last executing test programs: 1m32.404165073s ago: executing program 0 (id=112): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x0, 0x0, "a22ba35762e66ff59c30f889c689a497"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1m32.166679203s ago: executing program 0 (id=116): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = getpgrp(0xffffffffffffffff) kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) tgkill(0x0, 0x0, 0x21) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x10001) write(r5, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x0, @multicast}, 0x10) 1m31.877694125s ago: executing program 0 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000040000009c0000000b3fd521c2b777cac44459a329b1f0448c51c357491e085998c414a23f2e0014459fe7399ed55729246cd6af3c42c6a42c3d94dd9b1b649a46852730bdff29f225273e56a1871e8e2573cec34398f781a64c9f6f7b1efc6801000000fbb273c4b26b47a0bc9447a597a358902660b94012d3bd5befc2dcbf1a34ea85da5dd89b27a7ae9aed70ee7d6c5cb30b6512b72392b1ee89c65a4904fbc7e8b625964a29afa296af13208f1e9919fa3a8483bf77cac67a87bab0cd1e664ec39151"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) getrandom(&(0x7f0000000a00)=""/4096, 0x1000, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) pread64(r3, &(0x7f00000003c0)=""/262, 0x106, 0x4) r6 = gettid() r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x200000000000000) getdents(0xffffffffffffffff, &(0x7f0000000640)=""/247, 0xf7) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) io_uring_enter(r9, 0x239c, 0x80000000, 0x7a, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) flistxattr(r2, 0x0, 0x0) 1m30.996160204s ago: executing program 0 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x80060, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) lgetxattr(&(0x7f00000001c0)='.\x00', &(0x7f0000000240)=@random={'btrfs.', 'devpts\x00'}, &(0x7f0000000280)=""/106, 0x6a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0xc4, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x200}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'caif0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190) 1m30.954201716s ago: executing program 0 (id=134): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000280)=""/171, 0xab, 0x0, &(0x7f0000000000)=""/23, 0x17}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000003d08207b1af8ff00000000bfa100000000000007010000f8ffffffb602000008000000b7030000a3500000009500"/89], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) setresgid(0xee00, 0xee01, 0x0) setresgid(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x90) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="10ca", 0x2}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRESOCT=r5, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='vm_unmapped_area\x00'}, 0xffffffffffffff94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES8=0x0, @ANYRESDEC=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40050) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000240)=0x1004, 0x4) sendto$inet(r10, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r10, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m30.544314844s ago: executing program 0 (id=138): r0 = socket$isdn_base(0x22, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="4eaea888aaf55cc767a2750f2c90b800fd876ea3c5d3e127d61f117de6d1d60d6988475ba647b532f15798aae227eff28205be233b173a0af66c81348fc525987d9ea1dbca44b935aaf1f6cd17104c09dc6011879f6ebd0112fc8fbfef8b0c84d6be885cf81bfa9e1035ecefc204de98639caa1d6a11b1eefc4890e439fffca204f5556250ab7445a2d34306db6a15a3ac35f0985265a9f9a5d8de47295068857957d5b15d8f09172c7356a948ed8a479e463286b970766b3261d063eddf78239a9485ac9101b7dc8435c02308dd", 0xce}, {&(0x7f0000000100)="2e9ea72b9338af1192269962c8f2f8c5d980785e936abf8a0cd28f93de2ee2c311bed02e60ccc1d17791f9ca2d1f96e568e5175870f356d1b7b76b34", 0x3c}, {&(0x7f0000000140)="987770b63c8e19e8850b9f5b06b9b7f37643a9f3bb65596a8d8571edca731ecdf786794e10408f6ec8819fc6968d7b5fd45f061e78230d8d45b99049a73a38c5fd2da9b7db4f449857f6fa94ccfce2e23e728d5620421cc3864e15c9dd1c2af878d4a1fff2de84b38db9690e1c0497", 0x6f}], 0x3) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x400) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000240)=0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)={0x2, 'wlan1\x00', {0xfffffffa}, 0xd6}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x3000, 0x4) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000300)={0x7, 0x29e}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'team_slave_0\x00', &(0x7f0000000340)=@ethtool_dump={0x3e, 0x8, 0x2, 0x58, "46446db4a0b54e39a1e4fcfddb7285f9845dd391e714a31ba0b201221b4e94eb3697b6caa6ce76d9aad8e7a03c1f64ceb025047a7e33f2269cedf504b841c2e7a2d7fa5a55a50a8342cd90d833d95f37df9c266d8d1f11a8"}}) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x80000005}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) splice(r0, &(0x7f00000004c0)=0x800, r2, &(0x7f0000000500)=0x874, 0x4, 0xb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000540)={0x10, 0x2, 0x1, 0xa, 0x5}, 0x14) r3 = syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x800) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000005c0)=""/4096) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000015c0)) sendto$x25(r3, &(0x7f0000001600)="7cdec0ccbdc48a5213dd42b810705484ba7384ccfb19c36ece13910ce563f27f3b73645a314a50535f7790875c1c616027421537613318265f855f4bff872b52a38ad99b9cd3dace049eee", 0x4b, 0x4004000, &(0x7f0000001680)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), r2) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r4, 0x509, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3239}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001800)={0x0, 0xd0e9}, &(0x7f0000001840)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001880)={r5, 0x2ab, 0x8001}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x4c, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x699}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40854}, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r1, {0x1, 0x100}}, './file0\x00'}) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000001b40)={0x0, 0xd5, &(0x7f0000001a40)="6ee2c1defb8fc10e56effd077d5bd370e8cd88933474a52cb4a7fa578b216c566597cf1e59d791f1908d0dcea3a754e0734b1b88410bac475e618f41ae8116eee9d2cd61a3fa3d9743aa7cf74d1a5f1062bf6677f3eaae2646953573f57c93c28737ae519a4f09917753e04c06b34b25f9730a7aac06558316d7651bdd8ca2d46f7d0d5a89f65878e7c44b597197adc8e7de3190c70d6228eeab0b4ac44e55986bb68c0cd98f9c07495f935a53b8caa43fbe975217b61be10afa09d993ea3405b94e4a2b4ce790c60d7a98ec3d35ddb6da1be391c2"}) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000001b80), 0x4) r8 = pidfd_getfd(r1, r2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000001cc0)={0x0, 0x2}, &(0x7f0000001d00)=0x8) 1m30.454031668s ago: executing program 32 (id=138): r0 = socket$isdn_base(0x22, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="4eaea888aaf55cc767a2750f2c90b800fd876ea3c5d3e127d61f117de6d1d60d6988475ba647b532f15798aae227eff28205be233b173a0af66c81348fc525987d9ea1dbca44b935aaf1f6cd17104c09dc6011879f6ebd0112fc8fbfef8b0c84d6be885cf81bfa9e1035ecefc204de98639caa1d6a11b1eefc4890e439fffca204f5556250ab7445a2d34306db6a15a3ac35f0985265a9f9a5d8de47295068857957d5b15d8f09172c7356a948ed8a479e463286b970766b3261d063eddf78239a9485ac9101b7dc8435c02308dd", 0xce}, {&(0x7f0000000100)="2e9ea72b9338af1192269962c8f2f8c5d980785e936abf8a0cd28f93de2ee2c311bed02e60ccc1d17791f9ca2d1f96e568e5175870f356d1b7b76b34", 0x3c}, {&(0x7f0000000140)="987770b63c8e19e8850b9f5b06b9b7f37643a9f3bb65596a8d8571edca731ecdf786794e10408f6ec8819fc6968d7b5fd45f061e78230d8d45b99049a73a38c5fd2da9b7db4f449857f6fa94ccfce2e23e728d5620421cc3864e15c9dd1c2af878d4a1fff2de84b38db9690e1c0497", 0x6f}], 0x3) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x400) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000240)=0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)={0x2, 'wlan1\x00', {0xfffffffa}, 0xd6}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x3000, 0x4) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000300)={0x7, 0x29e}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'team_slave_0\x00', &(0x7f0000000340)=@ethtool_dump={0x3e, 0x8, 0x2, 0x58, "46446db4a0b54e39a1e4fcfddb7285f9845dd391e714a31ba0b201221b4e94eb3697b6caa6ce76d9aad8e7a03c1f64ceb025047a7e33f2269cedf504b841c2e7a2d7fa5a55a50a8342cd90d833d95f37df9c266d8d1f11a8"}}) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x80000005}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) splice(r0, &(0x7f00000004c0)=0x800, r2, &(0x7f0000000500)=0x874, 0x4, 0xb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000540)={0x10, 0x2, 0x1, 0xa, 0x5}, 0x14) r3 = syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x800) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000005c0)=""/4096) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000015c0)) sendto$x25(r3, &(0x7f0000001600)="7cdec0ccbdc48a5213dd42b810705484ba7384ccfb19c36ece13910ce563f27f3b73645a314a50535f7790875c1c616027421537613318265f855f4bff872b52a38ad99b9cd3dace049eee", 0x4b, 0x4004000, &(0x7f0000001680)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), r2) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r4, 0x509, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3239}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001800)={0x0, 0xd0e9}, &(0x7f0000001840)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001880)={r5, 0x2ab, 0x8001}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x4c, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x699}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40854}, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r1, {0x1, 0x100}}, './file0\x00'}) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000001b40)={0x0, 0xd5, &(0x7f0000001a40)="6ee2c1defb8fc10e56effd077d5bd370e8cd88933474a52cb4a7fa578b216c566597cf1e59d791f1908d0dcea3a754e0734b1b88410bac475e618f41ae8116eee9d2cd61a3fa3d9743aa7cf74d1a5f1062bf6677f3eaae2646953573f57c93c28737ae519a4f09917753e04c06b34b25f9730a7aac06558316d7651bdd8ca2d46f7d0d5a89f65878e7c44b597197adc8e7de3190c70d6228eeab0b4ac44e55986bb68c0cd98f9c07495f935a53b8caa43fbe975217b61be10afa09d993ea3405b94e4a2b4ce790c60d7a98ec3d35ddb6da1be391c2"}) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000001b80), 0x4) r8 = pidfd_getfd(r1, r2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000001cc0)={0x0, 0x2}, &(0x7f0000001d00)=0x8) 3.781348864s ago: executing program 4 (id=1893): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x9], 0x0, [0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioprio_set$uid(0x3, 0x0, 0x2004) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) sync() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="f0c2732d28ffea1927b1ba350166ffc061410a6890a0456053ae8cfc24f2e657003ee1700b9ee5e2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000023b705000008000000461ba4a4e9bb83159500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x20000, 0x4, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8000005, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x5, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) sendfile(r1, r1, 0x0, 0xfffa83) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/cpuinfo\x00', 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) 2.955315971s ago: executing program 5 (id=1910): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000640)=""/87, 0x57, 0x0, &(0x7f0000000840)=""/153, 0x99}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20d000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009542cccf104ff52761a877a859e1358698f155a7f4b0ce03eb2c8ef19829dbfd0a10d3bd4f695765a1f4349c4a6a0d85ac6fbb7e7abd29a41b960e19b56bf5155a44374c6811fd3f15018b0fdeb976d329e8d552a3c8831daff3d117a716c2f3615db8c85e10c59d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x80000) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xd0f, 0x203, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bind$packet(r5, &(0x7f0000000380)={0x11, 0x11, r7, 0x1, 0x2, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x2f) fcntl$setsig(r8, 0xa, 0x28) open(&(0x7f00000000c0)='./file0\x00', 0x188843, 0x198) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sync() bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.626593745s ago: executing program 4 (id=1914): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x96, 0x8528, 0x4, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7, &(0x7f0000000440)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0x7c}}, 0x944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f0000001040)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x80, 0xd3, 0x2, 0x10000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18ebffff01000000000000000400000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.086289958s ago: executing program 5 (id=1924): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x561a, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380"], 0xfc}}, 0x0) 1.998396693s ago: executing program 5 (id=1925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000600)={[{@jqfmt_vfsold}, {@dioread_nolock, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000000e00)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0xc800}, 0xc800) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%pS \x00'}, 0x20) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 1.781072462s ago: executing program 5 (id=1931): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x96, 0x8528, 0x4, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7, &(0x7f0000000440)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0x7c}}, 0x944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f0000001040)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0xf8, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0x20}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x4}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d5a79bc26280788f2fe24fef00d8e186ef174a03afae1e6bd152956e3c2ac938"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04dd7d80a1d4fdb239089c1e53787b88ae156bbe032ce50037e69e591fb15a58"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @mcast1, 0xfffffff8}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x80, 0xd3, 0x2, 0x10000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18ebffff01000000000000000400000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x0) r7 = gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r10}) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 1.740767484s ago: executing program 4 (id=1933): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='ext4_mb_release_group_pa\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x24004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_GET_WIPHY(r7, 0x0, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000e031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.691719086s ago: executing program 4 (id=1934): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs4(&(0x7f0000000040)='GPL\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000340)={[{'\x00'}, {'{'}, {','}, {'@%'}, {'\xbe{.