last executing test programs: 44.706121493s ago: executing program 3 (id=13): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00'], 0x40}}, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x1a3000, 0x12345}) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000480)=0x0) r5 = syz_io_uring_setup(0x2af8, &(0x7f00000000c0)={0x0, 0x0, 0x13090}, &(0x7f0000000340), &(0x7f0000000080)) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) accept(0xffffffffffffffff, &(0x7f0000000700)=@nfc_llcp, &(0x7f0000000780)=0x80) 44.116708277s ago: executing program 3 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x20000000000) 43.887763427s ago: executing program 3 (id=21): unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000fffff7ff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005012b2000000950000000000000001d0a948d61f8a3791f55a62434617eda836228841d22bbe90d574fb5e2e5615493121468ddef0301c7ec1302026f984920bbdf1e2ad1ea1fee43c5e0f4d17cc13b059e56417d6867be7dcb51f794bf3c71473c44cc2005ff4aa9a17b88113dc6435f38ce9cb4b6687f5f8c903d5bdbf854bd750b2e4279d45865f9083a2255358558f9109cc"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='btrfs_cow_block\x00', r1, 0x0, 0xb}, 0x18) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendfile(r4, r3, 0x0, 0x7ffff088) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0xe4ffffff, 0x25dfdbfb, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0xfff, 0x8420, 0x4, {0xa, 0x0, 0x1ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x2, 0x400000, 0x80000000, 0x3, 0xc, 0x3, 0x2, 0x0, 0x73f9e022, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x5, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0xffffffff, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0xcf, 0x0, 0xf, 0x3, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xfffff801, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x200004, 0x3, 0xfff, 0x5, 0xf63e, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e4a, 0x5, 0xc9b3, 0x1, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0xa0000001, 0xd, 0x2000003, 0x1, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0x113e, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xa64d, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x4, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x9, 0xfffffffe, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x8, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x200008, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x62, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0xfffffffe, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x1, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x15f7, 0x2, 0xfffffbfd, 0x5, 0x40000000, 0x7a, 0x8f0b, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0xcc869fc, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x2, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xd, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0xb, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x1004, 0x6, 0xbdc4, 0x7, 0x9, 0x9, 0x100, 0x80004, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 43.797208236s ago: executing program 3 (id=25): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x8, &(0x7f0000000340)=0x0) io_pgetevents(r6, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r7 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7f, &(0x7f00000000c0)={[0x8]}, 0x8) finit_module(r1, 0x0, 0x3) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast1, 0x8}, 0x1c) 42.956680403s ago: executing program 3 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x700, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x1075}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060089"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_io_uring_setup(0x110d4, 0x0, 0x0, 0x0) lstat(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x91) (async) ioctl$KDSETLED(r4, 0x4b32, 0x91) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x3000000, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x3000000, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 42.566482889s ago: executing program 3 (id=40): symlinkat(&(0x7f0000000480)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0x9, 0x0, @val=@netfilter={0x1, 0x0, 0x400}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffff7a, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES8], 0xa8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000007020000faffe0ffb703000000000000b704000000000000850000570000009500000000000080000000897d32c8a48c974ee3d67fc82c0cc0a3c66d38ddd0ed2bda7aecce99ca50a775118b46e640d3c99b1a373bc0eb4f05a3a7626f7ddff7d98d8dd1374ecfdcea3db421398905f8fffd1b4fd033a923e6e822cf737c96543ffa6df963"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000008a510a7f2d31fad008e2a96fca18e758b900000008000000000000c872944a5177d400000000000000000086ad487e3ca1fe9f207ede00000000"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfcfb) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$eJzs3T9vW1UUAPDzHPvFJUMyMCEk3tCBhajpyoArFCREJpAH/khQ0VaqYqtSLFkqIKxOfAIGBr4HGzsSC98AiQ/ARoUqXfT8Xmxju3ad4hSlv9+Sq3PP8T3X7yUerHfzxev90zsPBvceffN7tNtZNDrRicdZHEQjzqVaAABXwuOU4s8Lfb43G9vqCQDYrpnP/9ZTUnYXQ+9suy0AYIs++viTD26dnBx/WBTtiP53w24W1c9q/ta9uB+9uBs3Yj+eTL8LSKkav/f+yXE0i9JBXO+Pht2ysv/5r5PUPMb1R7EfB8vrj4rKTP1o2G3FK7uRZRH3O2UjN2M/Xl2oL+ePby6pj24eb7brTZbrH8Z+/PZlPIhe3Bl/pzFd/9s8infT9399/WmZXNZno2F3d5w3lXYu+9oAAAAAAAAAAAAAAAAAAAAAAHB1HRYTB3G9X4bq83d2noznD/81Pz5fpzGer+qziHw8mDsfaJTix/PzdW4URZGyKn9yvs+1ZrzWjOYL2zgAAAAAAAAAAAAAAAAAAAD8jwwefnV6u9e7e/afDOqH/CeP9V/0dTozkTdidfLuRmvFTp1e9jqfc/TLZ/1JpNzERZoftoqIVT23FiLXyn7Wv/LfKaWUZRHPd5laz7LWmsHe6pzyDf75h723Tm9n697D9vmF+2l2Ko+zwcO5axrZJh2mjW6/fEVOXt8xz/Q6e8/5S/T2H9VidSRbs4vWTKRVD+Jpt197o/v58v4GAQAAAAAAAAAAAAAAAAAAlelDv0smH60sbWytKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ZNP//z8dxEJkbjCqi5fnpJRGk0geZ4MXvEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeAv8EAAD//yiCbKI=") r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r5, @ANYRESDEC, @ANYRES64=r4], 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x302200, 0x4) 42.55076394s ago: executing program 32 (id=40): symlinkat(&(0x7f0000000480)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0x9, 0x0, @val=@netfilter={0x1, 0x0, 0x400}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffff7a, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES8], 0xa8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000007020000faffe0ffb703000000000000b704000000000000850000570000009500000000000080000000897d32c8a48c974ee3d67fc82c0cc0a3c66d38ddd0ed2bda7aecce99ca50a775118b46e640d3c99b1a373bc0eb4f05a3a7626f7ddff7d98d8dd1374ecfdcea3db421398905f8fffd1b4fd033a923e6e822cf737c96543ffa6df963"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000008a510a7f2d31fad008e2a96fca18e758b900000008000000000000c872944a5177d400000000000000000086ad487e3ca1fe9f207ede00000000"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfcfb) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d31295720bb62672c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c75734c2c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67d9ac94acef6870bff"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r5, @ANYRESDEC, @ANYRES64=r4], 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x302200, 0x4) 2.671793635s ago: executing program 0 (id=650): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x38) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x2, 0x7ff, 0x5, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x70f7, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001fc0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095", @ANYBLOB="94e44b30d18acc64f520095135597105e2d06e403e0749c21c4bcaea6e3414fe22b36fa69ad5c6369cce7679dfe1be2c04f9d421d912451d027daa67ede32037dcfae4ad7c7c74a271411f7bad09335a479325e3591932da3ecb8cfd8bf23ebd1b08ddd2cd2c381593e72f1e3e1f8b49ea4e4c72f8621f30473497306d08988cd9317a8b7c968740b1f98bcbb20aa7aca8e59ba3f783303181797b80e88afa2df19f7d912327f748461fb3ed406f6cfd12a9c1f6aec93d58631ef7a765b7f217a3ebb96fabcbfd96e5f601bdc082547a47ff00738f478713dde0e8cc7fae07768901438c172c63f3baa3e22ef6ed45135408f2fcb40f70c42921424ea3085a42b39214ed7049746f6f5948641a6ebe1d64e99909d3f33f0cd61efe3d83a486ba20a64f8733cda2cd321a3ae52e9a5e155ad9b2fdd79a1ede7ce0c858aad01839353762142b83194d0b6b1ab9ef806e230d20be3051524da6d0a7b507fae338bd93da85a363c46015e3b21c3d1f58842ff355d8afdacd86d0579d20a82f6b4f5ef27fdac1667e91bb3ff51f27867028174bf752ae9dbc96f6c4234f3f28e700350ba7579f5987caf078188a5fb328ad4fb540b239a3f1354cf0be367ffc29daac47d9ae198c6ff31882ba0781510056067a9b2f51e9541e2d41c8f429343952ac918808272a789cf1d26856134c9b1e893ae650c23f833f35ab7cedb53fd8fba675bdad2d17d9f151d7d53aa90f4e5d61a1a41a4450e86729cd555f054e82a9d23c76111108c1b30d491b61f7ae3c5a53c47605d13ba1cc57ea26adfbca4ff88e0dde52373cf08ac8b7997d3639805de6e905e7a7df3b0175e5432f4112dedd0207585090ba1db642c6daf9eb616be91a8e021ac4aaac867c61ad9c8a713456a6e362fb7384a103239fcd160089ed985357c7a1b3d4ab9c9439e95c0c0ba7a704122fa5ce2b115e0838e49ffd495c4248c9308bb1b88b6108bc04161552f2e5c95892137f65db07c9331fdd749f8773c4fa934ca67cab9f3a4d19eb7489e98d3037f427abe87095cf27cc93a634dbe6fa912c2cffab5aa91d6a4de93e9d46c81028b77873e936cb86545e692d24acd60e5037b35cf654325470cf7d9f610266004d5b14c5104d7f4d1fce122088a3fdf0d23ceaa05990d491ed32e8e1a6b5b2e45507021dfe9e9587facc55a3e810624d97ffda0646adb4b4eaf9e8213f93c21178fef357f154aa71cf2ea84ab0d0fc42eba0622483fa2a8c61c5177d8fe82609c0dd8a4d914d7ab9979b92cb24d04ab0809560d30da27f7f036826c1d0a227ce8bbadbcd37edf9a7ff53a34c8d79cab525d060f62178b82eb0eeec99e08119d5224fd4ee7518a144bbd841356ed722d91f3141ee4cecac5e6653c80de0eee56544d454b2250e66de306c4172e5b201d8278aa2c5687e6759f2770cbc8d3411f1a2e9cb8686754a2236f5ad9c674b967e50daf11b651f82bb458bde6557fe581de8fe5140cbe96db50f7750cea0b709e09c7cacfd1a2e7bc01514f7465adb508e79da641419f581a7f94445357cc43eedcaa5ca41a03dd34003e781957ce4b6d80a452cf2e038ff8c8925a2f76f9cf564b69342433f587d78c62f34f7cd59a239b9fdb26ae5370774a8c3bcc6b9e93cea7fc6afc5ef5ea464e044965d1b1d5f578fd2cd9cc3986b3619809e5f412e8911d37261bb083863dfeb2f94b52b6b7cd10e75611a14d7ba7f09a9d94d05c99ca7d83d137e9bfc9502f25762b36ac57e053b1ba4c68f4f0f4b2c7d5352fb78423d2de588285ec1a2a0c88d794c198db61308cc59cdd7c6879f3d92745518d07dda222d9a8411e87e07264c0bff8f4d14ef10645a56f76ce8b6db22ff7dedcac353b134a5cdeb6b24bacffaecdab72de740d4c328946eaffda28ca9ba2b2240d5e1baa6d90f6fc313ecf4e383e27c45d467a44319b3786cc4289f6d15a64152f2070fbea12346138c6f5b07c503fad69c42bfca595290bea69d46d94fbd9aca4a7576a49e0bfabac9f5a691a4627c6ccd91f281e3ad6384e59e3136e87f6e7e6bf6566ad91449784c562f01a1def3033f020fc6c9520fb3a9320d9379448528ad68727099e5143f641b44202768362bd35c85628ba5cc15b62c9d85238783b476fe9a9beeb1690fcf13b3533e24f42246cdf708b3bf165869a2f36bda06c6e342dbe468c37a468ff5378e2a2b55d732a59f2af61c109db32d39df68827ad7b12634205252a643a3cb4f0aa330df6cd330072705e7cadc524a5426106dd28cb9060fcb77899013d609f01a99654860333277cb862c6084bae549e1a280ea2d13c32542955f7ed3fb280ab37dd36ca49a70da0561fe6d0cb4c89be7abd666bb03b638bf6bc873800b7ebbb13e1fa998eb58c44fdab8b7017c62c339ecc62127bb599837bcc383eb37c5e986b3cb64632456753c835cba4c4904d67bd2f8117be968f695510908ab8c2b6f61428b479e2861676524da7f1c1cb30cde00e7e0527215522234277a04707a967134e33ea5e20b05d16838b14ad546e89452b280537e34194059c3bcf8793755d18720057243b550514583d751000efee16777301f73da7edd3d75b70c32b51f91421bec3f55b6624fc419e2f652eff7cc5ef52b58af105dedb02e468c7ef212e2a05d865f42cc0edc244460579a7647828eee7e18dd0e55a4650a3e4803c10b95eda20f374202d48a9cec56ebbcb2032cb3fbc13768ed210faa2fead9316e9796d4858e94a3448bfce70037237eae0b656c6a42ea6dcd136b28e9287a146856a6bcce4367fc22fedc51703bf0b05f64579c590cb7552b6633dea6a3cdd8b960de40d6f3e7172c27c1efa49ac6512a7248b1ff2511e99dd70b0330d53ae6115a9e8363634d200408d406e28bffea0faccc59b351bd10d96270ab7c822a972b76e93631a684938043e009acd370a1ac45e94bcca52e20ac28c0eb2a9816b51c521f09cfad5bf2cf5fe068e342cdc35e53a5b5c99fa1b65451fe3e7683f2c666a24b0a83ea4e9e7d0866a16f449ef621e67ebca7236aa21eb0769f9f8aef4cd20471aee4c5b0be7d384cc076a8f1753ca074176779c05e772327dd432ffab60bbda65c936794676f1527f6750b3c238695a803a612479ab210028578130d2d6ec8a4cbb4ca751ce4989997896ee25f5d4af926a6fc562a2265933bcf443718ba13e22b08fea7273031c8324bb3579674a00cb4a692f79e50eb93896324a5450ddbb1685a97106aaeecb2c4bb32519ca94a4664a58b1fa7b83bc5978acdc2c4d3965f97be1776148615e5cc65c8cb2e6da648e247ac8fec891695ea1157609c110e8774926bcd9087114d9b6a47b4cac2fb5307ea22207144f29407e2e8b24859d08888f46f82adbc25b936f0c15838aefaf5fd8bd66982b8bd622a5d67bed64bf36e9ec1196720f270f6f977f08bfe4bb46be9de03398b3c5a76c27883daa795cee29004a7ce77c0c7e741c03a82e9aed71b9c88eb17a5c55dc5553d028a2f366835058a055513a88e3447e6cfae8374f1579349cda8837189fea4d6d171a36bf3379b35de3f58ffac027f92bb00e91be6c6ddec406694493fdcf71c24e4c52d0b7492423a353b294dd393c186a2545172481baa4405de7d19159cec3546baf34f0715a70c8741a5948c35d37a7d22292b32b9a4756ca27bbaf38c6f32a1848f4be71fd52fc4bb134a053a84d8a98a0e5abf869aa4556b6892157d70a52dc624607fb66b3742247a18f87692e2d2c2f426293cd9b1805b102cd035b81a5884ae983027a40f69e9c699c60efdcd096a1b343e3b44f0391348b35b21928da6a8506bbd3b963af509eb1cc35904464639fa3a83ac2fa55d23c8be055ec4b200e88cf9e29e86d68a94ae2bfe359adbf8ab16b424dc29f4a773c41f2ed4d1d51c8088e69f3b59fa8c26bbbe4a744cc747ae43e00b9e14f63db67b268a45af8c710ba6c2435a4580a8d6aa7036520259486b5bd50e1ba48ad4e74b2cd24ba6ceb3111cf63efde62061ea7617b09e0ace95a404ec75ae12fd37aaa639d05c7a0a9237350b563bb74b9d9dd343ec3f3fc7c816259b008db1ccce14a7a7d4685e2a1eb766bfc2191eab0e03571a56d0afc241d6116bc525428adffb5f3fb0824455a7a55954bde7534fc50671f6f836fd8449c52bf77a78d334fbf3005c83d8665d691a79a2a8d1a61280c025954fc668465868a4a372a75db6ab39fb8024a641b68e9f0982c3771bb253194981f5f61f1deaafe282f76d75f058435110565c9d59b2449e8453e6f590149ae4bb19a5c45dd36735f3cf7d3e9286c9813180c2f7276edd7c25700f45e36dfd7e63684a8031761fe3c25ecc455c266d336fc673548c897ed490db9920f99d7d768073b81b55522802738987cb8fa4d37374bc87707c7100973b87ab8d51563756a8b863177af4ad1efce9437c1ee0e6dcb03a0863248df6219a2d42c8e608f7617a3a95ef017e6f29aeda6d5e23898b1c6db64306f67d352618806d31cacb848fec7583fdc177d0d18b0d625dc0f240c0648268689f08d811121650a897f00f3d059608b010e8787438294375fb7de8533a13c06c960d7cc9235adddfa0db2552f4f6b788137982c533be9c289b0d63461ab6ad1077a2994713a99b7ddfd91fdc181f5329a7c4cd79dcbf97d72fa35d4e40dcab336b0624d3f22f65b7339b71e6448b84083d606918ffd2a0b5a30635bc83c12cfc81190219c661e5a2d0f1d49932a5614f4d379f33f86d048dc86d629da454448e37d6da0ea1afe38257b56091bee8094eb82ab5e1a2da9ca2ca08d25de0ee68f088869b7062562ec424f48a5713023c62ac90e8cc30b5d1cc9dce542334c6e164a3139b6567acc18ebf0dffa2cd0cc0119c9a81219bc7936b697472bd6048ef8e8ff8addc27c7c4aefa5dc583ada4c13030b52d7411a0c81d76ac97b6126ef433cec74e37375147ee83fed502aa0bc382ad6c1ee88e499d67be9b3a6503773a0c2fb9d2d6831b12eceea27e593f50b4315a3dcd90c28b7cd078d2da7b60f085b193c13d7022ae66a957f0c8f29d0744f28bd3aac8459a8c1c636d97f10aeacd3b96dd6aecdb77ed5209bc50b7b17ae14ae730fb841034d7d5fb1342e4ef8e43ba0192d62386df6394a263511db64919a2629f0bcedd1fed76082037911180e030bd95a6db51b2207f0fc88635c52b6f9966a86a5ecf2e9c8bea9228fa1d8657c9eb2a6478a7c9d5ca6a1b44d597ede136b6cb150fefef7750329281745f547c3d839d32bda94754e5c1a0ca1b76c4606a833d16aac56b43e28fe03a75bdb608e6bd27d7c7a15468af266e0e11f0a75df6b23ef1fd12a5b06a770f1b42b9ed12b9ffe2933769fb7a6733432b26da8774fc84ff8a5ee3e678d2de2f63e3dba7b8543a334fdfa7123414c0870fdf1168a095990b367599652361263f4303065d73dbff089dce23227a2cf789c08ce8c272e1b419a39daa77a0895f6c026a6e5f8b59ec80780e2eacb1b6af1aef5a0343b7ea7ecf0bb3e31db69237ffb292fa627c84a88772fefd43d721127a077b1d96891e9126ada6adf168c38645840af7f227f0b269c130c0b5d16d7cbe2b5aa07ed6a4018a5e5de6ab579e37cdb8e92adb7c180c91dab7bed272ce0692243f5c68a23567387ed59845e91eee94feab0adeb4e9f11fad7901f32f68d719374d78fa18b476a5f3077d7321057d7a9242d7d20b00094da358a9d4336f7876b2e84f7affae5481042efefc66e4dba5018b6fca1504f431dbb225a894722fa4b21088", @ANYRESDEC=r3, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESHEX=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x0, 0x9, 0x40000000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="c732eec30323cea29b87f027b8bd648e2bdec541ba2291e596b9113a9aab7c298889964f4a89ff0f000000000000c70e8200f24f993e5407f061bfd385ba441533ccb3e4", @ANYBLOB="b79989603a8fa96b1166ead120fbfb12891e9b447180d6fd3684d83d0f21aeeed265978acc80bea31be8e338d737d7aee43c493ff90289eb6e32437edeb8185fb7d6ac497bef3d2435c03d9860ca0e", @ANYRESDEC, @ANYBLOB="e674c9c4d779781b915b7d7ca79e7e19faff1455d4cfc403dfda1e9ad1533e8c20c24f2930b808c2cc1f5c924820246502f9ea113dccb7824b873fad7652e12884a6c1774fcf3499410bdba01d698b2453691a70c690849510e13049b5e81f5619ce692ec9abfd4dad4ee55613774bcab77c3efbdb2183e003db5559279227bd7bf259c94b781f53a226e5d40d308f42be8fc2a1e97377cb19e599b84dcfbf3cb19769a8b8eb1f8d56e231d99285abee4ec603f8ad0c1a5410f62173da13b658c4503654d4d9cc86399f99bd00be24a4de82416b950f32298f9abd1c7e164d3ae77019a75ea0ceb7a7428a9102f3dc77f9b41be5d0afc82665", @ANYRESOCT=r5, @ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="495b2a8678b5c1c1f07b4a3f6a7fc1b6fe6a2a85538c3d31780bfad82659b5d3aa74c58e3d37044628f1765ad8ac7a05acd11553a6d61b65bbef2af826394779e0011ebbc95cd7f36070cfbc8351cc5604b825b8ef84dd944dd1633e8ab7926bdf44fa3a04e8adbdd6ed9cd0ab114100d5ac069b50a78e2a46e7c34169648e76dad0d861080a53568d7603637d7ec893607c14857dd90b7ca2a3bee770a04a3fc15d8134c14618287d7a8094efb9b7ae535a7c759950f9b9e52c0bea90b413c28e2d627200213834644b7e8a"], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x700) 2.39677254s ago: executing program 0 (id=659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) close(r0) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000000000000000000d0a0000000000000002000006040000000500000008000002040000000a00000000000030612e"], &(0x7f0000000f40)=""/4073, 