data_blocks=1027 [ 277.775893][T12169] veth1_macvtap: left promiscuous mode [ 277.784135][T12169] veth0_macvtap: left promiscuous mode [ 277.799248][ T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 277.848934][T12169] team0 (unregistering): Port device team_slave_1 removed [ 277.866874][T12169] team0 (unregistering): Port device team_slave_0 removed [ 277.939183][T22991] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.946421][T22991] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.954453][T22991] bridge_slave_0: entered allmulticast mode [ 277.960882][T22991] bridge_slave_0: entered promiscuous mode [ 277.967864][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 277.968633][T22991] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.980914][T22991] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.988282][T22991] bridge_slave_1: entered allmulticast mode [ 277.994933][T22991] bridge_slave_1: entered promiscuous mode [ 278.023219][T22991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.038438][T23025] loop1: detected capacity change from 0 to 2048 [ 278.039762][T22991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.056910][T23025] EXT4-fs (loop1): #clusters per group too big: 151011328 [ 278.074310][T22991] team0: Port device team_slave_0 added [ 278.081353][T22991] team0: Port device team_slave_1 added [ 278.100329][T22991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.107398][T22991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.121562][T23025] __nla_validate_parse: 14 callbacks suppressed [ 278.121653][T23025] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4127'. [ 278.133642][T22991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.160540][T22991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.167590][T22991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.193554][T22991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.225619][T22991] hsr_slave_0: entered promiscuous mode [ 278.232043][T22991] hsr_slave_1: entered promiscuous mode [ 278.233335][T23025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4127'. [ 278.237938][T22991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.254170][T22991] Cannot create hsr debugfs directory [ 278.266498][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.282860][T12169] IPVS: stop unused estimator thread 0... [ 278.292866][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4127'. [ 278.344148][T23041] FAULT_INJECTION: forcing a failure. [ 278.344148][T23041] name failslab, interval 1, probability 0, space 0, times 0 [ 278.356937][T23041] CPU: 1 UID: 0 PID: 23041 Comm: syz.1.4131 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 278.356963][T23041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.356991][T23041] Call Trace: [ 278.356998][T23041] [ 278.357007][T23041] __dump_stack+0x1d/0x30 [ 278.357037][T23041] dump_stack_lvl+0xe8/0x140 [ 278.357076][T23041] dump_stack+0x15/0x1b [ 278.357091][T23041] should_fail_ex+0x265/0x280 [ 278.357278][T23041] should_failslab+0x8c/0xb0 [ 278.357300][T23041] kmem_cache_alloc_node_noprof+0x57/0x320 [ 278.357326][T23041] ? __alloc_skb+0x101/0x320 [ 278.357434][T23041] __alloc_skb+0x101/0x320 [ 278.357523][T23041] netlink_alloc_large_skb+0xba/0xf0 [ 278.357559][T23041] netlink_sendmsg+0x3cf/0x6b0 [ 278.357580][T23041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.357620][T23041] __sock_sendmsg+0x145/0x180 [ 278.357647][T23041] ____sys_sendmsg+0x31e/0x4e0 [ 278.357749][T23041] ___sys_sendmsg+0x17b/0x1d0 [ 278.357801][T23041] __x64_sys_sendmsg+0xd4/0x160 [ 278.357837][T23041] x64_sys_call+0x2999/0x2fb0 [ 278.357857][T23041] do_syscall_64+0xd2/0x200 [ 278.357924][T23041] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 278.358017][T23041] ? clear_bhb_loop+0x40/0x90 [ 278.358036][T23041] ? clear_bhb_loop+0x40/0x90 [ 278.358058][T23041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.358155][T23041] RIP: 0033:0x7f357f8ee929 [ 278.358182][T23041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.358203][T23041] RSP: 002b:00007f357df57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.358223][T23041] RAX: ffffffffffffffda RBX: 00007f357fb15fa0 RCX: 00007f357f8ee929 [ 278.358237][T23041] RDX: 0000000020008000 RSI: 0000200000000180 RDI: 0000000000000006 [ 278.358251][T23041] RBP: 00007f357df57090 R08: 0000000000000000 R09: 0000000000000000 [ 278.358338][T23041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.358348][T23041] R13: 0000000000000000 R14: 00007f357fb15fa0 R15: 00007ffd692bc158 [ 278.358368][T23041] [ 278.369038][T22991] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 278.566204][T23039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.584450][T23039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.585242][T22991] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 278.601118][T22991] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 278.612074][T22991] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 278.614702][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 278.652130][T22991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.663638][T22991] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.677960][T23053] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 278.681072][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.693766][ T7303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.704515][T12141] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.711629][T12141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.746135][T23056] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 278.781365][T22991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.854450][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 278.907194][T22991] veth0_vlan: entered promiscuous mode [ 278.915393][T22991] veth1_vlan: entered promiscuous mode [ 278.933730][T22991] veth0_macvtap: entered promiscuous mode [ 278.941468][T22991] veth1_macvtap: entered promiscuous mode [ 278.955813][T22991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.970365][T22991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.979884][T22991] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.988762][T22991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.997586][T22991] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.006359][T22991] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.123145][T23103] loop7: detected capacity change from 0 to 512 [ 279.130895][T23103] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 279.144010][T23108] IPv4: Oversized IP packet from 127.202.26.0 [ 279.145771][T23103] EXT4-fs (loop7): 1 truncate cleaned up [ 279.157403][T23103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.180983][T23103] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.227043][T23121] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 279.241303][T23123] loop7: detected capacity change from 0 to 256 [ 280.118093][ T29] kauditd_printk_skb: 776 callbacks suppressed [ 280.118109][ T29] audit: type=1326 audit(1751614646.043:35688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f8ee929 code=0x7ffc0000 [ 280.119352][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.148054][ T29] audit: type=1326 audit(1751614646.043:35689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f8ee929 code=0x7ffc0000 [ 280.160615][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.179843][ T29] audit: type=1326 audit(1751614646.043:35690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f357f8ed290 code=0x7ffc0000 [ 280.211256][ T29] audit: type=1326 audit(1751614646.043:35691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f357f8ee52b code=0x7ffc0000 [ 280.234803][ T29] audit: type=1326 audit(1751614646.043:35692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f357f8ee52b code=0x7ffc0000 [ 280.258616][ T29] audit: type=1326 audit(1751614646.133:35693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f8ee929 code=0x7ffc0000 [ 280.282226][ T29] audit: type=1326 audit(1751614646.133:35694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357f8ee929 code=0x7ffc0000 [ 280.352044][T23256] FAULT_INJECTION: forcing a failure. [ 280.352044][T23256] name failslab, interval 1, probability 0, space 0, times 0 [ 280.364736][T23256] CPU: 1 UID: 0 PID: 23256 Comm: syz.7.4157 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 280.364769][T23256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.364826][T23256] Call Trace: [ 280.364832][T23256] [ 280.364839][T23256] __dump_stack+0x1d/0x30 [ 280.364860][T23256] dump_stack_lvl+0xe8/0x140 [ 280.364934][T23256] dump_stack+0x15/0x1b [ 280.364949][T23256] should_fail_ex+0x265/0x280 [ 280.364978][T23256] should_failslab+0x8c/0xb0 [ 280.365000][T23256] kmem_cache_alloc_noprof+0x50/0x310 [ 280.365093][T23256] ? security_inode_alloc+0x37/0x100 [ 280.365122][T23256] security_inode_alloc+0x37/0x100 [ 280.365149][T23256] inode_init_always_gfp+0x4b7/0x500 [ 280.365181][T23256] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 280.365275][T23256] alloc_inode+0x58/0x170 [ 280.365304][T23256] new_inode+0x1d/0xe0 [ 280.365406][T23256] shmem_get_inode+0x244/0x750 [ 280.365428][T23256] __shmem_file_setup+0x113/0x210 [ 280.365546][T23256] shmem_file_setup+0x3b/0x50 [ 280.365578][T23256] __se_sys_memfd_create+0x2c3/0x590 [ 280.365609][T23256] __x64_sys_memfd_create+0x31/0x40 [ 280.365638][T23256] x64_sys_call+0x122f/0x2fb0 [ 280.365710][T23256] do_syscall_64+0xd2/0x200 [ 280.365797][T23256] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.365823][T23256] ? clear_bhb_loop+0x40/0x90 [ 280.365843][T23256] ? clear_bhb_loop+0x40/0x90 [ 280.365886][T23256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.365906][T23256] RIP: 0033:0x7fe5216ce929 [ 280.365919][T23256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.365936][T23256] RSP: 002b:00007fe51fd36e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 280.365952][T23256] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007fe5216ce929 [ 280.365964][T23256] RDX: 00007fe51fd36ef0 RSI: 0000000000000000 RDI: 00007fe5217514cc [ 280.366004][T23256] RBP: 0000200000000940 R08: 00007fe51fd36bb7 R09: 00007fe51fd36e40 [ 280.366015][T23256] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 280.366026][T23256] R13: 00007fe51fd36ef0 R14: 00007fe51fd36eb0 R15: 0000200000000200 [ 280.366044][T23256] [ 280.410014][T23258] loop9: detected capacity change from 0 to 7 [ 280.538056][ T29] audit: type=1326 audit(1751614646.473:35695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23223 comm="syz.0.