last executing test programs: 2.383198607s ago: executing program 1 (id=487): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4044810) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={0x0, 0x20000600}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r3, &(0x7f0000000380)=[{0x0, 0xbd}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 2.282583161s ago: executing program 3 (id=491): r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x1}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x17) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r6, r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) dup2(r1, r4) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000180)={0x1, 0xaf27}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.234015743s ago: executing program 3 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='ext4_sync_file_exit\x00', r2, 0x0, 0x2}, 0x18) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c80100", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0800030001"], 0x1c8}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x10) r9 = dup2(r7, r7) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r9, 0x1276, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) flock(r10, 0x2) 2.043235611s ago: executing program 4 (id=498): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) write$tun(r1, 0x0, 0xfdef) 2.017543152s ago: executing program 4 (id=500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711052000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) r0 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x2dc000, @local, 0x3}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x8002) 1.999306663s ago: executing program 3 (id=501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b3, &(0x7f0000000780)="$eJzs3T9sG9UfAPDvne2mf/L7pUggAepQAVKRqjpJ/0BhaldEpUodkFggctyoihNXcQJNFKnpXiE68E9dygYDI4iBAbGwwcoCYkaqaARS04EaObaTNHWCE+q4xJ+PdPF7dxd/3zv7++x7upMD6FmHa3/SiGci4nwSMbBmWzYaGw/X91tanC/cW5wvJFGtXvg9iSQi7i7OF5r7J43HAxGxEBFPR8R3uYij6cpT7mkWKrNz4yOlUnGqUR+cnrg8WJmdO3ZpYmSsOFacPPHyK6dOnzw1fHx4bXPvVdfWclvr6/Vfbrx3/cfXbt34/ItDC4UPRpI4E/2NbWv78SjVj0kuzqxbf7ITwboo6XYD2JZMI89rqfRUDESmkfWtVNcODn070jygg6p9EVWgRyXyH3pU83tA7fy3uezk94/bZ+snILW4S4vzhavRjJ+tz03E3uVzk/1/JA+cmdTONw/uZEPZlRauRcRQNvvw+z9pvP/WzlptzdCjaiQd8+3Z+gv18Oufrow/0WL86W/Onf5LzfFvqTH+LbWIn9lg/DvfZoy/3vz1kw3jX+uLZ7MR9x+Kn6zET1rETyPi7Tbj33zj69Mbbat+GnEkWvV/dUYx2Xx+ePDipVJxqP63ZYxvjhx6deP+R+zfIH59znbv8sfM2v7vabQpbbP/X33/5XMLm8R/8fnNX/9Wx39fRLzfZvwn7n72+kbbbl9L7tS+BbTq/2bxk8jFrTbjv3Tm8M+NollDAAAAAAAAAAB4hNLla9mSNL9STtN8vn4P75OxPy2VK9NHL5ZnJkfr17wdjFzavNJqoF5PavXhxvW4zfrxdfUTmUbAzL7ler5QLo12ue8AAAAAAAAAAAAAAAAAAADwuDiw7v7/PzPL9/+v/7lqYLfa+Ce/gd1O/kPvejD/k661A9h5Pv+hZ1XlP/SuVvlvTIDeINehd8l/6F3yH3qX/IfeJf8BAAAAAAAAAAAAAAAAAAAAAAAAAKAjzp87V1uq9xbnC7X6aHZ2Zrz8zrHRYmU8PzFTyBfKU5fzY+XyWKmYL5Qn/un5knL58lBMzlwZnC5Wpgcrs3NvTZRnJpu/KVrMdbxHAAAAAAAAAAAAAAAAAAAA8N/Tv7wkaT4iV6+naT4f8b+IOJhEcvFSqTgUEf+PiJ8yub5afbjbjQYAAAAAAAAAAAAAAAAAAIBdpjI7Nz5SKhWnOlfINkJ1MET7hexWdo6IhTZ2vtp+M2rPuOU25xoHsMuHbvuFu9W6bjXjhw9X12Qej/fh41/o4qAEAAAAAAAAAAAAAAAAAAA9avWm33b/435nGwQAAAAAAAAAAAAAAAAAAAA9Kf0tiYjacmTghf71W/ckS5nlx4h49+aFj66MTE9PDdfW31lZP/1xY/3xbrQfaFczT9OIqOUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKoyOzc+UioVp7ZZ6Gtjn273EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7/g4AAP//5TrUlQ==") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000052000000030000000900001a00000000000000"], &(0x7f0000000000), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82781) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) write$sndseq(r3, &(0x7f00000000c0)=[{0x5, 0x3, 0x8, 0x0, @time, {}, {0x0, 0x1}, @result={0x10001}}], 0x1c) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r5}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000007", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r9}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) 1.895205458s ago: executing program 4 (id=502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 1.890901338s ago: executing program 0 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000b946b2c4ba0431efe6f817e75474baf51a355b15e8a10d82f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f00000002c0)=0x5, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYRES16=r2, @ANYRES16=r6, @ANYBLOB="080029bd7000ffdbdf253d0000000c0099005d000000000008005d000000000008005d000100000008005d00"/58], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = syz_io_uring_setup(0x5562, &(0x7f0000000300)={0x0, 0x8f8e, 0x400, 0x2, 0x2ec}, &(0x7f0000000240), &(0x7f0000000440)) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480), 0xb0040, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f00000004c0)=r8, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000100)={[{@bsdgroups}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@block_validity}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x77}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x44, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001100001200701aa67fb093bab500d8e047ba7f1113bd2307a17c916627490fd69f761bffe51a0c605ab6344d9ec0c1cbe0668efe4d4727d11d5249d3650921562338be6de711e890846cf631402e9fea747ba38397ac", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r9 = socket(0x40000000015, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r11 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r11, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) 1.83684614s ago: executing program 2 (id=505): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3272a6bc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000700000000800000010000", @ANYBLOB, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}]}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='host1x_cdma_push_wide\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468"], 0xa8}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x200c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.83616123s ago: executing program 4 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) utime(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6f0, 0x800, 0x82, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r5, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) 1.693355716s ago: executing program 2 (id=507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702008008000000b703000000edfb0300000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000a80)={[0x9145]}, 0x8, 0x80000) poll(&(0x7f0000000b40)=[{r1, 0x22}], 0x1, 0x1c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 1.621823919s ago: executing program 0 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) 1.62078969s ago: executing program 2 (id=509): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_shutdown\x00', r4, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f0000000080)=""/43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x5}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x95c}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffff1}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {0x7}, {0x8001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x3b}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x80000, 0x78}, {0x0, 0x5, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 1.200762958s ago: executing program 1 (id=510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) write$tun(r1, 0x0, 0xfdef) 1.183489809s ago: executing program 0 (id=511): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000002e40)={0xf, 0x1, 0x4, 0x3e, 0x0, 0x7, 0xc, "948dad5963e812e68d48372f6f4b9da767b11ede", "aeff359618e4d0f2d32bdd9ddae17c06e2192ad1"}) recvmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/181, 0xb5}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000000c0)=""/37, 0x25}], 0x4}, 0x7}, {{&(0x7f00000003c0)=@phonet, 0x80, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2, &(0x7f00000016c0)=""/107, 0x6b}, 0x9}, {{&(0x7f0000001740)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/133, 0x85}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000002880)=""/60, 0x3c}, {&(0x7f00000028c0)=""/223, 0xdf}, {&(0x7f00000029c0)=""/230, 0xe6}, {&(0x7f0000002ac0)=""/226, 0xe2}, {&(0x7f0000002bc0)=""/32, 0x20}], 0x8, &(0x7f0000002c80)=""/149, 0x95}, 0x1000}], 0x3, 0x2, &(0x7f0000002e00)) socket$inet(0x2, 0x5, 0x71) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r0, 0x80000) 1.004608487s ago: executing program 1 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r2, 0x15f1, 0x6184, 0x6b, 0x0, 0x0) 1.003189376s ago: executing program 2 (id=518): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x91, 0x2001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00') io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioprio_set$uid(0x3, 0x0, 0x0) 919.74712ms ago: executing program 4 (id=519): r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x1}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x17) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r6, r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) dup2(r1, r4) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) 881.035682ms ago: executing program 1 (id=520): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4044810) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={0x0, 0x20000600}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r3, &(0x7f0000000380)=[{0x0, 0xbd}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 824.373234ms ago: executing program 0 (id=521): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x9400, &(0x7f0000000440)=[{&(0x7f00000013c0)=""/49, 0x94}, {0x0}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) 