0x47, 0xfe9, 0x9}, 0x28) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=ANY=[@ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB="00000034a0dd2d2ae14e2663d28a8d76924c87f6b58d3f1e028dace8511ca5811f6bb9ad40338db0edc79c7e05dc1dfbc21dac02000000000000006bf921c3c36dc7427020b0b607f3748b43c5519b5500000000c4676593b50e8fb05130fc86ebc51932747549badbfa07232ef959719188172286e57989a5b0c39223358ed98c91b7eaacbb99fbd36796b6d3c265b5d3a372695c6b19"], 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x25) 2.326800836s ago: executing program 0 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009df67e948ee5a68959ce795e3a12c5a56411cb01e6ba2bc3c7eb77d2594d2d7bf"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1b9681, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xfe4d}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@delqdisc={0x0, 0x25, 0x300, 0x70bd27, 0x25dfdc02, {0x0, 0x0, 0x0, r4, {0xd, 0xc}, {0x5, 0x10}, {0x6, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x7fff}]}, 0xfffffffffffffe2a}, 0x1, 0x0, 0x0, 0x2000084}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, @ethernet={0x6e2074954f8f7d45, @multicast}, @nfc={0x27, r6, 0xffffffffffffffff, 0x3}, @tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x3}}, 0xa5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0'}, 0xb) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 2.160525762s ago: executing program 0 (id=666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0xbb, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 2.109615896s ago: executing program 0 (id=668): unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000fffff7ff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005012b2000000950000000000000001d0a948d61f8a3791f55a62434617eda836228841d22bbe90d574fb5e2e5615493121468ddef0301c7ec1302026f984920bbdf1e2ad1ea1fee43c5e0f4d17cc13b059e56417d6867be7dcb51f794bf3c71473c44cc2005ff4aa9a17b88113dc6435f38ce9cb4b6687f5f8c903d5bdbf854bd750b2e4279d45865f9083a2255358558f9109cc7f8b3ab25a555a6fd54b9859a313a5"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='btrfs_cow_block\x00', r1, 0x0, 0xb}, 0x18) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendfile(r4, r3, 0x0, 0x7ffff088) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000022000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0xe4ffffff, 0x25dfdbfb, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0xfff, 0x8420, 0x4, {0xa, 0x0, 0x1ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x2, 0x400000, 0x80000000, 0x3, 0xc, 0x3, 0x2, 0x0, 0x73f9e022, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x5, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0xffffffff, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0xcf, 0x0, 0xf, 0x3, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xfffff801, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x200004, 0x3, 0xfff, 0x5, 0xf63e, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e4a, 0x5, 0xc9b3, 0x1, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0xa0000001, 0xd, 0x2000003, 0x1, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0x113e, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xa64d, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x4, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x9, 0xfffffffe, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x8, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x200008, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x62, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0xfffffffe, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x1, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x15f7, 0x2, 0xfffffbfd, 0x5, 0x40000000, 0x7a, 0x8f0b, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0xcc869fc, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x2, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xd, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0xb, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x1004, 0x6, 0xbdc4, 0x7, 0x9, 0x9, 0x100, 0x80004, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 2.061121851s ago: executing program 0 (id=669): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x2000000000000003, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18380000020000000000000000000000181a0000", @ANYRES32=r0, @ANYBLOB="000000918d0000000000852000006cecd1590000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xe8, &(0x7f0000000180)=""/232, 0x40f00, 0xa, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xa, 0x20000000, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x1, 0x3, 0x3, 0x1}], 0x10, 0x2}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.648294879s ago: executing program 4 (id=680): unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000fffff7ff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005012b2000000950000000000000001d0a948d61f8a3791f55a62434617eda836228841d22bbe90d574fb5e2e5615493121468ddef0301c7ec1302026f984920bbdf1e2ad1ea1fee43c5e0f4d17cc13b059e56417d6867be7dcb51f794bf3c71473c44cc2005ff4aa9a17b88113dc6435f38ce9cb4b6687f5f8c903d5bdbf854bd750b2e4279d45865f9083a2255358558f9109cc7f8b3ab25a555a6fd54b9859a313a5"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='btrfs_cow_block\x00', r1, 0x0, 0xb}, 0x18) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendfile(r4, r3, 0x0, 0x7ffff088) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000022000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0xe4ffffff, 0x25dfdbfb, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0xfff, 0x8420, 0x4, {0xa, 0x0, 0x1ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x2, 0x400000, 0x80000000, 0x3, 0xc, 0x3, 0x2, 0x0, 0x73f9e022, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x5, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0xffffffff, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0xcf, 0x0, 0xf, 0x3, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xfffff801, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x200004, 0x3, 0xfff, 0x5, 0xf63e, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e4a, 0x5, 0xc9b3, 0x1, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0xa0000001, 0xd, 0x2000003, 0x1, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0x113e, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xa64d, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x4, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x9, 0xfffffffe, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x8, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x200008, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x62, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0xfffffffe, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x1, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x15f7, 0x2, 0xfffffbfd, 0x5, 0x40000000, 0x7a, 0x8f0b, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0xcc869fc, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x2, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xd, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0xb, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x1004, 0x6, 0xbdc4, 0x7, 0x9, 0x9, 0x100, 0x80004, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 1.63479657s ago: executing program 4 (id=682): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000c40)) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c", 0x82, 0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) creat(0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) write$selinux_context(r0, 0x0, 0x0) 1.582543015s ago: executing program 4 (id=683): mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) ptrace(0x4206, r3) tkill(r3, 0x12) ptrace(0x4208, r3) tkill(r3, 0x12) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f0000080039503230"], 0x41) 1.380441024s ago: executing program 1 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="2e0000040000000000000077500e62a8f14656196c653fd58db34eedd1f2347c98913a3adad9beb3575c069870c99e8ff72bcbf33c83bc31d9ec24014b689b09464ae759f4b4e199", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_peer\x00', r1, 0x0, 0xfffffffffb}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) renameat2(r5, &(0x7f0000000000)='./bus\x00', r5, &(0x7f0000000100)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 984.215929ms ago: executing program 5 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffd15, 0x9}, 0x0, 0xc8, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010000) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\xfd\x01\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xcd\xcd.\x16O\xac\x12!\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9\x00\x11\xff3\xc7\x19\x00\x00\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xeb\xfd\xe2\x98Q\xbf\xe8\xeeo\xd4\xb6#^omJjjmY\v\x1b\x897\xee\xf4R\xf1\x1b\xab\x8c\xd7\xb5\xb3\x9b\xd3\x8b\xb8|\xb8\xa9J\xabU3\xbe\xfe\xd2\xb7&g*\xd4~k\xbd\xa7\x0e\xccqC5\xbc\x8d\xfc\x00\xe5\xf4\x9b\x0e\xad\x17\fQ\xe5Z^\f\xb4\xc0DU\xc5\xdc(E\x15\xcef\xa4\xa2\xf7u\x02M\x85\xe9A D\x04\xe9\x15\x14)\x1c0\xaa\x99\x9dH\xe4n,\"\xdc\x87\x1c\xb5\xc56\xc9WE%\xc7g\x83k\xa4\x8as~\xb3B\v\xe1\f\xb7\x95\x82/\xbd\xb9\xd4\xeew-/6\xa4\x05\nN\xd6a\x83n\x05\xbe\x12\xd5a\xc0\xfdT\xbf\x8c\x86\x82\x9f\xf9\x8c\xb7\"\xad.\x9c\x86\xe7\xbfH5\xbf\b\xbbs\xf4\xcd\x14\x93C\x9a\x81\x98\xee@\x88E\x90v\xdc\x9a\xf9u\b\xaaBjjl\xdb.\x7f*\x88\xcb<\xcf\x01\x9a\x14\xacG/.|gi\xd6\xc1\xe0\xfb[\x0fO\x9e\xed\x90') ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 982.062489ms ago: executing program 1 (id=690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0xbb, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 920.738195ms ago: executing program 5 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x4305, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read$nci(0xffffffffffffffff, &(0x7f0000000500)=""/190, 0xbe) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x200001cd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x2, 0xc04}}, 0x120) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x8e95, 0x80, 0x8000, 0x40024e}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r10, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r10}}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r11}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@version_9p2000}]}}) 677.936358ms ago: executing program 1 (id=692): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfdfa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe4}]}, 0x3c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x140300, r6}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0x3, 0xba, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, 0x7800, 0xf8e1, 0xc, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11140000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1d0, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlockall(0x2) 659.27734ms ago: executing program 1 (id=693): mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() gettid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18007f0000d300213dcf181200", @ANYRES32=r2, @ANYRESDEC], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200001, 0x40200001, 0x0, 0x9, 0x7, 0x8000000}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) move_pages(r0, 0x6, &(0x7f0000000000)=[&(0x7f0000a54000/0x2000)=nil, &(0x7f00007c5000/0x3000)=nil, &(0x7f000045e000/0x1000)=nil, &(0x7f00002d6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000095f000/0x2000)=nil], 0x0, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xea745000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="60080000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e74742c9db8667a0000001400078008001340000000000800064000000003050005000a0000000500010006000000"], 0x60}}, 0x0) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 658.89746ms ago: executing program 4 (id=694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x5d}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9f}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}}, 0x0) 584.404436ms ago: executing program 4 (id=696): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x8, &(0x7f0000000340)=0x0) io_pgetevents(r6, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r7 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7f, &(0x7f00000000c0)={[0x8]}, 0x8) finit_module(r1, 0x0, 0x3) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast1, 0x8}, 0x1c) 584.138767ms ago: executing program 1 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x8, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x840) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x4}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) semtimedop(r3, &(0x7f0000000200)=[{0x2, 0x0, 0x800}, {0x3, 0x9, 0x1800}, {0x4, 0xe1d, 0x400}, {0x3, 0x8}, {0x2, 0x8, 0x1000}], 0x5, &(0x7f0000000300)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mq_unlink(0x0) fsync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x80000003}) 501.295494ms ago: executing program 2 (id=698): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0005}]}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, 0x0, 0x4) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0x20000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xc074}, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x117f, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x7ffe, 0x1, 0x2, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x20c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000039000900000c00010000000000000200"/36], 0x24}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) connect$inet6(r9, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 484.101705ms ago: executing program 1 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7}, 0x38) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) (fail_nth: 3) memfd_secret(0x80000) 483.837865ms ago: executing program 5 (id=700): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r3, &(0x7f0000000940), &(0x7f00000002c0)=@udp=r2}, 0x20) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) close_range(r0, r2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) timerfd_create(0x8, 0x0) 369.661086ms ago: executing program 5 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 369.049366ms ago: executing program 2 (id=702): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0xbb, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 312.416981ms ago: executing program 5 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) lstat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = eventfd2(0x4007, 0x80800) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000680)="b42fae6e620e00ac", 0x8}], 0x2) setfsuid(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x0, &(0x7f0000000040)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)='./file0/file0\x00') 310.806512ms ago: executing program 4 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB="2e0000040000000000000077500e62a8f14656196c653fd58db34eedd1f2347c98913a3adad9beb3575c069870c99e8ff72bcbf33c83", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_peer\x00', r2, 0x0, 0xfffffffffb}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) renameat2(r6, &(0x7f0000000000)='./bus\x00', r6, &(0x7f0000000100)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 291.960583ms ago: executing program 2 (id=705): openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x40, 0x81) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000540)={0x2, 0x80}, 0x20) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0xc771b000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x9d}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) 227.423609ms ago: executing program 5 (id=706): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) creat(&(0x7f0000000000)='./file1\x00', 0x14c) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 226.845999ms ago: executing program 2 (id=707): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x5c503, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x80, 0x8000, 0x200, 0x1, {{0x1b, 0x4, 0x3, 0x32, 0x6c, 0x68, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_addr={0x44, 0x24, 0xf9, 0x1, 0x7, [{@remote, 0x5815}, {@empty, 0x10000}, {@private=0xa010102, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @rr={0x7, 0x7, 0x20, [@multicast2]}, @ssrr={0x89, 0x7, 0x20, [@private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0x38, 0x1, 0xa, [{@loopback, 0x4}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x51, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0xc}, 0xc}]}]}}}}}) connect$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0xf7, r5, 0x1, 0x2, 0x6, @local}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r4, &(0x7f0000000b40)="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", &(0x7f0000000580)=""/111}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x18) clock_getres(0xfffffffffffffff5, 0x0) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kvm_ack_irq\x00', r11, 0x0, 0x1000000000000000}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 530.53µs ago: executing program 2 (id=708): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x8000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/72) 0s ago: executing program 2 (id=709): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005304"], 0x18}, 0x1, 0x0, 0x0, 0x40044}, 0x80) kernel console output (not intermixed with test programs): [ T4515] RBP: 