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 280.545460][T23258] Buffer I/O error on dev loop9, logical block 0, async page read [ 280.552482][ T29] audit: type=1326 audit(1751614646.473:35696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23223 comm="syz.0.4151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 280.560501][T23258] Buffer I/O error on dev loop9, logical block 0, async page read [ 280.656377][T23258] loop9: unable to read partition table [ 280.656813][T23258] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 280.656813][T23258] ) failed (rc=-5) [ 280.708266][T23265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4160'. [ 280.710864][ T29] audit: type=1326 audit(1751614646.633:35697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23266 comm="syz.6.4162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16930ae929 code=0x0 [ 280.758253][T23265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4160'. [ 280.786433][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 280.858231][T23287] loop7: detected capacity change from 0 to 2048 [ 280.865804][T23287] EXT4-fs (loop7): #clusters per group too big: 151011328 [ 280.895822][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 280.903497][T23287] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4170'. [ 280.920274][T23291] loop1: detected capacity change from 0 to 512 [ 280.927730][T23291] EXT4-fs: Mount option(s) incompatible with ext3 [ 280.943081][T23293] FAULT_INJECTION: forcing a failure. [ 280.943081][T23293] name failslab, interval 1, probability 0, space 0, times 0 [ 280.955756][T23293] CPU: 1 UID: 0 PID: 23293 Comm: syz.5.4173 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 280.955788][T23293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.955842][T23293] Call Trace: [ 280.955850][T23293] [ 280.955859][T23293] __dump_stack+0x1d/0x30 [ 280.955885][T23293] dump_stack_lvl+0xe8/0x140 [ 280.955908][T23293] dump_stack+0x15/0x1b [ 280.955933][T23291] loop1: detected capacity change from 0 to 128 [ 280.955985][T23293] should_fail_ex+0x265/0x280 [ 280.956041][T23293] should_failslab+0x8c/0xb0 [ 280.956072][T23293] __kmalloc_cache_node_noprof+0x54/0x320 [ 280.956109][T23293] ? page_pool_create_percpu+0x4d/0x630 [ 280.956151][T23293] page_pool_create_percpu+0x4d/0x630 [ 280.956182][T23293] ? bpf_test_run_xdp_live+0x114/0xfe0 [ 280.956226][T23293] page_pool_create+0x1a/0x30 [ 280.956289][T23293] bpf_test_run_xdp_live+0x12e/0xfe0 [ 280.956346][T23293] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 280.956380][T23293] ? __pfx_autoremove_wake_function+0x10/0x10 [ 280.956423][T23293] ? 0xffffffffa0208840 [ 280.956443][T23293] ? synchronize_rcu+0x45/0x320 [ 280.956650][T23293] ? 0xffffffffa0208840 [ 280.956666][T23293] ? 0xffffffffa0208840 [ 280.956682][T23293] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 280.956720][T23293] ? 0xffffffffa02019c8 [ 280.956749][T23293] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 280.956787][T23293] bpf_prog_test_run_xdp+0x4f5/0x910 [ 280.956840][T23293] ? __rcu_read_unlock+0x4f/0x70 [ 280.956866][T23293] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 280.956943][T23293] bpf_prog_test_run+0x22a/0x390 [ 280.956970][T23293] __sys_bpf+0x3dc/0x790 [ 280.957016][T23293] __x64_sys_bpf+0x41/0x50 [ 280.957067][T23293] x64_sys_call+0x2478/0x2fb0 [ 280.957149][T23293] do_syscall_64+0xd2/0x200 [ 280.957173][T23293] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.957210][T23293] ? clear_bhb_loop+0x40/0x90 [ 280.957238][T23293] ? clear_bhb_loop+0x40/0x90 [ 280.957267][T23293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.957343][T23293] RIP: 0033:0x7f1d521de929 [ 280.957362][T23293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.957416][T23293] RSP: 002b:00007f1d50847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.957441][T23293] RAX: ffffffffffffffda RBX: 00007f1d52405fa0 RCX: 00007f1d521de929 [ 280.957460][T23293] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 280.957476][T23293] RBP: 00007f1d50847090 R08: 0000000000000000 R09: 0000000000000000 [ 280.957494][T23293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.957511][T23293] R13: 0000000000000000 R14: 00007f1d52405fa0 R15: 00007ffd3d3035c8 [ 280.957536][T23293] [ 280.980545][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4170'. [ 281.034028][T23291] loop1: detected capacity change from 0 to 8192 [ 281.243316][T23291] vfat: Unknown parameter 'xo#W' [ 281.768154][T23318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.776702][T23318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.347221][T23345] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 282.380789][T23349] loop6: detected capacity change from 0 to 1024 [ 282.393750][T23349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.409451][T23349] EXT4-fs (loop6): shut down requested (0) [ 282.433537][T13795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.457108][T23356] loop6: detected capacity change from 0 to 2048 [ 282.464295][T23356] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 282.614948][T23365] serio: Serial port ptm0 [ 282.777377][T23374] x_tables: duplicate underflow at hook 2 [ 282.799480][T23376] IPVS: Error connecting to the multicast addr [ 283.044288][T23379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.052859][T23379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.149186][T23383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.157828][T23383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.477038][T23385] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 283.502588][T23387] __nla_validate_parse: 11 callbacks suppressed [ 283.502602][T23387] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 283.519374][T23388] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 283.539282][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4208'. [ 283.569045][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4208'. [ 283.637603][T23404] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 283.647680][T23405] loop7: detected capacity change from 0 to 2048 [ 283.649379][T23404] bridge0: port 3(batadv1) entered blocking state [ 283.660533][T23404] bridge0: port 3(batadv1) entered disabled state [ 283.660741][T23405] EXT4-fs (loop7): #clusters per group too big: 151011328 [ 283.667150][T23404] batadv1: entered allmulticast mode [ 283.682145][T23404] batadv1: entered promiscuous mode [ 283.736416][T23408] loop5: detected capacity change from 0 to 1024 [ 283.754005][T23408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.776589][T23405] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4214'. [ 283.824471][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'. [ 283.857661][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4214'. [ 283.877569][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'. [ 283.888279][T23405] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4214'. [ 283.983289][T23436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4226'. [ 284.075107][T23421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.088080][T23421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.132146][T23458] IPv4: Oversized IP packet from 127.202.26.0 [ 284.153475][T12169] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 284.162783][T12169] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 284.239162][T23426] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 284.254312][T23426] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 284.266627][T23426] EXT4-fs (loop5): This should not happen!! Data will be lost [ 284.266627][T23426] [ 284.276321][T23426] EXT4-fs (loop5): Total free blocks count 0 [ 284.282392][T23426] EXT4-fs (loop5): Free/Dirty block details [ 284.288295][T23426] EXT4-fs (loop5): free_blocks=68451041280 [ 284.294194][T23426] EXT4-fs (loop5): dirty_blocks=16432 [ 284.299592][T23426] EXT4-fs (loop5): Block reservation details [ 284.305672][T23426] EXT4-fs (loop5): i_reserved_data_blocks=1027 [ 284.331423][T12169] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 284.462666][T23503] FAULT_INJECTION: forcing a failure. [ 284.462666][T23503] name failslab, interval 1, probability 0, space 0, times 0 [ 284.475415][T23503] CPU: 1 UID: 0 PID: 23503 Comm: syz.5.4230 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 284.475449][T23503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.475463][T23503] Call Trace: [ 284.475470][T23503] [ 284.475479][T23503] __dump_stack+0x1d/0x30 [ 284.475503][T23503] dump_stack_lvl+0xe8/0x140 [ 284.475526][T23503] dump_stack+0x15/0x1b [ 284.475595][T23503] should_fail_ex+0x265/0x280 [ 284.475632][T23503] should_failslab+0x8c/0xb0 [ 284.475660][T23503] kmem_cache_alloc_node_noprof+0x57/0x320 [ 284.475688][T23503] ? __alloc_skb+0x101/0x320 [ 284.475739][T23503] __alloc_skb+0x101/0x320 [ 284.475770][T23503] ? audit_log_start+0x365/0x6c0 [ 284.475807][T23503] audit_log_start+0x380/0x6c0 [ 284.475889][T23503] ? vfs_writev+0x73c/0x8b0 [ 284.475987][T23503] audit_seccomp+0x48/0x100 [ 284.476018][T23503] ? __seccomp_filter+0x68c/0x10d0 [ 284.476046][T23503] __seccomp_filter+0x69d/0x10d0 [ 284.476081][T23503] __secure_computing+0x82/0x150 [ 284.476105][T23503] syscall_trace_enter+0xcf/0x1e0 [ 284.476171][T23503] do_syscall_64+0xac/0x200 [ 284.476272][T23503] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 284.476303][T23503] ? clear_bhb_loop+0x40/0x90 [ 284.476326][T23503] ? clear_bhb_loop+0x40/0x90 [ 284.476355][T23503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.476377][T23503] RIP: 0033:0x7f1d521dd33c [ 284.476453][T23503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.476475][T23503] RSP: 002b:00007f1d50847030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.476497][T23503] RAX: ffffffffffffffda RBX: 00007f1d52405fa0 RCX: 00007f1d521dd33c [ 284.476511][T23503] RDX: 000000000000000f RSI: 00007f1d508470a0 RDI: 0000000000000007 [ 284.476525][T23503] RBP: 00007f1d50847090 R08: 0000000000000000 R09: 0000000000000000 [ 284.476572][T23503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.476586][T23503] R13: 0000000000000000 R14: 00007f1d52405fa0 R15: 00007ffd3d3035c8 [ 284.476609][T23503] [ 284.752986][T23527] loop1: detected capacity change from 0 to 1024 [ 284.760432][T23527] EXT4-fs: Invalid want_extra_isize 0 [ 284.832505][T23538] loop6: detected capacity change from 0 to 2048 [ 284.847326][T23538] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 284.976652][T23563] loop1: detected capacity change from 0 to 1024 [ 284.995213][T23563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.349801][T23611] loop5: detected capacity change from 0 to 256 [ 285.389901][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 285.389919][ T29] audit: type=1400 audit(1751614651.313:36473): avc: denied { read } for pid=23614 comm="syz.0.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 285.416567][T23615] FAULT_INJECTION: forcing a failure. [ 285.416567][T23615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.429708][T23615] CPU: 0 UID: 0 PID: 23615 Comm: syz.0.4245 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 285.429769][T23615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.429780][T23615] Call Trace: [ 285.429786][T23615] [ 285.429792][T23615] __dump_stack+0x1d/0x30 [ 285.429832][T23615] dump_stack_lvl+0xe8/0x140 [ 285.429854][T23615] dump_stack+0x15/0x1b [ 285.429871][T23615] should_fail_ex+0x265/0x280 [ 285.429975][T23615] should_fail+0xb/0x20 [ 285.430036][T23615] should_fail_usercopy+0x1a/0x20 [ 285.430072][T23615] _copy_to_user+0x20/0xa0 [ 285.430095][T23615] simple_read_from_buffer+0xb5/0x130 [ 285.430130][T23615] proc_fail_nth_read+0x100/0x140 [ 285.430239][T23615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.430279][T23615] vfs_read+0x1a0/0x6f0 [ 285.430320][T23615] ? __rcu_read_unlock+0x4f/0x70 [ 285.430391][T23615] ? __fget_files+0x184/0x1c0 [ 285.430412][T23615] ksys_read+0xda/0x1a0 [ 285.430447][T23615] __x64_sys_read+0x40/0x50 [ 285.430484][T23615] x64_sys_call+0x2d77/0x2fb0 [ 285.430529][T23615] do_syscall_64+0xd2/0x200 [ 285.430561][T23615] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 285.430583][T23615] ? clear_bhb_loop+0x40/0x90 [ 285.430663][T23615] ? clear_bhb_loop+0x40/0x90 [ 285.430702][T23615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.430723][T23615] RIP: 0033:0x7f22ac66d33c [ 285.430735][T23615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 285.430772][T23615] RSP: 002b:00007f22aacd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.430819][T23615] RAX: ffffffffffffffda RBX: 00007f22ac895fa0 RCX: 00007f22ac66d33c [ 285.430832][T23615] RDX: 000000000000000f RSI: 00007f22aacd70a0 RDI: 0000000000000007 [ 285.430845][T23615] RBP: 00007f22aacd7090 R08: 0000000000000000 R09: 0000000000000000 [ 285.430923][T23615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.430934][T23615] R13: 0000000000000000 R14: 00007f22ac895fa0 R15: 00007ffff14df548 [ 285.430949][T23615] [ 285.453476][T23578] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 285.637872][T23578] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 285.664201][T23578] EXT4-fs (loop1): This should not happen!! Data will be lost [ 285.664201][T23578] [ 285.664221][T23578] EXT4-fs (loop1): Total free blocks count 0 [ 285.680057][T23578] EXT4-fs (loop1): Free/Dirty block details [ 285.686003][T23578] EXT4-fs (loop1): free_blocks=68451041280 [ 285.691989][T23578] EXT4-fs (loop1): dirty_blocks=16432 [ 285.697465][T23578] EXT4-fs (loop1): Block reservation details [ 285.703500][T23578] EXT4-fs (loop1): i_reserved_data_blocks=1027 [ 285.734337][T12169] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 285.901563][T23641] loop7: detected capacity change from 0 to 256 [ 285.945965][T23643] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 285.970580][T23647] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 285.980641][ T29] audit: type=1400 audit(1751614651.913:36474): avc: denied { relabelto } for pid=23646 comm="syz.6.4260" name="407" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 286.007202][ T29] audit: type=1400 audit(1751614651.913:36475): avc: denied { associate } for pid=23646 comm="syz.6.4260" name="407" dev="tmpfs" ino=2195 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 286.057032][T23655] loop1: detected capacity change from 0 to 1024 [ 286.085118][T23655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.099666][ T29] audit: type=1400 audit(1751614652.033:36476): avc: denied { create } for pid=23646 comm="syz.6.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 286.119840][T23660] loop6: detected capacity change from 0 to 128 [ 286.129258][ T29] audit: type=1400 audit(1751614652.033:36477): avc: denied { read } for pid=23646 comm="syz.6.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 286.148788][ T29] audit: type=1400 audit(1751614652.053:36478): avc: denied { add_name } for pid=23646 comm="syz.6.4260" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 286.173578][ T29] audit: type=1400 audit(1751614652.053:36479): avc: denied { associate } for pid=23646 comm="syz.6.4260" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 286.195231][ T29] audit: type=1400 audit(1751614652.053:36480): avc: denied { mounton } for pid=23646 comm="syz.6.4260" path="/407/file0" dev="tmpfs" ino=2200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 286.238871][T23647] syz.6.4260: attempt to access beyond end of device [ 286.238871][T23647] loop6: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 286.266176][ T29] audit: type=1326 audit(1751614652.193:36481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23646 comm="syz.6.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16930ae929 code=0x7ffc0000 [ 286.273402][T23647] syz.6.4260: attempt to access beyond end of device [ 286.273402][T23647] loop6: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 286.289838][ T29] audit: type=1326 audit(1751614652.193:36482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23646 comm="syz.6.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16930ae929 code=0x7ffc0000 [ 286.310315][T23647] syz.6.4260: attempt to access beyond end of device [ 286.310315][T23647] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 286.340548][T23647] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 286.352100][T23647] syz.6.4260: attempt to access beyond end of device [ 286.352100][T23647] loop6: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 286.365614][T23647] Buffer I/O error on dev loop6, logical block 129, lost async page write [ 286.376407][T23647] syz.6.4260: attempt to access beyond end of device [ 286.376407][T23647] loop6: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 286.389902][T23647] Buffer I/O error on dev loop6, logical block 130, lost async page write [ 286.400196][T23647] syz.6.4260: attempt to access beyond end of device [ 286.400196][T23647] loop6: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 286.413778][T23647] Buffer I/O error on dev loop6, logical block 131, lost async page write [ 286.422943][T23647] syz.6.4260: attempt to access beyond end of device [ 286.422943][T23647] loop6: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 286.436444][T23647] Buffer I/O error on dev loop6, logical block 140, lost async page write [ 286.445393][T23647] syz.6.4260: attempt to access beyond end of device [ 286.445393][T23647] loop6: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 286.458923][T23647] Buffer I/O error on dev loop6, logical block 141, lost async page write [ 286.467615][T23647] syz.6.4260: attempt to access beyond end of device [ 286.467615][T23647] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 286.481026][T23647] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 286.490092][T23647] syz.6.4260: attempt to access beyond end of device [ 286.490092][T23647] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 286.500066][T23670] netlink: 'syz.0.4267': attribute type 6 has an invalid length. [ 286.503606][T23647] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 286.520137][T23647] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 286.528817][T23647] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 286.713322][T23662] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 286.728272][T23662] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 286.740557][T23662] EXT4-fs (loop1): This should not happen!! Data