822.566564ms ago: executing program 3 (id=522): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) write$tun(r1, 0x0, 0xfdef) 785.083126ms ago: executing program 2 (id=523): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@multicast, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}}, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x19, 0x1, 0x0, 0x0, "3a55c5c44dbb0f8ab7c1bdcc1535f20d72f5533bbb4186ab734c583c03b0ae95c29ad158ca66c49679417647bf5335d6ad6779fb8eed5fe58592592f3cb71f3d"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x893, 0x7a4, 0x9ce, 0xf45]}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffedc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 783.947536ms ago: executing program 4 (id=524): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r5, 0x0, 0x1000000}, 0x18) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwritev2(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)="82ee823b", 0x4}], 0x1, 0x1, 0x1, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8}, 0x10) 638.296812ms ago: executing program 3 (id=525): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 [ 33.617151][ T3538] __dump_stack+0x1d/0x30 [ 33.617180][ T3538] dump_stack_lvl+0xe8/0x140 [ 33.617273][ T3538] dump_stack+0x15/0x1b [ 33.617296][ T3538] __get_user_pages+0x1968/0x1ed0 [ 33.617337][ T3538] get_user_pages_remote+0x1d5/0x6c0 [ 33.617381][ T3538] __access_remote_vm+0x15c/0x590 [ 33.617410][ T3538] access_remote_vm+0x32/0x40 [ 33.617486][ T3538] proc_pid_cmdline_read+0x32b/0x6c0 [ 33.617536][ T3538] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 33.617565][ T3538] vfs_readv+0x3fb/0x690 [ 33.617740][ T3538] __x64_sys_preadv+0xfd/0x1c0 [ 33.617772][ T3538] x64_sys_call+0x282e/0x3000 [ 33.617793][ T3538] do_syscall_64+0xd2/0x200 [ 33.617819][ T3538] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.617854][ T3538] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 33.617896][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.617943][ T3538] RIP: 0033:0x7f8d9192f749 [ 33.617959][ T3538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.617981][ T3538] RSP: 002b:00007f8d90397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 33.618039][ T3538] RAX: ffffffffffffffda RBX: 00007f8d91b85fa0 RCX: 00007f8d9192f749 [ 33.618051][ T3538] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000e [ 33.618108][ T3538] RBP: 00007f8d919b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 33.618125][ T3538] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 33.618152][ T3538] R13: 00007f8d91b86038 R14: 00007f8d91b85fa0 R15: 00007ffc872e4708 [ 33.618174][ T3538] [ 33.925250][ T3541] loop1: detected capacity change from 0 to 512 [ 33.953111][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 33.964099][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.964131][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.964146][ T3318] Call Trace: [ 33.964186][ T3318] [ 33.964216][ T3318] __dump_stack+0x1d/0x30 [ 33.964244][ T3318] dump_stack_lvl+0xe8/0x140 [ 33.964266][ T3318] dump_stack+0x15/0x1b [ 33.964293][ T3318] dump_header+0x81/0x220 [ 33.964315][ T3318] oom_kill_process+0x342/0x400 [ 33.964356][ T3318] out_of_memory+0x979/0xb80 [ 33.964390][ T3318] try_charge_memcg+0x610/0xa10 [ 33.964452][ T3318] charge_memcg+0x51/0xc0 [ 33.964480][ T3318] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 33.964513][ T3318] __read_swap_cache_async+0x17b/0x2d0 [ 33.964543][ T3318] swap_cluster_readahead+0x262/0x3c0 [ 33.964640][ T3318] swapin_readahead+0xde/0x800 [ 33.964670][ T3318] ? __rcu_read_unlock+0x4f/0x70 [ 33.964702][ T3318] ? swap_cache_get_folio+0x277/0x280 [ 33.964723][ T3318] do_swap_page+0x2ae/0x2370 [ 33.964750][ T3318] ? _raw_spin_unlock+0x26/0x50 [ 33.964781][ T3318] ? finish_task_switch+0xad/0x2b0 [ 33.964806][ T3318] ? __pfx_default_wake_function+0x10/0x10 [ 33.964862][ T3318] handle_mm_fault+0x9a5/0x2be0 [ 33.964895][ T3318] ? vma_start_read+0x141/0x1f0 [ 33.964939][ T3318] do_user_addr_fault+0x630/0x1080 [ 33.964959][ T3318] ? fpregs_restore_userregs+0xe2/0x1d0 [ 33.965029][ T3318] ? switch_fpu_return+0xe/0x20 [ 33.965057][ T3318] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.965143][ T3318] exc_page_fault+0x62/0xa0 [ 33.965244][ T3318] asm_exc_page_fault+0x26/0x30 [ 33.965270][ T3318] RIP: 0033:0x7f453cc01fc5 [ 33.965287][ T3318] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 33.965304][ T3318] RSP: 002b:00007ffdda414fb8 EFLAGS: 00010246 [ 33.965319][ T3318] RAX: 0000000000000000 RBX: 000000000000000e RCX: 00007f453cc01fc3 [ 33.965332][ T3318] RDX: 00007ffdda414fd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.965346][ T3318] RBP: 00007ffdda41503c R08: 000000003439143f R09: 0000000000000000 [ 33.965410][ T3318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 33.965430][ T3318] R13: 00000000000927c0 R14: 000000000000828c R15: 00007ffdda415090 [ 33.965452][ T3318] [ 33.965459][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 392 [ 33.983155][ T3541] ext4: Unknown parameter 'uid' [ 33.985573][ T3318] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 33.985595][ T3318] kmem: usage 307068kB, limit 9007199254740988kB, failcnt 0 [ 33.985610][ T3318] Memory cgroup stats for /syz3: [ 33.986614][ T3318] cache 135168 [ 34.230842][ T3318] rss 0 [ 34.233651][ T3318] shmem 0 [ 34.236604][ T3318] mapped_file 135168 [ 34.240513][ T3318] dirty 135168 [ 34.243957][ T3318] writeback 0 [ 34.247345][ T3318] workingset_refault_anon 6 [ 34.251988][ T3318] workingset_refault_file 0 [ 34.256700][ T3318] swap 204800 [ 34.260008][ T3318] swapcached 0 [ 34.263441][ T3318] pgpgin 753 [ 34.266681][ T3318] pgpgout 720 [ 34.269988][ T3318] pgfault 950 [ 34.273323][ T3318] pgmajfault 3 [ 34.276759][ T3318] inactive_anon 0 [ 34.280417][ T3318] active_anon 0 [ 34.285187][ T3318] inactive_file 135168 [ 34.289273][ T3318] active_file 0 [ 34.292784][ T3318] unevictable 0 [ 34.296258][ T3318] hierarchical_memory_limit 314572800 [ 34.301679][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 34.307973][ T3318] total_cache 135168 [ 34.311891][ T3318] total_rss 0 [ 34.315212][ T3318] total_shmem 0 [ 34.318677][ T3318] total_mapped_file 135168 [ 34.323131][ T3318] total_dirty 135168 [ 34.327037][ T3318] total_writeback 0 [ 34.330912][ T3318] total_workingset_refault_anon 6 [ 34.336000][ T3318] total_workingset_refault_file 0 [ 34.341079][ T3318] total_swap 204800 [ 34.344920][ T3318] total_swapcached 0 [ 34.348871][ T3318] total_pgpgin 753 [ 34.352626][ T3318] total_pgpgout 720 [ 34.356629][ T3318] total_pgfault 950 [ 34.360449][ T3318] total_pgmajfault 3 [ 34.364417][ T3318] total_inactive_anon 0 [ 34.368594][ T3318] total_active_anon 0 [ 34.372698][ T3318] total_inactive_file 135168 [ 34.377392][ T3318] total_active_file 0 [ 34.381294][ T3546] loop4: detected capacity change from 0 to 512 [ 34.381386][ T3318] total_unevictable 0 [ 34.381398][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.17,pid=3532,uid=0 [ 34.406289][ T3318] Memory cgroup out of memory: Killed process 3532 (syz.3.17) total-vm:96016kB, anon-rss:1136kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 34.432368][ T3546] loop4: detected capacity change from 0 to 1024 [ 34.445267][ T3533] syz.3.17 (3533) used greatest stack depth: 10072 bytes left [ 34.455724][ T3546] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.466685][ T3546] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.495867][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 34.498780][ T3546] JBD2: no valid journal superblock found [ 34.510515][ T3546] EXT4-fs (loop4): Could not load journal inode [ 34.566720][ T3555] loop2: detected capacity change from 0 to 764 [ 34.583110][ T3557] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.591725][ T3555] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 34.671564][ T3557] capability: warning: `syz.3.26' uses 32-bit capabilities (legacy support in use) [ 34.689392][ T3560] netlink: 'syz.4.27': attribute type 6 has an invalid length. [ 34.697069][ T3560] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.27'. [ 34.708671][ T3563] Symlink component flag not implemented [ 34.714760][ T3561] loop0: detected capacity change from 0 to 512 [ 34.721919][ T3563] Symlink component flag not implemented (7) [ 34.773150][ T3561] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.28: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 34.811603][ T3567] loop1: detected capacity change from 0 to 764 [ 34.821354][ T3561] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.28: Bad quota inode: 3, type: 0 [ 34.855424][ T3567] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 34.876543][ T3561] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 34.892169][ T3561] EXT4-fs (loop0): mount failed [ 34.947014][ T3573] loop2: detected capacity change from 0 to 128 [ 34.974246][ T3573] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 34.982140][ T3573] FAT-fs (loop2): Filesystem has been set read-only [ 35.007731][ T3573] syz.2.32: attempt to access beyond end of device [ 35.007731][ T3573] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 35.021499][ T3574] Symlink component flag not implemented [ 35.028415][ T3574] Symlink component flag not implemented (7) [ 35.052895][ T3573] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 35.060850][ T3573] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 35.086028][ T3579] syz.2.32: attempt to access beyond end of device [ 35.086028][ T3579] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 35.099249][ T3579] Buffer I/O error