00007f99792c7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.025212][ T4515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.025219][ T4515] R13: 00007f997aab6038 R14: 00007f997aab5fa0 R15: 00007fff637e7348 [ 54.025274][ T4515] [ 54.034200][ T4499] netlink: 32 bytes leftover after parsing attributes in process `syz.5.248'. [ 54.054984][ T4518] FAULT_INJECTION: forcing a failure. [ 54.054984][ T4518] name failslab, interval 1, probability 0, space 0, times 0 [ 54.057474][ T29] kauditd_printk_skb: 733 callbacks suppressed [ 54.057523][ T29] audit: type=1400 audit(1767295639.199:3134): avc: denied { watch watch_reads } for pid=4517 comm="syz.1.253" path="/proc/185" dev="proc" ino=8744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 54.061952][ T4518] CPU: 0 UID: 0 PID: 4518 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.061999][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.062012][ T4518] Call Trace: [ 54.062019][ T4518] [ 54.062026][ T4518] __dump_stack+0x1d/0x30 [ 54.062051][ T4518] dump_stack_lvl+0x95/0xd0 [ 54.062072][ T4518] dump_stack+0x15/0x1b [ 54.062150][ T4518] should_fail_ex+0x265/0x280 [ 54.062173][ T4518] should_failslab+0x8c/0xb0 [ 54.062261][ T4518] __kmalloc_cache_noprof+0x65/0x4c0 [ 54.062369][ T4518] ? rtnl_newlink+0x5c/0x1360 [ 54.062387][ T4518] ? __pfx_rtnl_newlink+0x10/0x10 [ 54.062404][ T4518] rtnl_newlink+0x5c/0x1360 [ 54.062421][ T4518] ? css_rstat_updated+0xbb/0x280 [ 54.062476][ T4518] ? __bpf_ringbuf_reserve+0x49a/0x610 [ 54.062506][ T4518] ? css_rstat_updated+0xbb/0x280 [ 54.062568][ T4518] ? bpf_ringbuf_reserve+0x46/0x60 [ 54.062596][ T4518] ? __rcu_read_unlock+0x34/0x70 [ 54.062615][ T4518] ? bpf_trace_run3+0x12c/0x1e0 [ 54.062722][ T4518] ? try_charge_memcg+0x215/0xa10 [ 54.062757][ T4518] ? __kfree_skb+0x109/0x150 [ 54.062780][ T4518] ? __memcg_slab_free_hook+0x135/0x230 [ 54.062808][ T4518] ? __rcu_read_unlock+0x4f/0x70 [ 54.062903][ T4518] ? avc_has_perm_noaudit+0xab/0x130 [ 54.062957][ T4518] ? cred_has_capability+0x210/0x280 [ 54.062988][ T4518] ? selinux_capable+0x31/0x40 [ 54.063017][ T4518] ? security_capable+0x83/0x90 [ 54.063075][ T4518] ? ns_capable+0x7d/0xb0 [ 54.063102][ T4518] ? __pfx_rtnl_newlink+0x10/0x10 [ 54.063120][ T4518] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 54.063278][ T4518] netlink_rcv_skb+0x123/0x220 [ 54.063319][ T4518] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.063355][ T4518] rtnetlink_rcv+0x1c/0x30 [ 54.063436][ T4518] netlink_unicast+0x5c0/0x690 [ 54.063475][ T4518] netlink_sendmsg+0x58b/0x6b0 [ 54.063610][ T4518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.063717][ T4518] __sock_sendmsg+0x145/0x180 [ 54.063737][ T4518] ____sys_sendmsg+0x31e/0x4a0 [ 54.063765][ T4518] ___sys_sendmsg+0x17b/0x1d0 [ 54.063804][ T4518] __x64_sys_sendmsg+0xd4/0x160 [ 54.063836][ T4518] x64_sys_call+0x17ba/0x3000 [ 54.063859][ T4518] do_syscall_64+0xca/0x2b0 [ 54.063916][ T4518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.063935][ T4518] RIP: 0033:0x7f08a76df749 [ 54.063950][ T4518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.064030][ T4518] RSP: 002b:00007f08a6147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.064049][ T4518] RAX: ffffffffffffffda RBX: 00007f08a7935fa0 RCX: 00007f08a76df749 [ 54.064099][ T4518] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000003 [ 54.064111][ T4518] RBP: 00007f08a6147090 R08: 0000000000000000 R09: 0000000000000000 [ 54.064123][ T4518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.064135][ T4518] R13: 00007f08a7936038 R14: 00007f08a7935fa0 R15: 00007ffe2140d8b8 [ 54.064154][ T4518] [ 54.103683][ T4520] IPv6: Can't replace route, no match found [ 54.123365][ T29] audit: type=1400 audit(1767295639.272:3135): avc: denied { write } for pid=4498 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.207331][ T4522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'. [ 54.217915][ T29] audit: type=1400 audit(1767295639.283:3136): avc: denied { read } for pid=4498 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.284290][ T4525] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 54.330382][ T29] audit: type=1400 audit(1767295639.482:3137): avc: denied { create } for pid=4498 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 54.332097][ T4525] audit: out of memory in audit_log_start [ 54.642158][ T4525] random: crng reseeded on system resumption [ 54.668306][ T29] audit: type=1326 audit(1767295639.850:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 54.691789][ T29] audit: type=1326 audit(1767295639.850:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 54.715221][ T29] audit: type=1326 audit(1767295639.850:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 54.738642][ T29] audit: type=1326 audit(1767295639.850:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 54.801485][ T4537] loop4: detected capacity change from 0 to 512 [ 54.818948][ T4537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.842881][ T4538] loop5: detected capacity change from 0 to 512 [ 54.851002][ T4537] EXT4-fs (loop4): 1 truncate cleaned up [ 54.861802][ T4542] loop1: detected capacity change from 0 to 512 [ 54.891648][ T4542] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.261: error while reading EA inode 32 err=-116 [ 54.947918][ T4538] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.262: EA inode hash validation failed [ 54.974396][ T4538] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.262: corrupted inode contents [ 54.986352][ T4542] EXT4-fs (loop1): Remounting filesystem read-only [ 54.986686][ T4538] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.262: mark_inode_dirty error [ 55.005693][ T4538] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.262: corrupted inode contents [ 55.018171][ T4538] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.262: mark_inode_dirty error [ 55.031350][ T4542] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.042189][ T4538] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.262: mark inode dirty (error -117) [ 55.042295][ T4542] EXT4-fs (loop1): 1 orphan inode deleted [ 55.061505][ T4538] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 55.070743][ T4538] EXT4-fs (loop5): 1 orphan inode deleted [ 55.085032][ T4552] loop4: detected capacity change from 0 to 2048 [ 55.330990][ T4584] loop1: detected capacity change from 0 to 512 [ 55.338825][ T4584] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.351304][ T4584] EXT4-fs (loop1): 1 truncate cleaned up [ 55.352850][ T4586] loop4: detected capacity change from 0 to 2048 [ 55.422943][ T4593] loop4: detected capacity change from 0 to 2048 [ 55.500266][ T4601] loop2: detected capacity change from 0 to 512 [ 55.511255][ T4601] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.524556][ T4601] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.282: bad orphan inode 13 [ 55.543624][ T4601] ext4_test_bit(bit=12, block=18) = 1 [ 55.549018][ T4601] is_bad_inode(inode)=0 [ 55.553333][ T4601] NEXT_ORPHAN(inode)=2130706432 [ 55.558170][ T4601] max_ino=32 [ 55.561397][ T4601] i_nlink=1 [ 55.570752][ T4601] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 55.577512][ T4605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 55.598992][ T4601] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 55.610201][ T4601] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 55.809696][ T4617] lo speed is unknown, defaulting to 1000 [ 55.816936][ T4619] FAULT_INJECTION: forcing a failure. [ 55.816936][ T4619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.830131][ T4619] CPU: 1 UID: 0 PID: 4619 Comm: syz.2.287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.830159][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.830170][ T4619] Call Trace: [ 55.830176][ T4619] [ 55.830182][ T4619] __dump_stack+0x1d/0x30 [ 55.830203][ T4619] dump_stack_lvl+0x95/0xd0 [ 55.830291][ T4619] dump_stack+0x15/0x1b [ 55.830309][ T4619] should_fail_ex+0x265/0x280 [ 55.830338][ T4619] should_fail+0xb/0x20 [ 55.830353][ T4619] should_fail_usercopy+0x1a/0x20 [ 55.830376][ T4619] fpu__restore_sig+0x12d/0xaa0 [ 55.830397][ T4619] ? x86_task_fpu+0x36/0x60 [ 55.830486][ T4619] ? should_fail_ex+0xdb/0x280 [ 55.830514][ T4619] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 55.830584][ T4619] x64_sys_call+0x274a/0x3000 [ 55.830603][ T4619] do_syscall_64+0xca/0x2b0 [ 55.830630][ T4619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.830724][ T4619] RIP: 0033:0x7f50982ef747 [ 55.830737][ T4619] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 55.830818][ T4619] RSP: 002b:00007f5096d4f038 EFLAGS: 00000246 [ 55.830834][ T4619] RAX: 0000000000000113 RBX: 00007f5098545fa0 RCX: 00007f50982ef749 [ 55.830855][ T4619] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 55.830866][ T4619] RBP: 00007f5096d4f090 R08: 0000000000000101 R09: 0000000000000000 [ 55.830879][ T4619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.830891][ T4619] R13: 00007f5098546038 R14: 00007f5098545fa0 R15: 00007ffe4e753818 [ 55.830909][ T4619] [ 55.839979][ T4620] loop0: detected capacity change from 0 to 512 [ 56.006080][ T4620] journal_path: Non-blockdev passed as './bus' [ 56.012317][ T4620] EXT4-fs: error: could not find journal device path [ 56.028360][ T4617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 56.061818][ T4617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 56.158814][ T4633] capability: warning: `syz.5.293' uses deprecated v2 capabilities in a way that may be insecure [ 56.270837][ T4636] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 578, start c7000005) [ 56.281017][ T4636] FAT-fs (loop2): Filesystem has been set read-only [ 56.380622][ T4642] siw: device registration error -23 [ 56.386931][ T4642] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 56.413402][ T4649] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.420222][ T4649] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.299: bad orphan inode 13 [ 56.430391][ T4649] ext4_test_bit(bit=12, block=18) = 1 [ 56.435762][ T4649] is_bad_inode(inode)=0 [ 56.439981][ T4649] NEXT_ORPHAN(inode)=2130706432 [ 56.444827][ T4649] max_ino=32 [ 56.448045][ T4649] i_nlink=1 [ 56.454371][ T4649] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 56.469908][ T4646] siw: device registration error -23 [ 56.475953][ T4653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.484876][ T4649] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 56.499827][ T4646] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 56.511735][ T4645] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.295: error while reading EA inode 32 err=-116 [ 56.513438][ T4653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.525507][ T4645] EXT4-fs (loop0): Remounting filesystem read-only [ 56.534180][ T4649] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 56.538311][ T4645] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 56.557066][ T4645] EXT4-fs (loop0): 1 orphan inode deleted [ 56.607856][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.300'. [ 56.752493][ T4674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.842259][ T4681] siw: device registration error -23 [ 56.848699][ T4681] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 56.868030][ T4685] FAULT_INJECTION: forcing a failure. [ 56.868030][ T4685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.881168][ T4685] CPU: 0 UID: 0 PID: 4685 Comm: syz.1.311 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.881195][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.881208][ T4685] Call Trace: [ 56.881215][ T4685] [ 56.881223][ T4685] __dump_stack+0x1d/0x30 [ 56.881312][ T4685] dump_stack_lvl+0x95/0xd0 [ 56.881334][ T4685] dump_stack+0x15/0x1b [ 56.881351][ T4685] should_fail_ex+0x265/0x280 [ 56.881388][ T4685] should_fail+0xb/0x20 [ 56.881413][ T4685] should_fail_usercopy+0x1a/0x20 [ 56.881436][ T4685] _copy_from_user+0x1c/0xb0 [ 56.881471][ T4685] ___sys_recvmsg+0xaa/0x370 [ 56.881495][ T4685] ? _parse_integer+0x27/0x40 [ 56.881518][ T4685] do_recvmmsg+0x1ef/0x540 [ 56.881589][ T4685] ? get_timespec64+0xc9/0x100 [ 56.881607][ T4685] __x64_sys_recvmmsg+0xfb/0x170 [ 56.881633][ T4685] x64_sys_call+0x2b75/0x3000 [ 56.881718][ T4685] do_syscall_64+0xca/0x2b0 [ 56.881759][ T4685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.881802][ T4685] RIP: 0033:0x7f08a76df749 [ 56.881816][ T4685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.881831][ T4685] RSP: 002b:00007f08a6147038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 56.881852][ T4685] RAX: ffffffffffffffda RBX: 00007f08a7935fa0 RCX: 00007f08a76df749 [ 56.881934][ T4685] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 56.881944][ T4685] RBP: 00007f08a6147090 R08: 0000200000000480 R09: 0000000000000000 [ 56.881955][ T4685] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 56.881967][ T4685] R13: 00007f08a7936038 R14: 00007f08a7935fa0 R15: 00007ffe2140d8b8 [ 56.881985][ T4685] [ 57.153030][ T4694] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.162900][ T4694] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 57.191392][ T4695] netlink: 256 bytes leftover after parsing attributes in process `syz.4.312'. [ 57.218895][ T4694] netlink: 176 bytes leftover after parsing attributes in process `syz.1.316'. [ 57.233724][ T4697] netlink: 1424 bytes leftover after parsing attributes in process `syz.2.315'. [ 57.327884][ T4703] FAULT_INJECTION: forcing a failure. [ 57.327884][ T4703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.340972][ T4703] CPU: 1 UID: 0 PID: 4703 Comm: syz.0.317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.341038][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.341050][ T4703] Call Trace: [ 57.341057][ T4703] [ 57.341066][ T4703] __dump_stack+0x1d/0x30 [ 57.341166][ T4703] dump_stack_lvl+0x95/0xd0 [ 57.341188][ T4703] dump_stack+0x15/0x1b [ 57.341206][ T4703] should_fail_ex+0x265/0x280 [ 57.341226][ T4703] should_fail+0xb/0x20 [ 57.341278][ T4703] should_fail_usercopy+0x1a/0x20 [ 57.341303][ T4703] _copy_to_user+0x20/0xa0 [ 57.341388][ T4703] simple_read_from_buffer+0xb5/0x130 [ 57.341406][ T4703] proc_fail_nth_read+0x10e/0x150 [ 57.341433][ T4703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.341523][ T4703] vfs_read+0x1a8/0x770 [ 57.341540][ T4703] ? mutex_lock+0x58/0x90 [ 57.341561][ T4703] ksys_read+0xda/0x1a0 [ 57.341577][ T4703] __x64_sys_read+0x40/0x50 [ 57.341602][ T4703] x64_sys_call+0x2889/0x3000 [ 57.341626][ T4703] do_syscall_64+0xca/0x2b0 [ 57.341658][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.341740][ T4703] RIP: 0033:0x7f997a85e15c [ 57.341753][ T4703] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.341768][ T4703] RSP: 002b:00007f99792c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.341789][ T4703] RAX: ffffffffffffffda RBX: 00007f997aab5fa0 RCX: 00007f997a85e15c [ 57.341801][ T4703] RDX: 000000000000000f RSI: 00007f99792c70a0 RDI: 0000000000000003 [ 57.341852][ T4703] RBP: 00007f99792c7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.341865][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.341877][ T4703] R13: 00007f997aab6038 R14: 00007f997aab5fa0 R15: 00007fff637e7348 [ 57.341894][ T4703] [ 57.543414][ T4705] FAULT_INJECTION: forcing a failure. [ 57.543414][ T4705] name failslab, interval 1, probability 0, space 0, times 0 [ 57.556087][ T4705] CPU: 0 UID: 0 PID: 4705 Comm: syz.5.320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.556111][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.556123][ T4705] Call Trace: [ 57.556131][ T4705] [ 57.556138][ T4705] __dump_stack+0x1d/0x30 [ 57.556163][ T4705] dump_stack_lvl+0x95/0xd0 [ 57.556237][ T4705] dump_stack+0x15/0x1b [ 57.556257][ T4705] should_fail_ex+0x265/0x280 [ 57.556292][ T4705] should_failslab+0x8c/0xb0 [ 57.556331][ T4705] kmem_cache_alloc_noprof+0x69/0x4b0 [ 57.556377][ T4705] ? getname_flags+0x80/0x3b0 [ 57.556398][ T4705] getname_flags+0x80/0x3b0 [ 57.556482][ T4705] __x64_sys_linkat+0x73/0xa0 [ 57.556577][ T4705] x64_sys_call+0x2ad0/0x3000 [ 57.556659][ T4705] do_syscall_64+0xca/0x2b0 [ 57.556691][ T4705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.556776][ T4705] RIP: 0033:0x7f6c9281f749 [ 57.556790][ T4705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.556807][ T4705] RSP: 002b:00007f6c91287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 57.556823][ T4705] RAX: ffffffffffffffda RBX: 00007f6c92a75fa0 RCX: 00007f6c9281f749 [ 57.556834][ T4705] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 57.556943][ T4705] RBP: 00007f6c91287090 R08: f5ffffffffffffff R09: 0000000000000000 [ 57.556957][ T4705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.556969][ T4705] R13: 00007f6c92a76038 R14: 00007f6c92a75fa0 R15: 00007ffe17833828 [ 57.556988][ T4705] [ 57.837031][ T4721] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 57.839018][ T4719] siw: device registration error -23 [ 57.859666][ T4719] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 57.942363][ T4722] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.321: error while reading EA inode 32 err=-116 [ 57.952869][ T4726] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.970653][ T4734] FAULT_INJECTION: forcing a failure. [ 57.970653][ T4734] name failslab, interval 1, probability 0, space 0, times 0 [ 57.983318][ T4734] CPU: 0 UID: 0 PID: 4734 Comm: syz.4.329 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.983341][ T4734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.983350][ T4734] Call Trace: [ 57.983356][ T4734] [ 