will be lost [ 286.740557][T23662] [ 286.750250][T23662] EXT4-fs (loop1): Total free blocks count 0 [ 286.756260][T23662] EXT4-fs (loop1): Free/Dirty block details [ 286.762205][T23662] EXT4-fs (loop1): free_blocks=68451041280 [ 286.762221][T23662] EXT4-fs (loop1): dirty_blocks=16432 [ 286.762233][T23662] EXT4-fs (loop1): Block reservation details [ 286.762243][T23662] EXT4-fs (loop1): i_reserved_data_blocks=1027 [ 286.792743][T12141] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 286.887141][T23675] loop1: detected capacity change from 0 to 256 [ 287.318397][T23684] loop5: detected capacity change from 0 to 512 [ 287.326798][T23684] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 287.336175][T23684] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4273: invalid indirect mapped block 2683928664 (level 1) [ 287.351161][T23684] EXT4-fs (loop5): Remounting filesystem read-only [ 287.358509][T23684] EXT4-fs (loop5): 1 truncate cleaned up [ 287.364834][T23684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.388759][T19876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.497137][T23700] netlink: 'syz.6.4280': attribute type 1 has an invalid length. [ 287.539021][T23707] ALSA: seq fatal error: cannot create timer (-16) [ 287.541878][T23700] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 287.555361][T23700] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 287.570330][T23700] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 287.580519][T23700] bond1 (unregistering): Released all slaves [ 287.651191][T23713] FAULT_INJECTION: forcing a failure. [ 287.651191][T23713] name failslab, interval 1, probability 0, space 0, times 0 [ 287.663896][T23713] CPU: 1 UID: 0 PID: 23713 Comm: syz.6.4285 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 287.663918][T23713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.663928][T23713] Call Trace: [ 287.663933][T23713] [ 287.663939][T23713] __dump_stack+0x1d/0x30 [ 287.663955][T23713] dump_stack_lvl+0xe8/0x140 [ 287.664066][T23713] dump_stack+0x15/0x1b [ 287.664079][T23713] should_fail_ex+0x265/0x280 [ 287.664103][T23713] should_failslab+0x8c/0xb0 [ 287.664196][T23713] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 287.664225][T23713] ? sidtab_sid2str_get+0xa0/0x130 [ 287.664332][T23713] kmemdup_noprof+0x2b/0x70 [ 287.664351][T23713] sidtab_sid2str_get+0xa0/0x130 [ 287.664370][T23713] security_sid_to_context_core+0x1eb/0x2e0 [ 287.664390][T23713] security_sid_to_context+0x27/0x40 [ 287.664407][T23713] selinux_lsmprop_to_secctx+0x67/0xf0 [ 287.664431][T23713] security_lsmprop_to_secctx+0x43/0x80 [ 287.664456][T23713] audit_log_task_context+0x77/0x190 [ 287.664484][T23713] audit_log_task+0xf4/0x250 [ 287.664593][T23713] audit_seccomp+0x61/0x100 [ 287.664614][T23713] ? __seccomp_filter+0x68c/0x10d0 [ 287.664681][T23713] __seccomp_filter+0x69d/0x10d0 [ 287.664701][T23713] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 287.664728][T23713] ? vfs_write+0x75e/0x8e0 [ 287.664753][T23713] ? __rcu_read_unlock+0x4f/0x70 [ 287.664904][T23713] ? __fget_files+0x184/0x1c0 [ 287.664922][T23713] __secure_computing+0x82/0x150 [ 287.664975][T23713] syscall_trace_enter+0xcf/0x1e0 [ 287.664994][T23713] do_syscall_64+0xac/0x200 [ 287.665008][T23713] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 287.665069][T23713] ? clear_bhb_loop+0x40/0x90 [ 287.665084][T23713] ? clear_bhb_loop+0x40/0x90 [ 287.665101][T23713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.665119][T23713] RIP: 0033:0x7f16930ae929 [ 287.665131][T23713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.665224][T23713] RSP: 002b:00007f1691717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 287.665243][T23713] RAX: ffffffffffffffda RBX: 00007f16932d5fa0 RCX: 00007f16930ae929 [ 287.665253][T23713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.665262][T23713] RBP: 00007f1691717090 R08: 0000000000000000 R09: 0000000000000000 [ 287.665272][T23713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.665344][T23713] R13: 0000000000000000 R14: 00007f16932d5fa0 R15: 00007ffee1ccbe78 [ 287.665359][T23713] [ 288.126295][T23728] loop1: detected capacity change from 0 to 1024 [ 288.143868][T23728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.183470][T23728] vhci_hcd: invalid port number 96 [ 288.188629][T23728] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 288.196160][T23728] FAULT_INJECTION: forcing a failure. [ 288.196160][T23728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.209272][T23728] CPU: 0 UID: 0 PID: 23728 Comm: syz.1.4291 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 288.209298][T23728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.209310][T23728] Call Trace: [ 288.209318][T23728] [ 288.209327][T23728] __dump_stack+0x1d/0x30 [ 288.209351][T23728] dump_stack_lvl+0xe8/0x140 [ 288.209508][T23728] dump_stack+0x15/0x1b [ 288.209521][T23728] should_fail_ex+0x265/0x280 [ 288.209547][T23728] should_fail+0xb/0x20 [ 288.209569][T23728] should_fail_usercopy+0x1a/0x20 [ 288.209670][T23728] strncpy_from_user+0x25/0x230 [ 288.209690][T23728] ? kmem_cache_alloc_noprof+0x186/0x310 [ 288.209711][T23728] ? getname_flags+0x80/0x3b0 [ 288.209730][T23728] getname_flags+0xae/0x3b0 [ 288.209781][T23728] user_path_at+0x28/0x130 [ 288.209829][T23728] do_fchmodat+0x9c/0x180 [ 288.209877][T23728] __x64_sys_chmod+0x38/0x50 [ 288.209896][T23728] x64_sys_call+0x1529/0x2fb0 [ 288.209914][T23728] do_syscall_64+0xd2/0x200 [ 288.209929][T23728] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 288.209996][T23728] ? clear_bhb_loop+0x40/0x90 [ 288.210032][T23728] ? clear_bhb_loop+0x40/0x90 [ 288.210052][T23728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.210069][T23728] RIP: 0033:0x7f357f8ee929 [ 288.210081][T23728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.210103][T23728] RSP: 002b:00007f357df36038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 288.210176][T23728] RAX: ffffffffffffffda RBX: 00007f357fb16080 RCX: 00007f357f8ee929 [ 288.210191][T23728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 288.210202][T23728] RBP: 00007f357df36090 R08: 0000000000000000 R09: 0000000000000000 [ 288.210212][T23728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.210222][T23728] R13: 0000000000000000 R14: 00007f357fb16080 R15: 00007ffd692bc158 [ 288.210238][T23728] [ 288.468836][T23737] batadv1: left allmulticast mode [ 288.473926][T23737] batadv1: left promiscuous mode [ 288.478958][T23737] bridge0: port 3(batadv1) entered disabled state [ 288.485965][T23737] bridge_slave_1: left allmulticast mode [ 288.491714][T23737] bridge_slave_1: left promiscuous mode [ 288.497396][T23737] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.505392][T23737] bridge_slave_0: left allmulticast mode [ 288.511059][T23737] bridge_slave_0: left promiscuous mode [ 288.516718][T23737] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.779636][T23753] loop6: detected capacity change from 0 to 128 [ 288.869874][T17919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.897774][T23762] loop1: detected capacity change from 0 to 2048 [ 288.904926][T23762] EXT4-fs (loop1): #clusters per group too big: 151011328 [ 288.966134][T23762] __nla_validate_parse: 20 callbacks suppressed [ 288.966148][T23762] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4302'. [ 288.999822][T23762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4302'. [ 289.041347][T23762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4302'. [ 289.065030][T23772] loop1: detected capacity change from 0 to 256 [ 289.073350][T23770] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4304'. [ 289.082535][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4304'. [ 289.094477][T23770] loop7: detected capacity change from 0 to 512 [ 289.102447][T23770] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 289.164001][T23781] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 289.194082][T23787] ALSA: seq fatal error: cannot create timer (-16) [ 289.221144][T23793] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 289.257220][T23795] loop7: detected capacity change from 0 to 128 [ 289.297796][T23800] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 289.326877][T23802] loop7: detected capacity change from 0 to 256 [ 289.590695][T23820] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 289.608610][T23822] ALSA: seq fatal error: cannot create timer (-16) [ 289.657566][T23828] loop6: detected capacity change from 0 to 256 [ 289.704262][T23832] loop7: detected capacity change from 0 to 512 [ 289.711393][T23832] EXT4-fs: Mount option(s) incompatible with ext3 [ 289.727270][T23832] loop7: detected capacity change from 0 to 128 [ 289.773073][T23832] loop7: detected capacity change from 0 to 8192 [ 289.780235][T23832] vfat: Unknown parameter 'xo#W' [ 289.803189][T23839] loop6: detected capacity change from 0 to 2048 [ 289.810440][T23839] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 289.843090][T23824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.851561][T23824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.868964][T23839] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4335'. [ 289.894434][T23839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4335'. [ 289.904691][T23839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4335'. [ 289.978889][T23852] IPVS: Error connecting to the multicast addr [ 290.001461][T23854] ALSA: seq fatal error: cannot create timer (-16) [ 290.029296][T23856] loop6: detected capacity change from 0 to 2048 [ 290.036447][T23856] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 290.133406][T23862] loop6: detected capacity change from 0 to 256 [ 290.416122][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 290.416139][ T29] audit: type=1400 audit(1751614656.343:36964): avc: denied { setopt } for pid=23870 comm="syz.0.