on dev loop2, logical block 2065, async page read [ 35.111741][ T3579] syz.2.32: attempt to access beyond end of device [ 35.111741][ T3579] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 35.125001][ T3579] Buffer I/O error on dev loop2, logical block 2066, async page read [ 35.134424][ T3579] syz.2.32: attempt to access beyond end of device [ 35.134424][ T3579] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 35.147548][ T3579] Buffer I/O error on dev loop2, logical block 2067, async page read [ 35.156199][ T3579] syz.2.32: attempt to access beyond end of device [ 35.156199][ T3579] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 35.169439][ T3579] Buffer I/O error on dev loop2, logical block 2068, async page read [ 35.187336][ T3580] loop4: detected capacity change from 0 to 1024 [ 35.202251][ T3578] netlink: 'syz.0.34': attribute type 1 has an invalid length. [ 35.204193][ T3579] syz.2.32: attempt to access beyond end of device [ 35.204193][ T3579] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 35.209916][ T3578] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 35.223035][ T3579] Buffer I/O error on dev loop2, logical block 2069, async page read [ 35.238701][ T3578] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.34'. [ 35.247919][ T3580] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.258844][ T3580] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.269823][ T3585] loop0: detected capacity change from 0 to 128 [ 35.284618][ T3579] syz.2.32: attempt to access beyond end of device [ 35.284618][ T3579] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 35.297909][ T3579] Buffer I/O error on dev loop2, logical block 2070, async page read [ 35.315582][ T3587] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.335474][ T3579] syz.2.32: attempt to access beyond end of device [ 35.335474][ T3579] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 35.337708][ T3578] syz.0.34: attempt to access beyond end of device [ 35.337708][ T3578] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 35.348605][ T3579] Buffer I/O error on dev loop2, logical block 2071, async page read [ 35.348849][ T3580] JBD2: no valid journal superblock found [ 35.376250][ T3580] EXT4-fs (loop4): Could not load journal inode [ 35.378615][ T3578] syz.0.34: attempt to access beyond end of device [ 35.378615][ T3578] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 35.385128][ T3579] Buffer I/O error on dev loop2, logical block 2072, async page read [ 35.395915][ T3578] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 35.420780][ T3579] Buffer I/O error on dev loop2, logical block 2065, async page read [ 35.456321][ T3587] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.491970][ T3576] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 35.526452][ T3587] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.595730][ T3587] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.694217][ T3601] loop0: detected capacity change from 0 to 512 [ 35.738965][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.748675][ T3601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.777619][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.789449][ T3608] IPv6: sit1: Disabled Multicast RS [ 35.808376][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.817040][ T3601] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.837834][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.883995][ T3609] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.102678][ T3622] loop4: detected capacity change from 0 to 512 [ 36.133344][ T3622] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.46: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 36.151888][ T3622] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.46: Bad quota inode: 3, type: 0 [ 36.162967][ T3622] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 36.178092][ T3622] EXT4-fs (loop4): mount failed [ 36.677601][ T3646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 37.138596][ T3691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.164865][ T3691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.186218][ T3691] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.294766][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 37.294784][ T29] audit: type=1326 audit(1763879747.859:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453cbcf749 code=0x7ffc0000 [ 37.329646][ T3710] program syz.3.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.339411][ T29] audit: type=1326 audit(1763879747.889:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0efaa65e7 code=0x7ffc0000 [ 37.362581][ T29] audit: type=1326 audit(1763879747.889:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0efa4b829 code=0x7ffc0000 [ 37.386318][ T29] audit: type=1326 audit(1763879747.889:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc0efaaf749 code=0x7ffc0000 [ 37.409681][ T29] audit: type=1326 audit(1763879747.889:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f453cbcf749 code=0x7ffc0000 [ 37.432906][ T29] audit: type=1326 audit(1763879747.889:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453cbcf749 code=0x7ffc0000 [ 37.456062][ T29] audit: type=1326 audit(1763879747.889:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f453cbcdf90 code=0x7ffc0000 [ 37.479410][ T29] audit: type=1400 audit(1763879747.889:578): avc: denied { write } for pid=3709 comm="syz.3.54" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.503068][ T29] audit: type=1326 audit(1763879747.889:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453cbcf749 code=0x7ffc0000 [ 37.526537][ T29] audit: type=1326 audit(1763879747.889:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f453cbcf749 code=0x7ffc0000 [ 37.618576][ T3742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.630861][ T3742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.646661][ T3745] loop4: detected capacity change from 0 to 512 [ 37.667049][ T3745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.690566][ T3745] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.702325][ T3745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.976507][ T3800] loop1: detected capacity change from 0 to 512 [ 38.025051][ T3807] IPv6: sit1: Disabled Multicast RS [ 38.034582][ T3800] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 38.052812][ T3807] loop2: detected capacity change from 0 to 512 [ 38.062331][ T3807] ext4: Unknown parameter 'uid' [ 38.088978][ T3807] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.140342][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 38.399232][ T3827] loop2: detected capacity change from 0 to 164 [ 38.410680][ T3827] process 'syz.2.64' launched '/dev/fd/7' with NULL argv: empty string added [ 38.444984][ T3829] No such timeout policy "syz1" [ 38.450663][ T3829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.65'. [ 38.526723][ T3833] loop3: detected capacity change from 0 to 512 [ 38.544749][ T3833] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.66: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 38.563876][ T3833] EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz.3.66: Bad quota inode: 3, type: 0 [ 38.578394][ T3833] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 38.593533][ T3833] EXT4-fs (loop3): mount failed [ 38.693853][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.764040][ T3846] loop4: detected capacity change from 0 to 764 [ 38.773748][ T3846] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 38.785671][ T3848] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.068374][ T3849] Symlink component flag not implemented [ 39.201350][ T3849] Symlink component flag not implemented (7) [ 39.230929][ T3855] loop0: detected capacity change from 0 to 2048 [ 39.262410][ T3855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.330941][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 39.567714][ T3868] loop3: detected capacity change from 0 to 512 [ 39.605388][ T3868] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.77: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 39.638167][ T3868] EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz.3.77: Bad quota inode: 3, type: 0 [ 39.672994][ T3868] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 39.695337][ T3868] EXT4-fs (loop3): mount failed [ 39.725012][ C0] hrtimer: interrupt took 47663 ns [ 39.863989][ T3868] loop3: detected capacity change from 0 to 512 [ 39.887436][ T3868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.910489][ T3868] ext4 filesystem being mounted at /20/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.953929][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.965464][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.018412][ T3888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 40.027298][ T3888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 40.057323][ T3886] netlink: 'syz.3.81': attribute type 4 has an invalid length. [ 40.270135][ T3906] loop0: detected capacity change from 0 to 764 [ 40.280864][ T3904] loop3: detected capacity change from 0 to 1024 [ 40.307898][ T3904] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.318927][ T3904] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.329377][ T3906] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 40.362871][ T3904] JBD2: no valid journal superblock found [ 40.368670][ T3904] EXT4-fs (loop3): Could not load journal inode [ 40.408542][ T3908] Symlink component flag not implemented [ 40.419861][ T3904] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 