57.983363][ T4734] __dump_stack+0x1d/0x30 [ 57.983386][ T4734] dump_stack_lvl+0x95/0xd0 [ 57.983403][ T4734] dump_stack+0x15/0x1b [ 57.983421][ T4734] should_fail_ex+0x265/0x280 [ 57.983442][ T4734] should_failslab+0x8c/0xb0 [ 57.983462][ T4734] kmem_cache_alloc_noprof+0x69/0x4b0 [ 57.983483][ T4734] ? mas_alloc_nodes+0x1a2/0x210 [ 57.983509][ T4734] mas_alloc_nodes+0x1a2/0x210 [ 57.983536][ T4734] mas_preallocate+0x2ca/0x510 [ 57.983567][ T4734] mmap_region+0xc91/0x1410 [ 57.983609][ T4734] do_mmap+0x9b3/0xbe0 [ 57.983631][ T4734] vm_mmap_pgoff+0x17a/0x2e0 [ 57.983653][ T4734] ksys_mmap_pgoff+0xc2/0x310 [ 57.983675][ T4734] ? __x64_sys_mmap+0x49/0x70 [ 57.983701][ T4734] x64_sys_call+0x16bb/0x3000 [ 57.983723][ T4734] do_syscall_64+0xca/0x2b0 [ 57.983754][ T4734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.983774][ T4734] RIP: 0033:0x7f15300cf783 [ 57.983787][ T4734] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 57.983803][ T4734] RSP: 002b:00007f152eb2ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 57.983822][ T4734] RAX: ffffffffffffffda RBX: 00000000000005ab RCX: 00007f15300cf783 [ 57.983834][ T4734] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 57.983846][ T4734] RBP: 0000200000000182 R08: 00000000ffffffff R09: 0000000000000000 [ 57.983858][ T4734] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 57.983870][ T4734] R13: 00007f152eb2eef0 R14: 00007f152eb2eeb0 R15: 0000200000000940 [ 57.983889][ T4734] [ 58.002552][ T4722] EXT4-fs (loop0): Remounting filesystem read-only [ 58.150003][ T4743] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 58.175091][ T4722] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 58.206882][ T4722] EXT4-fs (loop0): 1 orphan inode deleted [ 58.216844][ T4726] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.229387][ T4726] EXT4-fs (loop5): 1 truncate cleaned up [ 58.240246][ T4747] IPv6: Can't replace route, no match found [ 58.368308][ T4760] policy can only be matched on NF_INET_PRE_ROUTING [ 58.368320][ T4760] unable to load match [ 58.385974][ T4762] syz.5.337 uses obsolete (PF_INET,SOCK_PACKET) [ 58.394727][ T4764] policy can only be matched on NF_INET_PRE_ROUTING [ 58.394739][ T4764] unable to load match [ 58.409039][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 58.417837][ T4762] bridge_slave_1: left allmulticast mode [ 58.423448][ T4762] bridge_slave_1: left promiscuous mode [ 58.429295][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.436956][ T4762] bridge_slave_0: left allmulticast mode [ 58.442615][ T4762] bridge_slave_0: left promiscuous mode [ 58.448305][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.654143][ T4772] set_capacity_and_notify: 9 callbacks suppressed [ 58.654157][ T4772] loop5: detected capacity change from 0 to 512 [ 58.676225][ T4772] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.340: error while reading EA inode 32 err=-116 [ 58.697992][ T4772] EXT4-fs (loop5): Remounting filesystem read-only [ 58.704858][ T4772] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 58.715243][ T4772] EXT4-fs (loop5): 1 orphan inode deleted [ 58.850471][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 58.850484][ T29] audit: type=1400 audit(1767295644.239:3843): avc: denied { read } for pid=4776 comm="syz.5.342" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.880306][ T29] audit: type=1400 audit(1767295644.239:3844): avc: denied { open } for pid=4776 comm="syz.5.342" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.941784][ T4778] loop2: detected capacity change from 0 to 8192 [ 58.980613][ T29] audit: type=1326 audit(1767295644.375:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 59.004381][ T29] audit: type=1326 audit(1767295644.396:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 59.063773][ T29] audit: type=1326 audit(1767295644.428:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 59.087182][ T29] audit: type=1326 audit(1767295644.428:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 59.110548][ T29] audit: type=1326 audit(1767295644.428:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 59.133902][ T29] audit: type=1326 audit(1767295644.428:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 59.157196][ T29] audit: type=1326 audit(1767295644.428:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 59.180565][ T29] audit: type=1326 audit(1767295644.428:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 59.287202][ T4785] FAULT_INJECTION: forcing a failure. [ 59.287202][ T4785] name failslab, interval 1, probability 0, space 0, times 0 [ 59.300011][ T4785] CPU: 1 UID: 0 PID: 4785 Comm: syz.4.345 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.300035][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.300045][ T4785] Call Trace: [ 59.300051][ T4785] [ 59.300057][ T4785] __dump_stack+0x1d/0x30 [ 59.300148][ T4785] dump_stack_lvl+0x95/0xd0 [ 59.300169][ T4785] dump_stack+0x15/0x1b [ 59.300188][ T4785] should_fail_ex+0x265/0x280 [ 59.300213][ T4785] should_failslab+0x8c/0xb0 [ 59.300236][ T4785] __kmalloc_noprof+0xb9/0x5a0 [ 59.300369][ T4785] ? ethnl_default_doit+0xef/0x910 [ 59.300461][ T4785] ethnl_default_doit+0xef/0x910 [ 59.300488][ T4785] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 59.300511][ T4785] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 59.300537][ T4785] genl_family_rcv_msg_doit+0x143/0x1b0 [ 59.300675][ T4785] genl_rcv_msg+0x422/0x460 [ 59.300695][ T4785] ? __pfx_ethnl_default_doit+0x10/0x10 [ 59.300733][ T4785] netlink_rcv_skb+0x123/0x220 [ 59.300770][ T4785] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.300793][ T4785] genl_rcv+0x28/0x40 [ 59.300811][ T4785] netlink_unicast+0x5c0/0x690 [ 59.300908][ T4785] netlink_sendmsg+0x58b/0x6b0 [ 59.300939][ T4785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.301004][ T4785] __sock_sendmsg+0x145/0x180 [ 59.301024][ T4785] ____sys_sendmsg+0x31e/0x4a0 [ 59.301049][ T4785] ___sys_sendmsg+0x17b/0x1d0 [ 59.301085][ T4785] __x64_sys_sendmsg+0xd4/0x160 [ 59.301112][ T4785] x64_sys_call+0x17ba/0x3000 [ 59.301133][ T4785] do_syscall_64+0xca/0x2b0 [ 59.301161][ T4785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.301246][ T4785] RIP: 0033:0x7f15300cf749 [ 59.301409][ T4785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.301426][ T4785] RSP: 002b:00007f152eb2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.301444][ T4785] RAX: ffffffffffffffda RBX: 00007f1530325fa0 RCX: 00007f15300cf749 [ 59.301455][ T4785] RDX: 0000000020000040 RSI: 0000200000001400 RDI: 0000000000000003 [ 59.301542][ T4785] RBP: 00007f152eb2f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.301552][ T4785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.301563][ T4785] R13: 00007f1530326038 R14: 00007f1530325fa0 R15: 00007fff8cf0ae18 [ 59.301580][ T4785] [ 59.549447][ T4793] x_tables: duplicate underflow at hook 2 [ 59.556242][ T4794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 59.572467][ T4792] loop1: detected capacity change from 0 to 1024 [ 59.582245][ T4792] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.593142][ T4792] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.613245][ T4794] ip6gre1: entered allmulticast mode [ 59.649465][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.343'. [ 59.665006][ T4801] loop4: detected capacity change from 0 to 512 [ 59.669982][ T4792] JBD2: no valid journal superblock found [ 59.672044][ T4801] ext4: Bad value for 'max_dir_size_kb' [ 59.677070][ T4792] EXT4-fs (loop1): Could not load journal inode [ 59.800823][ T4808] loop2: detected capacity change from 0 to 512 [ 59.850227][ T4808] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.348: error while reading EA inode 32 err=-116 [ 59.862967][ T4808] EXT4-fs (loop2): Remounting filesystem read-only [ 59.869562][ T4808] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 59.913158][ T4816] loop1: detected capacity change from 0 to 2048 [ 59.920632][ T4808] EXT4-fs (loop2): 1 orphan inode deleted [ 59.987425][ T4822] netlink: 'syz.5.352': attribute type 7 has an invalid length. [ 59.995147][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.352'. [ 60.009106][ T4823] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.342318][ T4835] FAULT_INJECTION: forcing a failure. [ 60.342318][ T4835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.355504][ T4835] CPU: 0 UID: 0 PID: 4835 Comm: syz.1.354 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.355528][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.355539][ T4835] Call Trace: [ 60.355545][ T4835] [ 60.355551][ T4835] __dump_stack+0x1d/0x30 [ 60.355633][ T4835] dump_stack_lvl+0x95/0xd0 [ 60.355651][ T4835] dump_stack+0x15/0x1b [ 60.355682][ T4835] should_fail_ex+0x265/0x280 [ 60.355705][ T4835] should_fail+0xb/0x20 [ 60.355723][ T4835] should_fail_usercopy+0x1a/0x20 [ 60.355744][ T4835] _copy_to_user+0x20/0xa0 [ 60.355844][ T4835] simple_read_from_buffer+0xb5/0x130 [ 60.355866][ T4835] proc_fail_nth_read+0x10e/0x150 [ 60.355894][ T4835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.355990][ T4835] vfs_read+0x1a8/0x770 [ 60.356008][ T4835] ? __rcu_read_unlock+0x4f/0x70 [ 60.356028][ T4835] ? __fget_files+0x184/0x1c0 [ 60.356050][ T4835] ? mutex_lock+0x58/0x90 [ 60.356195][ T4835] ksys_read+0xda/0x1a0 [ 60.356215][ T4835] __x64_sys_read+0x40/0x50 [ 60.356232][ T4835] x64_sys_call+0x2889/0x3000 [ 60.356316][ T4835] do_syscall_64+0xca/0x2b0 [ 60.356360][ T4835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.356378][ T4835] RIP: 0033:0x7f08a76de15c [ 60.356391][ T4835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.356483][ T4835] RSP: 002b:00007f08a6147030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.356502][ T4835] RAX: ffffffffffffffda RBX: 00007f08a7935fa0 RCX: 00007f08a76de15c [ 60.356514][ T4835] RDX: 000000000000000f RSI: 00007f08a61470a0 RDI: 0000000000000006 [ 60.356527][ T4835] RBP: 00007f08a6147090 R08: 0000000000000000 R09: 0000000000000000 [ 60.356539][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.356552][ T4835] R13: 00007f08a7936038 R14: 00007f08a7935fa0 R15: 00007ffe2140d8b8 [ 60.356630][ T4835] [ 60.630648][ T4840] netlink: 'syz.4.358': attribute type 1 has an invalid length. [ 60.647398][ T4840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.685983][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 60.697387][ T4840] bond1 (unregistering): Released all slaves [ 60.709524][ T4846] 9p: Bad value for 'wfdno' [ 60.817063][ T4864] random: crng reseeded on system resumption [ 60.819013][ T4863] loop4: detected capacity change from 0 to 2048 [ 60.865407][ T4870] loop1: detected capacity change from 0 to 164 [ 60.880372][ T4870] iso9660: Bad value for 'mode' [ 60.899286][ T4870] netlink: 48 bytes leftover after parsing attributes in process `syz.1.367'. [ 60.951121][ T4885] xt_hashlimit: max too large, truncated to 1048576 [ 60.958676][ T4885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.015766][ T4892] 9p: Bad value for 'source' [ 61.027479][ T4894] FAULT_INJECTION: forcing a failure. [ 61.027479][ T4894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.040725][ T4894] CPU: 0 UID: 0 PID: 4894 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.040748][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.040771][ T4894] Call Trace: [ 61.040777][ T4894] [ 61.040785][ T4894] __dump_stack+0x1d/0x30 [ 61.040810][ T4894] dump_stack_lvl+0x95/0xd0 [ 61.040897][ T4894] dump_stack+0x15/0x1b [ 61.040913][ T4894] should_fail_ex+0x265/0x280 [ 61.040942][ T4894] should_fail+0xb/0x20 [ 61.041022][ T4894] should_fail_usercopy+0x1a/0x20 [ 61.041041][ T4894] _copy_from_user+0x1c/0xb0 [ 61.041107][ T4894] do_sock_getsockopt+0xf1/0x210 [ 61.041129][ T4894] __x64_sys_getsockopt+0x11e/0x1a0 [ 61.041152][ T4894] x64_sys_call+0x2dc7/0x3000 [ 61.041249][ T4894] do_syscall_64+0xca/0x2b0 [ 61.041354][ T4894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.041371][ T4894] RIP: 0033:0x7f08a76df749 [ 61.041384][ T4894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.041397][ T4894] RSP: 002b:00007f08a6147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 61.041413][ T4894] RAX: ffffffffffffffda RBX: 00007f08a7935fa0 RCX: 00007f08a76df749 [ 61.041423][ T4894] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 61.041434][ T4894] RBP: 00007f08a6147090 R08: 0000200000000140 R09: 0000000000000000 [ 61.041450][ T4894] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 61.041460][ T4894] R13: 00007f08a7936038 R14: 00007f08a7935fa0 R15: 00007ffe2140d8b8 [ 61.041483][ T4894] [ 61.046302][ T4892] netlink: 128 bytes leftover after parsing attributes in process `syz.4.374'. [ 61.175680][ T4901] loop0: detected capacity change from 0 to 2048 [ 61.253855][ T4907] loop4: detected capacity change from 0 to 512 [ 61.268043][ T4907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.274849][ T4907] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.380: bad orphan inode 13 [ 61.295894][ T4907] ext4_test_bit(bit=12, block=18) = 1 [ 61.300518][ T4910] EXT4-fs: Mount option(s) incompatible with ext2 [ 61.301311][ T4907] is_bad_inode(inode)=0 [ 61.312164][ T4907] NEXT_ORPHAN(inode)=2130706432 [ 61.317098][ T4907] max_ino=32 [ 61.320354][ T4907] i_nlink=1 [ 61.364499][ T4907] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 61.375697][ T4913] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.382: EA inode hash validation failed [ 61.388691][ T4907] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.388749][ T4913] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.382: corrupted inode contents [ 61.400122][ T4907] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 61.410883][ T4913] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.382: mark_inode_dirty error [ 61.429012][ T4913] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.382: corrupted inode contents [ 61.448752][ T4913] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.382: mark_inode_dirty error [ 61.460900][ T4913] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.382: mark inode dirty (error -117) [ 61.473875][ T4913] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 61.482999][ T4913] EXT4-fs (loop1): 1 orphan inode deleted [ 61.550668][ T4928] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.581202][ T4925] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 61.625810][ T4931] siw: device registration error -23 [ 61.632916][ T4931] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.649622][ T4934] pim6reg: entered allmulticast mode [ 61.677097][ T4934] pim6reg: left allmulticast mode [ 61.702190][ T4942] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.757674][ T4951] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 61.767041][ T4950] IPVS: stopping master sync thread 4951 ... [ 61.796034][ T4942] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.867427][ T4942] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.919054][ T4963] tipc: Enabling of bearer rejected, failed to enable media [ 61.941574][ T4942] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.005791][ T1949] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.016601][ T1949] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.034042][ T4974] ext4: Unknown parameter 'mask' [ 62.038099][ T4972] lo speed is unknown, defaulting to 1000 [ 62.058036][ T1949] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.078499][ T1949] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.097430][ T4978] siw: device registration error -23 [ 62.104074][ T4978] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 62.280239][ T4995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 62.369278][ T4998] lo speed is unknown, defaulting to 1000 [ 62.789633][ T5001] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.411: error while reading EA inode 32 err=-116 [ 62.832314][ T5001] EXT4-fs (loop1): Remounting filesystem read-only [ 62.847291][ T5001] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 62.859448][ T5001] EXT4-fs (loop1): 1 orphan inode deleted [ 62.874904][ T5014] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.888159][ T5008] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.413: missing EA_INODE flag [ 62.915424][ T5014] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.415: bad orphan inode 13 [ 62.930956][ T5021] binfmt_misc: register: failed to install interpreter file ./file2 [ 62.940885][ T5008] EXT4-fs (loop5): Remounting filesystem read-only [ 62.950924][ T5021] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.007258][ T5014] ext4_test_bit(bit=12, block=18) = 1 [ 63.012699][ T5014] is_bad_inode(inode)=0 [ 63.016893][ T5014] NEXT_ORPHAN(inode)=2130706432 [ 63.021903][ T5014] max_ino=32 [ 63.025094][ T5014] i_nlink=1 [ 63.094134][ T5014] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 63.145401][ T5014] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 63.155888][ T5033] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.259680][ T5050] binfmt_misc: register: failed to install interpreter file ./file2 [ 63.270992][ T5050] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.283563][ T5045] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.294603][ T5045] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.303577][ T5055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.316657][ T5055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.337575][ T5045] JBD2: no valid journal superblock found [ 63.343478][ T5045] EXT4-fs (loop5): Could not load journal inode [ 63.361891][ T5055] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0102] [ 63.369961][ T5055] System zones: 0-2, 18-18, 34-34 [ 63.389622][ T5055] EXT4-fs error (device loop1): ext4_quota_enable:7177: inode #4: comm syz.1.427: iget: immutable or append flags not allowed on symlinks [ 63.411263][ T5055] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.427: Bad quota inode: 4, type: 1 [ 63.417246][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 63.448342][ T5066] set_capacity_and_notify: 15 callbacks suppressed [ 63.448418][ T5066] loop2: detected capacity change from 0 to 512 [ 63.456236][ T5055] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.465822][ T5066] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.476785][ T5054] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 63.487596][ T5054] loop4: partition table partially beyond EOD, truncated [ 63.497810][ T5066] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.432: bad orphan inode 13 [ 63.506879][ T5068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.431'. [ 63.507919][ T5066] ext4_test_bit(bit=12, block=18) = 1 [ 63.518547][ T5055] EXT4-fs (loop1): mount failed [ 63.521982][ T5066] is_bad_inode(inode)=0 [ 63.527140][ T5054] loop4: p1 start 30976 is beyond EOD, [ 63.530972][ T5066] NEXT_ORPHAN(inode)=2130706432 [ 63.530983][ T5066] max_ino=32 [ 63.530989][ T5066] i_nlink=1 [ 63.547673][ T5054] truncated [ 63.550768][ T5054] loop4: p2 size 16128 extends beyond EOD, truncated [ 63.557660][ T5066] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 63.559692][ T5054] loop4: p3 start 327168 is beyond EOD, truncated [ 63.581092][ T5066] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 63.591926][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'. [ 63.598403][ T5066] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.600940][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.616839][ T5069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.624200][ T5054] loop4: p5 start 30976 is beyond EOD, truncated [ 63.624643][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.630643][ T5054] loop4: p6 size 16128 extends beyond EOD, truncated [ 63.638065][ T5069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.689115][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 63.689165][ T29] audit: type=1400 audit(1767295649.320:4188): avc: denied { create } for pid=5072 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.718005][ T29] audit: type=1400 audit(1767295649.352:4189): avc: denied { setopt } for pid=5072 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.737410][ T29] audit: type=1400 audit(1767295649.352:4190): avc: denied { bind } for pid=5072 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 63.806238][ T5077] loop2: detected capacity change from 0 to 2048 [ 63.834347][ T29] audit: type=1326 audit(1767295649.467:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 63.959883][ T5091] siw: device registration error -23 [ 63.980241][ T5091] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 64.030093][ T5094] netlink: 'syz.5.441': attribute type 1 has an invalid length. [ 64.037852][ T5094] netlink: 32 bytes leftover after parsing attributes in process `syz.5.441'. [ 64.217905][ T29] audit: type=1326 audit(1767295649.467:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 64.241447][ T29] audit: type=1326 audit(1767295649.467:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 64.264921][ T29] audit: type=1326 audit(1767295649.467:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 64.273786][ T5105] loop2: detected capacity change from 0 to 512 [ 64.288585][ T29] audit: type=1326 audit(1767295649.467:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 64.318279][ T29] audit: type=1326 audit(1767295649.467:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 64.341572][ T29] audit: type=1326 audit(1767295649.467:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.5.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 64.361963][ T5105] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.390257][ T5104] loop1: detected capacity change from 0 to 1024 [ 64.409070][ T5105] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.439: bad orphan inode 13 [ 64.432791][ T5110] loop4: detected capacity change from 0 to 512 [ 64.450761][ T5104] EXT4-fs mount: 97 callbacks suppressed [ 64.450773][ T5104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.468927][ T5105] ext4_test_bit(bit=12, block=18) = 1 [ 64.474399][ T5105] is_bad_inode(inode)=0 [ 64.478666][ T5105] NEXT_ORPHAN(inode)=2130706432 [ 64.483518][ T5105] max_ino=32 [ 64.486742][ T5105] i_nlink=1 [ 64.490226][ T5104] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.502180][ T5110] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.509067][ T5105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.515186][ T5110] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.445: bad orphan inode 13 [ 64.531484][ T5105] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 64.546620][ T5110] ext4_test_bit(bit=12, block=18) = 1 [ 64.552068][ T5110] is_bad_inode(inode)=0 [ 64.552222][ T5105] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 64.556227][ T5110] NEXT_ORPHAN(inode)=2130706432 [ 64.556237][ T5110] max_ino=32 [ 64.572671][ T5110] i_nlink=1 [ 64.580652][ T5110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.597479][ T5105] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.619999][ T5118] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.629102][ T5119] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.444: bg 0: block 112: padding at end of block bitmap is not set [ 64.652588][ T5110] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 64.665194][ T53] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 64.668665][ T5121] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.679034][ T53] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 64.697212][ T53] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.697212][ T53] [ 64.703898][ T5110] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 64.709057][ T53] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 64.723988][ T5123] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.730245][ T5124] FAULT_INJECTION: forcing a failure. [ 64.730245][ T5124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.738838][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.751243][ T5124] CPU: 0 UID: 0 PID: 5124 Comm: syz.0.448 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.751275][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.751287][ T5124] Call Trace: [ 64.751294][ T5124] [ 64.751302][ T5124] __dump_stack+0x1d/0x30 [ 64.751327][ T5124] dump_stack_lvl+0x95/0xd0 [ 64.751409][ T5124] dump_stack+0x15/0x1b [ 64.751428][ T5124] should_fail_ex+0x265/0x280 [ 64.751450][ T5124] should_fail+0xb/0x20 [ 64.751469][ T5124] should_fail_usercopy+0x1a/0x20 [ 64.751574][ T5124] _copy_from_user+0x1c/0xb0 [ 64.751600][ T5124] ___sys_recvmsg+0xaa/0x370 [ 64.751625][ T5124] ? _parse_integer+0x27/0x40 [ 64.751651][ T5124] do_recvmmsg+0x1ef/0x540 [ 64.751704][ T5124] ? fput+0x8f/0xc0 [ 64.751728][ T5124] __x64_sys_recvmmsg+0xe5/0x170 [ 64.751778][ T5124] x64_sys_call+0x2b75/0x3000 [ 64.751801][ T5124] do_syscall_64+0xca/0x2b0 [ 64.751831][ T5124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.751933][ T5124] RIP: 0033:0x7f997a85f749 [ 64.751948][ T5124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.751964][ T5124] RSP: 002b:00007f99792a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 64.751983][ T5124] RAX: ffffffffffffffda RBX: 00007f997aab6090 RCX: 00007f997a85f749 [ 64.751996][ T5124] RDX: 0000000000000001 RSI: 0000200000004300 RDI: 0000000000000004 [ 64.752020][ T5124] RBP: 00007f99792a6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.752033][ T5124] R10: 0000000000000061 R11: 0000000000000246 R12: 0000000000000001 [ 64.752075][ T5124] R13: 00007f997aab6128 R14: 00007f997aab6090 R15: 00007fff637e7348 [ 64.752093][ T5124] [ 64.753377][ T53] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 64.943454][ T53] EXT4-fs (loop1): This should not happen!! Data will be lost [ 64.943454][ T53] [ 64.963325][ T5104] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.444: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 64.983459][ T5115] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.444: lblock 0 mapped to illegal pblock 0 (length 1) [ 65.003898][ T5115] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.444: Freeing blocks not in datazone - block = 8, count = 8 [ 65.080247][ T5115] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.444: Freeing blocks not in datazone - block = 1, count = 5 [ 65.099186][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.152252][ T5149] netlink: 132 bytes leftover after parsing attributes in process `syz.5.457'. [ 65.184021][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.457'. [ 65.197982][ T5132] loop2: detected capacity change from 0 to 8192 [ 65.218133][ T2279] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 65.230961][ T2279] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.230961][ T2279] [ 65.240805][ T2279] EXT4-fs (loop1): Total free blocks count 0 [ 65.246782][ T2279] EXT4-fs (loop1): Free/Dirty block details [ 65.252765][ T2279] EXT4-fs (loop1): free_blocks=0 [ 65.277272][ T5132] loop2: p1 < > p2 < > p3 p4 < > [ 65.282322][ T5132] loop2: partition table partially beyond EOD, truncated [ 65.307977][ T5132] loop2: p1 start 67108864 is beyond EOD, truncated [ 65.310383][ T5159] siw: device registration error -23 [ 65.324915][ T5159] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.328578][ T5164] loop5: detected capacity change from 0 to 2048 [ 65.363017][ T5132] loop2: p3 start 100859904 is beyond EOD, truncated [ 65.399011][ T5164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.420112][ T5167] netlink: 52 bytes leftover after parsing attributes in process `syz.4.462'. [ 65.458099][ T5168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.462'. [ 65.494021][ T5162] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.531467][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 65.548359][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 65.571161][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 65.586043][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.625829][ T5199] loop5: detected capacity change from 0 to 512 [ 65.648690][ T5186] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.667586][ T5199] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.704480][ T5199] EXT4-fs (loop5): mount failed [ 65.717650][ T5199] tipc: Started in network mode [ 65.722559][ T5199] tipc: Node identity 4, cluster identity 4711 [ 65.728803][ T5199] tipc: Node number set to 4 [ 65.744394][ T5208] Invalid argument reading file caps for ./file0 [ 65.775944][ T5204] loop1: detected capacity change from 0 to 2048 [ 65.791638][ T5186] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.833920][ T5204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.848726][ T5223] mmap: syz.2.472 (5223) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.867438][ T5223] netlink: 'syz.2.472': attribute type 10 has an invalid length. [ 65.875462][ T5225] loop4: detected capacity change from 0 to 512 [ 65.896418][ T5186] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.915907][ T5223] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 65.928329][ T5225] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 65.948183][ T5223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.960661][ T5225] xt_hashlimit: max too large, truncated to 1048576 [ 66.009832][ T5186] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.039741][ T5223] bond_slave_0: entered promiscuous mode [ 66.045510][ T5223] bond_slave_1: entered promiscuous mode [ 66.051172][ T5223] syz_tun: entered promiscuous mode [ 66.063364][ T5223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.082660][ T5223] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 66.091990][ T5223] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 66.100460][ T5223] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 66.586253][ T5277] FAULT_INJECTION: forcing a failure. [ 66.586253][ T5277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.599399][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: syz.4.480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.599427][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.599461][ T5277] Call Trace: [ 66.599467][ T5277] [ 66.599473][ T5277] __dump_stack+0x1d/0x30 [ 66.599494][ T5277] dump_stack_lvl+0x95/0xd0 [ 66.599514][ T5277] dump_stack+0x15/0x1b [ 66.599534][ T5277] should_fail_ex+0x265/0x280 [ 66.599558][ T5277] should_fail+0xb/0x20 [ 66.599591][ T5277] should_fail_usercopy+0x1a/0x20 [ 66.599680][ T5277] _copy_from_user+0x1c/0xb0 [ 66.599702][ T5277] do_sock_getsockopt+0xf1/0x210 [ 66.599798][ T5277] __x64_sys_getsockopt+0x11e/0x1a0 [ 66.599838][ T5277] x64_sys_call+0x2dc7/0x3000 [ 66.599857][ T5277] do_syscall_64+0xca/0x2b0 [ 66.599883][ T5277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.599909][ T5277] RIP: 0033:0x7f15300cf749 [ 66.599925][ T5277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.599988][ T5277] RSP: 002b:00007f152eb2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 66.600006][ T5277] RAX: ffffffffffffffda RBX: 00007f1530325fa0 RCX: 00007f15300cf749 [ 66.600020][ T5277] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 66.600034][ T5277] RBP: 00007f152eb2f090 R08: 0000200000000140 R09: 0000000000000000 [ 66.600049][ T5277] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 66.600062][ T5277] R13: 00007f1530326038 R14: 00007f1530325fa0 R15: 00007fff8cf0ae18 [ 66.600082][ T5277] [ 66.905243][ T5288] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.485: EA inode hash validation failed [ 66.938953][ T5288] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.485: corrupted inode contents [ 66.956466][ T5288] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.485: mark_inode_dirty error [ 66.973073][ T5295] binfmt_misc: register: failed to install interpreter file ./file2 [ 66.983844][ T5295] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 67.002012][ T5288] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.485: corrupted inode contents [ 67.014164][ T5288] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.485: mark_inode_dirty error [ 67.026778][ T5288] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.485: mark inode dirty (error -117) [ 67.039729][ T5288] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 67.049020][ T5288] EXT4-fs (loop4): 1 orphan inode deleted [ 67.055358][ T5288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.082100][ T2279] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.103226][ T5297] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.119233][ T5297] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.487: bad orphan inode 13 [ 67.133568][ T5297] ext4_test_bit(bit=12, block=18) = 1 [ 67.138951][ T5297] is_bad_inode(inode)=0 [ 67.143196][ T5297] NEXT_ORPHAN(inode)=2130706432 [ 67.148110][ T5297] max_ino=32 [ 67.151292][ T5297] i_nlink=1 [ 67.156175][ T2279] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.192952][ T5300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.209423][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.248248][ T5297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.277820][ T2279] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.302517][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.319595][ T2279] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.328575][ T5297] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 67.355726][ T5300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.376285][ T5306] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 67.404554][ T5297] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 67.459941][ T5300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.509939][ T5300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.514355][ T5314] FAULT_INJECTION: forcing a failure. [ 67.514355][ T5314] name failslab, interval 1, probability 0, space 0, times 0 [ 67.520692][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.532867][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.1.492 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.532893][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.532905][ T5314] Call Trace: [ 67.532992][ T5314] [ 67.533000][ T5314] __dump_stack+0x1d/0x30 [ 67.533023][ T5314] dump_stack_lvl+0x95/0xd0 [ 67.533043][ T5314] dump_stack+0x15/0x1b [ 67.533084][ T5314] should_fail_ex+0x265/0x280 [ 67.533118][ T5314] should_failslab+0x8c/0xb0 [ 67.533173][ T5314] __kmalloc_noprof+0xb9/0x5a0 [ 67.533234][ T5314] ? usb_alloc_urb+0x42/0xc0 [ 67.533260][ T5314] usb_alloc_urb+0x42/0xc0 [ 67.533295][ T5314] usb_control_msg+0xd2/0x250 [ 67.533323][ T5314] hub_ext_port_status+0xc0/0x480 [ 67.533417][ T5314] hub_activate+0x5be/0x10c0 [ 67.533491][ T5314] hub_resume+0x47/0x1e0 [ 67.533546][ T5314] usb_resume_both+0x329/0x640 [ 67.533632][ T5314] ? __pfx_usb_runtime_resume+0x10/0x10 [ 67.533657][ T5314] usb_runtime_resume+0x21/0x30 [ 67.533732][ T5314] __rpm_callback+0x2ab/0x6e0 [ 67.533759][ T5314] ? __update_runtime_status+0xe8/0x1c0 [ 67.533787][ T5314] ? __pfx_usb_runtime_resume+0x10/0x10 [ 67.533871][ T5314] rpm_resume+0x904/0xd20 [ 67.533894][ T5314] ? klist_dec_and_del+0xba/0x270 [ 67.533917][ T5314] __pm_runtime_resume+0xd6/0x100 [ 67.534011][ T5314] usb_autoresume_device+0x23/0xc0 [ 67.534034][ T5314] usbdev_open+0x121/0x450 [ 67.534088][ T5314] chrdev_open+0x2eb/0x3a0 [ 67.534145][ T5314] ? __pfx_chrdev_open+0x10/0x10 [ 67.534165][ T5314] do_dentry_open+0x54b/0xa60 [ 67.534249][ T5314] vfs_open+0x37/0x1e0 [ 67.534273][ T5314] path_openat+0x1ddd/0x23b0 [ 67.534303][ T5314] ? filemap_map_pages+0xc0e/0xe50 [ 67.534335][ T5314] do_filp_open+0x109/0x230 [ 67.534451][ T5314] do_sys_openat2+0xa6/0x150 [ 67.534477][ T5314] __x64_sys_openat+0xf2/0x120 [ 67.534504][ T5314] x64_sys_call+0x2b07/0x3000 [ 67.534533][ T5314] do_syscall_64+0xca/0x2b0 [ 67.534564][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.534585][ T5314] RIP: 0033:0x7f08a76ddf90 [ 67.534601][ T5314] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 67.534694][ T5314] RSP: 002b:00007f08a6146b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 67.534713][ T5314] RAX: ffffffffffffffda RBX: 0000000000000302 RCX: 00007f08a76ddf90 [ 67.534726][ T5314] RDX: 0000000000000302 RSI: 00007f08a6146c10 RDI: 00000000ffffff9c [ 67.534738][ T5314] RBP: 00007f08a6146c10 R08: 0000000000000000 R09: 0000000000000000 [ 67.534754][ T5314] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 67.534767][ T5314] R13: 00007f08a7936038 R14: 00007f08a7935fa0 R15: 00007ffe2140d8b8 [ 67.534791][ T5314] [ 67.534805][ T5314] hub 8-0:1.0: hub_ext_port_status failed (err = -12) [ 67.682451][ T5281] syz.5.483 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 67.831155][ T5281] CPU: 1 UID: 0 PID: 5281 Comm: syz.5.483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.831172][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.831180][ T5281] Call Trace: [ 67.831184][ T5281] [ 67.831190][ T5281] __dump_stack+0x1d/0x30 [ 67.831205][ T5281] dump_stack_lvl+0x95/0xd0 [ 67.831218][ T5281] dump_stack+0x15/0x1b [ 67.831296][ T5281] dump_header+0x81/0x240 [ 67.831311][ T5281] oom_kill_process+0x295/0x350 [ 67.831324][ T5281] out_of_memory+0x97b/0xb80 [ 67.831409][ T5281] try_charge_memcg+0x610/0xa10 [ 67.831432][ T5281] obj_cgroup_charge_pages+0xa6/0x150 [ 67.831448][ T5281] __memcg_kmem_charge_page+0x9f/0x170 [ 67.831510][ T5281] __alloc_frozen_pages_noprof+0x18f/0x360 [ 67.831578][ T5281] alloc_pages_mpol+0xb3/0x260 [ 67.831595][ T5281] alloc_pages_noprof+0x90/0x130 [ 67.831611][ T5281] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 67.831750][ T5281] __kvmalloc_node_noprof+0x492/0x6b0 [ 67.831835][ T5281] ? ip_set_alloc+0x24/0x30 [ 67.831852][ T5281] ? ip_set_alloc+0x24/0x30 [ 67.831880][ T5281] ip_set_alloc+0x24/0x30 [ 67.831896][ T5281] hash_netportnet_create+0x27d/0x730 [ 67.831976][ T5281] ? __pfx_hash_netportnet_create+0x10/0x10 [ 67.831993][ T5281] ip_set_create+0x3cc/0x970 [ 67.832016][ T5281] ? __nla_parse+0x40/0x60 [ 67.832086][ T5281] nfnetlink_rcv_msg+0x4c6/0x590 [ 67.832124][ T5281] netlink_rcv_skb+0x123/0x220 [ 67.832141][ T5281] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 67.832158][ T5281] nfnetlink_rcv+0x167/0x16c0 [ 67.832175][ T5281] ? kmem_cache_free+0xe3/0x3a0 [ 67.832189][ T5281] ? __kfree_skb+0x109/0x150 [ 67.832202][ T5281] ? nlmon_xmit+0x4f/0x60 [ 67.832271][ T5281] ? consume_skb+0x49/0x150 [ 67.832284][ T5281] ? nlmon_xmit+0x4f/0x60 [ 67.832294][ T5281] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 67.832326][ T5281] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 67.832341][ T5281] ? __dev_queue_xmit+0x148/0x1ee0 [ 67.832394][ T5281] ? ref_tracker_free+0x37d/0x3e0 [ 67.832410][ T5281] ? __netlink_deliver_tap+0x4dc/0x500 [ 67.832429][ T5281] netlink_unicast+0x5c0/0x690 [ 67.832504][ T5281] netlink_sendmsg+0x58b/0x6b0 [ 67.832524][ T5281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.832541][ T5281] __sock_sendmsg+0x145/0x180 [ 67.832552][ T5281] ____sys_sendmsg+0x31e/0x4a0 [ 67.832610][ T5281] ___sys_sendmsg+0x17b/0x1d0 [ 67.832632][ T5281] __x64_sys_sendmsg+0xd4/0x160 [ 67.832746][ T5281] x64_sys_call+0x17ba/0x3000 [ 67.832763][ T5281] do_syscall_64+0xca/0x2b0 [ 67.832796][ T5281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.832860][ T5281] RIP: 0033:0x7f6c9281f749 [ 67.832871][ T5281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.832881][ T5281] RSP: 002b:00007f6c91287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.832973][ T5281] RAX: ffffffffffffffda RBX: 00007f6c92a75fa0 RCX: 00007f6c9281f749 [ 67.833034][ T5281] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 67.833041][ T5281] RBP: 00007f6c928a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 67.833048][ T5281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.833055][ T5281] R13: 00007f6c92a76038 R14: 00007f6c92a75fa0 R15: 00007ffe17833828 [ 67.833066][ T5281] [ 67.833070][ T5281] memory: usage 307200kB, limit 307200kB, failcnt 119 [ 68.161832][ T5281] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0 [ 68.169765][ T5281] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 68.177120][ T5281] Memory cgroup stats for /syz5: [ 68.177495][ T5281] cache 0 [ 68.185470][ T5281] rss 8192 [ 68.188466][ T5281] shmem 0 [ 68.191406][ T5281] mapped_file 0 [ 68.194858][ T5281] dirty 0 [ 68.197880][ T5281] writeback 0 [ 68.201229][ T5281] workingset_refault_anon 46 [ 68.205804][ T5281] workingset_refault_file 0 [ 68.210336][ T5281] swap 151552 [ 68.213661][ T5281] swapcached 65536 [ 68.217358][ T5281] pgpgin 66521 [ 68.220772][ T5281] pgpgout 66504 [ 68.224318][ T5281] pgfault 20074 [ 68.227785][ T5281] pgmajfault 37 [ 68.231275][ T5281] inactive_anon 61440 [ 68.235242][ T5281] active_anon 4096 [ 68.239012][ T5281] inactive_file 4096 [ 68.242897][ T5281] active_file 0 [ 68.246336][ T5281] unevictable 0 [ 68.249888][ T5281] hierarchical_memory_limit 314572800 [ 68.255315][ T5281] hierarchical_memsw_limit 9223372036854771712 [ 68.261505][ T5281] total_cache 0 [ 68.264981][ T5281] total_rss 8192 [ 68.268562][ T5281] total_shmem 0 [ 68.272013][ T5281] total_mapped_file 0 [ 68.276002][ T5281] total_dirty 0 [ 68.279457][ T5281] total_writeback 0 [ 68.283240][ T5281] total_workingset_refault_anon 46 [ 68.288363][ T5281] total_workingset_refault_file 0 [ 68.293371][ T5281] total_swap 151552 [ 68.297208][ T5281] total_swapcached 65536 [ 68.301434][ T5281] total_pgpgin 66521 [ 68.305343][ T5281] total_pgpgout 66504 [ 68.309387][ T5281] total_pgfault 20074 [ 68.313342][ T5281] total_pgmajfault 37 [ 68.317406][ T5281] total_inactive_anon 61440 [ 68.321896][ T5281] total_active_anon 4096 [ 68.326144][ T5281] total_inactive_file 4096 [ 68.330619][ T5281] total_active_file 0 [ 68.334594][ T5281] total_unevictable 0 [ 68.338639][ T5281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.483,pid=5280,uid=0 [ 68.353153][ T5281] Memory cgroup out of memory: Killed process 5280 (syz.5.483) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 68.407342][ T53] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.417121][ T5329] set_capacity_and_notify: 3 callbacks suppressed [ 68.417133][ T5329] loop1: detected capacity change from 0 to 2048 [ 68.430572][ T53] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.443353][ T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.453636][ T5329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.478556][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.501407][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.525106][ T5333] binfmt_misc: register: failed to install interpreter file ./file2 [ 68.554916][ T5337] loop2: detected capacity change from 0 to 512 [ 68.576324][ T5333] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 68.593910][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 68.636455][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 68.636468][ T29] audit: type=1107 audit(1767295654.507:4566): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 68.643881][ T5337] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.682730][ T5337] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.498: bad orphan inode 13 [ 68.710551][ T29] audit: type=1400 audit(1767295654.580:4567): avc: denied { setopt } for pid=5346 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.733022][ T5337] ext4_test_bit(bit=12, block=18) = 1 [ 68.738406][ T5337] is_bad_inode(inode)=0 [ 68.742643][ T5337] NEXT_ORPHAN(inode)=2130706432 [ 68.747513][ T5337] max_ino=32 [ 68.750713][ T5337] i_nlink=1 [ 68.770335][ T9] hid-generic 7FFF:0000:0007.0001: item fetching failed at offset 0/236 [ 68.770734][ T5349] : renamed from team_slave_1 (while UP) [ 68.784970][ T29] audit: type=1326 audit(1767295654.664:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 68.808330][ T29] audit: type=1326 audit(1767295654.664:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 68.811985][ T5353] loop4: detected capacity change from 0 to 512 [ 68.831808][ T29] audit: type=1326 audit(1767295654.664:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 68.846123][ T9] hid-generic 7FFF:0000:0007.0001: probe with driver hid-generic failed with error -22 [ 68.861500][ T29] audit: type=1326 audit(1767295654.664:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 68.873201][ T5337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.894504][ T29] audit: type=1326 audit(1767295654.664:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 68.930082][ T29] audit: type=1326 audit(1767295654.664:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 68.953697][ T29] audit: type=1326 audit(1767295654.664:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 68.976994][ T29] audit: type=1326 audit(1767295654.664:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9281f749 code=0x7ffc0000 [ 69.002240][ T5357] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 69.016029][ T5337] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 69.026853][ T5353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.059303][ T5353] EXT4-fs (loop4): 1 truncate cleaned up [ 69.065442][ T5353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.071754][ T5351] tipc: New replicast peer: 255.255.255.83 [ 69.083747][ T5351] tipc: Enabled bearer , priority 10 [ 69.090740][ T5337] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 69.092038][ T5365] block device autoloading is deprecated and will be removed. [ 69.125752][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.193779][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.218528][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 69.256219][ T5383] lo speed is unknown, defaulting to 1000 [ 69.313570][ T5383] loop5: detected capacity change from 0 to 164 [ 69.326817][ T5387] loop2: detected capacity change from 0 to 512 [ 69.358812][ T5383] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 69.384943][ T5383] sd 0:0:1:0: device reset [ 69.389705][ T5387] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.514: EA inode hash validation failed [ 69.409568][ T5387] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.514: corrupted inode contents [ 69.432924][ T5387] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.514: mark_inode_dirty error [ 69.467567][ T5391] siw: device registration error -23 [ 69.476371][ T5387] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.514: corrupted inode contents [ 69.488838][ T5391] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 69.500345][ T5394] loop5: detected capacity change from 0 to 512 [ 69.508330][ T5394] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.523958][ T5394] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.518: bad orphan inode 13 [ 69.538147][ T5387] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.514: mark_inode_dirty error [ 69.553545][ T5394] ext4_test_bit(bit=12, block=18) = 1 [ 69.558935][ T5394] is_bad_inode(inode)=0 [ 69.563114][ T5394] NEXT_ORPHAN(inode)=2130706432 [ 69.567966][ T5394] max_ino=32 [ 69.571189][ T5394] i_nlink=1 [ 69.581410][ T5387] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.514: mark inode dirty (error -117) [ 69.594253][ T5394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.606860][ T5387] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 69.618671][ T5387] EXT4-fs (loop2): 1 orphan inode deleted [ 69.624834][ T5387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.638228][ T5394] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 69.667202][ T5394] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 69.687488][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.696758][ T5394] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 69.791499][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.835287][ T5404] loop5: detected capacity change from 0 to 512 [ 69.842584][ T5404] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.881890][ T5404] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 69.938336][ T5410] loop1: detected capacity change from 0 to 512 [ 69.967942][ T5404] EXT4-fs error (device loop5): ext4_orphan_get:1391: comm syz.5.522: inode #15: comm syz.5.522: iget: illegal inode # [ 70.008838][ T5410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.023764][ T5404] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.522: couldn't read orphan inode 15 (err -117) [ 70.062307][ T5410] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.083989][ T5404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.108662][ T5418] loop2: detected capacity change from 0 to 512 [ 70.135894][ T5418] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.526: error while reading EA inode 32 err=-116 [ 70.211674][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.228930][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.256303][ T5418] EXT4-fs (loop2): Remounting filesystem read-only [ 70.294998][ T5418] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 70.352441][ T5418] EXT4-fs (loop2): 1 orphan inode deleted [ 70.357160][ T5426] loop1: detected capacity change from 0 to 2048 [ 70.396011][ T5418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.410366][ T5426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.436536][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.456716][ T5418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.584863][ T5433] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.530: error while reading EA inode 32 err=-116 [ 70.609394][ T5433] EXT4-fs (loop1): Remounting filesystem read-only [ 70.615974][ T5433] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 70.640585][ T5433] EXT4-fs (loop1): 1 orphan inode deleted [ 70.648898][ T5433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.714434][ T5433] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.753336][ T5441] netlink: 76 bytes leftover after parsing attributes in process `syz.2.533'. [ 70.872146][ T5446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5446 comm=syz.2.535 [ 71.067843][ T5459] netlink: 28 bytes leftover after parsing attributes in process `'. [ 71.226670][ T5466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 71.271434][ T5468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=5468 comm=syz.1.542 [ 71.313148][ T5474] bridge0: port 1(gretap0) entered blocking state [ 71.319630][ T5474] bridge0: port 1(gretap0) entered disabled state [ 71.326976][ T5474] gretap0: entered allmulticast mode [ 71.332880][ T5474] gretap0: entered promiscuous mode [ 71.338800][ T5474] bridge0: port 1(gretap0) entered blocking state [ 71.345258][ T5474] bridge0: port 1(gretap0) entered forwarding state [ 71.365435][ T5474] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 71.465705][ T3010] udevd[3010]: worker [3308] terminated by signal 33 (Unknown signal 33) [ 71.489821][ T5487] EXT4-fs: Ignoring removed i_version option [ 71.495652][ T3010] udevd[3010]: worker [3308] failed while handling '/devices/virtual/block/loop1' [ 71.495847][ T5487] EXT4-fs: Ignoring removed bh option [ 71.527315][ T3010] udevd[3010]: worker [3526] terminated by signal 33 (Unknown signal 33) [ 71.546131][ T3010] udevd[3010]: worker [3526] failed while handling '/devices/virtual/block/loop5' [ 71.566934][ T3010] udevd[3010]: worker [3520] terminated by signal 33 (Unknown signal 33) [ 71.585109][ T3010] udevd[3010]: worker [3520] failed while handling '/devices/virtual/block/loop1' [ 71.599960][ T5487] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 71.665411][ T5493] EXT4-fs: Ignoring removed i_version option [ 71.671535][ T5493] EXT4-fs: Ignoring removed bh option [ 71.682313][ T5498] EXT4-fs: Ignoring removed i_version option [ 71.688407][ T5498] EXT4-fs: Ignoring removed bh option [ 71.724499][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 71.734146][ T5493] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 71.746307][ T5498] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 71.758979][ T5505] FAULT_INJECTION: forcing a failure. [ 71.758979][ T5505] name failslab, interval 1, probability 0, space 0, times 0 [ 71.771710][ T5505] CPU: 0 UID: 0 PID: 5505 Comm: syz.2.555 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.771808][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.771860][ T5505] Call Trace: [ 71.771867][ T5505] [ 71.771875][ T5505] __dump_stack+0x1d/0x30 [ 71.771896][ T5505] dump_stack_lvl+0x95/0xd0 [ 71.771913][ T5505] dump_stack+0x15/0x1b [ 71.771983][ T5505] should_fail_ex+0x265/0x280 [ 71.772003][ T5505] should_failslab+0x8c/0xb0 [ 71.772022][ T5505] __kmalloc_noprof+0xb9/0x5a0 [ 71.772042][ T5505] ? unix_bind+0x1c4/0x940 [ 71.772089][ T5505] unix_bind+0x1c4/0x940 [ 71.772118][ T5505] __sys_bind+0x1d1/0x2a0 [ 71.772145][ T5505] __x64_sys_bind+0x3f/0x50 [ 71.772230][ T5505] x64_sys_call+0x2ceb/0x3000 [ 71.772344][ T5505] do_syscall_64+0xca/0x2b0 [ 71.772474][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.772567][ T5505] RIP: 0033:0x7f50982ef749 [ 71.772603][ T5505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.772621][ T5505] RSP: 002b:00007f5096d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 71.772641][ T5505] RAX: ffffffffffffffda RBX: 00007f5098545fa0 RCX: 00007f50982ef749 [ 71.772655][ T5505] RDX: 000000000000006e RSI: 00002000000002c0 RDI: 0000000000000005 [ 71.772668][ T5505] RBP: 00007f5096d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.772682][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.772728][ T5505] R13: 00007f5098546038 R14: 00007f5098545fa0 R15: 00007ffe4e753818 [ 71.772744][ T5505] [ 72.021359][ T5507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.556'. [ 72.156465][ T5515] EXT4-fs: Ignoring removed oldalloc option [ 72.162527][ T5515] EXT4-fs: Ignoring removed orlov option [ 72.168263][ T5515] EXT4-fs: Ignoring removed oldalloc option [ 72.174349][ T5515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.181292][ T5516] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 72.202590][ T5515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.298184][ T5530] EXT4-fs error (device loop4): ext4_xattr_set_entry:1669: inode #13: comm syz.4.559: corrupted xattr entries [ 72.309892][ T5515] infiniband syz!: set active [ 72.309910][ T5515] infiniband syz!: added team_slave_0 [ 72.324774][ T5529] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.331448][ T5529] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.564: bad orphan inode 13 [ 72.345431][ T5529] ext4_test_bit(bit=12, block=18) = 1 [ 72.349524][ T5515] RDS/IB: syz!: added [ 72.350807][ T5529] is_bad_inode(inode)=0 [ 72.350816][ T5529] NEXT_ORPHAN(inode)=2130706432 [ 72.350824][ T5529] max_ino=32 [ 72.350831][ T5529] i_nlink=1 [ 72.370767][ T5530] EXT4-fs (loop4): Remounting filesystem read-only [ 72.376135][ T5515] smc: adding ib device syz! with port count 1 [ 72.379771][ T5529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.385447][ T5515] smc: ib device syz! port 1 has no pnetid [ 72.396072][ T5530] EXT4-fs warning (device loop4): ext4_xattr_ibody_set:2281: inode #18: comm syz.4.559: dec ref error=-30 [ 72.414858][ T5527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.431863][ T5529] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.449820][ T5529] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 72.461976][ T5529] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 72.480368][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.572630][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.615597][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.754392][ T5571] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.798667][ T5578] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.813180][ T5578] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.821285][ T5578] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.828418][ T5578] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.578: Failed to acquire dquot type 0 [ 72.840030][ T5578] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.578: Failed to acquire dquot type 0 [ 72.851545][ T5578] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.578: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.865000][ T5578] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.578: Failed to acquire dquot type 0 [ 72.876364][ T5578] EXT4-fs (loop0): 1 orphan inode deleted [ 72.882623][ T5578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.904137][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.957621][ T5588] syzkaller0: entered promiscuous mode [ 72.963247][ T5588] syzkaller0: entered allmulticast mode [ 73.344420][ T5623] : renamed from wg2 (while UP) [ 73.392356][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.585'. [ 73.432461][ T29] kauditd_printk_skb: 698 callbacks suppressed [ 73.432515][ T29] audit: type=1107 audit(1767295659.546:5268): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 73.510869][ T5650] siw: device registration error -23 [ 73.519873][ T5650] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 73.520024][ T29] audit: type=1326 audit(1767295659.641:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.554672][ T29] audit: type=1326 audit(1767295659.672:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.578083][ T29] audit: type=1326 audit(1767295659.672:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.578109][ T29] audit: type=1326 audit(1767295659.672:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.578134][ T29] audit: type=1326 audit(1767295659.672:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.578174][ T29] audit: type=1326 audit(1767295659.672:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.578195][ T29] audit: type=1326 audit(1767295659.672:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.578417][ T29] audit: type=1326 audit(1767295659.672:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.578439][ T29] audit: type=1326 audit(1767295659.672:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 73.726703][ T5660] set_capacity_and_notify: 10 callbacks suppressed [ 73.726721][ T5660] loop4: detected capacity change from 0 to 512 [ 73.755978][ T5660] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.793672][ T5660] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.592: bad orphan inode 13 [ 73.804812][ T5660] ext4_test_bit(bit=12, block=18) = 1 [ 73.810266][ T5660] is_bad_inode(inode)=0 [ 73.814511][ T5660] NEXT_ORPHAN(inode)=2130706432 [ 73.819351][ T5660] max_ino=32 [ 73.822534][ T5660] i_nlink=1 [ 73.826160][ T5660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.844115][ T5664] loop1: detected capacity change from 0 to 764 [ 73.854109][ T5664] Symlink component flag not implemented [ 73.860490][ T5660] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 73.860525][ T5664] Symlink component flag not implemented (129) [ 73.881297][ T5664] rock: directory entry would overflow storage [ 73.887527][ T5664] rock: sig=0x4f50, size=4, remaining=3 [ 73.893064][ T5664] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 73.901607][ T5660] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 73.911925][ T5660] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 73.952237][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.979834][ T5673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.012766][ T5677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'. [ 74.029903][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.045052][ T5678] loop2: detected capacity change from 0 to 2048 [ 74.059579][ T5673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.071449][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.110136][ T5673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.137622][ T5686] loop1: detected capacity change from 0 to 512 [ 74.151027][ T5686] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.157522][ T5686] EXT4-fs: Ignoring removed bh option [ 74.165888][ T5686] ext4: Unknown parameter 'obj_role' [ 74.186715][ T5673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.229108][ T5686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'. [ 74.238134][ T5686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'. [ 74.293121][ T5703] Falling back ldisc for ptm0. [ 74.313091][ T2279] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.327748][ T1949] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.340998][ T5708] loop1: detected capacity change from 0 to 512 [ 74.364591][ T1949] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.364613][ T5708] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.386580][ T5708] EXT4-fs (loop1): 1 truncate cleaned up [ 74.398084][ T5708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.411342][ T1949] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.471051][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.500184][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.543533][ T5727] loop2: detected capacity change from 0 to 2048 [ 74.560660][ T5725] loop5: detected capacity change from 0 to 2048 [ 74.577800][ T5727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.612414][ T5725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.626292][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.688953][ T5742] loop2: detected capacity change from 0 to 764 [ 74.709293][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.755191][ T5744] loop1: detected capacity change from 0 to 512 [ 74.780297][ T5744] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.612: EA inode hash validation failed [ 74.793232][ T5744] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.612: corrupted inode contents [ 74.805587][ T5744] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.612: mark_inode_dirty error [ 74.819280][ T5744] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.612: corrupted inode contents [ 74.851948][ T5742] Symlink component flag not implemented [ 74.860247][ T5751] loop5: detected capacity change from 0 to 512 [ 74.872510][ T5744] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.612: mark_inode_dirty error [ 74.876492][ T5742] Symlink component flag not implemented (129) [ 74.897155][ T5744] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.612: mark inode dirty (error -117) [ 74.897305][ T5751] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.615: EA inode hash validation failed [ 74.922460][ T5744] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 74.922756][ T5751] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.615: corrupted inode contents [ 74.943509][ T5751] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.615: mark_inode_dirty error [ 74.944032][ T5742] rock: directory entry would overflow storage [ 74.954795][ T5744] EXT4-fs (loop1): 1 orphan inode deleted [ 74.960862][ T5742] rock: sig=0x4f50, size=4, remaining=3 [ 74.967060][ T5744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.972146][ T5742] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 74.992111][ T5751] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.615: corrupted inode contents [ 75.013004][ T5751] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.615: mark_inode_dirty error [ 75.013612][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.036061][ T5751] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.615: mark inode dirty (error -117) [ 75.048949][ T5751] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 75.080617][ T5751] EXT4-fs (loop5): 1 orphan inode deleted [ 75.087094][ T5751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.129482][ T3664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.140457][ T5765] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.203215][ T5771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.223342][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.306998][ T5777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.320966][ T5777] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.453070][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.493784][ T5782] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.500528][ T5782] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.623: bad orphan inode 13 [ 75.510735][ T5782] ext4_test_bit(bit=12, block=18) = 1 [ 75.516208][ T5782] is_bad_inode(inode)=0 [ 75.520382][ T5782] NEXT_ORPHAN(inode)=2130706432 [ 75.525300][ T5782] max_ino=32 [ 75.528479][ T5782] i_nlink=1 [ 75.531982][ T5782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.545474][ T5782] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 75.562026][ T5782] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 75.655615][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.702949][ T5788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 75.761777][ T5794] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.762657][ T5796] netlink: 'syz.4.625': attribute type 10 has an invalid length. [ 75.774258][ T5794] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.626: bad orphan inode 13 [ 75.781608][ T5796] team0: Port device dummy0 added [ 75.790334][ T5794] ext4_test_bit(bit=12, block=18) = 1 [ 75.795554][ T5796] netlink: 'syz.4.625': attribute type 10 has an invalid length. [ 75.796101][ T5794] is_bad_inode(inode)=0 [ 75.807941][ T5794] NEXT_ORPHAN(inode)=2130706432 [ 75.812800][ T5794] max_ino=32 [ 75.815973][ T5794] i_nlink=1 [ 75.824855][ T5796] team0: Port device dummy0 removed [ 75.825334][ T5794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.832824][ T5796] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.916765][ T5794] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 75.944561][ T5794] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 75.974179][ T5794] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 75.983484][ T5806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.004638][ T5804] netlink: 'syz.1.629': attribute type 7 has an invalid length. [ 76.012413][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 76.034275][ T5806] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.630: invalid indirect mapped block 4294967295 (level 1) [ 76.077134][ T5806] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.630: invalid indirect mapped block 4294967295 (level 1) [ 76.091734][ T5806] EXT4-fs (loop4): 2 truncates cleaned up [ 76.097965][ T5806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.155940][ T5806] SELinux: Context 5cI;Pٹç.]NE E_!验%PM|!~,7g[9>:57;Ւ;m>)FSS3WZu-N Qq5/m <y6#c3ͯ-ÖC is not valid (left unmapped). [ 76.176939][ T5806] SELinux: Context Y7j [ 76.176939][ T5806] u/$2Sٟ2'ks2- vjd #,N< [ 76.176939][ T5806] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 76.224732][ T5806] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 76.308019][ T5806] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i&Zw8 lX&D;td BIݛ~L [ 76.437181][ T5806] uSċkxIRI$4"lX7f9٬bB|72*kNM is not valid (left unmapped). [ 76.464684][ T5806] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aSI> is not valid (left unmapped). [ 76.480282][ T5844] syz.1.644: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 76.494878][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.1.644 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.494907][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.494980][ T5844] Call Trace: [ 76.494987][ T5844] [ 76.494994][ T5844] __dump_stack+0x1d/0x30 [ 76.495019][ T5844] dump_stack_lvl+0x95/0xd0 [ 76.495041][ T5844] dump_stack+0x15/0x1b [ 76.495104][ T5844] warn_alloc+0x12b/0x1a0 [ 76.495129][ T5844] ? __schedule+0x85f/0xcd0 [ 76.495225][ T5844] ? __rcu_read_unlock+0x4f/0x70 [ 76.495244][ T5844] __vmalloc_node_range_noprof+0xa0/0x1310 [ 76.495272][ T5844] ? __futex_wait+0x1fa/0x260 [ 76.495290][ T5844] ? __pfx_futex_wake_mark+0x10/0x10 [ 76.495372][ T5844] ? __rcu_read_unlock+0x4f/0x70 [ 76.495389][ T5844] ? avc_has_perm_noaudit+0xab/0x130 [ 76.495407][ T5844] ? should_fail_ex+0x30/0x280 [ 76.495430][ T5844] ? should_failslab+0x8c/0xb0 [ 76.495456][ T5844] vmalloc_user_noprof+0x7d/0xb0 [ 76.495481][ T5844] ? xskq_create+0x80/0xe0 [ 76.495507][ T5844] xskq_create+0x80/0xe0 [ 76.495548][ T5844] xsk_init_queue+0x95/0xf0 [ 76.495578][ T5844] xsk_setsockopt+0x3f5/0x640 [ 76.495653][ T5844] ? __pfx_xsk_setsockopt+0x10/0x10 [ 76.495690][ T5844] __sys_setsockopt+0x184/0x200 [ 76.495718][ T5844] __x64_sys_setsockopt+0x64/0x80 [ 76.495755][ T5844] x64_sys_call+0x21d5/0x3000 [ 76.495775][ T5844] do_syscall_64+0xca/0x2b0 [ 76.495858][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.495876][ T5844] RIP: 0033:0x7f08a76df749 [ 76.495892][ T5844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.495910][ T5844] RSP: 002b:00007f08a6147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.495950][ T5844] RAX: ffffffffffffffda RBX: 00007f08a7935fa0 RCX: 00007f08a76df749 [ 76.495965][ T5844] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 76.495979][ T5844] RBP: 00007f08a7763f91 R08: 0000000000000004 R09: 0000000000000000 [ 76.495993][ T5844] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.496059][ T5844] R13: 00007f08a7936038 R14: 00007f08a7935fa0 R15: 00007ffe2140d8b8 [ 76.496080][ T5844] [ 76.498972][ T5845] siw: device registration error -23 [ 76.505769][ T5844] Mem-Info: [ 76.607316][ T5850] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 76.612527][ T5844] active_anon:7903 inactive_anon:16 isolated_anon:0 [ 76.612527][ T5844] active_file:18930 inactive_file:2339 isolated_file:0 [ 76.612527][ T5844] unevictable:0 dirty:79 writeback:29 [ 76.612527][ T5844] slab_reclaimable:3404 slab_unreclaimable:17450 [ 76.612527][ T5844] mapped:29807 shmem:341 pagetables:1321 [ 76.612527][ T5844] sec_pagetables:0 bounce:0 [ 76.612527][ T5844] kernel_misc_reclaimable:0 [ 76.612527][ T5844] free:1825369 free_pcp:56597 free_cma:0 [ 76.776626][ T5844] Node 0 active_anon:31608kB inactive_anon:64kB active_file:75724kB inactive_file:9420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119268kB dirty:412kB writeback:96kB shmem:1292kB kernel_stack:4064kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 76.803993][ T5844] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.833667][ T5844] lowmem_reserve[]: 0 2880 7859 7859 [ 76.839005][ T5844] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 76.870093][ T5844] lowmem_reserve[]: 0 0 4978 4978 [ 76.875331][ T5844] Node 0 Normal