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.442521][ T29] audit: type=1400 audit(1751614656.343:36965): avc: denied { ioctl } for pid=23870 comm="syz.0.4346" path="socket:[54121]" dev="sockfs" ino=54121 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 290.741566][T23874] loop7: detected capacity change from 0 to 512 [ 290.751802][T23874] EXT4-fs: Mount option(s) incompatible with ext3 [ 290.768829][ T29] audit: type=1326 audit(1751614656.693:36966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5216c58e7 code=0x7ffc0000 [ 290.809450][T23874] loop7: detected capacity change from 0 to 128 [ 290.833603][ T29] audit: type=1326 audit(1751614656.723:36967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe52166ab19 code=0x7ffc0000 [ 290.857263][ T29] audit: type=1326 audit(1751614656.723:36968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5216c58e7 code=0x7ffc0000 [ 290.880806][ T29] audit: type=1326 audit(1751614656.723:36969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe52166ab19 code=0x7ffc0000 [ 290.904400][ T29] audit: type=1326 audit(1751614656.723:36970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5216ce929 code=0x7ffc0000 [ 290.928150][ T29] audit: type=1326 audit(1751614656.723:36971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5216ce929 code=0x7ffc0000 [ 290.951941][ T29] audit: type=1326 audit(1751614656.733:36972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5216ce929 code=0x7ffc0000 [ 290.975557][ T29] audit: type=1326 audit(1751614656.733:36973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23873 comm="syz.7.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5216c58e7 code=0x7ffc0000 [ 291.097398][T23882] FAULT_INJECTION: forcing a failure. [ 291.097398][T23882] name failslab, interval 1, probability 0, space 0, times 0 [ 291.110126][T23882] CPU: 0 UID: 0 PID: 23882 Comm: syz.7.4350 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 291.110157][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.110173][T23882] Call Trace: [ 291.110178][T23882] [ 291.110185][T23882] __dump_stack+0x1d/0x30 [ 291.110204][T23882] dump_stack_lvl+0xe8/0x140 [ 291.110227][T23882] dump_stack+0x15/0x1b [ 291.110247][T23882] should_fail_ex+0x265/0x280 [ 291.110347][T23882] should_failslab+0x8c/0xb0 [ 291.110374][T23882] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 291.110405][T23882] ? kstrdup_const+0x3e/0x50 [ 291.110478][T23882] kstrdup+0x3e/0xd0 [ 291.110510][T23882] kstrdup_const+0x3e/0x50 [ 291.110537][T23882] kvasprintf_const+0x98/0x130 [ 291.110581][T23882] kobject_set_name_vargs+0x44/0xe0 [ 291.110606][T23882] dev_set_name+0x83/0xb0 [ 291.110664][T23882] ? hrtimer_setup+0x31/0x100 [ 291.110741][T23882] ? netdev_register_kobject+0x63/0x210 [ 291.110773][T23882] ? swiotlb_dev_init+0x19/0x30 [ 291.110789][T23882] ? device_initialize+0x1fe/0x210 [ 291.110812][T23882] netdev_register_kobject+0x80/0x210 [ 291.110898][T23882] ? register_netdevice+0x916/0xf00 [ 291.110936][T23882] register_netdevice+0x931/0xf00 [ 291.110978][T23882] vti6_tnl_create2+0x85/0x250 [ 291.111008][T23882] vti6_locate+0x3a6/0x440 [ 291.111102][T23882] vti6_siocdevprivate+0x579/0x8e0 [ 291.111143][T23882] dev_ifsioc+0x8f5/0xaa0 [ 291.111179][T23882] dev_ioctl+0x78d/0x960 [ 291.111201][T23882] sock_ioctl+0x593/0x610 [ 291.111222][T23882] ? __pfx_sock_ioctl+0x10/0x10 [ 291.111245][T23882] __se_sys_ioctl+0xce/0x140 [ 291.111278][T23882] __x64_sys_ioctl+0x43/0x50 [ 291.111386][T23882] x64_sys_call+0x19a8/0x2fb0 [ 291.111411][T23882] do_syscall_64+0xd2/0x200 [ 291.111456][T23882] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 291.111480][T23882] ? clear_bhb_loop+0x40/0x90 [ 291.111499][T23882] ? clear_bhb_loop+0x40/0x90 [ 291.111525][T23882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.111548][T23882] RIP: 0033:0x7fe5216ce929 [ 291.111590][T23882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.111607][T23882] RSP: 002b:00007fe51fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.111625][T23882] RAX: ffffffffffffffda RBX: 00007fe5218f5fa0 RCX: 00007fe5216ce929 [ 291.111641][T23882] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 291.111655][T23882] RBP: 00007fe51fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 291.111737][T23882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.111749][T23882] R13: 0000000000000000 R14: 00007fe5218f5fa0 R15: 00007ffc74bed668 [ 291.111773][T23882] [ 291.543628][T23904] loop6: detected capacity change from 0 to 512 [ 291.564879][T23904] EXT4-fs: Mount option(s) incompatible with ext3 [ 291.583270][T23904] loop6: detected capacity change from 0 to 128 [ 291.618717][T23916] loop7: detected capacity change from 0 to 2048 [ 291.628468][T23916] EXT4-fs (loop7): #clusters per group too big: 151011328 [ 291.660732][T23924] IPv4: Oversized IP packet from 127.202.26.0 [ 292.049077][T23999] loop7: detected capacity change from 0 to 2048 [ 292.062859][T23999] EXT4-fs (loop7): #clusters per group too big: 151011328 [ 292.086860][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 292.152287][T24017] loop5: detected capacity change from 0 to 256 [ 292.340060][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.347540][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.354998][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.389774][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.397246][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.404822][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.412237][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.419647][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.427071][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.434498][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.441922][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.449378][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.456840][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.540782][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.548353][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.555787][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.563219][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.570614][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.578038][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.585514][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.592932][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.600388][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.607847][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.615319][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.622778][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.630175][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.637649][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.645139][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 292.654458][T24073] loop5: detected capacity change from 0 to 256 [ 292.663350][T24086] loop6: detected capacity change from 0 to 2048 [ 292.670564][T24086] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 292.705106][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 293.067519][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 293.146351][T24131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.173385][T24131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.670770][T24152] loop6: detected capacity change from 0 to 256 [ 293.750762][T24155] FAULT_INJECTION: forcing a failure. [ 293.750762][T24155] name failslab, interval 1, probability 0, space 0, times 0 [ 293.763471][T24155] CPU: 0 UID: 0 PID: 24155 Comm: syz.0.4408 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 293.763503][T24155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.763517][T24155] Call Trace: [ 293.763576][T24155] [ 293.763586][T24155] __dump_stack+0x1d/0x30 [ 293.763605][T24155] dump_stack_lvl+0xe8/0x140 [ 293.763639][T24155] dump_stack+0x15/0x1b [ 293.763653][T24155] should_fail_ex+0x265/0x280 [ 293.763697][T24155] should_failslab+0x8c/0xb0 [ 293.763767][T24155] kmem_cache_alloc_noprof+0x50/0x310 [ 293.763822][T24155] ? __inet_bhash2_update_saddr+0x12f/0xd40 [ 293.763861][T24155] __inet_bhash2_update_saddr+0x12f/0xd40 [ 293.763940][T24155] ? ip_route_output_flow+0xf1/0x130 [ 293.763963][T24155] inet_bhash2_update_saddr+0x25/0x30 [ 293.763997][T24155] tcp_v4_connect+0x60b/0xac0 [ 293.764037][T24155] __inet_stream_connect+0x166/0x7e0 [ 293.764075][T24155] ? tcp_sendmsg_fastopen+0x172/0x520 [ 293.764104][T24155] ? should_failslab+0x8c/0xb0 [ 293.764127][T24155] ? __kmalloc_cache_noprof+0x189/0x320 [ 293.764156][T24155] tcp_sendmsg_fastopen+0x43a/0x520 [ 293.764189][T24155] tcp_sendmsg_locked+0x27be/0x2cc0 [ 293.764219][T24155] ? mntput_no_expire+0x6f/0x3c0 [ 293.764316][T24155] ? mntput+0x4b/0x80 [ 293.764345][T24155] ? __rcu_read_unlock+0x4f/0x70 [ 293.764371][T24155] ? avc_has_perm_noaudit+0x1b1/0x200 [ 293.764436][T24155] ? avc_has_perm+0xd3/0x150 [ 293.764462][T24155] ? _raw_spin_unlock_bh+0x36/0x40 [ 293.764487][T24155] ? __pfx_tcp_sendmsg+0x10/0x10 [ 293.764590][T24155] tcp_sendmsg+0x2f/0x50 [ 293.764615][T24155] inet_sendmsg+0x76/0xd0 [ 293.764651][T24155] __sock_sendmsg+0x102/0x180 [ 293.764707][T24155] __sys_sendto+0x268/0x330 [ 293.764753][T24155] __x64_sys_sendto+0x76/0x90 [ 293.764781][T24155] x64_sys_call+0x2eb6/0x2fb0 [ 293.764801][T24155] do_syscall_64+0xd2/0x200 [ 293.764861][T24155] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 293.764912][T24155] ? clear_bhb_loop+0x40/0x90 [ 293.764931][T24155] ? clear_bhb_loop+0x40/0x90 [ 293.764975][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.764997][T24155] RIP: 0033:0x7f22ac66e929 [ 293.765010][T24155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.765030][T24155] RSP: 002b:00007f22aacd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 293.765132][T24155] RAX: ffffffffffffffda RBX: 00007f22ac895fa0 RCX: 00007f22ac66e929 [ 293.765147][T24155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 293.765161][T24155] RBP: 00007f22aacd7090 R08: 0000200000000100 R09: 0000000000000010 [ 293.765176][T24155] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 293.765190][T24155] R13: 0000000000000000 R14: 00007f22ac895fa0 R15: 00007ffff14df548 [ 293.765285][T24155] [ 294.087801][T24159] loop1: detected capacity change from 0 to 512 [ 294.104919][T24159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.137442][T24159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.153609][T24159] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.177917][T24159] FAULT_INJECTION: forcing a failure. [ 294.177917][T24159] name failslab, interval 1, probability 0, space 0, times 0 [ 294.190682][T24159] CPU: 0 UID: 0 PID: 24159 Comm: syz.1.4411 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 294.190712][T24159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.190737][T24159] Call Trace: [ 294.190743][T24159] [ 294.190750][T24159] __dump_stack+0x1d/0x30 [ 294.190789][T24159] dump_stack_lvl+0xe8/0x140 [ 294.190812][T24159] dump_stack+0x15/0x1b [ 294.190902][T24159] should_fail_ex+0x265/0x280 [ 294.190939][T24159] should_failslab+0x8c/0xb0 [ 294.190967][T24159] kmem_cache_alloc_noprof+0x50/0x310 [ 294.191039][T24159] ? __es_insert_extent+0x508/0xee0 [ 294.191081][T24159] __es_insert_extent+0x508/0xee0 [ 294.191104][T24159] ext4_es_insert_extent+0x435/0x1c10 [ 294.191122][T24159] ? exc_page_fault+0x62/0xa0 [ 294.191162][T24159] ext4_map_query_blocks+0x2fd/0x480 [ 294.191252][T24159] ext4_map_blocks+0x3a1/0xd70 [ 294.191275][T24159] ? bpf_trace_run2+0x124/0x1c0 [ 294.191312][T24159] ? __traceiter_kfree+0x2b/0x50 [ 294.191335][T24159] ? security_compute_sid+0x11da/0x1290 [ 294.191366][T24159] ext4_getblk+0x114/0x510 [ 294.191443][T24159] ext4_bread_batch+0x5c/0x320 [ 294.191470][T24159] __ext4_find_entry+0x840/0xf40 [ 294.191590][T24159] ? avc_has_perm_noaudit+0x1b1/0x200 [ 294.191637][T24159] ? may_create+0x26e/0x2b0 [ 294.191667][T24159] ext4_lookup+0xbb/0x390 [ 294.191762][T24159] ? __pfx_ext4_lookup+0x10/0x10 [ 294.191791][T24159] path_openat+0xcf3/0x2170 [ 294.191832][T24159] do_filp_open+0x109/0x230 [ 294.191870][T24159] do_sys_openat2+0xa6/0x110 [ 294.191956][T24159] __x64_sys_openat+0xf2/0x120 [ 294.192004][T24159] x64_sys_call+0x1af/0x2fb0 [ 294.192029][T24159] do_syscall_64+0xd2/0x200 [ 294.192050][T24159] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 294.192119][T24159] ? clear_bhb_loop+0x40/0x90 [ 294.192144][T24159] ? clear_bhb_loop+0x40/0x90 [ 294.192170][T24159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.192195][T24159] RIP: 0033:0x7f357f8ee929 [ 294.192275][T24159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.192298][T24159] RSP: 002b:00007f357df57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.192320][T24159] RAX: ffffffffffffffda RBX: 00007f357fb15fa0 RCX: 00007f357f8ee929 [ 294.192334][T24159] RDX: 0000000000002c41 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 294.192400][T24159] RBP: 00007f357df57090 R08: 0000000000000000 R09: 0000000000000000 [ 294.192416][T24159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.192431][T24159] R13: 0000000000000000 R14: 00007f357fb15fa0 R15: 00007ffd692bc158 [ 294.192543][T24159] [ 294.497801][T17919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.615001][T24191] loop6: detected capacity change from 0 to 2048 [ 294.625315][T24191] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 294.639631][T24199] IPv4: Oversized IP packet from 127.202.26.0 [ 294.696169][T24191] __nla_validate_parse: 14 callbacks suppressed [ 294.696187][T24191] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4420'. [ 294.751210][T24191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4420'. [ 294.779799][T24191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4420'. [ 295.568938][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4429'. [ 295.772804][T24335] loop1: detected capacity change from 0 to 512 [ 295.785916][T24335] EXT4-fs: Mount option(s) incompatible with ext3 [ 295.913783][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 295.913800][ T29] audit: type=1400 audit(1751614661.003:37232): avc: denied { map_read map_write } for pid=24226 comm="syz.6.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 295.940124][ T29] audit: type=1400 audit(1751614661.003:37233): avc: denied { create } for pid=24226 comm="syz.6.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.960502][ T29] audit: type=1326 audit(1751614661.023:37234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24211 comm="syz.0.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 295.984196][ T29] audit: type=1326 audit(1751614661.023:37235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24211 comm="syz.0.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ac66e929 code=0x7ffc0000 [ 296.007819][ T29] audit: type=1400 audit(1751614661.063:37236): avc: denied { open } for pid=24264 comm="syz.0.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 296.027405][ T29] audit: type=1400 audit(1751614661.063:37237): avc: denied { kernel } for pid=24264 comm="syz.0.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 296.047066][ T29] audit: type=1400 audit(1751614661.063:37238): avc: denied { write } for pid=24264 comm="syz.0.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 296.066668][ T29] audit: type=1400 audit(1751614661.153:37239): avc: denied { prog_run } for pid=24276 comm="syz.0.4428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 296.085926][ T29] audit: type=1400 audit(1751614661.163:37240): avc: denied { mount } for pid=24276 comm="syz.0.4428" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 296.108352][ T29] audit: type=1400 audit(1751614661.163:37241): avc: denied { name_bind } for pid=24276 comm="syz.0.4428" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 296.141475][T24358] loop7: detected capacity change from 0 to 1024 [ 296.162241][T24356] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 296.194128][T24358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.245951][ T3388] Process accounting resumed [ 296.250822][T24375] loop6: detected capacity change from 0 to 256 [ 296.284360][T22991] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.399179][T24388] loop7: detected capacity change from 0 to 512 [ 296.406173][T24388] EXT4-fs: Mount option(s) incompatible with ext3 [ 296.438233][T24391] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 296.470040][T24393] loop7: detected capacity change from 0 to 256 [ 296.562299][T24401] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 296.625831][T24403] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4453'. [ 296.649713][T24403] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4453'. [ 296.671416][T24403] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4453'. [ 296.796318][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4455'. [ 296.885044][T24420] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 296.915261][T24422] loop7: detected capacity change from 0 to 256 [ 297.186212][T24450] loop6: detected capacity change from 0 to 256 [ 297.209133][T24453] loop1: detected capacity change from 0 to 512 [ 297.216263][T24453] EXT4-fs: Ignoring removed oldalloc option [ 297.224415][T24452] bond1: entered promiscuous mode [ 297.229583][T24453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.230554][T24453] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.238058][T24452] bond1: entered allmulticast mode [ 297.247295][T24453] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4467: Failed to acquire dquot type 1 [ 297.249804][T24452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.271317][T24453] EXT4-fs (loop1): 1 truncate cleaned up [ 297.274614][T24457] loop5: detected capacity change from 0 to 1024 [ 297.283852][T24453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.297797][T24452] bond1 (unregistering): Released all slaves [ 297.370721][T24462] selinux_netlink_send: 1 callbacks suppressed [ 297.370738][T24462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24462 comm=syz.6.4473 [ 297.405069][T17919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.419570][T24462] vlan0: entered allmulticast mode [ 297.424900][T24462] bond1: entered allmulticast mode [ 297.600641][T24474] loop5: detected capacity change from 0 to 2048 [ 297.662837][T24474] Alternate GPT is invalid, using primary GPT. [ 297.669290][T24474] loop5: p1 p2 p3 [ 297.884431][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 297.956665][T24488] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 298.010141][T24494] loop7: detected capacity change from 0 to 256 [ 298.072219][T24501] batman_adv: batadv0: Adding interface: dummy0 [ 298.078514][T24501] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.090918][T24503] IPv4: Oversized IP packet from 127.202.26.0 [ 298.104250][T24501] batman_adv: batadv0: Interface activated: dummy0 [ 298.138618][T24501] batadv0: mtu less than device minimum [ 