40.438710][ T3908] Symlink component flag not implemented (7) [ 40.581152][ T3915] loop0: detected capacity change from 0 to 512 [ 40.606157][ T3915] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.92: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 40.660907][ T3915] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.92: Bad quota inode: 3, type: 0 [ 40.685361][ T3922] loop3: detected capacity change from 0 to 128 [ 40.693352][ T3915] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 40.722062][ T3922] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 40.729979][ T3922] FAT-fs (loop3): Filesystem has been set read-only [ 40.730125][ T3915] EXT4-fs (loop0): mount failed [ 40.752784][ T3922] bio_check_eod: 23115 callbacks suppressed [ 40.752802][ T3922] syz.3.95: attempt to access beyond end of device [ 40.752802][ T3922] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 40.792829][ T3922] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 40.800771][ T3922] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 40.829133][ T3922] syz.3.95: attempt to access beyond end of device [ 40.829133][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.862681][ T3922] syz.3.95: attempt to access beyond end of device [ 40.862681][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.884131][ T3922] syz.3.95: attempt to access beyond end of device [ 40.884131][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.907521][ T3922] syz.3.95: attempt to access beyond end of device [ 40.907521][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.930887][ T3922] syz.3.95: attempt to access beyond end of device [ 40.930887][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.957894][ T3922] syz.3.95: attempt to access beyond end of device [ 40.957894][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.974333][ T3922] syz.3.95: attempt to access beyond end of device [ 40.974333][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.000173][ T3922] syz.3.95: attempt to access beyond end of device [ 41.000173][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.017869][ T3933] loop4: detected capacity change from 0 to 136 [ 41.028241][ T3935] loop2: detected capacity change from 0 to 764 [ 41.035859][ T3922] syz.3.95: attempt to access beyond end of device [ 41.035859][ T3922] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.050384][ T3935] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.120317][ T3938] Symlink component flag not implemented [ 41.127263][ T3938] Symlink component flag not implemented (7) [ 41.210167][ T3942] loop2: detected capacity change from 0 to 512 [ 41.240932][ T3942] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.101: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 41.268898][ T3933] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 41.279127][ T3933] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 41.324628][ T3949] loop4: detected capacity change from 0 to 128 [ 41.334941][ T3949] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.342969][ T3949] FAT-fs (loop4): Filesystem has been set read-only [ 41.349740][ T3949] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.357888][ T3949] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 41.358034][ T3942] EXT4-fs error (device loop2): ext4_quota_enable:7139: comm syz.2.101: Bad quota inode: 3, type: 0 [ 41.389986][ T3942] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 41.404984][ T3942] EXT4-fs (loop2): mount failed [ 41.583954][ T3955] loop2: detected capacity change from 0 to 1024 [ 41.600346][ T3955] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.611332][ T3955] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.632434][ T3955] JBD2: no valid journal superblock found [ 41.638284][ T3955] EXT4-fs (loop2): Could not load journal inode [ 41.661603][ T3957] netlink: 'syz.3.106': attribute type 4 has an invalid length. [ 41.663162][ T3955] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 42.609381][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 42.609417][ T29] audit: type=1400 audit(1763879753.169:1076): avc: denied { read write } for pid=3999 comm="syz.0.121" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 42.639960][ T29] audit: type=1400 audit(1763879753.169:1077): avc: denied { open } for pid=3999 comm="syz.0.121" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 42.689657][ T4003] FAULT_INJECTION: forcing a failure. [ 42.689657][ T4003] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.702786][ T4003] CPU: 1 UID: 0 PID: 4003 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.702814][ T4003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.702825][ T4003] Call Trace: [ 42.702832][ T4003] [ 42.702884][ T4003] __dump_stack+0x1d/0x30 [ 42.702910][ T4003] dump_stack_lvl+0xe8/0x140 [ 42.702963][ T4003] dump_stack+0x15/0x1b [ 42.703008][ T4003] should_fail_ex+0x265/0x280 [ 42.703078][ T4003] should_fail+0xb/0x20 [ 42.703096][ T4003] should_fail_usercopy+0x1a/0x20 [ 42.703122][ T4003] _copy_from_user+0x1c/0xb0 [ 42.703199][ T4003] snd_seq_ioctl+0x125/0x300 [ 42.703228][ T4003] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 42.703247][ T4003] __se_sys_ioctl+0xce/0x140 [ 42.703268][ T4003] __x64_sys_ioctl+0x43/0x50 [ 42.703351][ T4003] x64_sys_call+0x1816/0x3000 [ 42.703373][ T4003] do_syscall_64+0xd2/0x200 [ 42.703395][ T4003] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.703425][ T4003] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.703489][ T4003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.703517][ T4003] RIP: 0033:0x7f8d9192f749 [ 42.703532][ T4003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.703549][ T4003] RSP: 002b:00007f8d90397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.703600][ T4003] RAX: ffffffffffffffda RBX: 00007f8d91b85fa0 RCX: 00007f8d9192f749 [ 42.703612][ T4003] RDX: 0000200000000380 RSI: 00000000404c534a RDI: 0000000000000003 [ 42.703623][ T4003] RBP: 00007f8d90397090 R08: 0000000000000000 R09: 0000000000000000 [ 42.703634][ T4003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.703645][ T4003] R13: 00007f8d91b86038 R14: 00007f8d91b85fa0 R15: 00007ffc872e4708 [ 42.703666][ T4003] [ 42.721673][ T4000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 42.901694][ T29] audit: type=1400 audit(1763879753.349:1078): avc: denied { read } for pid=4007 comm="syz.4.125" dev="nsfs" ino=4026532458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.922861][ T29] audit: type=1400 audit(1763879753.349:1079): avc: denied { open } for pid=4007 comm="syz.4.125" path="net:[4026532458]" dev="nsfs" ino=4026532458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.982522][ T4018] loop3: detected capacity change from 0 to 128 [ 42.991303][ T4018] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 42.999179][ T4018] FAT-fs (loop3): Filesystem has been set read-only [ 43.007499][ T4018] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.015427][ T4018] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.029796][ T29] audit: type=1400 audit(1763879753.589:1080): avc: denied { write } for pid=3999 comm="syz.0.121" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 43.052959][ T29] audit: type=1400 audit(1763879753.589:1081): avc: denied { open } for pid=3999 comm="syz.0.121" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 43.076332][ T29] audit: type=1400 audit(1763879753.589:1082): avc: denied { create } for pid=3999 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.144736][ T29] audit: type=1326 audit(1763879753.679:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0efaaf749 code=0x7ffc0000 [ 43.168249][ T29] audit: type=1326 audit(1763879753.679:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0efaaf749 code=0x7ffc0000 [ 43.191636][ T29] audit: type=1326 audit(1763879753.679:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0efaaf749 code=0x7ffc0000 [ 43.219233][ T4026] buffer_io_error: 23111 callbacks suppressed [ 43.219250][ T4026] Buffer I/O error on dev loop3, logical block 2065, async page read [ 43.282807][ T4026] Buffer I/O error on dev loop3, logical block 2066, async page read [ 43.301246][ T4026] Buffer I/O error on dev loop3, logical block 2067, async page read [ 43.313707][ T4026] Buffer I/O error on dev loop3, logical block 2068, async page read [ 43.321884][ T4026] Buffer I/O error on dev loop3, logical block 2069, async page read [ 43.330502][ T4026] Buffer I/O error on dev loop3, logical block 2070, async page read [ 43.338771][ T4026] Buffer I/O error on dev loop3, logical block 2071, async page read [ 43.356584][ T4026] Buffer I/O error on dev loop3, logical block 2072, async page read [ 43.373615][ T4018] Buffer I/O error on dev loop3, logical block 2065, async page read [ 43.404485][ T4018] Buffer I/O error on dev loop3, logical block 2066, async page read [ 43.491351][ T4039] netlink: 6036 bytes leftover after parsing attributes in process `syz.2.135'. [ 43.529599][ T4039] netlink: 6036 bytes leftover after parsing attributes in process `syz.2.135'. [ 43.733772][ T4061] syz.2.142 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.781618][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 43.808587][ T4071] loop0: detected capacity change from 0 to 512 [ 43.835269][ T4071] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.145: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 43.905687][ T4071] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.145: Bad quota inode: 3, type: 0 [ 43.922841][ T4071] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 43.953783][ T4071] EXT4-fs (loop0): mount failed [ 44.041858][ T4080] loop4: detected capacity change from 0 to 512 [ 44.083590][ T4080] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.147: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 44.150702][ T4080] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.147: Bad quota inode: 3, type: 0 [ 44.161912][ T4080] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.177352][ T4080] EXT4-fs (loop4): mount failed [ 44.202479][ T4078] loop3: detected capacity change from 0 to 512 [ 44.255351][ T4078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.293842][ T4078] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.335605][ T4086] netlink: 'syz.0.148': attribute type 4 has an invalid length. [ 44.343329][ T4086] netlink: 17 bytes leftover after parsing attributes in process `syz.0.148'. [ 44.390809][ T4095] IPv6: sit1: Disabled Multicast RS [ 44.429554][ T4095] loop4: detected capacity change from 0 to 512 [ 44.445353][ T4095] ext4: Unknown parameter 'uid' [ 44.515503][ T4104] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.579841][ T4078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.606406][ T4078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.717603][ T4109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 44.726671][ T4109] openvswitch: netlink: Flow actions attr not present in new flow. [ 44.949124][ T4123] mmap: syz.0.159 (4123) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.992056][ T4118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.159'. [ 45.094481][ T4137] loop0: detected capacity change from 0 to 136 [ 45.164903][ T4137] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 45.175645][ T4137] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 45.268787][ T4142] loop0: detected capacity change from 0 to 1024 [ 45.282343][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.284287][ T4142] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.302257][ T4142] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.493639][ T4142] JBD2: no valid journal superblock found [ 45.499443][ T4142] EXT4-fs (loop0): Could not load journal inode [ 45.642523][ T4142] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 45.766055][ T4158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 45.865937][ T4169] loop2: detected capacity change from 0 to 512 [ 45.900595][ T4169] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.177: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 45.921433][ T4169] EXT4-fs error (device loop2): ext4_quota_enable:7139: comm syz.2.177: Bad quota inode: 3, type: 0 [ 45.934199][ T4169] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 45.949232][ T4169] EXT4-fs (loop2): mount failed [ 46.069904][ T4188] loop2: detected capacity change from 0 to 1024 [ 46.078957][ T4188] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.089930][ T4188] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.105971][ T4188] JBD2: no valid journal superblock found [ 46.111793][ T4188] EXT4-fs (loop2): Could not load journal inode [ 46.178017][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 46.213091][ T4188] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 46.379927][ T4216] loop3: detected capacity change from 0 to 512 [ 46.475724][ T4216] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.194: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 46.496069][ T4216] EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz.3.194: Bad quota inode: 3, type: 0 [ 46.509878][ T4216] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 46.562743][ T4216] EXT4-fs (loop3): mount failed [ 47.052243][ T4231] loop3: detected capacity change from 0 to 136 [ 47.170792][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 47.185889][ T4238] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 47.251668][ T4231] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 47.267912][ T4231] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 47.403887][ T4259] loop0: detected capacity change from 0 to 512 [ 47.607700][ T4275] netlink: 240 bytes leftover after parsing attributes in process `syz.1.216'. [ 47.616946][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 47.616965][ T29] audit: type=1400 audit(1763879758.169:1302): avc: denied { nlmsg_write } for pid=4273 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.648435][ T4275] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.682628][ T4275] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 47.855927][ T4280] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 47.862563][ T4280] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 47.870790][ T4280] vhci_hcd vhci_hcd.0: Device attached [ 47.977442][ T29] audit: type=1400 audit(1763879758.209:1303): avc: denied { bind } for pid=4273 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.996820][ T29] audit: type=1400 audit(1763879758.209:1304): avc: denied { create } for pid=4273 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 48.016959][ T29] audit: type=1400 audit(1763879758.209:1305): avc: denied { write } for pid=4273 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 48.055136][ T4288] loop0: detected capacity change from 0 to 512 [ 48.062083][ T29] audit: type=1326 audit(1763879758.619:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 48.085619][ T29] audit: type=1326 audit(1763879758.619:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 48.109317][ T4284] vhci_hcd: connection closed [ 48.109556][ T29] audit: type=1326 audit(1763879758.649:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f453cbcf749 code=0x7ffc0000 [ 48.109746][ T12] vhci_hcd: stop threads [ 48.114438][ T29] audit: type=1326 audit(1763879758.649:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f453cbcf749 code=0x7ffc0000 [ 48.137894][ T12] vhci_hcd: release socket [ 48.165937][ T29] audit: type=1326 audit(1763879758.729:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 48.169832][ T12] vhci_hcd: disconnect device [ 48.197960][ T29] audit: type=1326 audit(1763879758.729:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4289 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 48.254641][ T4288] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.218: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 48.280202][ T4288] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.218: Bad quota inode: 3, type: 0 [ 48.282529][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 48.300730][ T4288] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 48.352501][ T4288] EXT4-fs (loop0): mount failed [ 48.403782][ T4306] loop4: detected capacity change from 0 to 136 [ 48.482414][ T4309] loop0: detected capacity change from 0 to 512 [ 48.494813][ T4312] loop2: detected capacity change from 0 to 512 [ 48.516285][ T4309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.562216][ T4306] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 48.580441][ T4306] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 48.594725][ T4312] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.227: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 48.648001][ T4309] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.668080][ T4312] EXT4-fs error (device loop2): ext4_quota_enable:7139: comm syz.2.227: Bad quota inode: 3, type: 0 [ 48.679638][ T4309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.695165][ T4312] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 48.717340][ T4312] EXT4-fs (loop2): mount failed [ 49.598113][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 49.615621][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 49.821127][ T4370] netlink: 'syz.1.248': attribute type 12 has an invalid length. [ 49.829128][ T4370] FAULT_INJECTION: forcing a failure. [ 49.829128][ T4370] name failslab, interval 1, probability 0, space 0, times 1 [ 49.841777][ T4370] CPU: 1 UID: 0 PID: 4370 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.841812][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.841824][ T4370] Call Trace: [ 49.841831][ T4370] [ 49.841838][ T4370] __dump_stack+0x1d/0x30 [ 49.841899][ T4370] dump_stack_lvl+0xe8/0x140 [ 49.841918][ T4370] dump_stack+0x15/0x1b [ 49.841935][ T4370] should_fail_ex+0x265/0x280 [ 49.841968][ T4370] should_failslab+0x8c/0xb0 [ 49.842010][ T4370] kmem_cache_alloc_noprof+0x50/0x480 [ 49.842047][ T4370] ? dst_alloc+0xbd/0x100 [ 49.842086][ T4370] ? __pfx_ip6_dst_gc+0x10/0x10 [ 49.842147][ T4370] dst_alloc+0xbd/0x100 [ 49.842182][ T4370] icmp6_dst_alloc+0xa9/0x330 [ 49.842240][ T4370] ? icmpv6_flow_init+0x94/0xb0 [ 49.842267][ T4370] ndisc_send_skb+0x169/0x760 [ 49.842292][ T4370] ? __alloc_skb+0x223/0x320 [ 49.842346][ T4370] ndisc_solicit+0x261/0x320 [ 49.842371][ T4370] ? __pfx_ndisc_solicit+0x10/0x10 [ 49.842392][ T4370] __neigh_event_send+0x839/0xa30 [ 49.842421][ T4370] neigh_event_send+0xad/0xc0 [ 49.842514][ T4370] neigh_add+0x8b0/0xa70 [ 49.842550][ T4370] ? __pfx_neigh_add+0x10/0x10 [ 49.842622][ T4370] rtnetlink_rcv_msg+0x65a/0x6d0 [ 49.842695][ T4370] netlink_rcv_skb+0x123/0x220 [ 49.842751][ T4370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.842787][ T4370] rtnetlink_rcv+0x1c/0x30 [ 49.842831][ T4370] netlink_unicast+0x5c0/0x690 [ 49.842987][ T4370] netlink_sendmsg+0x58b/0x6b0 [ 49.843014][ T4370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.843040][ T4370] __sock_sendmsg+0x145/0x180 [ 49.843110][ T4370] sock_write_iter+0x1a7/0x1f0 [ 49.843136][ T4370] ? __pfx_sock_write_iter+0x10/0x10 [ 49.843156][ T4370] vfs_write+0x52a/0x960 [ 49.843184][ T4370] ksys_write+0xda/0x1a0 [ 49.843283][ T4370] __x64_sys_write+0x40/0x50 [ 49.843315][ T4370] x64_sys_call+0x2802/0x3000 [ 49.843343][ T4370] do_syscall_64+0xd2/0x200 [ 49.843413][ T4370] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.843449][ T4370] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.843547][ T4370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.843574][ T4370] RIP: 0033:0x7fc0efaaf749 [ 49.843594][ T4370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.843613][ T4370] RSP: 002b:00007fc0ee517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.843634][ T4370] RAX: ffffffffffffffda RBX: 00007fc0efd05fa0 RCX: 00007fc0efaaf749 [ 49.843648][ T4370] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000003 [ 49.843675][ T4370] RBP: 00007fc0ee517090 R08: 0000000000000000 R09: 0000000000000000 [ 49.843690][ T4370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.843705][ T4370] R13: 00007fc0efd06038 R14: 00007fc0efd05fa0 R15: 00007ffebb809d68 [ 49.843728][ T4370] [ 50.168454][ T4375] netlink: 'syz.0.249': attribute type 4 has an invalid length. [ 50.219270][ T4381] loop4: detected capacity change from 0 to 512 [ 50.269468][ T4381] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.253: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 50.296800][ T4393] loop0: detected capacity change from 0 to 764 [ 50.323890][ T4381] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.253: Bad quota inode: 3, type: 0 [ 50.334983][ T4393] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 50.349001][ T4396] lo speed is unknown, defaulting to 1000 [ 50.355277][ T4396] lo speed is unknown, defaulting to 1000 [ 50.362894][ T4396] lo speed is unknown, defaulting to 1000 [ 50.369677][ T4396] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.379696][ T4381] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 50.395141][ T4396] lo speed is unknown, defaulting to 1000 [ 50.401309][ T4396] lo speed is unknown, defaulting to 1000 [ 50.407956][ T4396] lo speed is unknown, defaulting to 1000 [ 50.414631][ T4381] EXT4-fs (loop4): mount failed [ 50.426535][ T4396] lo speed is unknown, defaulting to 1000 [ 50.450084][ T4396] lo speed is unknown, defaulting to 1000 [ 50.460978][ T4397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.557412][ T4393] Symlink component flag not implemented [ 50.583413][ T4393] Symlink component flag not implemented (7) [ 50.654535][ T4415] loop3: detected capacity change from 0 to 1024 [ 50.693842][ T4415] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.697879][ T4425] loop0: detected capacity change from 0 to 136 [ 50.704804][ T4415] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.772582][ T4415] JBD2: no valid journal superblock found [ 50.778373][ T4415] EXT4-fs (loop3): Could not load journal inode [ 50.857097][ T4433] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 50.886373][ T4435] unsupported nla_type 52263 [ 50.900136][ T4425] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 51.064911][ T4444] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.277'. [ 51.074714][ T4444] netlink: zone id is out of range [ 51.079929][ T4444] netlink: zone id is out of range [ 51.085279][ T4444] netlink: zone id is out of range [ 51.097589][ T4444] netlink: zone id is out of range [ 51.102938][ T4444] netlink: zone id is out of range [ 51.108170][ T4444] netlink: zone id is out of range [ 51.113486][ T4444] netlink: zone id is out of range [ 51.119681][ T4444] netlink: zone id is out of range [ 51.127153][ T4444] netlink: zone id is out of range [ 51.132769][ T4444] netlink: zone id is out of range [ 51.159992][ T4450] lo speed is unknown, defaulting to 1000 [ 51.295149][ T4454] loop3: detected capacity change from 0 to 512 [ 51.322384][ T4454] ext4: Unknown parameter 'uid' [ 51.576983][ T4461] loop0: detected capacity change from 0 to 1024 [ 51.607132][ T4461] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.618095][ T4461] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.756362][ T4461] JBD2: no valid journal superblock found [ 51.762151][ T4461] EXT4-fs (loop0): Could not load journal inode [ 51.861349][ T4465] loop4: detected capacity change from 0 to 512 [ 51.903457][ T4465] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.285: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 51.942649][ T4465] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.285: Bad quota inode: 3, type: 0 [ 51.954154][ T4465] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 51.969032][ T4465] EXT4-fs (loop4): mount failed [ 52.216316][ T4480] loop3: detected capacity change from 0 to 128 [ 52.255983][ T4480] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 52.263933][ T4480] FAT-fs (loop3): Filesystem has been set read-only [ 52.281741][ T4484] loop4: detected capacity change from 0 to 512 [ 52.288341][ T4480] bio_check_eod: 33786 callbacks suppressed [ 52.288355][ T4480] syz.3.290: attempt to access beyond end of device [ 52.288355][ T4480] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 52.308728][ T4480] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 52.316656][ T4480] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 52.393040][ T4480] syz.3.290: attempt to access beyond end of device [ 52.393040][ T4480] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 52.408742][ T4480] syz.3.290: attempt to access beyond end of device [ 52.408742][ T4480] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 52.422217][ T4489] syz.3.290: attempt to access beyond end of device [ 52.422217][ T4489] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 52.435648][ T4489] buffer_io_error: 15806 callbacks suppressed [ 52.435662][ T4489] Buffer I/O error on dev loop3, logical block 2065, async page read [ 52.483863][ T4490] netlink: 'syz.2.292': attribute type 4 has an invalid length. [ 52.491539][ T4490] netlink: 17 bytes leftover after parsing attributes in process `syz.2.292'. [ 52.878704][ T4484] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.293: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 52.899207][ T4489] syz.3.290: attempt to access beyond end of device [ 52.899207][ T4489] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 52.912753][ T4489] Buffer I/O error on dev loop3, logical block 2066, async page read [ 52.938663][ T4484] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.293: Bad quota inode: 3, type: 0 [ 52.953532][ T4489] syz.3.290: attempt to access beyond end of device [ 52.953532][ T4489] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 52.966817][ T4489] Buffer I/O error on dev loop3, logical block 2067, async page read [ 52.999321][ T4484] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 53.021502][ T4489] syz.3.290: attempt to access beyond end of device [ 53.021502][ T4489] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 53.034982][ T4489] Buffer I/O error on dev loop3, logical block 2068, async page read [ 53.043942][ T4484] EXT4-fs (loop4): mount failed [ 53.050877][ T4489] syz.3.290: attempt to access beyond end of device [ 53.050877][ T4489] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 53.064164][ T4489] Buffer I/O error on dev loop3, logical block 2069, async page read [ 53.072432][ T4489] syz.3.290: attempt to access beyond end of device [ 53.072432][ T4489] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 53.085800][ T4489] Buffer I/O error on dev loop3, logical block 2070, async page read [ 53.114475][ T4489] syz.3.290: attempt to access beyond end of device [ 53.114475][ T4489] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 53.127707][ T4489] Buffer I/O error on dev loop3, logical block 2071, async page read [ 53.143863][ T4489] Buffer I/O error on dev loop3, logical block 2072, async page read [ 53.152859][ T4480] Buffer I/O error on dev loop3, logical block 2065, async page read [ 53.163209][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 53.163226][ T29] audit: type=1326 audit(1763879763.729:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.192949][ T29] audit: type=1326 audit(1763879763.729:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.223778][ T29] audit: type=1326 audit(1763879763.729:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.226053][ T4480] Buffer I/O error on dev loop3, logical block 2066, async page read [ 53.247184][ T29] audit: type=1326 audit(1763879763.729:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.247228][ T29] audit: type=1326 audit(1763879763.729:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.247264][ T29] audit: type=1326 audit(1763879763.779:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.247388][ T29] audit: type=1326 audit(1763879763.779:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.247477][ T29] audit: type=1326 audit(1763879763.779:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.247509][ T29] audit: type=1326 audit(1763879763.779:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.395810][ T29] audit: type=1326 audit(1763879763.779:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4483 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 53.518392][ T4514] geneve2: entered promiscuous mode [ 53.567098][ T4512] netlink: 'syz.1.300': attribute type 4 has an invalid length. [ 53.605330][ T4523] loop4: detected capacity change from 0 to 128 [ 53.627878][ T4523] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 53.635838][ T4523] FAT-fs (loop4): Filesystem has been set read-only [ 53.642686][ T4523] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 53.650521][ T4523] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 