\xb5'}, {'kmem_cache_free\x00'}], [{@measure}, {@pcr={'pcr', 0x3d, 0xa}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'kmem_cache_free\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x37, 0x34, 0x63, 0x31, 0x61, 0x39, 0x38], 0x2d, [0x65, 0x32, 0x65, 0x30], 0x2d, [0x99ad98dc28e855a9, 0x30, 0x35, 0x34], 0x2d, [0x39, 0x1f, 0x34, 0x30], 0x2d, [0x66, 0x66, 0x4e, 0x34, 0x63, 0x32, 0x63, 0xc]}}}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.690933236s ago: executing program 4 (id=1935): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x1) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/79, 0x4f, 0xc4) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) mount$9p_tcp(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x20060, &(0x7f0000000cc0)={'trans=tcp,', {'port', 0x3d, 0x5b2e68c7}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) getgid() (async) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x1) (async) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/79, 0x4f, 0xc4) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) (async) mount$9p_tcp(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x20060, &(0x7f0000000cc0)={'trans=tcp,', {'port', 0x3d, 0x5b2e68c7}}) (async) 1.642100718s ago: executing program 4 (id=1936): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x507683, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(r1, 0x8924, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x39, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, r2, 0x0) socket(0x2, 0xa, 0x310) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r5, 0x0, 0x1000000000000}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000200000022bf00000100fe10", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7, 0x0, 0xa002a0}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff78, 0x0, 0x0, 0x0}, 0x94) 1.558369342s ago: executing program 1 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0x0, 0x7}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000030417000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005002d0000000000050029"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xf7eb, 0x10, 0x33e, 0xfffffffffffffffe}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000880)={r4, 0x7fa}, &(0x7f0000000340)=0x8) close(r1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000380)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x1c6}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000480)={r7, 0x3}, &(0x7f00000004c0)=0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r8, 0x0, 0x4}, 0x18) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={r10, 0xa9ac}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000b80)={&(0x7f00000005c0)=@in6={0xa, 0x4e22, 0x0, @loopback, 0x40}, 0x1c, &(0x7f0000000b00), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1e00010000000018000000000000008400000007000000ac1414bb00000000200000000000000084000000020000dd070002000500000007000000", @ANYRES32=r4, @ANYBLOB="200000000000000084000000080000000000000000000000000000000000000018000000000000008400000007000000e000000100000000200000000000000084000000080000000000000000000000000000000000000020000000000000008400000008000000fe800000000000000000000000000020"], 0xc8, 0x40}, 0x4044000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x561d, &(0x7f0000000400)={0x0, 0xc894, 0x10, 0xfffffffd, 0x90}, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000700)="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", 0x155}, {0x0}], 0x2, &(0x7f0000000380)=ANY=[], 0x20, 0x4d6e944d2302e182}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500), &(0x7f0000000580)=0x4) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x0, &(0x7f0000000240)=0x8, 0x0, 0x4) 1.518206074s ago: executing program 2 (id=1940): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0x218, 0x229, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'pim6reg1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x135, &(0x7f0000001c40)={@multicast, @random='1a@+3\'', @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x127, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x2}}}, {0x8, 0x6558, 0x0, "73e68e329507de724f633c4c843a982d5f9ee1154f96d459d6c6ae1b1633083f340d41dfcb22567a68e7db5307be87ed48e7812e37023c5c9bf86975f3ed4620fa8249ca83c8f1450c357a87b2648e61ecf46d929b921103c73df8da9a3070414666f40c88029e743d41f3e7fb71542a48cbc4dd8b1ea35d54978eac9300000000006a1200440fb32b29d20c6937abc10d3dcf29d85d799150590400ce420978362d5f46b58cfa27b51d4a5c172de73d38c65dc5f7224c3b12b48d835af0bd9cf565a4d184c125c01809839e73a909"}}}}}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.442550987s ago: executing program 2 (id=1941): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='rtc_irq_set_state\x00', r3, 0x0, 0xbde0}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x30000008}) dup3(r4, r5, 0x0) bind$tipc(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000000008050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_generic(0x10, 0x3, 0x10) 1.177235008s ago: executing program 2 (id=1943): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x96, 0x8528, 0x4, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7, &(0x7f0000000440)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0x7c}}, 0x944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f0000001040)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000e0001006e657464657673696d00003ae4000f0002006e657464657673696d30000008008e00000000000e0001006e65746485f473696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d1c00000f0002006e657464657673696d30000008008e0000000000080001007063698b96456021c49af064a4e50011000200303030303a30303a31302e300000000008008e0001000020080001007263690011000200303030303a30303e31302e300000000008008e0003000000080001007063690011000200303030303a31303a31302e300000000008008e000100000008000100706369001100023affe3acf5300000000000000000d8df5c54e13ecba8bf53c12aaae4411d6216330bbcacd34ae222e69a8551b75717dd2e0a00976c3dac300ec231e5494f820275f51dcb3af2da18c91d8a9600e7c8928369fb96efb60e6946629bd690104d4227a5ea4a1855eb358390bdf2a0d664c2769f6fb72021554a05f18d3064042bdd98847b4ad7fa85269dbc69b2da69355b33189a99adcc8b55f6aab558c880a3601041fcb961af5c9e1cb63b61"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x80, 0xd3, 0x2, 0x10000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18ebffff01000000000000000400000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 914.81844ms ago: executing program 5 (id=1946): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs4(&(0x7f0000000040)='GPL\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000340)={[{'\x00'}, {'{'}, {','}, {'@%'}, {'\xbe{.\xb5'}, {'kmem_cache_free\x00'}], [{@measure}, {@pcr={'pcr', 0x3d, 0xa}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, 'kmem_cache_free\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x37, 0x34, 0x63, 0x31, 0x61, 0x39, 0x38], 0x2d, [0x65, 0x32, 0x65, 0x30], 0x2d, [0x99ad98dc28e855a9, 0x30, 0x35, 0x34], 0x2d, [0x39, 0x1f, 0x34, 0x30], 0x2d, [0x66, 0x66, 0x4e, 0x34, 0x63, 0x32, 0x63, 0xc]}}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 882.786031ms ago: executing program 5 (id=1947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x0, 0xa01, 0x464ed26d84e36159, 0x1, 0x8, 0x0, 0x6, 0x0, r6}, &(0x7f0000000080)=0x20) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000e142400"/24], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_usb_connect$uac1(0x5, 0xa2, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000000010104000000010000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000009cfcca88f3d014bdd065e81e3753d6b3e80e9f240e3fd1b4b6b733743690f9e3f82cd297f9b40665c10dd76df861cdb4b3220909dd71d1a17e49eace588925eb38e250b01d43649f403df6c32da8f29d24a665ae425160b009d24e2a22cd3938e0d49c8588f765163155537f2eac99640b04be88cfce2d83e68d83f4a739970a44ecbe668acca1cc96a6985f2855cb30f98f6c3eff23ab7509a346d80588c61f08cc"], 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 743.371127ms ago: executing program 1 (id=1948): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 662.107891ms ago: executing program 1 (id=1951): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0x218, 0x229, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'pim6reg1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x135, &(0x7f0000001c40)={@multicast, @random='1a@+3\'', @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x127, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x2}}}, {0x8, 0x6558, 0x0, "73e68e329507de724f633c4c843a982d5f9ee1154f96d459d6c6ae1b1633083f340d41dfcb22567a68e7db5307be87ed48e7812e37023c5c9bf86975f3ed4620fa8249ca83c8f1450c357a87b2648e61ecf46d929b921103c73df8da9a3070414666f40c88029e743d41f3e7fb71542a48cbc4dd8b1ea35d54978eac9300000000006a1200440fb32b29d20c6937abc10d3dcf29d85d799150590400ce420978362d5f46b58cfa27b51d4a5c172de73d38c65dc5f7224c3b12b48d835af0bd9cf565a4d184c125c01809839e73a909"}}}}}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 621.497403ms ago: executing program 1 (id=1954): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000600)={[{@jqfmt_vfsold}, {@dioread_nolock, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000000e00)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0xc800}, 0xc800) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%pS \x00'}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 487.622849ms ago: executing program 1 (id=1955): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYRES32=r5, @ANYRES16=r2, @ANYRESDEC=r2, @ANYRESHEX=r6, @ANYBLOB="e4de993d88f65f32225dee3c3e57561080abbcc66f0d40466b41d136942b548bcc1b234ecd7f6bc4c90684cb43f82388f45cc2bd215e9463056f79aa21e8c274e3f8928fcf76c101b8ba373973817f17096e9fce0e1fc89b949c4e7902d606a0f77c859e"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x40000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2400) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setresuid(r8, r8, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r10, &(0x7f0000000000)="dbe104b35716e67da422221d32860d4b13014bf9ca", 0x15, 0x20000814, &(0x7f0000000100)={0x11, 0x7, r11, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2f, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xb, 0x7}, {0xfff1, 0x3}, {0xb}}}, 0x24}}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$inet6(0xa, 0x802, 0x0) 347.426205ms ago: executing program 1 (id=1956): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x96, 0x8528, 0x4, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7, &(0x7f0000000440)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0x7c}}, 0x944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f0000001040)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x510, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4e8, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0x20}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x41c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0e01235743ca42c64dc9f57cd091aeb3ed633851c8633b145be151d71ae34a0e"}, @WGPEER_A_ALLOWEDIPS={0x3f4, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0xfe}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d5a79bc26280788f2fe24fef00d8e186ef174a03afae1e6bd152956e3c2ac938"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04dd7d80a1d4fdb239089c1e53787b88ae156bbe032ce50037e69e591fb15a58"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @mcast1, 0xfffffff8}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x510}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x80, 0xd3, 0x2, 0x10000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18ebffff01000000000000000400000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x0) r7 = gettid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r8, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r10}) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 268.588138ms ago: executing program 2 (id=1958): fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x2c, 0x1) (async) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7f0ac4ff02000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 249.078269ms ago: executing program 3 (id=1959): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xd0499ec33ebac6c9, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010000030900010073797a30004000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b4000000000ff000480240001800b000100657874686472000014000280080006400000000205000200070000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xc4}}, 0x8814) sendmsg$tipc(r1, &(0x7f0000000040)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x273e3b8514d65acc, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 198.641081ms ago: executing program 2 (id=1960): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='rtc_irq_set_state\x00', r3, 0x0, 0xbde0}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x30000008}) dup3(r4, r5, 0x0) bind$tipc(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0xee00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_generic(0x10, 0x3, 0x10) 198.535351ms ago: executing program 3 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0xf0ffffffffffffff) 184.380492ms ago: executing program 3 (id=1962): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 14.67305ms ago: executing program 3 (id=1963): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 14.343929ms ago: executing program 3 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 13.771849ms ago: executing program 3 (id=1965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000600)={[{@jqfmt_vfsold}, {@dioread_nolock, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000000e00)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0xc800}, 0xc800) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%pS \x00'}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 0s ago: executing program 2 (id=1966): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000228bd08000000000000000000080001007063690011000200"], 0x60}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20044014) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="a00000f010004b122a1afba32c2a20a35c774604b433ee86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f00000001c0)={'ip6_vti0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r5, @ANYRESDEC=r1, @ANYRES16=r4], 0xb8}, 0x1, 0x0, 0x0, 0x41}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004100), r7) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004180)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r7, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r9, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x40100) r10 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000000000)) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r6, &(0x7f0000000400)={0xa000001c}) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r12, 0x0, 0xd0, 0x0, 0x0) kernel console output (not intermixed with test programs): T29] audit: type=1326 audit(1765492835.523:11661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a4ac8b829 code=0x7ffc0000 [ 101.407033][ T29] audit: type=1326 audit(1765492835.523:11662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0a4acef749 code=0x7ffc0000 [ 101.435457][ T29] audit: type=1326 audit(1765492835.693:11663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a4ace65e7 code=0x7ffc0000 [ 101.459008][ T29] audit: type=1326 audit(1765492835.693:11664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a4ac8b829 code=0x7ffc0000 [ 101.837331][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.852904][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 101.904155][ T7035] team5: entered promiscuous mode [ 101.907999][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 101.909348][ T7035] team5: entered allmulticast mode [ 101.948879][ T7046] team6: entered promiscuous mode [ 101.954114][ T7046] team6: entered allmulticast mode [ 102.021361][ T7057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.031638][ T7059] netlink: 'syz.1.1175': attribute type 21 has an invalid length. [ 102.044548][ T7059] netlink: 'syz.1.1175': attribute type 4 has an invalid length. [ 102.103098][ T7060] ext4: Unknown parameter 'obj_role' [ 102.109454][ T7059] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1175: error while reading EA inode 32 err=-116 [ 102.165375][ T7059] EXT4-fs (loop1): Remounting filesystem read-only [ 102.172017][ T7059] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 102.182251][ T7059] EXT4-fs (loop1): 1 orphan inode deleted [ 102.188412][ T7059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.220345][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.249914][ T7073] IPv4: Oversized IP packet from 127.202.26.0 [ 102.411725][ T7088] ext4: Unknown parameter 'dioread_nolock"errors' [ 102.445308][ T7088] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 102.522950][ T7098] set_capacity_and_notify: 23 callbacks suppressed [ 102.522972][ T7098] loop1: detected capacity change from 0 to 512 [ 102.546062][ T7098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.552911][ T7098] EXT4-fs: test_dummy_encryption option not supported [ 102.570009][ T7100] netlink: 'syz.4.1190': attribute type 21 has an invalid length. [ 102.577963][ T7100] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 102.590520][ T7100] loop4: detected capacity change from 0 to 512 [ 102.602725][ T7100] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1190: error while reading EA inode 32 err=-116 [ 102.625544][ T7100] EXT4-fs (loop4): Remounting filesystem read-only [ 102.632553][ T7100] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 102.643201][ T7100] EXT4-fs (loop4): 1 orphan inode deleted [ 102.649460][ T7100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.673033][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.737651][ T7111] IPv4: Oversized IP packet from 127.202.26.0 [ 102.943005][ T7129] loop2: detected capacity change from 0 to 512 [ 102.949937][ T7129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.956709][ T7129] EXT4-fs: test_dummy_encryption option not supported [ 102.996504][ T7131] netlink: 'syz.2.1202': attribute type 21 has an invalid length. [ 103.004503][ T7131] netlink: 'syz.2.1202': attribute type 4 has an invalid length. [ 103.037163][ T7131] loop2: detected capacity change from 0 to 512 [ 103.061896][ T7131] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1202: error while reading EA inode 32 err=-116 [ 103.094487][ T7131] EXT4-fs (loop2): Remounting filesystem read-only [ 103.101071][ T7131] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 103.111967][ T7131] EXT4-fs (loop2): 1 orphan inode deleted [ 103.118776][ T7131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.180206][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.213318][ T7143] IPv4: Oversized IP packet from 127.202.26.0 [ 103.391169][ T7161] loop5: detected capacity change from 0 to 128 [ 103.431170][ T7161] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.452324][ T7161] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.782839][ T7179] netlink: 'syz.1.1217': attribute type 21 has an invalid length. [ 103.827588][ T7179] loop1: detected capacity change from 0 to 512 [ 103.863176][ T7179] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1217: error while reading EA inode 32 err=-116 [ 103.886308][ T7179] EXT4-fs (loop1): Remounting filesystem read-only [ 103.900736][ T7179] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 103.920861][ T7179] EXT4-fs (loop1): 1 orphan inode deleted [ 103.937480][ T7179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.018050][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.092521][ T7199] loop1: detected capacity change from 0 to 128 [ 104.112446][ T7199] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.144497][ T7199] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.258459][ T3916] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.463371][ T7224] loop2: detected capacity change from 0 to 512 [ 104.480267][ T7224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.486994][ T7224] EXT4-fs: test_dummy_encryption option not supported [ 104.527747][ T7226] loop5: detected capacity change from 0 to 512 [ 104.568301][ T7226] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1231: error while reading EA inode 32 err=-116 [ 104.592717][ T7226] EXT4-fs (loop5): Remounting filesystem read-only [ 104.602509][ T7226] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 104.613413][ T7229] geneve2: entered promiscuous mode [ 104.626942][ T7226] EXT4-fs (loop5): 1 orphan inode deleted [ 104.635506][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 104.644737][ T7226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.677246][ T3916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.688247][ T7220] loop3: detected capacity change from 0 to 512 [ 104.781492][ T7220] ext4: Unknown parameter 'dioread_nolock"errors' [ 104.998611][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.275725][ T7262] geneve3: entered promiscuous mode [ 105.285677][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'. [ 105.296197][ T7262] FAULT_INJECTION: forcing a failure. [ 105.296197][ T7262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.309651][ T7262] CPU: 0 UID: 0 PID: 7262 Comm: syz.1.1241 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.309688][ T7262] Tainted: [W]=WARN [ 105.309698][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.309772][ T7262] Call Trace: [ 105.309780][ T7262] [ 105.309788][ T7262] __dump_stack+0x1d/0x30 [ 105.309817][ T7262] dump_stack_lvl+0xe8/0x140 [ 105.309845][ T7262] dump_stack+0x15/0x1b [ 105.309864][ T7262] should_fail_ex+0x265/0x280 [ 105.309974][ T7262] should_fail+0xb/0x20 [ 105.309999][ T7262] should_fail_usercopy+0x1a/0x20 [ 105.310030][ T7262] _copy_from_user+0x1c/0xb0 [ 105.310057][ T7262] __copy_msghdr+0x244/0x300 [ 105.310205][ T7262] ___sys_sendmsg+0x109/0x1d0 [ 105.310311][ T7262] __sys_sendmmsg+0x178/0x300 [ 105.310350][ T7262] __x64_sys_sendmmsg+0x57/0x70 [ 105.310428][ T7262] x64_sys_call+0x1e28/0x3000 [ 105.310457][ T7262] do_syscall_64+0xd8/0x2a0 [ 105.310568][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.310589][ T7262] RIP: 0033:0x7fd5bd77f749 [ 105.310605][ T7262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.310658][ T7262] RSP: 002b:00007fd5bc1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.310679][ T7262] RAX: ffffffffffffffda RBX: 00007fd5bd9d5fa0 RCX: 00007fd5bd77f749 [ 105.310696][ T7262] RDX: 0000000000000003 RSI: 0000200000000b80 RDI: 0000000000000004 [ 105.310713][ T7262] RBP: 00007fd5bc1df090 R08: 0000000000000000 R09: 0000000000000000 [ 105.310729][ T7262] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 105.310745][ T7262] R13: 00007fd5bd9d6038 R14: 00007fd5bd9d5fa0 R15: 00007ffdddc62638 [ 105.310770][ T7262] [ 105.506642][ T7264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.513416][ T7264] EXT4-fs: test_dummy_encryption option not supported [ 105.647780][ T7272] IPv4: Oversized IP packet from 127.202.26.0 [ 105.658576][ T7270] ext4: Unknown parameter 'dioread_nolock"errors' [ 105.685254][ T7274] veth2: entered promiscuous mode [ 105.690361][ T7274] veth2: entered allmulticast mode [ 105.813859][ T7283] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1252: error while reading EA inode 32 err=-116 [ 105.832469][ T7283] EXT4-fs (loop2): Remounting filesystem read-only [ 105.849904][ T7283] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 105.866835][ T7283] EXT4-fs (loop2): 1 orphan inode deleted [ 105.874895][ T7289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.875251][ T7283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.881581][ T7289] EXT4-fs: test_dummy_encryption option not supported [ 105.962622][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.223626][ T29] kauditd_printk_skb: 962 callbacks suppressed [ 106.223645][ T29] audit: type=1326 audit(1765492840.483:12627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.233469][ T7304] ext4: Unknown parameter 'dioread_nolock"errors' [ 106.281738][ T29] audit: type=1326 audit(1765492840.523:12628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.305540][ T29] audit: type=1326 audit(1765492840.523:12629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.329246][ T29] audit: type=1326 audit(1765492840.523:12630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.352865][ T29] audit: type=1326 audit(1765492840.523:12631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.376483][ T29] audit: type=1326 audit(1765492840.523:12632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.400062][ T29] audit: type=1326 audit(1765492840.523:12633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.423662][ T29] audit: type=1326 audit(1765492840.523:12634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.447291][ T29] audit: type=1326 audit(1765492840.523:12635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.470871][ T29] audit: type=1326 audit(1765492840.523:12636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5bd7b2005 code=0x7ffc0000 [ 106.474786][ T7304] validate_nla: 7 callbacks suppressed [ 106.474921][ T7304] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 106.554307][ T7316] IPv4: Oversized IP packet from 127.202.26.0 [ 106.854168][ T7328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.861079][ T7328] EXT4-fs: test_dummy_encryption option not supported [ 106.977927][ T7336] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.990857][ T7336] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.066059][ T7340] IPv4: Oversized IP packet from 127.202.26.0 [ 107.210455][ T7348] netlink: 'syz.2.1276': attribute type 21 has an invalid length. [ 107.218494][ T7348] netlink: 'syz.2.1276': attribute type 4 has an invalid length. [ 107.246325][ T7348] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1276: error while reading EA inode 32 err=-116 [ 107.276796][ T7348] EXT4-fs (loop2): Remounting filesystem read-only [ 107.288451][ T7348] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 107.298984][ T7348] EXT4-fs (loop2): 1 orphan inode deleted [ 107.305366][ T7348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.330697][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.373440][ T7355] IPv4: Oversized IP packet from 127.202.26.0 [ 107.410767][ T7357] ref_ctr_offset mismatch. inode: 0x5e7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 107.467030][ T7359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.473778][ T7359] EXT4-fs: test_dummy_encryption option not supported [ 107.518550][ T7365] FAULT_INJECTION: forcing a failure. [ 107.518550][ T7365] name failslab, interval 1, probability 0, space 0, times 0 [ 107.531279][ T7365] CPU: 0 UID: 0 PID: 7365 Comm: syz.3.1279 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.531315][ T7365] Tainted: [W]=WARN [ 107.531333][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.531346][ T7365] Call Trace: [ 107.531353][ T7365] [ 107.531362][ T7365] __dump_stack+0x1d/0x30 [ 107.531392][ T7365] dump_stack_lvl+0xe8/0x140 [ 107.531419][ T7365] dump_stack+0x15/0x1b [ 107.531477][ T7365] should_fail_ex+0x265/0x280 [ 107.531505][ T7365] should_failslab+0x8c/0xb0 [ 107.531533][ T7365] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 107.531695][ T7365] ? __alloc_skb+0x324/0x4d0 [ 107.531728][ T7365] __alloc_skb+0x324/0x4d0 [ 107.531758][ T7365] ? __alloc_skb+0x24d/0x4d0 [ 107.531789][ T7365] audit_log_start+0x3a0/0x720 [ 107.531862][ T7365] ? kstrtouint+0x76/0xc0 [ 107.531887][ T7365] audit_seccomp+0x48/0x100 [ 107.531925][ T7365] ? __seccomp_filter+0x832/0x1260 [ 107.531964][ T7365] __seccomp_filter+0x843/0x1260 [ 107.532081][ T7365] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.532118][ T7365] ? vfs_write+0x7e8/0x960 [ 107.532142][ T7365] ? __rcu_read_unlock+0x4f/0x70 [ 107.532169][ T7365] ? __fget_files+0x184/0x1c0 [ 107.532203][ T7365] __secure_computing+0x82/0x150 [ 107.532259][ T7365] syscall_trace_enter+0xcf/0x1e0 [ 107.532289][ T7365] do_syscall_64+0xb2/0x2a0 [ 107.532398][ T7365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.532420][ T7365] RIP: 0033:0x7f1a48eff749 [ 107.532434][ T7365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.532491][ T7365] RSP: 002b:00007f1a4793e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 107.532515][ T7365] RAX: ffffffffffffffda RBX: 00007f1a49156090 RCX: 00007f1a48eff749 [ 107.532530][ T7365] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 000000000000025c [ 107.532575][ T7365] RBP: 00007f1a4793e090 R08: 0000000000000000 R09: 0000000000000000 [ 107.532591][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.532606][ T7365] R13: 00007f1a49156128 R14: 00007f1a49156090 R15: 00007ffed5b813b8 [ 107.532632][ T7365] [ 107.940237][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.963669][ T7374] set_capacity_and_notify: 10 callbacks suppressed [ 107.963690][ T7374] loop3: detected capacity change from 0 to 128 [ 108.209825][ T7403] loop4: detected capacity change from 0 to 128 [ 108.225011][ T7403] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.238958][ T7403] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.300117][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.367025][ T7415] loop4: detected capacity change from 0 to 128 [ 108.470070][ T7419] loop2: detected capacity change from 0 to 512 [ 108.502441][ T7419] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.509109][ T7419] EXT4-fs: test_dummy_encryption option not supported [ 108.749643][ T7437] loop2: detected capacity change from 0 to 512 [ 108.769375][ T7437] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.861777][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 108.898548][ T7442] team7: entered promiscuous mode [ 108.903713][ T7442] team7: entered allmulticast mode [ 108.921648][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 108.988564][ T7442] team8: entered promiscuous mode [ 108.994260][ T7442] team8: entered allmulticast mode [ 109.014157][ T7449] loop5: detected capacity change from 0 to 512 [ 109.056389][ T7449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.063141][ T7449] EXT4-fs: test_dummy_encryption option not supported [ 109.083155][ T7454] netlink: 'syz.2.1315': attribute type 21 has an invalid length. [ 109.091047][ T7454] netlink: 'syz.2.1315': attribute type 4 has an invalid length. [ 109.148330][ T7454] loop2: detected capacity change from 0 to 512 [ 109.184436][ T7454] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1315: error while reading EA inode 32 err=-116 [ 109.236378][ T7454] EXT4-fs (loop2): Remounting filesystem read-only [ 109.260408][ T7454] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 109.293859][ T7454] EXT4-fs (loop2): 1 orphan inode deleted [ 109.315965][ T7454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.341057][ T7461] loop3: detected capacity change from 0 to 512 [ 109.379789][ T7461] ext4: Unknown parameter 'dioread_nolock"errors' [ 109.394702][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.609834][ T7495] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 109.617697][ T7495] netlink: 'syz.2.1327': attribute type 2 has an invalid length. [ 109.715647][ T7499] loop4: detected capacity change from 0 to 512 [ 109.748025][ T7499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.754772][ T7499] EXT4-fs: test_dummy_encryption option not supported [ 109.853072][ T7509] netlink: 'syz.3.1334': attribute type 21 has an invalid length. [ 109.861209][ T7509] netlink: 'syz.3.1334': attribute type 4 has an invalid length. [ 109.899590][ T7509] loop3: detected capacity change from 0 to 512 [ 109.919669][ T7509] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1334: error while reading EA inode 32 err=-116 [ 109.940792][ T7509] EXT4-fs (loop3): Remounting filesystem read-only [ 109.970338][ T7509] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 110.002076][ T7509] EXT4-fs (loop3): 1 orphan inode deleted [ 110.008474][ T7509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.053991][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.248800][ T7532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.255657][ T7532] EXT4-fs: test_dummy_encryption option not supported [ 110.379710][ T7545] netlink: 'syz.4.1348': attribute type 21 has an invalid length. [ 110.397720][ T7545] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1348: error while reading EA inode 32 err=-116 [ 110.410488][ T7545] EXT4-fs (loop4): Remounting filesystem read-only [ 110.418087][ T7545] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 110.429546][ T7545] EXT4-fs (loop4): 1 orphan inode deleted [ 110.436345][ T7545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.470949][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.582773][ T7556] ext4: Unknown parameter 'dioread_nolock"errors' [ 110.661595][ T7561] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.669376][ T7561] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1354: bg 0: block 127: padding at end of block bitmap is not set [ 110.684386][ T7561] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1354: corrupted inode contents [ 110.696743][ T7561] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 110.705826][ T7561] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1354: corrupted inode contents [ 110.718049][ T7561] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.1354: mark_inode_dirty error [ 110.729969][ T7561] EXT4-fs (loop4): 1 orphan inode deleted [ 110.736333][ T7561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.821907][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.847983][ T7569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.854984][ T7569] EXT4-fs: test_dummy_encryption option not supported [ 110.965018][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1358'. [ 110.984673][ T7576] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1359: error while reading EA inode 32 err=-116 [ 111.002451][ T7576] EXT4-fs (loop3): Remounting filesystem read-only [ 111.009378][ T7576] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 111.020634][ T7576] EXT4-fs (loop3): 1 orphan inode deleted [ 111.026833][ T7576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.049801][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.147659][ T7587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1363'. [ 111.181343][ T7589] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.193938][ T7589] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.240633][ T29] kauditd_printk_skb: 1086 callbacks suppressed [ 111.240652][ T29] audit: type=1326 audit(1765492845.493:13721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45e1ba65e7 code=0x7ffc0000 [ 111.270997][ T29] audit: type=1326 audit(1765492845.493:13722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45e1b4b829 code=0x7ffc0000 [ 111.294863][ T29] audit: type=1326 audit(1765492845.493:13723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 111.318252][ T29] audit: type=1326 