298.144630][T24501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.155519][T24501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.166269][T24501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.176928][T24501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.187986][T24501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.198882][T24501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.209637][T24501] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.339664][T24523] loop6: detected capacity change from 0 to 512 [ 298.354728][T24523] EXT4-fs: Mount option(s) incompatible with ext3 [ 298.405085][T24533] loop1: detected capacity change from 0 to 512 [ 298.503531][T24533] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.510830][T24533] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.564522][T24543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.566302][T24543] FAULT_INJECTION: forcing a failure. [ 298.566302][T24543] name failslab, interval 1, probability 0, space 0, times 0 [ 298.587183][T24543] CPU: 0 UID: 0 PID: 24543 Comm: syz.6.4494 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 298.587214][T24543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.587229][T24543] Call Trace: [ 298.587236][T24543] [ 298.587244][T24543] __dump_stack+0x1d/0x30 [ 298.587343][T24543] dump_stack_lvl+0xe8/0x140 [ 298.587363][T24543] dump_stack+0x15/0x1b [ 298.587379][T24543] should_fail_ex+0x265/0x280 [ 298.587414][T24543] should_failslab+0x8c/0xb0 [ 298.587438][T24543] kmem_cache_alloc_noprof+0x50/0x310 [ 298.587466][T24543] ? security_inode_alloc+0x37/0x100 [ 298.587538][T24543] security_inode_alloc+0x37/0x100 [ 298.587563][T24543] inode_init_always_gfp+0x4b7/0x500 [ 298.587640][T24543] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 298.587726][T24543] alloc_inode+0x58/0x170 [ 298.587753][T24543] new_inode+0x1d/0xe0 [ 298.587769][T24543] shmem_get_inode+0x244/0x750 [ 298.587796][T24543] __shmem_file_setup+0x113/0x210 [ 298.587901][T24543] shmem_file_setup+0x3b/0x50 [ 298.587932][T24543] __se_sys_memfd_create+0x2c3/0x590 [ 298.587963][T24543] __x64_sys_memfd_create+0x31/0x40 [ 298.588077][T24543] x64_sys_call+0x122f/0x2fb0 [ 298.588102][T24543] do_syscall_64+0xd2/0x200 [ 298.588118][T24543] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 298.588187][T24543] ? clear_bhb_loop+0x40/0x90 [ 298.588211][T24543] ? clear_bhb_loop+0x40/0x90 [ 298.588236][T24543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.588261][T24543] RIP: 0033:0x7f16930ae929 [ 298.588277][T24543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.588354][T24543] RSP: 002b:00007f1691716d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 298.588374][T24543] RAX: ffffffffffffffda RBX: 000000000000109f RCX: 00007f16930ae929 [ 298.588389][T24543] RDX: 00007f1691716dec RSI: 0000000000000000 RDI: 00007f16931314cc [ 298.588455][T24543] RBP: 0000200000000000 R08: 00007f1691716b07 R09: 0000000000000000 [ 298.588470][T24543] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 298.588484][T24543] R13: 00007f1691716dec R14: 00007f1691716df0 R15: 00007ffee1ccbe78 [ 298.588507][T24543] [ 298.856948][T24533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.866513][T24533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.902450][T24533] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.911491][T24533] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.920659][T24533] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.929967][T24533] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.984501][T24577] IPVS: Error connecting to the multicast addr [ 299.027628][T24587] loop6: detected capacity change from 0 to 1024 [ 299.048848][T24589] loop5: detected capacity change from 0 to 256 [ 299.097086][T24587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.136057][T24599] loop7: detected capacity change from 0 to 512 [ 299.152150][T24599] EXT4-fs: Mount option(s) incompatible with ext3 [ 299.284446][T24618] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 299.658746][T24607] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 299.676561][T24607] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 299.688868][T24607] EXT4-fs (loop6): This should not happen!! Data will be lost [ 299.688868][T24607] [ 299.698584][T24607] EXT4-fs (loop6): Total free blocks count 0 [ 299.704600][T24607] EXT4-fs (loop6): Free/Dirty block details [ 299.710588][T24607] EXT4-fs (loop6): free_blocks=68451041280 [ 299.716431][T24607] EXT4-fs (loop6): dirty_blocks=16432 [ 299.721839][T24607] EXT4-fs (loop6): Block reservation details [ 299.727883][T24607] EXT4-fs (loop6): i_reserved_data_blocks=1027 [ 299.754847][T12183] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 299.898938][T24701] IPVS: Error connecting to the multicast addr [ 299.947265][T24713] loop1: detected capacity change from 0 to 256 [ 299.993662][T24719] random: crng reseeded on system resumption [ 300.026142][T24725] __nla_validate_parse: 8 callbacks suppressed [ 300.026153][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4521'. [ 300.095054][T24732] loop6: detected capacity change from 0 to 256 [ 300.123032][T24734] FAULT_INJECTION: forcing a failure. [ 300.123032][T24734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.136224][T24734] CPU: 0 UID: 0 PID: 24734 Comm: syz.6.4525 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 300.136252][T24734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.136263][T24734] Call Trace: [ 300.136270][T24734] [ 300.136362][T24734] __dump_stack+0x1d/0x30 [ 300.136386][T24734] dump_stack_lvl+0xe8/0x140 [ 300.136409][T24734] dump_stack+0x15/0x1b [ 300.136425][T24734] should_fail_ex+0x265/0x280 [ 300.136458][T24734] should_fail+0xb/0x20 [ 300.136569][T24734] should_fail_usercopy+0x1a/0x20 [ 300.136705][T24734] _copy_from_user+0x1c/0xb0 [ 300.136730][T24734] memdup_user+0x5e/0xd0 [ 300.136767][T24734] con_font_op+0x6c3/0x930 [ 300.136842][T24734] ? should_fail_ex+0xdb/0x280 [ 300.136938][T24734] vt_ioctl+0x153c/0x1880 [ 300.136965][T24734] tty_ioctl+0x7de/0xb80 [ 300.137000][T24734] ? __pfx_tty_ioctl+0x10/0x10 [ 300.137049][T24734] __se_sys_ioctl+0xce/0x140 [ 300.137162][T24734] __x64_sys_ioctl+0x43/0x50 [ 300.137195][T24734] x64_sys_call+0x19a8/0x2fb0 [ 300.137221][T24734] do_syscall_64+0xd2/0x200 [ 300.137240][T24734] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.137314][T24734] ? clear_bhb_loop+0x40/0x90 [ 300.137333][T24734] ? clear_bhb_loop+0x40/0x90 [ 300.137430][T24734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.137454][T24734] RIP: 0033:0x7f16930ae929 [ 300.137512][T24734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.137571][T24734] RSP: 002b:00007f1691717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.137587][T24734] RAX: ffffffffffffffda RBX: 00007f16932d5fa0 RCX: 00007f16930ae929 [ 300.137599][T24734] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000007 [ 300.137612][T24734] RBP: 00007f1691717090 R08: 0000000000000000 R09: 0000000000000000 [ 300.137697][T24734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.137708][T24734] R13: 0000000000000000 R14: 00007f16932d5fa0 R15: 00007ffee1ccbe78 [ 300.137725][T24734] [ 300.410987][T24737] netlink: 'syz.6.4526': attribute type 10 has an invalid length. [ 300.420467][T24737] team0: Port device dummy0 added [ 300.533469][T24752] loop7: detected capacity change from 0 to 128 [ 300.596824][T24756] sctp: [Deprecated]: syz.7.4535 (pid 24756) Use of int in max_burst socket option. [ 300.596824][T24756] Use struct sctp_assoc_value instead [ 300.612964][T24756] syz.7.4535 (24756): attempted to duplicate a private mapping with mremap. This is not supported. [ 300.624881][T24756] loop7: detected capacity change from 0 to 128 [ 300.635676][T24756] FAT-fs (loop7): Directory bread(block 32) failed [ 300.643452][T24756] FAT-fs (loop7): Directory bread(block 33) failed [ 300.647209][T24758] loop6: detected capacity change from 0 to 2048 [ 300.650841][T24756] FAT-fs (loop7): Directory bread(block 34) failed [ 300.663189][T24756] FAT-fs (loop7): Directory bread(block 35) failed [ 300.664717][T24758] EXT4-fs (loop6): #clusters per group too big: 151011328 [ 300.669764][T24756] FAT-fs (loop7): Directory bread(block 36) failed [ 300.684288][T24756] FAT-fs (loop7): Directory bread(block 37) failed [ 300.690828][T24756] FAT-fs (loop7): Directory bread(block 38) failed [ 300.698033][T24756] FAT-fs (loop7): Directory bread(block 39) failed [ 300.706075][T24756] FAT-fs (loop7): Directory bread(block 40) failed [ 300.712862][T24756] FAT-fs (loop7): Directory bread(block 41) failed [ 300.738645][T24758] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4536'. [ 300.741780][T24756] bio_check_eod: 8 callbacks suppressed [ 300.741796][T24756] syz.7.4535: attempt to access beyond end of device [ 300.741796][T24756] loop7: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 300.773909][T24756] FAT-fs (loop7): Filesystem has been set read-only [ 300.780678][T24756] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 300.802856][T24765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4536'. [ 300.824841][T24767] loop5: detected capacity change from 0 to 1024 [ 300.856982][T24767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.872155][T24758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4536'. [ 300.929247][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 300.929281][ T29] audit: type=1400 audit(1751614666.853:37668): avc: denied { setopt } for pid=24777 comm="syz.7.