53.897993][ T4542] loop3: detected capacity change from 0 to 1024 [ 53.912048][ T4542] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.923097][ T4542] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.004303][ T4542] JBD2: no valid journal superblock found [ 54.010083][ T4542] EXT4-fs (loop3): Could not load journal inode [ 54.086409][ T4550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.101495][ T4550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.114723][ T4550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 54.139051][ T4552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4552 comm=syz.3.315 [ 54.153114][ T4550] loop2: detected capacity change from 0 to 2048 [ 54.225751][ T4550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.238349][ T4550] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.353174][ T4561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.361726][ T4561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.445141][ T4563] FAULT_INJECTION: forcing a failure. [ 54.445141][ T4563] name failslab, interval 1, probability 0, space 0, times 0 [ 54.457829][ T4563] CPU: 1 UID: 0 PID: 4563 Comm: syz.3.317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.457862][ T4563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.457875][ T4563] Call Trace: [ 54.457882][ T4563] [ 54.457891][ T4563] __dump_stack+0x1d/0x30 [ 54.457919][ T4563] dump_stack_lvl+0xe8/0x140 [ 54.457943][ T4563] dump_stack+0x15/0x1b [ 54.457988][ T4563] should_fail_ex+0x265/0x280 [ 54.458086][ T4563] should_failslab+0x8c/0xb0 [ 54.458122][ T4563] kmem_cache_alloc_noprof+0x50/0x480 [ 54.458166][ T4563] ? copy_fs_struct+0x31/0x110 [ 54.458204][ T4563] copy_fs_struct+0x31/0x110 [ 54.458249][ T4563] copy_fs+0x58/0xf0 [ 54.458276][ T4563] copy_process+0xc85/0x2000 [ 54.458344][ T4563] kernel_clone+0x16c/0x5c0 [ 54.458451][ T4563] ? vfs_write+0x7e8/0x960 [ 54.458514][ T4563] __x64_sys_clone+0xe6/0x120 [ 54.458552][ T4563] x64_sys_call+0x119c/0x3000 [ 54.458573][ T4563] do_syscall_64+0xd2/0x200 [ 54.458593][ T4563] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.458662][ T4563] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.458702][ T4563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.458729][ T4563] RIP: 0033:0x7f453cbcf749 [ 54.458746][ T4563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.458826][ T4563] RSP: 002b:00007f453b5ecfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 54.458850][ T4563] RAX: ffffffffffffffda RBX: 00007f453ce26180 RCX: 00007f453cbcf749 [ 54.458865][ T4563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 54.458879][ T4563] RBP: 00007f453b5ed090 R08: 0000000000000000 R09: 0000000000000000 [ 54.458894][ T4563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 54.458957][ T4563] R13: 00007f453ce26218 R14: 00007f453ce26180 R15: 00007ffdda414c78 [ 54.458979][ T4563] [ 54.992873][ T4394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 55.017732][ T4394] EXT4-fs (loop2): Remounting filesystem read-only [ 55.110544][ T4598] loop3: detected capacity change from 0 to 764 [ 55.135674][ T4598] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 55.214769][ T4603] loop4: detected capacity change from 0 to 1024 [ 55.232506][ T4603] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.243529][ T4603] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.272854][ T4603] JBD2: no valid journal superblock found [ 55.278680][ T4603] EXT4-fs (loop4): Could not load journal inode [ 55.293972][ T4598] Symlink component flag not implemented [ 55.299679][ T4598] Symlink component flag not implemented (7) [ 55.515316][ T4625] loop4: detected capacity change from 0 to 512 [ 55.549785][ T4625] ext4: Unknown parameter 'uid' [ 55.555126][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.587114][ T4629] loop0: detected capacity change from 0 to 1024 [ 55.606413][ T4629] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.617398][ T4629] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.664314][ T4629] JBD2: no valid journal superblock found [ 55.670155][ T4629] EXT4-fs (loop0): Could not load journal inode [ 55.699853][ T4634] lo speed is unknown, defaulting to 1000 [ 56.092262][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 56.344200][ T4651] loop3: detected capacity change from 0 to 512 [ 56.379683][ T4651] ext4: Unknown parameter 'uid' [ 56.845186][ T4678] loop0: detected capacity change from 0 to 136 [ 56.933704][ T4682] netlink: 'syz.2.367': attribute type 4 has an invalid length. [ 56.949069][ T4678] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 56.959984][ T4678] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 57.020380][ T4686] IPv6: sit1: Disabled Multicast RS [ 57.043769][ T4686] loop0: detected capacity change from 0 to 512 [ 57.050799][ T4686] ext4: Unknown parameter 'uid' [ 57.107892][ T4693] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.199556][ T4698] loop3: detected capacity change from 0 to 1024 [ 57.210269][ T4698] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.221300][ T4698] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.233989][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 57.242997][ T4698] JBD2: no valid journal superblock found [ 57.248854][ T4698] EXT4-fs (loop3): Could not load journal inode [ 57.415091][ T4707] siw: device registration error -23 [ 57.525448][ T4715] loop4: detected capacity change from 0 to 128 [ 57.535668][ T4715] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 57.543558][ T4715] FAT-fs (loop4): Filesystem has been set read-only [ 57.553253][ T4715] bio_check_eod: 52978 callbacks suppressed [ 57.553266][ T4715] syz.4.377: attempt to access beyond end of device [ 57.553266][ T4715] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 57.573246][ T4715] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 57.581192][ T4715] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 57.589897][ T4715] syz.4.377: attempt to access beyond end of device [ 57.589897][ T4715] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.603887][ T4715] syz.4.377: attempt to access beyond end of device [ 57.603887][ T4715] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.618094][ T4719] syz.4.377: attempt to access beyond end of device [ 57.618094][ T4719] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 57.631327][ T4719] buffer_io_error: 52974 callbacks suppressed [ 57.631356][ T4719] Buffer I/O error on dev loop4, logical block 2065, async page read [ 57.646133][ T4719] syz.4.377: attempt to access beyond end of device [ 57.646133][ T4719] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 57.659548][ T4719] Buffer I/O error on dev loop4, logical block 2066, async page read [ 57.668029][ T4719] syz.4.377: attempt to access beyond end of device [ 57.668029][ T4719] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 57.681240][ T4719] Buffer I/O error on dev loop4, logical block 2067, async page read [ 57.689933][ T4719] syz.4.377: attempt to access beyond end of device [ 57.689933][ T4719] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 57.703282][ T4719] Buffer I/O error on dev loop4, logical block 2068, async page read [ 57.712340][ T4719] syz.4.377: attempt to access beyond end of device [ 57.712340][ T4719] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 57.725731][ T4719] Buffer I/O error on dev loop4, logical block 2069, async page read [ 57.734732][ T4719] syz.4.377: attempt to access beyond end of device [ 57.734732][ T4719] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 57.748042][ T4719] Buffer I/O error on dev loop4, logical block 2070, async page read [ 57.757464][ T4719] syz.4.377: attempt to access beyond end of device [ 57.757464][ T4719] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 57.770695][ T4719] Buffer I/O error on dev loop4, logical block 2071, async page read [ 57.779373][ T4719] Buffer I/O error on dev loop4, logical block 2072, async page read [ 57.787638][ T4715] Buffer I/O error on dev loop4, logical block 2065, async page read [ 57.796067][ T4715] Buffer I/O error on dev loop4, logical block 2066, async page read [ 57.896630][ T4726] loop2: detected capacity change from 0 to 1024 [ 57.934309][ T4726] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.945458][ T4726] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.969647][ T4726] JBD2: no valid journal superblock found [ 57.975452][ T4726] EXT4-fs (loop2): Could not load journal inode [ 58.065893][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 58.246523][ T4747] siw: device registration error -23 [ 58.348151][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 58.348168][ T29] audit: type=1400 audit(1763879768.909:1648): avc: denied { create } for pid=4754 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.355738][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 58.432609][ T29] audit: type=1400 audit(1763879768.989:1649): avc: denied { create } for pid=4757 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 58.458664][ T4758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 58.474178][ T29] audit: type=1326 audit(1763879769.029:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c179f749 code=0x7ffc0000 [ 58.497597][ T29] audit: type=1326 audit(1763879769.029:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93c179f749 code=0x7ffc0000 [ 58.521007][ T29] audit: type=1326 audit(1763879769.029:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c179f749 code=0x7ffc0000 [ 58.544365][ T29] audit: type=1326 audit(1763879769.029:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93c179f749 