audit(1765492845.513:13724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45e1ba65e7 code=0x7ffc0000 [ 111.341773][ T29] audit: type=1326 audit(1765492845.513:13725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45e1b4b829 code=0x7ffc0000 [ 111.365457][ T29] audit: type=1326 audit(1765492845.513:13726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 111.388935][ T29] audit: type=1326 audit(1765492845.513:13727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45e1ba65e7 code=0x7ffc0000 [ 111.412537][ T29] audit: type=1326 audit(1765492845.513:13728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45e1b4b829 code=0x7ffc0000 [ 111.436197][ T29] audit: type=1326 audit(1765492845.513:13729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 111.459734][ T29] audit: type=1326 audit(1765492845.533:13730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45e1ba65e7 code=0x7ffc0000 [ 111.675709][ T7605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.682493][ T7605] EXT4-fs: test_dummy_encryption option not supported [ 111.761019][ T7609] validate_nla: 3 callbacks suppressed [ 111.761038][ T7609] netlink: 'syz.2.1370': attribute type 21 has an invalid length. [ 111.774571][ T7609] netlink: 'syz.2.1370': attribute type 4 has an invalid length. [ 111.789570][ T7609] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1370: error while reading EA inode 32 err=-116 [ 111.804590][ T7609] EXT4-fs (loop2): Remounting filesystem read-only [ 111.819333][ T7609] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 111.830187][ T7609] EXT4-fs (loop2): 1 orphan inode deleted [ 111.836557][ T7609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.860726][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.860929][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 111.894037][ T7615] team6: entered promiscuous mode [ 111.899151][ T7615] team6: entered allmulticast mode [ 111.942817][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 111.962421][ T7615] team7: entered promiscuous mode [ 111.967493][ T7615] team7: entered allmulticast mode [ 111.975361][ T7621] ªªªªªª: renamed from vlan0 (while UP) [ 112.048134][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.096331][ T7631] macvtap1: entered promiscuous mode [ 112.101767][ T7631] macvtap1: entered allmulticast mode [ 112.124426][ T7634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.150693][ T7634] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.251661][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.327239][ T7651] netlink: 'syz.2.1383': attribute type 21 has an invalid length. [ 112.335287][ T7651] netlink: 'syz.2.1383': attribute type 4 has an invalid length. [ 112.353555][ T7649] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1384'. [ 112.358389][ T7651] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1383: error while reading EA inode 32 err=-116 [ 112.379139][ T7651] EXT4-fs (loop2): Remounting filesystem read-only [ 112.386104][ T7651] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 112.396700][ T7651] EXT4-fs (loop2): 1 orphan inode deleted [ 112.403055][ T7651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.428597][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.452834][ T7658] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1386'. [ 112.461986][ T7658] 0ªX¹¦À: renamed from caif0 [ 112.470311][ T7658] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 112.489261][ T7658] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.507521][ T7659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.543937][ T7659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.557402][ T7659] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.744133][ T7668] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1388: bg 0: block 248: padding at end of block bitmap is not set [ 112.758915][ T7668] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1388: Failed to acquire dquot type 1 [ 112.771206][ T7668] EXT4-fs (loop1): 1 truncate cleaned up [ 112.777445][ T7668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.790654][ T7668] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.832642][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.841910][ T4886] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 1 [ 112.887381][ T7672] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.904770][ T7672] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.121411][ T7682] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 113.347441][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.359020][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 113.384614][ T7698] team0: entered promiscuous mode [ 113.389762][ T7698] team0: entered allmulticast mode [ 113.405709][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 113.425833][ T7700] set_capacity_and_notify: 17 callbacks suppressed [ 113.425853][ T7700] loop3: detected capacity change from 0 to 512 [ 113.430869][ T7698] team1: entered promiscuous mode [ 113.443853][ T7698] team1: entered allmulticast mode [ 113.461153][ T7700] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.472370][ T7700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1398: bg 0: block 127: padding at end of block bitmap is not set [ 113.492650][ T7700] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1398: corrupted inode contents [ 113.505046][ T7700] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 113.514546][ T7700] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.1398: corrupted inode contents [ 113.526774][ T7700] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.1398: mark_inode_dirty error [ 113.538372][ T7700] EXT4-fs (loop3): 1 orphan inode deleted [ 113.545359][ T7700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.593055][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.723122][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.860986][ T7734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7734 comm=syz.4.1411 [ 113.873903][ T7734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=7734 comm=syz.4.1411 [ 113.890050][ T7734] syz_tun: entered allmulticast mode [ 113.911209][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.918757][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.926290][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.933931][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.941525][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.949026][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.956472][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.964009][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.971417][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.979224][ T5001] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 113.988282][ T5001] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 114.030548][ T7743] loop1: detected capacity change from 0 to 1024 [ 114.039579][ T7743] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.050858][ T7743] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.063375][ T7744] syz_tun: left allmulticast mode [ 114.075313][ T7743] JBD2: no valid journal superblock found [ 114.081106][ T7743] EXT4-fs (loop1): Could not load journal inode [ 114.142554][ T7749] loop1: detected capacity change from 0 to 128 [ 114.162144][ T7749] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.179054][ T7749] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.367722][ T7754] sd 0:0:1:0: device reset [ 114.474254][ T7776] netlink: 'syz.2.1424': attribute type 21 has an invalid length. [ 114.489526][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1424'. [ 114.500111][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1424'. [ 114.515708][ T7778] netlink: 'syz.5.1425': attribute type 21 has an invalid length. [ 114.523776][ T7778] netlink: 'syz.5.1425': attribute type 4 has an invalid length. [ 114.537052][ T7778] loop5: detected capacity change from 0 to 512 [ 114.561820][ T7778] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1425: error while reading EA inode 32 err=-116 [ 114.579493][ T7778] EXT4-fs (loop5): Remounting filesystem read-only [ 114.586803][ T7778] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 114.597748][ T7782] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.598174][ T7778] EXT4-fs (loop5): 1 orphan inode deleted [ 114.615559][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.616045][ T7778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.628637][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.657233][ T3916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.688256][ T7784] IPv4: Oversized IP packet from 127.202.26.0 [ 114.853602][ T7798] loop4: detected capacity change from 0 to 512 [ 114.866826][ T7798] ext4: Unknown parameter 'dioread_nolock"errors' [ 114.948416][ T7802] sd 0:0:1:0: device reset [ 114.982758][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.194033][ T7821] loop4: detected capacity change from 0 to 512 [ 115.220998][ T7821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.268069][ T7821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.313449][ T7821] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.338246][ T7833] loop2: detected capacity change from 0 to 128 [ 115.358907][ T7833] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.359486][ T7826] loop1: detected capacity change from 0 to 512 [ 115.396124][ T7826] ext4: Unknown parameter 'dioread_nolock"errors' [ 115.402468][ T7833] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.483672][ T7839] IPv4: Oversized IP packet from 127.202.26.0 [ 115.786712][ T7864] loop1: detected capacity change from 0 to 128 [ 115.910913][ T7871] IPv4: Oversized IP packet from 127.202.26.0 [ 115.928479][ T7867] loop5: detected capacity change from 0 to 512 [ 115.954118][ T7867] ext4: Unknown parameter 'dioread_nolock"errors' [ 116.071500][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.185862][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.306982][ T29] kauditd_printk_skb: 1898 callbacks suppressed [ 116.307000][ T29] audit: type=1400 audit(1765492850.563:15626): avc: denied { setopt } for pid=7903 comm="syz.5.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.346806][ T29] audit: type=1400 audit(1765492850.603:15627): avc: denied { create } for pid=7907 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.407488][ T29] audit: type=1400 audit(1765492850.633:15628): avc: denied { connect } for pid=7907 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.427380][ T29] audit: type=1400 audit(1765492850.633:15629): avc: denied { bind } for pid=7907 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.436976][ T7923] bridge0: port 3(macsec1) entered blocking state [ 116.446965][ T29] audit: type=1400 audit(1765492850.633:15630): avc: denied { write } for pid=7907 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.453367][ T7923] bridge0: port 3(macsec1) entered disabled state [ 116.473536][ T29] audit: type=1400 audit(1765492850.633:15631): avc: denied { accept } for pid=7907 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 116.491286][ T7923] macsec1: entered allmulticast mode [ 116.523085][ T7923] macsec1: left allmulticast mode [ 116.607481][ T7930] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.620212][ T7930] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.653195][ T29] audit: type=1400 audit(1765492850.913:15632): avc: denied { append } for pid=7932 comm="syz.4.1480" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.682398][ T7933] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 116.797684][ T7939] __nla_validate_parse: 3 callbacks suppressed [ 116.797706][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 116.820223][ T7939] team1: entered promiscuous mode [ 116.825462][ T7939] team1: entered allmulticast mode [ 116.832673][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 116.847750][ T7939] team2: entered promiscuous mode [ 116.852959][ T7939] team2: entered allmulticast mode [ 116.931060][ T29] audit: type=1326 audit(1765492851.183:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.2.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 116.954629][ T29] audit: type=1326 audit(1765492851.183:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.2.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 116.978177][ T29] audit: type=1326 audit(1765492851.183:15635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.2.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 117.009023][ T7943] netlink: 'syz.4.1484': attribute type 21 has an invalid length. [ 117.023192][ T7943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1484'. [ 117.033012][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1484'. [ 117.104869][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1487'. [ 117.124438][ T7954] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 117.163311][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.174716][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.483820][ T7981] IPv4: Oversized IP packet from 127.202.26.0 [ 117.629208][ T7996] FAULT_INJECTION: forcing a failure. [ 117.629208][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 117.641923][ T7996] CPU: 1 UID: 0 PID: 7996 Comm: syz.3.1504 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.641958][ T7996] Tainted: [W]=WARN [ 117.641965][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.642017][ T7996] Call Trace: [ 117.642026][ T7996] [ 117.642035][ T7996] __dump_stack+0x1d/0x30 [ 117.642063][ T7996] dump_stack_lvl+0xe8/0x140 [ 117.642151][ T7996] dump_stack+0x15/0x1b [ 117.642171][ T7996] should_fail_ex+0x265/0x280 [ 117.642195][ T7996] should_failslab+0x8c/0xb0 [ 117.642249][ T7996] __kmalloc_cache_noprof+0x65/0x4c0 [ 117.642361][ T7996] ? prog_array_map_alloc+0x33/0x110 [ 117.642385][ T7996] prog_array_map_alloc+0x33/0x110 [ 117.642414][ T7996] map_create+0x862/0xda0 [ 117.642435][ T7996] ? security_bpf+0x2b/0x90 [ 117.642462][ T7996] __sys_bpf+0x54e/0x7c0 [ 117.642491][ T7996] __x64_sys_bpf+0x41/0x50 [ 117.642509][ T7996] x64_sys_call+0x28e1/0x3000 [ 117.642605][ T7996] do_syscall_64+0xd8/0x2a0 [ 117.642640][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.642730][ T7996] RIP: 0033:0x7f1a48eff749 [ 117.642748][ T7996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.642767][ T7996] RSP: 002b:00007f1a4795f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.642786][ T7996] RAX: ffffffffffffffda RBX: 00007f1a49155fa0 RCX: 00007f1a48eff749 [ 117.642799][ T7996] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 117.642860][ T7996] RBP: 00007f1a4795f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.642872][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.642885][ T7996] R13: 00007f1a49156038 R14: 00007f1a49155fa0 R15: 00007ffed5b813b8 [ 117.642905][ T7996] [ 117.909616][ T8004] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.027830][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1510'. [ 118.071681][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1510'. [ 118.107500][ T8006] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1508: bg 0: block 248: padding at end of block bitmap is not set [ 118.127145][ T8006] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1508: Failed to acquire dquot type 1 [ 118.158340][ T8006] EXT4-fs (loop3): 1 truncate cleaned up [ 118.175818][ T8006] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.271681][ T8016] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1511: bg 0: block 248: padding at end of block bitmap is not set [ 118.276115][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 118.297355][ T8016] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1511: Failed to acquire dquot type 1 [ 118.303301][ T8027] team3: entered promiscuous mode [ 118.314356][ T8027] team3: entered allmulticast mode [ 118.320957][ T8016] EXT4-fs (loop2): 1 truncate cleaned up [ 118.323608][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 118.344054][ T8016] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.346451][ T8027] team4: entered promiscuous mode [ 118.361671][ T8027] team4: entered allmulticast mode [ 118.408181][ T824] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 118.522660][ T8040] 9p: Bad value for 'rfdno' [ 118.547566][ T8030] set_capacity_and_notify: 5 callbacks suppressed [ 118.547655][ T8030] loop1: detected capacity change from 0 to 512 [ 118.642276][ T8030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1515: bg 0: block 248: padding at end of block bitmap is not set [ 118.660801][ T8030] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1515: Failed to acquire dquot type 1 [ 118.677414][ T8030] EXT4-fs (loop1): 1 truncate cleaned up [ 118.698240][ T8030] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.844212][ T8056] loop4: detected capacity change from 0 to 512 [ 118.881097][ T8056] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1523: bg 0: block 248: padding at end of block bitmap is not set [ 118.903313][ T8056] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1523: Failed to acquire dquot type 1 [ 118.915728][ T8056] EXT4-fs (loop4): 1 truncate cleaned up [ 118.921838][ T8056] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.118596][ T8079] loop5: detected capacity change from 0 to 128 [ 119.131984][ T8079] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.173379][ T8083] loop3: detected capacity change from 0 to 1024 [ 119.180418][ T8083] EXT4-fs: Ignoring removed orlov option [ 119.245422][ T8089] IPv4: Oversized IP packet from 127.202.26.0 [ 119.394499][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 119.414695][ T8103] xt_hashlimit: max too large, truncated to 1048576 [ 119.606061][ T8116] loop4: detected capacity change from 0 to 128 [ 119.618367][ T8116] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.711219][ T8124] netlink: 'syz.2.1546': attribute type 21 has an invalid length. [ 119.719187][ T8124] netlink: 'syz.2.1546': attribute type 4 has an invalid length. [ 119.731136][ T8124] loop2: detected capacity change from 0 to 512 [ 119.747657][ T8124] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1546: error while reading EA inode 32 err=-116 [ 119.766216][ T8124] EXT4-fs (loop2): Remounting filesystem read-only [ 119.777831][ T8124] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 119.788261][ T8124] EXT4-fs (loop2): 1 orphan inode deleted [ 119.811468][ T8130] IPv4: Oversized IP packet from 127.202.26.0 [ 119.980503][ T8142] FAULT_INJECTION: forcing a failure. [ 119.980503][ T8142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.994761][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.2.1552 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.994901][ T8142] Tainted: [W]=WARN [ 119.994910][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.994925][ T8142] Call Trace: [ 119.994934][ T8142] [ 119.994982][ T8142] __dump_stack+0x1d/0x30 [ 119.995021][ T8142] dump_stack_lvl+0xe8/0x140 [ 119.995047][ T8142] dump_stack+0x15/0x1b [ 119.995070][ T8142] should_fail_ex+0x265/0x280 [ 119.995170][ T8142] should_fail+0xb/0x20 [ 119.995197][ T8142] should_fail_usercopy+0x1a/0x20 [ 119.995263][ T8142] _copy_to_user+0x20/0xa0 [ 119.995300][ T8142] simple_read_from_buffer+0xb5/0x130 [ 119.995362][ T8142] proc_fail_nth_read+0x10e/0x150 [ 119.995401][ T8142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.995452][ T8142] vfs_read+0x1a8/0x770 [ 119.995475][ T8142] ? __rcu_read_unlock+0x4f/0x70 [ 119.995502][ T8142] ? __fget_files+0x184/0x1c0 [ 119.995531][ T8142] ? mutex_lock+0x58/0x90 [ 119.995566][ T8142] ksys_read+0xda/0x1a0 [ 119.995619][ T8142] __x64_sys_read+0x40/0x50 [ 119.995644][ T8142] x64_sys_call+0x2889/0x3000 [ 119.995702][ T8142] do_syscall_64+0xd8/0x2a0 [ 119.995745][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.995797][ T8142] RIP: 0033:0x7f45e1bae15c [ 119.995822][ T8142] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 119.995847][ T8142] RSP: 002b:00007f45e05f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.995898][ T8142] RAX: ffffffffffffffda RBX: 00007f45e1e06090 RCX: 00007f45e1bae15c [ 119.995914][ T8142] RDX: 000000000000000f RSI: 00007f45e05f60a0 RDI: 0000000000000006 [ 119.996017][ T8142] RBP: 00007f45e05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.996033][ T8142] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 119.996059][ T8142] R13: 00007f45e1e06128 R14: 00007f45e1e06090 R15: 00007ffd87dda898 [ 119.996085][ T8142] [ 120.548606][ T8162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8162 comm=syz.2.1560 [ 120.561569][ T8162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8162 comm=syz.2.1560 [ 120.575445][ T8161] netlink: 'syz.4.1559': attribute type 21 has an invalid length. [ 120.583400][ T8161] netlink: 'syz.4.1559': attribute type 4 has an invalid length. [ 120.600375][ T8165] syz_tun: entered allmulticast mode [ 120.624000][ T1037] hid_parser_main: 8 callbacks suppressed [ 120.624022][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.626122][ T8161] loop4: detected capacity change from 0 to 512 [ 120.629886][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.629914][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.658911][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.667063][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.674821][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.682433][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.690025][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.697493][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.705219][ T1037] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 120.721261][ T8161] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1559: error while reading EA inode 32 err=-116 [ 120.721689][ T1037] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 120.765092][ T8161] EXT4-fs (loop4): Remounting filesystem read-only [ 120.782203][ T8161] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 120.793684][ T8165] syz_tun: left allmulticast mode [ 120.807817][ T8161] EXT4-fs (loop4): 1 orphan inode deleted [ 120.840702][ T8173] loop3: detected capacity change from 0 to 128 [ 120.870323][ T8173] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.041514][ T8186] loop4: detected capacity change from 0 to 128 [ 121.260004][ T8193] loop4: detected capacity change from 0 to 512 [ 121.322729][ T8193] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1572: bg 0: block 248: padding at end of block bitmap is not set [ 121.340708][ T8193] __quota_error: 532 callbacks suppressed [ 121.340753][ T8193] Quota error (device loop4): write_blk: dquota write failed [ 121.361554][ T8193] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 121.373058][ T8193] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1572: Failed to acquire dquot type 1 [ 121.394255][ T8193] EXT4-fs (loop4): 1 truncate cleaned up [ 121.421789][ T8193] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.445531][ T29] audit: type=1326 audit(1765492855.703:16159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4acef749 code=0x7ffc0000 [ 121.473286][ T29] audit: type=1326 audit(1765492855.723:16160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a4acef749 code=0x7ffc0000 [ 121.496929][ T29] audit: type=1326 audit(1765492855.723:16161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4acef749 code=0x7ffc0000 [ 121.520654][ T29] audit: type=1326 audit(1765492855.723:16162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4acef749 code=0x7ffc0000 [ 121.554217][ T29] audit: type=1326 audit(1765492855.783:16163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 121.577938][ T29] audit: type=1326 audit(1765492855.783:16164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 121.601570][ T29] audit: type=1326 audit(1765492855.783:16165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 121.625228][ T29] audit: type=1326 audit(1765492855.783:16166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e1baf749 code=0x7ffc0000 [ 121.668981][ T4884] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 121.787550][ T8240] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 121.843476][ T8240] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.858903][ T8240] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1586: Block bitmap for bg 0 marked uninitialized [ 121.934238][ T8240] EXT4-fs (loop2): Remounting filesystem read-only [ 121.945631][ T8240] EXT4-fs (loop2): 1 orphan inode deleted [ 122.029080][ T8265] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.180120][ T8283] IPv4: Oversized IP packet from 127.202.26.0 [ 122.268283][ T8291] IPv4: Oversized IP packet from 127.202.26.0 [ 122.314228][ T8295] netlink: 'syz.2.1612': attribute type 21 has an invalid length. [ 122.322383][ T8295] netlink: 'syz.2.1612': attribute type 4 has an invalid length. [ 122.339919][ T8295] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1612: error while reading EA inode 32 err=-116 [ 122.356637][ T8295] EXT4-fs (loop2): Remounting filesystem read-only [ 122.363335][ T8295] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 122.373611][ T8295] EXT4-fs (loop2): 1 orphan inode deleted [ 122.491369][ T8306] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 122.893945][ T8331] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1624: bg 0: block 248: padding at end of block bitmap is not set [ 122.912867][ T8331] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1624: Failed to acquire dquot type 1 [ 122.925033][ T8331] EXT4-fs (loop1): 1 truncate cleaned up [ 122.931349][ T8331] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.957387][ T8337] netlink: 'syz.2.1629': attribute type 21 has an invalid length. [ 122.965349][ T8337] netlink: 'syz.2.1629': attribute type 4 has an invalid length. [ 122.984376][ T8341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8341 comm=syz.3.1631 [ 122.997419][ T8341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8341 comm=syz.3.1631 [ 123.015653][ T8337] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1629: error while reading EA inode 32 err=-116 [ 123.032751][ T8337] EXT4-fs (loop2): Remounting filesystem read-only [ 123.040085][ T8337] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 123.050486][ T8337] EXT4-fs (loop2): 1 orphan inode deleted [ 123.060768][ T8344] syz_tun: entered allmulticast mode [ 123.091949][ T1037] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 123.112401][ T8344] syz_tun: left allmulticast mode [ 123.128802][ T8345] caif0: entered promiscuous mode [ 123.134557][ T8345] caif0: entered allmulticast mode [ 123.189667][ T8350] fido_id[8350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.219885][ T4885] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 1 [ 123.402458][ T8374] netlink: 'syz.3.1643': attribute type 21 has an invalid length. [ 123.410355][ T8374] netlink: 'syz.3.1643': attribute type 4 has an invalid length. [ 123.441565][ T8374] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1643: error while reading EA inode 32 err=-116 [ 123.475540][ T8374] EXT4-fs (loop3): Remounting filesystem read-only [ 123.494324][ T8374] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 123.501278][ T8349] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1634: bg 0: block 248: padding at end of block bitmap is not set [ 123.540897][ T8349] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1634: Failed to acquire dquot type 1 [ 123.542118][ T8374] EXT4-fs (loop3): 1 orphan inode deleted [ 123.661124][ T8349] EXT4-fs (loop5): 1 truncate cleaned up [ 123.668391][ T8363] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1636: bg 0: block 248: padding at end of block bitmap is not set [ 123.701731][ T8363] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1636: Failed to acquire dquot type 1 [ 123.734880][ T8363] EXT4-fs (loop1): 1 truncate cleaned up [ 123.748988][ T8363] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.751189][ T8396] __nla_validate_parse: 1 callbacks suppressed [ 123.751209][ T8396] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1652'. [ 123.773003][ T8349] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.839330][ T8399] FAULT_INJECTION: forcing a failure. [ 123.839330][ T8399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.852739][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.3.1653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.852828][ T8399] Tainted: [W]=WARN [ 123.852838][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.852854][ T8399] Call Trace: [ 123.852861][ T8399] [ 123.852871][ T8399] __dump_stack+0x1d/0x30 [ 123.852902][ T8399] dump_stack_lvl+0xe8/0x140 [ 123.853022][ T8399] dump_stack+0x15/0x1b [ 123.853046][ T8399] should_fail_ex+0x265/0x280 [ 123.853074][ T8399] should_fail+0xb/0x20 [ 123.853213][ T8399] should_fail_usercopy+0x1a/0x20 [ 123.853312][ T8399] _copy_to_user+0x20/0xa0 [ 123.853376][ T8399] simple_read_from_buffer+0xb5/0x130 [ 123.853404][ T8399] proc_fail_nth_read+0x10e/0x150 [ 123.853443][ T8399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.853514][ T8399] vfs_read+0x1a8/0x770 [ 123.853583][ T8399] ? __se_sys_io_uring_register+0x5c6/0xf20 [ 123.853619][ T8399] ksys_read+0xda/0x1a0 [ 123.853644][ T8399] __x64_sys_read+0x40/0x50 [ 123.853669][ T8399] x64_sys_call+0x2889/0x3000 [ 123.853716][ T8399] do_syscall_64+0xd8/0x2a0 [ 123.853757][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.853837][ T8399] RIP: 0033:0x7f1a48efe15c [ 123.853854][ T8399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.853873][ T8399] RSP: 002b:00007f1a4795f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.853894][ T8399] RAX: ffffffffffffffda RBX: 00007f1a49155fa0 RCX: 00007f1a48efe15c [ 123.853908][ T8399] RDX: 000000000000000f RSI: 00007f1a4795f0a0 RDI: 0000000000000003 [ 123.853922][ T8399] RBP: 00007f1a4795f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.853936][ T8399] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 123.854020][ T8399] R13: 00007f1a49156038 R14: 00007f1a49155fa0 R15: 00007ffed5b813b8 [ 123.854043][ T8399] [ 123.855328][ T4886] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 1 [ 123.866600][ T8385] set_capacity_and_notify: 11 callbacks suppressed [ 123.866825][ T8385] loop4: detected capacity change from 0 to 512 [ 124.089698][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1656'. [ 124.123503][ T53] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 124.238684][ T8385] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1647: bg 0: block 248: padding at end of block bitmap is not set [ 124.244178][ T8418] netlink: 'syz.1.1661': attribute type 21 has an invalid length. [ 124.261691][ T8418] netlink: 'syz.1.1661': attribute type 4 has an invalid length. [ 124.271553][ T8415] ------------[ cut here ]------------ [ 124.277225][ T8415] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 124.293199][ T8415] WARNING: kernel/bpf/verifier.c:2748 at 0x0, CPU#1: syz.3.1659/8415 [ 124.301485][ T8415] Modules linked in: [ 124.306074][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz.3.1659 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.306196][ T8421] loop1: detected capacity change from 0 to 512 [ 124.317719][ T8415] Tainted: [W]=WARN [ 124.327872][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.338119][ T8415] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 124.344484][ T8415] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 124.348313][ T8385] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1647: Failed to acquire dquot type 1 [ 124.364317][ T8415] RSP: 0018:ffffc900051133a0 EFLAGS: 00010246 [ 124.364343][ T8415] RAX: ffff888104e5bc10 RBX: 0000000000000000 RCX: 0000000000000002 [ 124.364371][ T8415] RDX: ffffffff865fb713 RSI: ffffffff865d01df RDI: ffffffff86db69d0 [ 124.364388][ T8415] RBP: ffff888126bafb50 R08: 0000000000000000 R09: 0000000000000002 [ 124.364406][ T8415] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888126bafb10 [ 124.364423][ T8415] R13: 0000000000000000 R14: ffff888126bafb5c R15: ffff888126bafb48 [ 124.364440][ T8415] FS: 00007f1a4795f6c0(0000) GS:ffff8882aeec3000(0000) knlGS:0000000000000000 [ 124.364463][ T8415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.364481][ T8415] CR2: 0000000000000000 CR3: 0000000142cce000 CR4: 00000000003506f0 [ 124.364564][ T8415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.364581][ T8415] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 124.364598][ T8415] Call Trace: [ 124.364605][ T8415] [ 124.364629][ T8415] reg_set_min_max+0x21c/0x260 [ 124.364729][ T8415] check_cond_jmp_op+0x1367/0x1a80 [ 124.364783][ T8415] do_check+0x3347/0x81f0 [ 124.364814][ T8415] ? __account_obj_stock+0x211/0x350 [ 124.364938][ T8415] ? __pfx_verbose+0x10/0x10 [ 124.365041][ T8415] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 124.365072][ T8415] do_check_common+0xccf/0x1300 [ 124.365105][ T8415] bpf_check+0x2f98/0xc860 [ 124.365146][ T8415] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 124.414917][ T8385] EXT4-fs (loop4): 1 truncate cleaned up [ 124.423233][ T8415] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 124.423280][ T8415] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 124.423317][ T8415] ? _find_next_zero_bit+0x64/0xa0 [ 124.423414][ T8415] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 124.423456][ T8415] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 124.423501][ T8415] ? css_rstat_updated+0xb7/0x240 [ 124.423559][ T8415] ? mod_memcg_state+0x182/0x270 [ 124.423591][ T8415] ? __rcu_read_unlock+0x4f/0x70 [ 124.423619][ T8415] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 124.423657][ T8415] ? bpf_prog_alloc+0x5b/0x150 [ 124.423705][ T8415] ? pcpu_alloc_noprof+0xd0d/0x1240 [ 124.423777][ T8415] ? should_fail_ex+0x30/0x280 [ 124.423810][ T8415] ? __kmalloc_noprof+0x2b4/0x5a0 [ 124.423841][ T8415] ? security_bpf_prog_load+0x60/0x140 [ 124.423876][ T8415] ? selinux_bpf_prog_load+0xad/0xd0 [ 124.423942][ T8415] ? security_bpf_prog_load+0x9e/0x140 [ 124.423982][ T8415] bpf_prog_load+0xf6e/0x1140 [ 124.424103][ T8415] ? security_bpf+0x2b/0x90 [ 124.424139][ T8415] __sys_bpf+0x469/0x7c0 [ 124.424173][ T8415] __x64_sys_bpf+0x41/0x50 [ 124.424196][ T8415] x64_sys_call+0x28e1/0x3000 [ 124.424235][ T8415] do_syscall_64+0xd8/0x2a0 [ 124.424280][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.424309][ T8415] RIP: 0033:0x7f1a48eff749 [ 124.424330][ T8415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.424381][ T8415] RSP: 002b:00007f1a4795f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.424408][ T8415] RAX: ffffffffffffffda RBX: 00007f1a49155fa0 RCX: 00007f1a48eff749 [ 124.424425][ T8415] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 124.424442][ T8415] RBP: 00007f1a48f83f91 R08: 0000000000000000 R09: 0000000000000000 [ 124.424459][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.424474][ T8415] R13: 00007f1a49156038 R14: 00007f1a49155fa0 R15: 00007ffed5b813b8 [ 124.424499][ T8415] [ 124.424509][ T8415] ---[ end trace 0000000000000000 ]--- [ 124.473370][ T8421] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1661: error while reading EA inode 32 err=-116 [ 124.490511][ T8385] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.507128][ T8421] EXT4-fs (loop1): Remounting filesystem read-only [ 124.507157][ T8421] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 124.507227][ T8421] EXT4-fs (loop1): 1 orphan inode deleted [ 124.746562][ T8428] loop2: detected capacity change from 0 to 512 [ 124.880200][ T53] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 124.970595][ T8441] ipt_REJECT: ECHOREPLY no longer supported. [ 124.980514][ T8443] loop3: detected capacity change from 0 to 1024 [ 124.990276][ T8428] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1664: bg 0: block 248: padding at end of block bitmap is not set [ 125.005907][ T8443] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.006235][ T8443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.032292][ T8445] loop4: detected capacity change from 0 to 128 [ 125.072953][ T8428] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1664: Failed to acquire dquot type 1 [ 125.100198][ T8428] EXT4-fs (loop2): 1 truncate cleaned up [ 125.116571][ T8428] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.249246][ T8460] netlink: 'syz.3.1674': attribute type 21 has an invalid length. [ 125.257177][ T8460] netlink: 'syz.3.1674': attribute type 4 has an invalid length. [ 125.269074][ T824] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 125.284765][ T8460] loop3: detected capacity change from 0 to 512 [ 125.293522][ T8460] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1674: error while reading EA inode 32 err=-116 [ 125.306414][ T8460] EXT4-fs (loop3): Remounting filesystem read-only [ 125.313223][ T8460] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 125.325550][ T8460] EXT4-fs (loop3): 1 orphan inode deleted [ 125.354998][ T8469] FAULT_INJECTION: forcing a failure. [ 125.354998][ T8469] name failslab, interval 1, probability 0, space 0, times 0 [ 125.367915][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.3.1679 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.367948][ T8469] Tainted: [W]=WARN [ 125.368018][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.368031][ T8469] Call Trace: [ 125.368038][ T8469] [ 125.368047][ T8469] __dump_stack+0x1d/0x30 [ 125.368077][ T8469] dump_stack_lvl+0xe8/0x140 [ 125.368103][ T8469] dump_stack+0x15/0x1b [ 125.368123][ T8469] should_fail_ex+0x265/0x280 [ 125.368176][ T8469] should_failslab+0x8c/0xb0 [ 125.368200][ T8469] __kvmalloc_node_noprof+0x149/0x6b0 [ 125.368226][ T8469] ? vmemdup_user+0x2b/0xd0 [ 125.368255][ T8469] ? 0xffffffff81000000 [ 125.368276][ T8469] vmemdup_user+0x2b/0xd0 [ 125.368298][ T8469] map_get_next_key+0x140/0x330 [ 125.368363][ T8469] ? __sys_bpf+0x599/0x7c0 [ 125.368387][ T8469] __sys_bpf+0x5a3/0x7c0 [ 125.368485][ T8469] __x64_sys_bpf+0x41/0x50 [ 125.368502][ T8469] x64_sys_call+0x28e1/0x3000 [ 125.368530][ T8469] do_syscall_64+0xd8/0x2a0 [ 125.368570][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.368612][ T8469] RIP: 0033:0x7f1a48eff749 [ 125.368627][ T8469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.368647][ T8469] RSP: 002b:00007f1a4795f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.368688][ T8469] RAX: ffffffffffffffda RBX: 00007f1a49155fa0 RCX: 00007f1a48eff749 [ 125.368766][ T8469] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 125.368778][ T8469] RBP: 00007f1a4795f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.368790][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.368880][ T8469] R13: 00007f1a49156038 R14: 00007f1a49155fa0 R15: 00007ffed5b813b8 [ 125.368903][ T8469] [ 125.619232][ T8473] lo speed is unknown, defaulting to 1000 [ 125.630554][ T8473] lo speed is unknown, defaulting to 1000 [ 125.637328][ T8473] lo speed is unknown, defaulting to 1000 [ 125.655944][ T8473] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.656835][ T8458] loop5: detected capacity change from 0 to 512 [ 125.663696][ T8473] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 125.675801][ T8473] lo speed is unknown, defaulting to 1000 [ 125.720734][ T8473] lo speed is unknown, defaulting to 1000 [ 125.735502][ T8480] pim6reg: entered allmulticast mode [ 125.741437][ T8473] lo speed is unknown, defaulting to 1000 [ 125.742754][ T8480] pim6reg: left allmulticast mode [ 125.758942][ T8473] lo speed is unknown, defaulting to 1000 [ 125.774100][ T8473] lo speed is unknown, defaulting to 1000 [ 125.786353][ T8458] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1676: bg 0: block 248: padding at end of block bitmap is not set [ 125.803329][ T8479] smc: removing ib device syû [ 125.848043][ T8490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8490 comm=syz.2.1684 [ 125.860890][ T8490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8490 comm=syz.2.1684 [ 125.875821][ T8473] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.885474][ T8458] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1676: Failed to acquire dquot type 1 [ 125.907503][ T8458] EXT4-fs (loop5): 1 truncate cleaned up [ 125.917026][ T8490] syz_tun: entered allmulticast mode [ 125.938432][ T5001] hid_parser_main: 26 callbacks suppressed [ 125.938469][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 125.951856][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 125.959413][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 125.966616][ T8458] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.977382][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 125.984816][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 125.992272][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 125.999779][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 126.007212][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 126.014656][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 126.022247][ T5001] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 126.031073][ T5001] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 126.051174][ T8490] syz_tun: left allmulticast mode [ 126.072313][ T8495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8495 comm=syz.1.1685 [ 126.085080][ T8495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8495 comm=syz.1.1685 [ 126.111088][ T8493] fido_id[8493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.126992][ T8495] syz_tun: entered allmulticast mode [ 126.148073][ T8495] syz_tun: left allmulticast mode [ 126.156664][ T5001] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 126.168321][ T837] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 126.230248][ T8500] IPv4: Oversized IP packet from 127.202.26.0 [ 126.238256][ T8502] loop2: detected capacity change from 0 to 512 [ 126.249765][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.267045][ T8502] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1689: error while reading EA inode 32 err=-116 [ 126.300087][ T8502] EXT4-fs (loop2): Remounting filesystem read-only [ 126.309935][ T8502] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 126.320995][ T8502] EXT4-fs (loop2): 1 orphan inode deleted [ 126.350833][ T29] kauditd_printk_skb: 766 callbacks suppressed [ 126.350852][ T29] audit: type=1326 audit(1765492860.603:16914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a48ef65e7 code=0x7ffc0000 [ 126.393453][ T29] audit: type=1326 audit(1765492860.603:16915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a48e9b829 code=0x7ffc0000 [ 126.417019][ T29] audit: type=1326 audit(1765492860.603:16916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1a48eff749 code=0x7ffc0000 [ 126.440471][ T29] audit: type=1326 audit(1765492860.623:16917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a48ef65e7 code=0x7ffc0000 [ 126.464206][ T29] audit: type=1326 audit(1765492860.623:16918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a48e9b829 code=0x7ffc0000 [ 126.487787][ T29] audit: type=1326 audit(1765492860.623:16919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1a48eff749 code=0x7ffc0000 [ 126.511177][ T29] audit: type=1326 audit(1765492860.623:16920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a48ef65e7 code=0x7ffc0000 [ 126.534731][ T29] audit: type=1326 audit(1765492860.623:16921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a48e9b829 code=0x7ffc0000 [ 126.558332][ T29] audit: type=1326 audit(1765492860.623:16922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1a48eff749 code=0x7ffc0000 [ 126.581804][ T29] audit: type=1326 audit(1765492860.643:16923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8476 comm="syz.3.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a48ef65e7 code=0x7ffc0000 [ 126.630202][ T8513] loop5: detected capacity change from 0 to 512 [ 126.646382][ T8519] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1693'. [ 126.656792][ T8513] ext4: Unknown parameter 'dioread_nolock"errors' [ 126.665598][ T8519] loop3: detected capacity change from 0 to 256 [ 126.667542][ T8520] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 126.672573][ T8519] vfat: Unknown parameter 'nnonumtail' [ 126.703017][ T8520] veth0_to_team: entered promiscuous mode [ 126.790954][ T8504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1688: bg 0: block 248: padding at end of block bitmap is not set [ 126.822909][ T8504] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1688: Failed to acquire dquot type 1 [ 126.880215][ T8504] EXT4-fs (loop1): 1 truncate cleaned up [ 126.898308][ T8504] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.912880][ T8534] IPv4: Oversized IP packet from 127.202.26.0 [ 126.955448][ T824] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 127.041577][ T8551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8551 comm=syz.3.1706 [ 127.054287][ T8551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8551 comm=syz.3.1706 [ 127.091202][ T8551] syz_tun: entered allmulticast mode [ 127.115499][ T5001] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 127.149774][ T8550] syz_tun: left allmulticast mode [ 127.177060][ T8558] veth0_to_team: entered promiscuous mode [ 127.248698][ T8552] ext4: Unknown parameter 'dioread_nolock"errors' [ 127.258297][ T8563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=8563 comm=syz.3.1711 [ 127.323631][ T8568] program syz.1.1714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.334259][ T8568] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 127.359709][ T8563] EXT4-fs: dax option not supported [ 127.372494][ T8570] IPv4: Oversized IP packet from 127.202.26.0 [ 127.399843][ T8572] EXT4-fs: Ignoring removed i_version option [ 127.418640][ T8572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.430091][ T8572] EXT4-fs (loop1): 1 truncate cleaned up [ 127.504080][ T8585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8585 comm=syz.1.1720 [ 127.516921][ T8585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8585 comm=syz.1.1720 [ 127.546694][ T8585] syz_tun: entered allmulticast mode [ 127.554585][ T5001] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 127.564482][ T8584] syz_tun: left allmulticast mode [ 127.614132][ T8588] fido_id[8588]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.714589][ T8602] IPv4: Oversized IP packet from 127.202.26.0 [ 127.839877][ T8596] ext4: Unknown parameter 'dioread_nolock"errors' [ 127.886415][ T8609] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.898047][ T8596] validate_nla: 3 callbacks suppressed [ 127.898143][ T8596] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 127.927873][ T8609] EXT4-fs (loop2): 1 truncate cleaned up [ 128.015014][ T8623] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8623 comm=syz.3.1736 [ 128.050547][ T8623] syz_tun: entered allmulticast mode [ 128.068757][ T10] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 128.084148][ T8623] syz_tun: left allmulticast mode [ 128.123186][ T8629] fido_id[8629]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.295826][ T8645] ext4: Unknown parameter 'dioread_nolock"errors' [ 128.321809][ T8645] netlink: 'syz.2.1743': attribute type 1 has an invalid length. [ 128.371722][ T8652] program syz.2.1745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.382748][ T8652] FAULT_INJECTION: forcing a failure. [ 128.382748][ T8652] name failslab, interval 1, probability 0, space 0, times 0 [ 128.395536][ T8652] CPU: 1 UID: 0 PID: 8652 Comm: syz.2.1745 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.395613][ T8652] Tainted: [W]=WARN [ 128.395622][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.395637][ T8652] Call Trace: [ 128.395643][ T8652] [ 128.395650][ T8652] __dump_stack+0x1d/0x30 [ 128.395673][ T8652] dump_stack_lvl+0xe8/0x140 [ 128.395715][ T8652] dump_stack+0x15/0x1b [ 128.395732][ T8652] should_fail_ex+0x265/0x280 [ 128.395760][ T8652] should_failslab+0x8c/0xb0 [ 128.395792][ T8652] __kmalloc_cache_noprof+0x65/0x4c0 [ 128.395814][ T8652] ? __se_sys_mount+0xef/0x2e0 [ 128.395833][ T8652] ? memdup_user+0x99/0xd0 [ 128.395891][ T8652] __se_sys_mount+0xef/0x2e0 [ 128.395932][ T8652] ? fput+0x8f/0xc0 [ 128.395955][ T8652] ? ksys_write+0x192/0x1a0 [ 128.396002][ T8652] __x64_sys_mount+0x67/0x80 [ 128.396021][ T8652] x64_sys_call+0x2cca/0x3000 [ 128.396042][ T8652] do_syscall_64+0xd8/0x2a0 [ 128.396073][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.396111][ T8652] RIP: 0033:0x7f45e1baf749 [ 128.396125][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.396141][ T8652] RSP: 002b:00007f45e0617038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.396158][ T8652] RAX: ffffffffffffffda RBX: 00007f45e1e05fa0 RCX: 00007f45e1baf749 [ 128.396169][ T8652] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 128.396181][ T8652] RBP: 00007f45e0617090 R08: 0000200000000100 R09: 0000000000000000 [ 128.396192][ T8652] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 128.396228][ T8652] R13: 00007f45e1e06038 R14: 00007f45e1e05fa0 R15: 00007ffd87dda898 [ 128.396246][ T8652] [ 128.785661][ T8669] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1753: bg 0: block 248: padding at end of block bitmap is not set [ 128.800854][ T8669] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1753: Failed to acquire dquot type 1 [ 128.817824][ T8669] EXT4-fs (loop1): 1 truncate cleaned up [ 128.825337][ T8669] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.837758][ T8670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1752: bg 0: block 248: padding at end of block bitmap is not set [ 128.881514][ T8676] FAULT_INJECTION: forcing a failure. [ 128.881514][ T8676] name failslab, interval 1, probability 0, space 0, times 0 [ 128.894412][ T8676] CPU: 0 UID: 0 PID: 8676 Comm: syz.5.1754 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 128.894452][ T8676] Tainted: [W]=WARN [ 128.894461][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.894539][ T8676] Call Trace: [ 128.894547][ T8676] [ 128.894555][ T8676] __dump_stack+0x1d/0x30 [ 128.894579][ T8676] dump_stack_lvl+0xe8/0x140 [ 128.894602][ T8676] dump_stack+0x15/0x1b [ 128.894682][ T8676] should_fail_ex+0x265/0x280 [ 128.894710][ T8676] should_failslab+0x8c/0xb0 [ 128.894739][ T8676] __kvmalloc_node_noprof+0x149/0x6b0 [ 128.894769][ T8676] ? alloc_fdtable+0x115/0x1d0 [ 128.894794][ T8676] alloc_fdtable+0x115/0x1d0 [ 128.894864][ T8676] dup_fd+0x492/0x510 [ 128.894893][ T8676] copy_files+0x98/0xf0 [ 128.894914][ T8676] copy_process+0xc17/0x1ef0 [ 128.894944][ T8676] kernel_clone+0x16c/0x5c0 [ 128.894970][ T8676] ? vfs_write+0x7e8/0x960 [ 128.894997][ T8676] __x64_sys_clone+0xe6/0x120 [ 128.895061][ T8676] x64_sys_call+0x12d0/0x3000 [ 128.895085][ T8676] do_syscall_64+0xd8/0x2a0 [ 128.895125][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.895182][ T8676] RIP: 0033:0x7f3ad4aff749 [ 128.895199][ T8676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.895263][ T8676] RSP: 002b:00007f3ad3566fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 128.895362][ T8676] RAX: ffffffffffffffda RBX: 00007f3ad4d55fa0 RCX: 00007f3ad4aff749 [ 128.895379][ T8676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 128.895395][ T8676] RBP: 00007f3ad3567090 R08: 0000000000000000 R09: 0000000000000000 [ 128.895411][ T8676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 128.895427][ T8676] R13: 00007f3ad4d56038 R14: 00007f3ad4d55fa0 R15: 00007ffce636d068 [ 128.895477][ T8676] [ 128.896135][ T8670] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1752: Failed to acquire dquot type 1 [ 129.069642][ T8679] set_capacity_and_notify: 15 callbacks suppressed [ 129.069666][ T8679] loop5: detected capacity change from 0 to 512 [ 129.095015][ T8670] EXT4-fs (loop2): 1 truncate cleaned up [ 129.116966][ T8670] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.165583][ T8679] ext4: Unknown parameter 'dioread_nolock"errors' [ 129.268326][ T8679] netlink: 'syz.5.1755': attribute type 1 has an invalid length. [ 129.282831][ T52] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 129.361078][ T8688] loop2: detected capacity change from 0 to 128 [ 129.445649][ T8681] loop4: detected capacity change from 0 to 512 [ 129.571452][ T8695] loop3: detected capacity change from 0 to 4096 [ 129.677777][ T8710] syz_tun: entered allmulticast mode [ 129.679304][ T8681] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1756: bg 0: block 248: padding at end of block bitmap is not set [ 129.686579][ T10] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 129.708021][ T8710] syz_tun: left allmulticast mode [ 129.781132][ T8681] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1756: Failed to acquire dquot type 1 [ 129.806268][ T8720] pimreg: tun_chr_ioctl cmd 2148553947 [ 129.820168][ T8717] fido_id[8717]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.859431][ T8681] EXT4-fs (loop4): 1 truncate cleaned up [ 129.881699][ T8681] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.938222][ T4884] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 129.955145][ T8723] loop5: detected capacity change from 0 to 512 [ 129.976027][ T8723] ext4: Unknown parameter 'dioread_nolock"errors' [ 130.013484][ T8723] netlink: 'syz.5.1770': attribute type 1 has an invalid length. [ 130.063260][ T8727] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.074643][ T8729] loop5: detected capacity change from 0 to 128 [ 130.083007][ T8727] loop4: detected capacity change from 0 to 2048 [ 130.140254][ T3571] loop4: p1 p2 p3 [ 130.171653][ T8727] loop4: p1 p2 p3 [ 130.208073][ T3571] udevd[3571]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 130.223311][ T3809] udevd[3809]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 130.290405][ T3809] udevd[3809]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 130.305568][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 130.309753][ T8744] syz_tun: entered allmulticast mode [ 130.317563][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 130.330339][ T3482] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 130.348117][ T8744] syz_tun: left allmulticast mode [ 130.389932][ T8746] fido_id[8746]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.447028][ T8756] loop2: detected capacity change from 0 to 128 [ 130.584881][ T8751] loop5: detected capacity change from 0 to 512 [ 130.617409][ T8754] loop3: detected capacity change from 0 to 512 [ 130.651484][ T8754] ext4: Unknown parameter 'dioread_nolock"errors' [ 130.697026][ T8751] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1782: bg 0: block 248: padding at end of block bitmap is not set [ 130.718603][ T8754] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 130.746855][ T8751] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1782: Failed to acquire dquot type 1 [ 130.766389][ T8751] EXT4-fs (loop5): 1 truncate cleaned up [ 130.779580][ T8751] EXT4-fs mount: 69 callbacks suppressed [ 130.779646][ T8751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.804065][ T8787] IPv4: Oversized IP packet from 127.202.26.0 [ 130.806964][ T8751] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.829466][ T8788] syz_tun: entered allmulticast mode [ 130.863981][ T3916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.874453][ T10] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 130.875933][ T8788] syz_tun: left allmulticast mode [ 130.904486][ T4884] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 130.913915][ T8793] fido_id[8793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.974869][ T8801] 9p: Bad value for 'wfdno' [ 131.116358][ T8813] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1803: bg 0: block 248: padding at end of block bitmap is not set [ 131.125053][ T8811] ext4: Unknown parameter 'dioread_nolock"errors' [ 131.139839][ T8813] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1803: Failed to acquire dquot type 1 [ 131.151971][ T8813] EXT4-fs (loop4): 1 truncate cleaned up [ 131.158203][ T8813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.171711][ T8813] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.210901][ T8811] netlink: 'syz.3.1804': attribute type 1 has an invalid length. [ 131.228272][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.451726][ T8817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1805: bg 0: block 248: padding at end of block bitmap is not set [ 131.469452][ T8817] __quota_error: 1327 callbacks suppressed [ 131.469527][ T8817] Quota error (device loop4): write_blk: dquota write failed [ 131.496337][ T8817] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 131.507762][ T8817] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1805: Failed to acquire dquot type 1 [ 131.529772][ T8821] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1807: bg 0: block 248: padding at end of block bitmap is not set [ 131.546376][ T8817] EXT4-fs (loop4): 1 truncate cleaned up [ 131.562983][ T8821] Quota error (device loop3): write_blk: dquota write failed [ 131.571545][ T8821] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 131.576282][ T8817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.585901][ T8831] IPv4: Oversized IP packet from 127.202.26.0 [ 131.599141][ T8817] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.617221][ T8821] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1807: Failed to acquire dquot type 1 [ 131.667083][ T8821] EXT4-fs (loop3): 1 truncate cleaned up [ 131.674141][ T8833] selinux_netlink_send: 7 callbacks suppressed [ 131.674160][ T8833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8833 comm=syz.1.1810 [ 131.674231][ T8833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8833 comm=syz.1.1810 [ 131.682722][ T8833] syz_tun: entered allmulticast mode [ 131.713150][ T8821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.736851][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.750301][ T3482] hid_parser_main: 134 callbacks suppressed [ 131.750324][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.758779][ T2756] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 131.763924][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.772903][ T2756] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 131.780286][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.799284][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.801895][ T8833] syz_tun: left allmulticast mode [ 131.806824][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.819622][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.827066][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.831556][ T8821] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.834615][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.834648][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.834676][ T3482] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 131.862500][ T29] audit: type=1400 audit(1765492866.103:18235): avc: denied { ioctl } for pid=8835 comm="syz.2.1811" path="socket:[22208]" dev="sockfs" ino=22208 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.924788][ T3482] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 132.004073][ T29] audit: type=1326 audit(1765492866.263:18236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.3.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a48eff749 code=0x7ffc0000 [ 132.043913][ T8839] fido_id[8839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.063578][ T8845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.068736][ T29] audit: type=1326 audit(1765492866.263:18237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.3.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a48eff749 code=0x7ffc0000 [ 132.099560][ T29] audit: type=1326 audit(1765492866.263:18238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.3.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a48eff749 code=0x7ffc0000 [ 132.141850][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.161240][ T53] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 132.170485][ T53] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 132.299394][ T8849] ext4: Unknown parameter 'dioread_nolock"errors' [ 132.327779][ T8849] netlink: 'syz.5.1816': attribute type 1 has an invalid length. [ 132.344561][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 132.379463][ T8845] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 132.402762][ T8864] FAULT_INJECTION: forcing a failure. [ 132.402762][ T8864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.416105][ T8864] CPU: 0 UID: 0 PID: 8864 Comm: syz.4.1820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 132.416203][ T8864] Tainted: [W]=WARN [ 132.416212][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.416228][ T8864] Call Trace: [ 132.416235][ T8864] [ 132.416243][ T8864] __dump_stack+0x1d/0x30 [ 132.416308][ T8864] dump_stack_lvl+0xe8/0x140 [ 132.416342][ T8864] dump_stack+0x15/0x1b [ 132.416368][ T8864] should_fail_ex+0x265/0x280 [ 132.416579][ T8864] should_fail+0xb/0x20 [ 132.416605][ T8864] should_fail_usercopy+0x1a/0x20 [ 132.416645][ T8864] _copy_from_user+0x1c/0xb0 [ 132.416680][ T8864] __se_sys_mount+0x10d/0x2e0 [ 132.416703][ T8864] ? fput+0x8f/0xc0 [ 132.416809][ T8864] ? ksys_write+0x192/0x1a0 [ 132.416857][ T8864] __x64_sys_mount+0x67/0x80 [ 132.416886][ T8864] x64_sys_call+0x2cca/0x3000 [ 132.416915][ T8864] do_syscall_64+0xd8/0x2a0 [ 132.417026][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.417054][ T8864] RIP: 0033:0x7f0a4acef749 [ 132.417074][ T8864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.417162][ T8864] RSP: 002b:00007f0a49757038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.417187][ T8864] RAX: ffffffffffffffda RBX: 00007f0a4af45fa0 RCX: 00007f0a4acef749 [ 132.417218][ T8864] RDX: 0000200000000600 RSI: 0000200000000300 RDI: 0000000000000000 [ 132.417235][ T8864] RBP: 00007f0a49757090 R08: 0000200000000580 R09: 0000000000000000 [ 132.417251][ T8864] R10: 0000000000210080 R11: 0000000000000246 R12: 0000000000000001 [ 132.417267][ T8864] R13: 00007f0a4af46038 R14: 00007f0a4af45fa0 R15: 00007fffdeaa0498 [ 132.417290][ T8864] [ 132.677138][ T8857] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1817: bg 0: block 248: padding at end of block bitmap is not set [ 132.737108][ T8857] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1817: Failed to acquire dquot type 1 [ 132.769724][ T8857] EXT4-fs (loop3): 1 truncate cleaned up [ 132.791939][ T8857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.807478][ T8857] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.819713][ T8878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8878 comm=syz.2.1825 [ 132.832444][ T8878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8878 comm=syz.2.1825 [ 132.850996][ T8878] syz_tun: entered allmulticast mode [ 132.871497][ T23] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 132.884833][ T8878] syz_tun: left allmulticast mode [ 132.918971][ T8881] fido_id[8881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.935847][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.943029][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.975050][ T8884] IPv4: Oversized IP packet from 127.202.26.0 [ 133.100987][ T8900] FAULT_INJECTION: forcing a failure. [ 133.100987][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.114492][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.1.1834 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.114599][ T8900] Tainted: [W]=WARN [ 133.114606][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.114622][ T8900] Call Trace: [ 133.114630][ T8900] [ 133.114640][ T8900] __dump_stack+0x1d/0x30 [ 133.114751][ T8900] dump_stack_lvl+0xe8/0x140 [ 133.114822][ T8900] dump_stack+0x15/0x1b [ 133.114842][ T8900] should_fail_ex+0x265/0x280 [ 133.114871][ T8900] should_fail+0xb/0x20 [ 133.114893][ T8900] should_fail_usercopy+0x1a/0x20 [ 133.114923][ T8900] _copy_to_user+0x20/0xa0 [ 133.115032][ T8900] simple_read_from_buffer+0xb5/0x130 [ 133.115062][ T8900] proc_fail_nth_read+0x10e/0x150 [ 133.115101][ T8900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.115212][ T8900] vfs_read+0x1a8/0x770 [ 133.115234][ T8900] ? __rcu_read_unlock+0x4f/0x70 [ 133.115368][ T8900] ? __fget_files+0x184/0x1c0 [ 133.115400][ T8900] ? mutex_lock+0x58/0x90 [ 133.115434][ T8900] ksys_read+0xda/0x1a0 [ 133.115461][ T8900] __x64_sys_read+0x40/0x50 [ 133.115485][ T8900] x64_sys_call+0x2889/0x3000 [ 133.115565][ T8900] do_syscall_64+0xd8/0x2a0 [ 133.115610][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.115637][ T8900] RIP: 0033:0x7fd5bd77e15c [ 133.115657][ T8900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.115680][ T8900] RSP: 002b:00007fd5bc1df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.115778][ T8900] RAX: ffffffffffffffda RBX: 00007fd5bd9d5fa0 RCX: 00007fd5bd77e15c [ 133.115795][ T8900] RDX: 000000000000000f RSI: 00007fd5bc1df0a0 RDI: 0000000000000003 [ 133.115811][ T8900] RBP: 00007fd5bc1df090 R08: 0000000000000000 R09: 0000000000000000 [ 133.115853][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.115870][ T8900] R13: 00007fd5bd9d6038 R14: 00007fd5bd9d5fa0 R15: 00007ffdddc62638 [ 133.115895][ T8900] [ 133.340086][ T8894] ext4: Unknown parameter 'dioread_nolock"errors' [ 133.397667][ T8907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8907 comm=syz.1.1837 [ 133.402854][ T8894] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 133.410504][ T8907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8907 comm=syz.1.1837 [ 133.411737][ T8907] syz_tun: entered allmulticast mode [ 133.439017][ T8907] syz_tun: left allmulticast mode [ 133.474513][ T8912] binfmt_misc: register: failed to install interpreter file ./file0 [ 133.503527][ T8916] FAULT_INJECTION: forcing a failure. [ 133.503527][ T8916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.516672][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.2.1840 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.516705][ T8916] Tainted: [W]=WARN [ 133.516712][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.516726][ T8916] Call Trace: [ 133.516734][ T8916] [ 133.516793][ T8916] __dump_stack+0x1d/0x30 [ 133.516826][ T8916] dump_stack_lvl+0xe8/0x140 [ 133.516898][ T8916] dump_stack+0x15/0x1b [ 133.516918][ T8916] should_fail_ex+0x265/0x280 [ 133.517018][ T8916] should_fail+0xb/0x20 [ 133.517042][ T8916] should_fail_usercopy+0x1a/0x20 [ 133.517071][ T8916] _copy_from_user+0x1c/0xb0 [ 133.517125][ T8916] kstrtouint_from_user+0x69/0xf0 [ 133.517154][ T8916] ? 