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 301.016668][T24790] FAULT_INJECTION: forcing a failure. [ 301.016668][T24790] name failslab, interval 1, probability 0, space 0, times 0 [ 301.029423][T24790] CPU: 0 UID: 0 PID: 24790 Comm: syz.7.4547 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 301.029485][T24790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.029499][T24790] Call Trace: [ 301.029567][T24790] [ 301.029574][T24790] __dump_stack+0x1d/0x30 [ 301.029593][T24790] dump_stack_lvl+0xe8/0x140 [ 301.029611][T24790] dump_stack+0x15/0x1b [ 301.029630][T24790] should_fail_ex+0x265/0x280 [ 301.029676][T24790] should_failslab+0x8c/0xb0 [ 301.029700][T24790] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 301.029726][T24790] ? sidtab_sid2str_get+0xa0/0x130 [ 301.029755][T24790] kmemdup_noprof+0x2b/0x70 [ 301.029840][T24790] sidtab_sid2str_get+0xa0/0x130 [ 301.029868][T24790] security_sid_to_context_core+0x1eb/0x2e0 [ 301.029953][T24790] security_sid_to_context+0x27/0x40 [ 301.030008][T24790] avc_audit_post_callback+0x9d/0x520 [ 301.030037][T24790] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 301.030066][T24790] common_lsm_audit+0x1b8/0x230 [ 301.030084][T24790] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 301.030165][T24790] ? avc_update_node+0x1e9/0x5f0 [ 301.030244][T24790] slow_avc_audit+0x104/0x140 [ 301.030270][T24790] audit_inode_permission+0x111/0x150 [ 301.030298][T24790] selinux_inode_permission+0x58e/0x620 [ 301.030323][T24790] ? capable_wrt_inode_uidgid+0x152/0x190 [ 301.030367][T24790] security_inode_permission+0x6d/0xb0 [ 301.030398][T24790] inode_permission+0x106/0x310 [ 301.030426][T24790] may_open+0x255/0x350 [ 301.030486][T24790] path_openat+0x1b4a/0x2170 [ 301.030516][T24790] ? _parse_integer_limit+0x170/0x190 [ 301.030558][T24790] do_filp_open+0x109/0x230 [ 301.030623][T24790] do_sys_openat2+0xa6/0x110 [ 301.030679][T24790] __x64_sys_open+0xe6/0x110 [ 301.030709][T24790] x64_sys_call+0x14d4/0x2fb0 [ 301.030754][T24790] do_syscall_64+0xd2/0x200 [ 301.030771][T24790] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 301.030794][T24790] ? clear_bhb_loop+0x40/0x90 [ 301.030869][T24790] ? clear_bhb_loop+0x40/0x90 [ 301.030906][T24790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.030924][T24790] RIP: 0033:0x7fe5216ce929 [ 301.030937][T24790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.030952][T24790] RSP: 002b:00007fe51fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 301.030972][T24790] RAX: ffffffffffffffda RBX: 00007fe5218f5fa0 RCX: 00007fe5216ce929 [ 301.030986][T24790] RDX: 0000000000000104 RSI: 0000000000085481 RDI: 0000200000000040 [ 301.031060][T24790] RBP: 00007fe51fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 301.031070][T24790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.031081][T24790] R13: 0000000000000000 R14: 00007fe5218f5fa0 R15: 00007ffc74bed668 [ 301.031098][T24790] [ 301.031216][ T29] audit: type=1400 audit(1751614666.943:37669): avc: denied { append } for pid=24789 comm="syz.7.4547" name="file2" dev="tmpfs" ino=682 ssid=137 tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.336363][T24798] loop1: detected capacity change from 0 to 256 [ 301.418428][T24784] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 301.433507][T24784] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 301.445871][T24784] EXT4-fs (loop5): This should not happen!! Data will be lost [ 301.445871][T24784] [ 301.455589][T24784] EXT4-fs (loop5): Total free blocks count 0 [ 301.461612][T24784] EXT4-fs (loop5): Free/Dirty block details [ 301.467617][T24784] EXT4-fs (loop5): free_blocks=68451041280 [ 301.473439][T24784] EXT4-fs (loop5): dirty_blocks=16432 [ 301.478893][T24784] EXT4-fs (loop5): Block reservation details [ 301.484950][T24784] EXT4-fs (loop5): i_reserved_data_blocks=1027 [ 301.506503][T12177] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28 [ 301.707640][T24812] FAULT_INJECTION: forcing a failure. [ 301.707640][T24812] name failslab, interval 1, probability 0, space 0, times 0 [ 301.720406][T24812] CPU: 1 UID: 0 PID: 24812 Comm: syz.5.4556 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 301.720483][T24812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.720497][T24812] Call Trace: [ 301.720505][T24812] [ 301.720512][T24812] __dump_stack+0x1d/0x30 [ 301.720543][T24812] dump_stack_lvl+0xe8/0x140 [ 301.720564][T24812] dump_stack+0x15/0x1b [ 301.720624][T24812] should_fail_ex+0x265/0x280 [ 301.720656][T24812] should_failslab+0x8c/0xb0 [ 301.720681][T24812] kmem_cache_alloc_node_noprof+0x57/0x320 [ 301.720760][T24812] ? __alloc_skb+0x101/0x320 [ 301.720868][T24812] __alloc_skb+0x101/0x320 [ 301.720934][T24812] netlink_dump+0x148/0x7f0 [ 301.721032][T24812] __netlink_dump_start+0x43e/0x520 [ 301.721069][T24812] genl_family_rcv_msg_dumpit+0x115/0x180 [ 301.721094][T24812] ? __pfx_genl_start+0x10/0x10 [ 301.721115][T24812] ? __pfx_genl_dumpit+0x10/0x10 [ 301.721141][T24812] ? __pfx_genl_done+0x10/0x10 [ 301.721172][T24812] genl_rcv_msg+0x3f0/0x460 [ 301.721196][T24812] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 301.721280][T24812] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 301.721393][T24812] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 301.721430][T24812] netlink_rcv_skb+0x120/0x220 [ 301.721465][T24812] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.721508][T24812] genl_rcv+0x28/0x40 [ 301.721534][T24812] netlink_unicast+0x5a1/0x670 [ 301.721572][T24812] netlink_sendmsg+0x58b/0x6b0 [ 301.721654][T24812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.721677][T24812] __sock_sendmsg+0x145/0x180 [ 301.721702][T24812] ____sys_sendmsg+0x31e/0x4e0 [ 301.721793][T24812] ___sys_sendmsg+0x17b/0x1d0 [ 301.721898][T24812] __x64_sys_sendmsg+0xd4/0x160 [ 301.721937][T24812] x64_sys_call+0x2999/0x2fb0 [ 301.722028][T24812] do_syscall_64+0xd2/0x200 [ 301.722047][T24812] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 301.722071][T24812] ? clear_bhb_loop+0x40/0x90 [ 301.722090][T24812] ? clear_bhb_loop+0x40/0x90 [ 301.722138][T24812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.722163][T24812] RIP: 0033:0x7f1d521de929 [ 301.722209][T24812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.722263][T24812] RSP: 002b:00007f1d50847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.722280][T24812] RAX: ffffffffffffffda RBX: 00007f1d52405fa0 RCX: 00007f1d521de929 [ 301.722292][T24812] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 301.722305][T24812] RBP: 00007f1d50847090 R08: 0000000000000000 R09: 0000000000000000 [ 301.722459][T24812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.722469][T24812] R13: 0000000000000000 R14: 00007f1d52405fa0 R15: 00007ffd3d3035c8 [ 301.722537][T24812] [ 302.066373][ T29] audit: type=1400 audit(1751614667.993:37670): avc: denied { setopt } for pid=24817 comm="syz.0.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 302.094060][T24823] loop6: detected capacity change from 0 to 1024 [ 302.108271][ T29] audit: type=1400 audit(1751614668.023:37671): avc: denied { ioctl } for pid=24817 comm="syz.0.4559" path="socket:[56195]" dev="sockfs" ino=56195 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.139615][T24823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.216844][T24844] ================================================================== [ 302.224967][T24844] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 302.233927][T24844] [ 302.236265][T24844] read to 0xffff888119fa4a20 of 4 bytes by task 24843 on cpu 1: [ 302.243908][T24844] selinux_inode_permission+0x2a7/0x620 [ 302.249463][T24844] security_inode_permission+0x6d/0xb0 [ 302.254957][T24844] inode_permission+0x106/0x310 [ 302.259838][T24844] link_path_walk+0x162/0x900 [ 302.264550][T24844] path_lookupat+0x63/0x2a0 [ 302.269075][T24844] filename_lookup+0x147/0x340 [ 302.273868][T24844] filename_setxattr+0x56/0x400 [ 302.278738][T24844] path_setxattrat+0x2c9/0x310 [ 302.283518][T24844] __x64_sys_setxattr+0x6e/0x90 [ 302.288412][T24844] x64_sys_call+0x28a7/0x2fb0 [ 302.293113][T24844] do_syscall_64+0xd2/0x200 [ 302.297628][T24844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.303537][T24844] [ 302.305870][T24844] write to 0xffff888119fa4a20 of 4 bytes by task 24844 on cpu 0: [ 302.313593][T24844] selinux_inode_permission+0x31b/0x620 [ 302.319156][T24844] security_inode_permission+0x6d/0xb0 [ 302.324634][T24844] inode_permission+0x106/0x310 [ 302.329501][T24844] link_path_walk+0x162/0x900 [ 302.334193][T24844] path_lookupat+0x63/0x2a0 [ 302.338715][T24844] filename_lookup+0x147/0x340 [ 302.343503][T24844] path_removexattrat+0x148/0x570 [ 302.348552][T24844] __x64_sys_removexattr+0x38/0x50 [ 302.353682][T24844] x64_sys_call+0x2c7a/0x2fb0 [ 302.358389][T24844] do_syscall_64+0xd2/0x200 [ 302.362929][T24844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.368841][T24844] [ 302.371173][T24844] value changed: 0x00000001 -> 0x00000000 [ 302.376908][T24844] [ 302.379236][T24844] Reported by Kernel Concurrency Sanitizer on: [ 302.385404][T24844] CPU: 0 UID: 0 PID: 24844 Comm: syz.1.4569 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 302.397918][T24844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.407990][T24844] ================================================================== [ 302.577617][T24846] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 302.592608][T24846] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 302.604926][T24846] EXT4-fs (loop6): This should not happen!! Data will be lost [ 302.604926][T24846] [ 302.614602][T24846] EXT4-fs (loop6): Total free blocks count 0 [ 302.620587][T24846] EXT4-fs (loop6): Free/Dirty block details [ 302.626504][T24846] EXT4-fs (loop6): free_blocks=68451041280 [ 302.632354][T24846] EXT4-fs (loop6): dirty_blocks=16432 [ 302.637801][T24846] EXT4-fs (loop6): Block reservation details [ 302.643797][T24846] EXT4-fs (loop6): i_reserved_data_blocks=1027 [ 302.664318][T12150] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 2048 with error 28