free:4348616kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31608kB inactive_anon:64kB active_file:75724kB inactive_file:9420kB unevictable:0kB writepending:392kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:214580kB local_pcp:87044kB free_cma:0kB [ 76.908489][ T5844] lowmem_reserve[]: 0 0 0 0 [ 76.913081][ T5844] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.925898][ T5844] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 76.942186][ T5844] Node 0 Normal: 1261*4kB (UM) 768*8kB (UM) 259*16kB (UME) 123*32kB (UME) 205*64kB (UME) 48*128kB (UM) 30*256kB (UME) 99*512kB (UME) 70*1024kB (UM) 43*2048kB (UM) 999*4096kB (UM) = 4348548kB [ 76.961405][ T5844] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 76.970868][ T5844] 21582 total pagecache pages [ 76.975678][ T5844] 13 pages in swap cache [ 76.979934][ T5844] Free swap = 124800kB [ 76.984112][ T5844] Total swap = 124996kB [ 76.988252][ T5844] 2097051 pages RAM [ 76.992050][ T5844] 0 pages HighMem/MovableOnly [ 76.996712][ T5844] 81272 pages reserved [ 77.134306][ T5876] netlink: 76 bytes leftover after parsing attributes in process `syz.1.653'. [ 77.178386][ T5865] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.193399][ T5865] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1082 with error 28 [ 77.205973][ T5865] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.205973][ T5865] [ 77.215623][ T5865] EXT4-fs (loop0): Total free blocks count 0 [ 77.221682][ T5865] EXT4-fs (loop0): Free/Dirty block details [ 77.227567][ T5865] EXT4-fs (loop0): free_blocks=2415919104 [ 77.230528][ T5880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.233388][ T5865] EXT4-fs (loop0): dirty_blocks=1088 [ 77.248549][ T5865] EXT4-fs (loop0): Block reservation details [ 77.254516][ T5865] EXT4-fs (loop0): i_reserved_data_blocks=68 [ 77.258917][ T5880] EXT4-fs (loop2): 1 truncate cleaned up [ 77.275154][ T5886] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 77.452707][ T5903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.469120][ T5907] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.661: error while reading EA inode 32 err=-116 [ 77.470125][ T5906] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 77.481650][ T5907] EXT4-fs (loop1): Remounting filesystem read-only [ 77.498190][ T5907] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 77.508706][ T5907] EXT4-fs (loop1): 1 orphan inode deleted [ 77.546436][ T5915] netlink: 76 bytes leftover after parsing attributes in process `syz.0.666'. [ 77.558882][ T5903] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.588447][ T5917] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.667: EA inode hash validation failed [ 77.602469][ T5903] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.665: iget: bad i_size value: 2533274857506816 [ 77.620307][ T5917] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.667: corrupted inode contents [ 77.632488][ T5903] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.665: iget: bad i_size value: 2533274857506816 [ 77.645341][ T5917] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.667: mark_inode_dirty error [ 77.659435][ T5917] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.667: corrupted inode contents [ 77.686125][ T5917] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.667: mark_inode_dirty error [ 77.698214][ T5917] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.667: mark inode dirty (error -117) [ 77.711173][ T5917] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 77.724926][ T5917] EXT4-fs (loop2): 1 orphan inode deleted [ 77.745752][ T5926] netlink: 'syz.0.669': attribute type 7 has an invalid length. [ 77.753434][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 77.787821][ T5925] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 77.812310][ T5925] wireguard0: entered promiscuous mode [ 77.817817][ T5925] wireguard0: entered allmulticast mode [ 77.912289][ T5934] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 77.954685][ T5934] xt_hashlimit: max too large, truncated to 1048576 [ 77.970263][ T5940] hub 9-0:1.0: USB hub found [ 77.975527][ T5940] hub 9-0:1.0: 8 ports detected [ 77.993372][ T5947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.996761][ T5949] netlink: 76 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.033649][ T5947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 78.086124][ T5947] Symlink component flag not implemented [ 78.091782][ T5947] Symlink component flag not implemented [ 78.114538][ T5947] Symlink component flag not implemented (7) [ 78.120582][ T5947] Symlink component flag not implemented (116) [ 78.124345][ T5956] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.681: missing EA_INODE flag [ 78.139258][ T5956] EXT4-fs (loop1): Remounting filesystem read-only [ 78.217456][ T29] kauditd_printk_skb: 1414 callbacks suppressed [ 78.217469][ T29] audit: type=1400 audit(1767295664.565:6692): avc: denied { create } for pid=5965 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 78.249529][ T29] audit: type=1400 audit(1767295664.607:6693): avc: denied { bind } for pid=5965 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 78.274304][ T5969] FAULT_INJECTION: forcing a failure. [ 78.274304][ T5969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.287389][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.287416][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.287506][ T5969] Call Trace: [ 78.287513][ T5969] [ 78.287521][ T5969] __dump_stack+0x1d/0x30 [ 78.287546][ T5969] dump_stack_lvl+0x95/0xd0 [ 78.287567][ T5969] dump_stack+0x15/0x1b [ 78.287587][ T5969] should_fail_ex+0x265/0x280 [ 78.287686][ T5969] should_fail+0xb/0x20 [ 78.287706][ T5969] should_fail_usercopy+0x1a/0x20 [ 78.287730][ T5969] strncpy_from_user+0x27/0x260 [ 78.287765][ T5969] ? path_openat+0x1d88/0x23b0 [ 78.287869][ T5969] strncpy_from_user_nofault+0x68/0xf0 [ 78.287919][ T5969] bpf_probe_read_compat_str+0xb4/0x130 [ 78.287946][ T5969] bpf_prog_219ab5af5a97dd50+0x40/0x6c [ 78.287966][ T5969] bpf_trace_run2+0x107/0x1d0 [ 78.287991][ T5969] ? cn_release+0x63/0x80 [ 78.288012][ T5969] ? cn_release+0x63/0x80 [ 78.288027][ T5969] __traceiter_kfree+0x2e/0x50 [ 78.288052][ T5969] ? cn_release+0x63/0x80 [ 78.288105][ T5969] kfree+0x353/0x3c0 [ 78.288127][ T5969] cn_release+0x63/0x80 [ 78.288144][ T5969] ? __pfx_cn_release+0x10/0x10 [ 78.288223][ T5969] netlink_release+0x85a/0xef0 [ 78.288254][ T5969] sock_close+0x6b/0x150 [ 78.288282][ T5969] ? __pfx_sock_close+0x10/0x10 [ 78.288368][ T5969] __fput+0x29b/0x650 [ 78.288452][ T5969] fput_close_sync+0xad/0x190 [ 78.288475][ T5969] __x64_sys_close+0x56/0xf0 [ 78.288575][ T5969] x64_sys_call+0x2c25/0x3000 [ 78.288599][ T5969] do_syscall_64+0xca/0x2b0 [ 78.288699][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.288721][ T5969] RIP: 0033:0x7f08a76df749 [ 78.288735][ T5969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.288770][ T5969] RSP: 002b:00007f08a6147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 78.288787][ T5969] RAX: ffffffffffffffda RBX: 00007f08a7935fa0 RCX: 00007f08a76df749 [ 78.288798][ T5969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 78.288809][ T5969] RBP: 00007f08a6147090 R08: 0000000000000000 R09: 0000000000000000 [ 78.288823][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.288901][ T5969] R13: 00007f08a7936038 R14: 00007f08a7935fa0 R15: 00007ffe2140d8b8 [ 78.288917][ T5969] [ 78.313464][ T29] audit: type=1326 audit(1767295664.659:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 78.550702][ T29] audit: type=1326 audit(1767295664.659:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50982ef749 code=0x7ffc0000 [ 78.575733][ T5973] set_capacity_and_notify: 16 callbacks suppressed [ 78.575747][ T5973] loop1: detected capacity change from 0 to 512 [ 78.591414][ T5973] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.686: error while reading EA inode 32 err=-116 [ 78.605197][ T5973] EXT4-fs (loop1): Remounting filesystem read-only [ 78.612136][ T5973] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 78.622519][ T5973] EXT4-fs (loop1): 1 orphan inode deleted [ 78.783243][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790652][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790677][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790696][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790769][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790789][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790808][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790832][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790856][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.790878][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.791915][ T5983] __nla_validate_parse: 4 callbacks suppressed [ 78.791927][ T5983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.690'. [ 78.831486][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.691'. [ 78.882513][ T23] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 78.895090][ T29] audit: type=1326 audit(1767295665.279:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 78.895197][ T29] audit: type=1326 audit(1767295665.279:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 78.895259][ T29] audit: type=1326 audit(1767295665.279:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 78.895402][ T29] audit: type=1326 audit(1767295665.279:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 78.895423][ T29] audit: type=1326 audit(1767295665.279:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 78.918952][ T29] audit: type=1326 audit(1767295665.289:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08a76df749 code=0x7ffc0000 [ 79.120021][ T5996] loop2: detected capacity change from 0 to 1024 [ 79.133634][ T5998] loop4: detected capacity change from 0 to 512 [ 79.144645][ T5996] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.695: missing EA_INODE flag [ 79.163092][ T5996] EXT4-fs (loop2): Remounting filesystem read-only [ 79.175402][ T5998] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.182100][ T5998] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.696: bad orphan inode 13 [ 79.200534][ T5998] ext4_test_bit(bit=12, block=18) = 1 [ 79.205918][ T5998] is_bad_inode(inode)=0 [ 79.210160][ T5998] NEXT_ORPHAN(inode)=2130706432 [ 79.214991][ T5998] max_ino=32 [ 79.218162][ T5998] i_nlink=1 [ 79.228586][ T5998] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 79.267689][ T5998] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 79.276867][ T6010] loop2: detected capacity change from 0 to 512 [ 79.287511][ T6010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.307615][ T5998] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 79.328731][ T6010] EXT4-fs (loop2): 1 truncate cleaned up [ 79.393721][ T6022] loop5: detected capacity change from 0 to 512 [ 79.406681][ T6022] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.411189][ T6020] netlink: 76 bytes leftover after parsing attributes in process `syz.2.702'. [ 79.450593][ T6022] EXT4-fs (loop5): 1 truncate cleaned up [ 79.467072][ T6022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.703'. [ 79.602792][ T6032] loop4: detected capacity change from 0 to 512 [ 79.701017][ T6032] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.704: error while reading EA inode 32 err=-116 [ 79.725192][ T6035] FAULT_INJECTION: forcing a failure. [ 79.725192][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 79.737925][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.1.699 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.737949][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.737960][ T6035] Call Trace: [ 79.737966][ T6035] [ 79.737973][ T6035] __dump_stack+0x1d/0x30 [ 79.737995][ T6035] dump_stack_lvl+0x95/0xd0 [ 79.738073][ T6035] dump_stack+0x15/0x1b [ 79.738093][ T6035] should_fail_ex+0x265/0x280 [ 79.738119][ T6035] should_failslab+0x8c/0xb0 [ 79.738147][ T6035] kmem_cache_alloc_noprof+0x69/0x4b0 [ 79.738249][ T6035] ? alloc_empty_file+0x76/0x200 [ 79.738274][ T6035] alloc_empty_file+0x76/0x200 [ 79.738368][ T6035] path_openat+0x63/0x23b0 [ 79.738396][ T6035] ? _parse_integer_limit+0x170/0x190 [ 79.738414][ T6035] ? _parse_integer+0x27/0x40 [ 79.738430][ T6035] ? kstrtoull+0x111/0x140 [ 79.738446][ T6035] ? kstrtouint+0x76/0xc0 [ 79.738492][ T6035] do_filp_open+0x109/0x230 [ 79.738530][ T6035] do_sys_openat2+0xa6/0x150 [ 79.738553][ T6035] __x64_sys_openat+0xf2/0x120 [ 79.738642][ T6035] x64_sys_call+0x2b07/0x3000 [ 79.738662][ T6035] do_syscall_64+0xca/0x2b0 [ 79.738693][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.738715][ T6035] RIP: 0033:0x7f08a76df749 [ 79.738771][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.738786][ T6035] RSP: 002b:00007f08a6105038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.738803][ T6035] RAX: ffffffffffffffda RBX: 00007f08a7936180 RCX: 00007f08a76df749 [ 79.738815][ T6035] RDX: 000000000000403f RSI: 0000200000005c40 RDI: ffffffffffffff9c [ 79.738842][ T6035] RBP: 00007f08a6105090 R08: 0000000000000000 R09: 0000000000000000 [ 79.738852][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.738934][ T6035] R13: 00007f08a7936218 R14: 00007f08a7936180 R15: 00007ffe2140d8b8 [ 79.738950][ T6035] [ 79.937756][ T6032] EXT4-fs (loop4): Remounting filesystem read-only [ 79.945444][ T6032] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 79.955664][ T6032] EXT4-fs (loop4): 1 orphan inode deleted [ 79.957919][ T6040] loop2: detected capacity change from 0 to 512 [ 79.969368][ T6032] ================================================================== [ 79.977444][ T6032] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 79.985167][ T6032] [ 79.987478][ T6032] read-write to 0xffff888237c27550 of 8 bytes by task 6040 on cpu 0: [ 79.995536][ T6032] find_get_block_common+0x498/0x8e0 [ 80.000824][ T6032] bdev_getblk+0x334/0x3f0 [ 80.005228][ T6032] __ext4_sb_bread_gfp+0x44/0x170 [ 80.010255][ T6032] ext4_fill_super+0x496/0x37a0 [ 80.015100][ T6032] get_tree_bdev_flags+0x291/0x300 [ 80.015111][ T6040] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.709: EA inode hash validation failed [ 80.020209][ T6032] get_tree_bdev+0x1f/0x30 [ 80.020229][ T6032] ext4_get_tree+0x1c/0x30 [ 80.033239][ T6040] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.709: corrupted inode contents [ 80.037054][ T6032] vfs_get_tree+0x57/0x1d0 [ 80.052366][ T6040] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.709: mark_inode_dirty error [ 80.053128][ T6032] do_new_mount+0x24d/0x6a0 [ 80.062199][ T6040] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.709: corrupted inode contents [ 80.068680][ T6032] path_mount+0x4ab/0xb80 [ 80.068702][ T6032] __se_sys_mount+0x28c/0x2e0 [ 80.086121][ T6040] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.709: mark_inode_dirty error [ 80.089230][ T6032] __x64_sys_mount+0x67/0x80 [ 80.104254][ T6040] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.709: mark inode dirty (error -117) [ 80.105656][ T6032] x64_sys_call+0x2cca/0x3000 [ 80.105682][ T6032] do_syscall_64+0xca/0x2b0 [ 80.114002][ T6040] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 80.122633][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.122657][ T6032] [ 80.122662][ T6032] read to 0xffff888237c27550 of 8 bytes by task 6032 on cpu 1: [ 80.122676][ T6032] has_bh_in_lru+0x35/0x1f0 [ 80.122695][ T6032] smp_call_function_many_cond+0x2a9/0xc40 [ 80.122715][ T6032] on_each_cpu_cond_mask+0x3c/0x80 [ 80.143325][ T6040] EXT4-fs (loop2): 1 orphan inode deleted [ 80.146718][ T6032] invalidate_bh_lrus+0x2a/0x30 [ 80.182416][ T6032] blkdev_flush_mapping+0x9a/0x1a0 [ 80.187541][ T6032] bdev_release+0x2bf/0x3d0 [ 80.192051][ T6032] blkdev_release+0x15/0x20 [ 80.196558][ T6032] __fput+0x29b/0x650 [ 80.200547][ T6032] ____fput+0x1c/0x30 [ 80.204541][ T6032] task_work_run+0x131/0x1a0 [ 80.209140][ T6032] exit_to_user_mode_loop+0x1fe/0x740 [ 80.214507][ T6032] do_syscall_64+0x1e1/0x2b0 [ 80.219103][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.224989][ T6032] [ 80.227476][ T6032] value changed: 0x0000000000000000 -> 0xffff88811bf23000 [ 80.234577][ T6032] [ 80.236888][ T6032] Reported by Kernel Concurrency Sanitizer on: [ 80.243029][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.4.704 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.252658][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.262712][ T6032] ================================================================== [ 80.275443][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.334408][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.403509][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.461675][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.542628][ T31] gretap0: left allmulticast mode [ 80.547739][ T31] gretap0: left promiscuous mode [ 80.552867][ T31] bridge0: port 1(gretap0) entered disabled state [ 80.650698][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.660584][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.670067][ T31] bond0 (unregistering): Released all slaves [ 80.717032][ T31] tipc: Disabling bearer [ 80.722017][ T31] tipc: Left network mode [ 80.773445][ T31] hsr_slave_0: left promiscuous mode [ 80.783045][ T31] hsr_slave_1: left promiscuous mode [ 80.792209][ T31] veth1_vlan: left promiscuous mode [ 80.797452][ T31] veth0_vlan: left promiscuous mode [ 80.868176][ T31] team0 (unregistering): Port device team_slave_1 removed [ 80.877940][ T31] team0 (unregistering): Port device team_slave_0 removed