0xffffffff81000000 [ 133.517171][ T8916] ? selinux_file_permission+0x1e2/0x320 [ 133.517206][ T8916] proc_fail_nth_write+0x50/0x160 [ 133.517260][ T8916] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.517346][ T8916] vfs_write+0x269/0x960 [ 133.517369][ T8916] ? vfs_read+0x4e6/0x770 [ 133.517390][ T8916] ? __rcu_read_unlock+0x4f/0x70 [ 133.517411][ T8916] ? __fget_files+0x184/0x1c0 [ 133.517457][ T8916] ? mutex_lock+0x58/0x90 [ 133.517492][ T8916] ksys_write+0xda/0x1a0 [ 133.517518][ T8916] __x64_sys_write+0x40/0x50 [ 133.517544][ T8916] x64_sys_call+0x2847/0x3000 [ 133.517601][ T8916] do_syscall_64+0xd8/0x2a0 [ 133.517682][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.517708][ T8916] RIP: 0033:0x7f45e1bae1ff [ 133.517727][ T8916] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 133.517750][ T8916] RSP: 002b:00007f45e0617030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 133.517771][ T8916] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f45e1bae1ff [ 133.517783][ T8916] RDX: 0000000000000001 RSI: 00007f45e06170a0 RDI: 0000000000000004 [ 133.517858][ T8916] RBP: 00007f45e0617090 R08: 0000000000000000 R09: 0000000000000000 [ 133.517873][ T8916] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 133.517888][ T8916] R13: 00007f45e1e06038 R14: 00007f45e1e05fa0 R15: 00007ffd87dda898 [ 133.517914][ T8916] [ 133.780665][ T8919] IPv4: Oversized IP packet from 127.202.26.0 [ 133.804515][ T8917] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1839: bg 0: block 248: padding at end of block bitmap is not set [ 133.864139][ T8932] EXT4-fs: Ignoring removed i_version option [ 133.872335][ T8932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.883677][ T8917] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1839: Failed to acquire dquot type 1 [ 133.900165][ T8917] EXT4-fs (loop1): 1 truncate cleaned up [ 133.914524][ T8932] EXT4-fs (loop3): 1 truncate cleaned up [ 133.923964][ T8932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.937097][ T8917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.943482][ T8939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8939 comm=syz.5.1850 [ 133.962792][ T8939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8939 comm=syz.5.1850 [ 133.962950][ T8917] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.990221][ T8940] ext4: Unknown parameter 'dioread_nolock"errors' [ 134.000528][ T8942] syz_tun: entered allmulticast mode [ 134.006183][ T8940] netlink: 'syz.2.1849': attribute type 1 has an invalid length. [ 134.025293][ T8942] syz_tun: left allmulticast mode [ 134.032255][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.163957][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.262426][ T8966] sg_write: data in/out 2048/8 bytes for SCSI command 0xfe-- guessing data in; [ 134.262426][ T8966] program syz.1.1857 not setting count and/or reply_len properly [ 134.291952][ T8945] set_capacity_and_notify: 14 callbacks suppressed [ 134.292490][ T8972] IPv4: Oversized IP packet from 127.202.26.0 [ 134.298779][ T8945] loop3: detected capacity change from 0 to 512 [ 134.387332][ T8980] loop1: detected capacity change from 0 to 128 [ 134.415600][ T8945] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1852: bg 0: block 248: padding at end of block bitmap is not set [ 134.439171][ T8945] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1852: Failed to acquire dquot type 1 [ 134.458213][ T8945] EXT4-fs (loop3): 1 truncate cleaned up [ 134.469675][ T8945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.484822][ T8945] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.522764][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.532428][ T1573] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 134.597907][ T8989] loop3: detected capacity change from 0 to 512 [ 134.604971][ T8991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8991 comm=syz.2.1865 [ 134.617751][ T8991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8991 comm=syz.2.1865 [ 134.626987][ T8989] ext4: Unknown parameter 'dioread_nolock"errors' [ 134.643544][ T8991] syz_tun: entered allmulticast mode [ 134.654538][ T8991] syz_tun: left allmulticast mode [ 134.668362][ T8989] netlink: 'syz.3.1864': attribute type 1 has an invalid length. [ 134.735730][ T8997] lo speed is unknown, defaulting to 1000 [ 134.780793][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1868'. [ 134.807475][ T9003] netlink: 'syz.3.1870': attribute type 21 has an invalid length. [ 134.815492][ T9003] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 134.828140][ T9003] loop3: detected capacity change from 0 to 512 [ 134.845995][ T9003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1870: error while reading EA inode 32 err=-116 [ 134.863309][ T9003] EXT4-fs (loop3): Remounting filesystem read-only [ 134.870285][ T9003] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 134.889600][ T9003] EXT4-fs (loop3): 1 orphan inode deleted [ 134.896106][ T9003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.921036][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.978040][ T9015] loop3: detected capacity change from 0 to 2048 [ 134.985966][ T9015] EXT4-fs: Ignoring removed bh option [ 135.013609][ T9015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.023385][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'. [ 135.072416][ T9024] FAULT_INJECTION: forcing a failure. [ 135.072416][ T9024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.085875][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.5.1876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 135.085938][ T9024] Tainted: [W]=WARN [ 135.085948][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.085964][ T9024] Call Trace: [ 135.086011][ T9024] [ 135.086020][ T9024] __dump_stack+0x1d/0x30 [ 135.086047][ T9024] dump_stack_lvl+0xe8/0x140 [ 135.086119][ T9024] dump_stack+0x15/0x1b [ 135.086145][ T9024] should_fail_ex+0x265/0x280 [ 135.086175][ T9024] should_fail+0xb/0x20 [ 135.086199][ T9024] should_fail_usercopy+0x1a/0x20 [ 135.086266][ T9024] _copy_from_user+0x1c/0xb0 [ 135.086304][ T9024] ___sys_sendmsg+0xc1/0x1d0 [ 135.086477][ T9024] __x64_sys_sendmsg+0xd4/0x160 [ 135.086518][ T9024] x64_sys_call+0x17ba/0x3000 [ 135.086606][ T9024] do_syscall_64+0xd8/0x2a0 [ 135.086644][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.086730][ T9024] RIP: 0033:0x7f3ad4aff749 [ 135.086745][ T9024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.086762][ T9024] RSP: 002b:00007f3ad3567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.086781][ T9024] RAX: ffffffffffffffda RBX: 00007f3ad4d55fa0 RCX: 00007f3ad4aff749 [ 135.086796][ T9024] RDX: 0000000000048080 RSI: 0000200000000080 RDI: 0000000000000004 [ 135.086812][ T9024] RBP: 00007f3ad3567090 R08: 0000000000000000 R09: 0000000000000000 [ 135.086827][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.086914][ T9024] R13: 00007f3ad4d56038 R14: 00007f3ad4d55fa0 R15: 00007ffce636d068 [ 135.086939][ T9024] [ 135.092912][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.322120][ T9034] syz_tun: entered allmulticast mode [ 135.343375][ T9034] syz_tun: left allmulticast mode [ 135.396134][ T9026] loop4: detected capacity change from 0 to 512 [ 135.443003][ T9026] ext4: Unknown parameter 'dioread_nolock"errors' [ 135.452621][ T9041] vhci_hcd vhci_hcd.3: invalid port number 9 [ 135.458790][ T9041] vhci_hcd vhci_hcd.3: invalid port number 9 [ 135.467120][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1884'. [ 135.516275][ T9026] netlink: 'syz.4.1877': attribute type 1 has an invalid length. [ 135.599174][ T9058] IPv4: Oversized IP packet from 127.202.26.0 [ 135.704878][ T9067] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 135.776664][ T9075] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1898'. [ 135.906274][ T9080] loop5: detected capacity change from 0 to 512 [ 135.926769][ T9080] ext4: Unknown parameter 'dioread_nolock"errors' [ 135.976441][ T9080] netlink: 'syz.5.1900': attribute type 1 has an invalid length. [ 136.075808][ T9084] loop5: detected capacity change from 0 to 128 [ 136.085050][ T9084] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 136.109516][ T9084] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 136.117113][ T9084] FAT-fs (loop5): Filesystem has been set read-only [ 136.298633][ T9090] IPv4: Oversized IP packet from 127.202.26.0 [ 136.480508][ T29] kauditd_printk_skb: 1270 callbacks suppressed [ 136.480525][ T29] audit: type=1326 audit(1765492870.733:19502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a48ef65e7 code=0x7ffc0000 [ 136.517050][ T29] audit: type=1326 audit(1765492870.773:19503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a48e9b829 code=0x7ffc0000 [ 136.540939][ T29] audit: type=1326 audit(1765492870.773:19504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a48ef65e7 code=0x7ffc0000 [ 136.564762][ T29] audit: type=1326 audit(1765492870.773:19505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a48e9b829 code=0x7ffc0000 [ 136.588341][ T29] audit: type=1326 audit(1765492870.773:19506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9092 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1a48eff749 code=0x7ffc0000 [ 136.655847][ T29] audit: type=1400 audit(1765492870.803:19507): avc: denied { search } for pid=3043 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.677763][ T29] audit: type=1400 audit(1765492870.803:19508): avc: denied { search } for pid=3043 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.699855][ T29] audit: type=1400 audit(1765492870.803:19509): avc: denied { search } for pid=3043 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.721814][ T29] audit: type=1400 audit(1765492870.803:19510): avc: denied { read } for pid=3043 comm="dhcpcd" name="n33" dev="tmpfs" ino=14808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.744080][ T29] audit: type=1400 audit(1765492870.803:19511): avc: denied { open } for pid=3043 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=14808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.834709][ T9129] IPv4: Oversized IP packet from 127.202.26.0 [ 136.958554][ T9118] loop1: detected capacity change from 0 to 512 [ 137.050005][ T9118] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1913: bg 0: block 248: padding at end of block bitmap is not set [ 137.071992][ T9118] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1913: Failed to acquire dquot type 1 [ 137.101648][ T9118] EXT4-fs (loop1): 1 truncate cleaned up [ 137.117139][ T9118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.132679][ T9118] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.223296][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.242341][ T37] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 137.365153][ T9184] loop1: detected capacity change from 0 to 1024 [ 137.499111][ T9192] ext4: Unknown parameter 'dioread_nolock"errors' [ 137.557271][ T9192] netlink: 'syz.5.1925': attribute type 1 has an invalid length. [ 137.661763][ T9220] xt_TCPMSS: Only works on TCP SYN packets [ 137.746713][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.764223][ T9233] syz.4.1936 uses obsolete (PF_INET,SOCK_PACKET) [ 137.827654][ T9239] bridge5: entered promiscuous mode [ 137.900203][ T9253] selinux_netlink_send: 7 callbacks suppressed [ 137.900218][ T9253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9253 comm=syz.2.1940 [ 137.919468][ T9253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=9253 comm=syz.2.1940 [ 137.936277][ T9253] syz_tun: entered allmulticast mode [ 138.056883][ T9268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1941: bg 0: block 248: padding at end of block bitmap is not set [ 138.080599][ T9268] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1941: Failed to acquire dquot type 1 [ 138.092722][ T9268] EXT4-fs (loop2): 1 truncate cleaned up [ 138.098959][ T9268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.112990][ T9268] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.233716][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.237156][ T9279] ext4: Unknown parameter 'dioread_nolock"errors' [ 138.252407][ T37] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 138.314102][ T9279] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 138.501882][ T9301] IPv4: Oversized IP packet from 127.202.26.0 [ 138.537371][ T9298] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1945: bg 0: block 248: padding at end of block bitmap is not set [ 138.557067][ T9298] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1945: Failed to acquire dquot type 1 [ 138.571244][ T9298] EXT4-fs (loop3): 1 truncate cleaned up [ 138.581652][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.588352][ T9298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.590611][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.591185][ T9307] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1947'. [ 138.609344][ T9298] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.662424][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.673855][ T31] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 138.734365][ T9315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9315 comm=syz.1.1951 [ 138.747279][ T9315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=9315 comm=syz.1.1951 [ 138.764933][ T9315] syz_tun: entered allmulticast mode [ 138.846605][ T9321] ext4: Unknown parameter 'dioread_nolock"errors' [ 138.884139][ T9321] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 138.949817][ T9319] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1953: bg 0: block 248: padding at end of block bitmap is not set [ 138.970765][ T9319] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1953: Failed to acquire dquot type 1 [ 138.987098][ T9319] EXT4-fs (loop3): 1 truncate cleaned up [ 139.008624][ T9319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.022661][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 139.032775][ T9319] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.088525][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.098511][ T4884] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 139.128671][ T9334] IPv4: Oversized IP packet from 127.202.26.0 [ 139.182900][ T9344] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1959'. [ 139.270475][ T9349] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1960: bg 0: block 248: padding at end of block bitmap is not set [ 139.291117][ T9349] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1960: Failed to acquire dquot type 1 [ 139.304042][ T9349] EXT4-fs (loop2): 1 truncate cleaned up [ 139.320762][ T9349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.334322][ T9349] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.400806][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.410548][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 139.424552][ T9357] set_capacity_and_notify: 7 callbacks suppressed [ 139.424589][ T9357] loop3: detected capacity change from 0 to 512 [ 139.453639][ T9357] ext4: Unknown parameter 'dioread_nolock"errors' [ 139.479456][ T3809] ================================================================== [ 139.487902][ T3809] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 139.494902][ T3809] [ 139.497340][ T3809] write to 0xffff888103a4f544 of 4 bytes by task 3571 on cpu 0: [ 139.504997][ T3809] shmem_mknod+0x143/0x170 [ 139.509454][ T3809] shmem_create+0x34/0x50 [ 139.513820][ T3809] path_openat+0x1115/0x23b0 [ 139.518440][ T3809] do_filp_open+0x109/0x230 [ 139.518583][ T9357] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 139.522980][ T3809] do_sys_openat2+0xa6/0x150 [ 139.523016][ T3809] __x64_sys_openat+0xf2/0x120 [ 139.523051][ T3809] x64_sys_call+0x2b07/0x3000 [ 139.523077][ T3809] do_syscall_64+0xd8/0x2a0 [ 139.523116][ T3809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.523142][ T3809] [ 139.523149][ T3809] read to 0xffff888103a4f544 of 4 bytes by task 3809 on cpu 1: [ 139.523169][ T3809] fill_mg_cmtime+0x5b/0x260 [ 139.523198][ T3809] generic_fillattr+0x24a/0x340 [ 139.523227][ T3809] shmem_getattr+0x181/0x200 [ 139.523262][ T3809] vfs_getattr_nosec+0x146/0x1e0 [ 139.523289][ T3809] vfs_statx+0x113/0x390 [ 139.523317][ T3809] vfs_fstatat+0x115/0x170 [ 139.523345][ T3809] __se_sys_newfstatat+0x55/0x260 [ 139.523376][ T3809] __x64_sys_newfstatat+0x55/0x70 [ 139.523408][ T3809] x64_sys_call+0x111f/0x3000 [ 139.523438][ T3809] do_syscall_64+0xd8/0x2a0 [ 139.523471][ T3809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.523494][ T3809] [ 139.523500][ T3809] value changed: 0x2c9b2e5d -> 0x2ca4c85c [ 139.523513][ T3809] [ 139.523518][ T3809] Reported by Kernel Concurrency Sanitizer on: [ 139.523536][ T3809] CPU: 1 UID: 0 PID: 3809 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.523574][ T3809] Tainted: [W]=WARN [ 139.523582][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.523598][ T3809] ================================================================== [ 139.822072][ T3722] Bluetooth: hci0: command 0x1003 tx timeout [ 139.822072][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110