code=0x7ffc0000 [ 58.544397][ T29] audit: type=1326 audit(1763879769.029:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c179f749 code=0x7ffc0000 [ 58.544424][ T29] audit: type=1326 audit(1763879769.029:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93c17a1667 code=0x7ffc0000 [ 58.614775][ T29] audit: type=1326 audit(1763879769.029:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f93c17a15dc code=0x7ffc0000 [ 58.638083][ T29] audit: type=1326 audit(1763879769.029:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f93c17a1514 code=0x7ffc0000 [ 58.716026][ T4765] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 58.839056][ T4781] lo speed is unknown, defaulting to 1000 [ 59.103723][ T4795] lo speed is unknown, defaulting to 1000 [ 59.505616][ T4801] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.513206][ T4801] vhci_hcd: invalid port number 96 [ 59.518357][ T4801] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 59.584865][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 59.975562][ T4821] loop3: detected capacity change from 0 to 128 [ 59.994632][ T4821] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 60.002522][ T4821] FAT-fs (loop3): Filesystem has been set read-only [ 60.011765][ T4821] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 60.019735][ T4821] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 60.263076][ T4832] netlink: 'syz.4.416': attribute type 4 has an invalid length. [ 60.270795][ T4832] netlink: 17 bytes leftover after parsing attributes in process `syz.4.416'. [ 60.319372][ T4833] netlink: 'syz.0.418': attribute type 4 has an invalid length. [ 60.787556][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 60.906181][ T4850] lo speed is unknown, defaulting to 1000 [ 61.607529][ T4869] lo speed is unknown, defaulting to 1000 [ 61.843942][ T4875] netlink: 'syz.4.431': attribute type 16 has an invalid length. [ 61.851821][ T4875] netlink: 'syz.4.431': attribute type 17 has an invalid length. [ 62.055064][ T4875] net_ratelimit: 24 callbacks suppressed [ 62.055082][ T4875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.267533][ T4915] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 62.299043][ T4915] lo speed is unknown, defaulting to 1000 [ 62.559695][ T4933] netlink: 'syz.1.438': attribute type 4 has an invalid length. [ 62.567485][ T4933] netlink: 17 bytes leftover after parsing attributes in process `syz.1.438'. [ 62.749707][ T4938] netlink: 'syz.4.441': attribute type 3 has an invalid length. [ 62.757486][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 63.002414][ T4946] netlink: 3 bytes leftover after parsing attributes in process `syz.4.444'. [ 63.020278][ T4946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=4946 comm=syz.4.444 [ 63.346105][ T4976] netlink: 'syz.1.456': attribute type 4 has an invalid length. [ 63.355985][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 63.356002][ T29] audit: type=1400 audit(1763879773.919:1895): avc: denied { ioctl } for pid=4974 comm="syz.2.457" path="net:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.408142][ T4975] loop2: detected capacity change from 0 to 512 [ 63.446365][ T29] audit: type=1326 audit(1763879773.969:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.471630][ T29] audit: type=1326 audit(1763879773.969:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.496365][ T29] audit: type=1326 audit(1763879773.969:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.520981][ T29] audit: type=1326 audit(1763879773.969:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.545587][ T29] audit: type=1326 audit(1763879773.969:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.565239][ T4990] lo speed is unknown, defaulting to 1000 [ 63.569320][ T29] audit: type=1326 audit(1763879773.969:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.599217][ T29] audit: type=1326 audit(1763879773.979:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.623694][ T29] audit: type=1326 audit(1763879773.979:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.648030][ T29] audit: type=1326 audit(1763879773.979:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9192f749 code=0x7ffc0000 [ 63.853238][ T5007] loop2: detected capacity change from 0 to 128 [ 63.925160][ T5007] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 63.933103][ T5007] FAT-fs (loop2): Filesystem has been set read-only [ 63.956206][ T5007] bio_check_eod: 71786 callbacks suppressed [ 63.956261][ T5007] syz.2.469: attempt to access beyond end of device [ 63.956261][ T5007] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 63.978653][ T5014] siw: device registration error -23 [ 64.009866][ T5007] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.017988][ T5007] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 64.030440][ T5007] syz.2.469: attempt to access beyond end of device [ 64.030440][ T5007] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.044020][ T5007] syz.2.469: attempt to access beyond end of device [ 64.044020][ T5007] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.057487][ T5026] syz.2.469: attempt to access beyond end of device [ 64.057487][ T5026] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 64.071880][ T5026] buffer_io_error: 69894 callbacks suppressed [ 64.071974][ T5026] Buffer I/O error on dev loop2, logical block 2065, async page read [ 64.117893][ T5026] syz.2.469: attempt to access beyond end of device [ 64.117893][ T5026] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 64.132239][ T5026] Buffer I/O error on dev loop2, logical block 2066, async page read [ 64.144282][ T5028] netlink: 'syz.0.476': attribute type 4 has an invalid length. [ 64.209261][ T5036] loop3: detected capacity change from 0 to 512 [ 64.211302][ T5026] syz.2.469: attempt to access beyond end of device [ 64.211302][ T5026] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 64.230141][ T5026] Buffer I/O error on dev loop2, logical block 2067, async page read [ 64.258261][ T5036] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.477: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 64.288337][ T5036] EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz.3.477: Bad quota inode: 3, type: 0 [ 64.289210][ T5026] syz.2.469: attempt to access beyond end of device [ 64.289210][ T5026] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 64.314691][ T5026] Buffer I/O error on dev loop2, logical block 2068, async page read [ 64.325391][ T5036] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 64.336205][ T5026] syz.2.469: attempt to access beyond end of device [ 64.336205][ T5026] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 64.354393][ T5026] Buffer I/O error on dev loop2, logical block 2069, async page read [ 64.373424][ T5036] EXT4-fs (loop3): mount failed [ 64.379325][ T5026] syz.2.469: attempt to access beyond end of device [ 64.379325][ T5026] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 64.392704][ T5026] Buffer I/O error on dev loop2, logical block 2070, async page read [ 64.414004][ T5026] syz.2.469: attempt to access beyond end of device [ 64.414004][ T5026] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 64.428671][ T5026] Buffer I/O error on dev loop2, logical block 2071, async page read [ 64.475479][ T5026] Buffer I/O error on dev loop2, logical block 2072, async page read [ 64.484819][ T5007] Buffer I/O error on dev loop2, logical block 2065, async page read [ 64.515815][ T5007] Buffer I/O error on dev loop2, logical block 2066, async page read [ 64.557902][ T5052] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 64.627324][ T5052] bridge0: port 3(macsec1) entered blocking state [ 64.634976][ T5052] bridge0: port 3(macsec1) entered disabled state [ 64.641829][ T5052] macsec1: entered allmulticast mode [ 64.648659][ T5052] macsec1: left allmulticast mode [ 64.769104][ T5071] siw: device registration error -23 [ 64.789569][ T5064] lo speed is unknown, defaulting to 1000 [ 64.893373][ T5079] netlink: 'syz.0.494': attribute type 4 has an invalid length. [ 65.089339][ T5100] loop3: detected capacity change from 0 to 1024 [ 65.116117][ T5100] EXT4-fs: Ignoring removed oldalloc option [ 65.164639][ T5100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.189461][ T5100] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.365364][ T5112] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 65.388898][ T5119] netlink: 'syz.2.507': attribute type 4 has an invalid length. [ 65.470908][ T5123] lo speed is unknown, defaulting to 1000 [ 66.001674][ T5140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 66.177034][ T5154] siw: device registration error -23 [ 66.221198][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.396728][ T5169] loop3: detected capacity change from 0 to 1024 [ 66.413122][ T5169] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.424215][ T5169] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.434973][ T5169] JBD2: no valid journal superblock found [ 66.440897][ T5169] EXT4-fs (loop3): Could not load journal inode [ 66.493372][ T5171] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 66.501129][ T5171] netlink: 17 bytes leftover after parsing attributes in process `syz.2.523'. [ 67.052189][ T3004] ================================================================== [ 67.060332][ T3004] BUG: KCSAN: data-race in d_delete / lookup_fast [ 67.066793][ T3004] [ 67.069131][ T3004] read-write to 0xffff88811a13c600 of 4 bytes by task 3488 on cpu 0: [ 67.077291][ T3004] d_delete+0x15a/0x180 [ 67.081460][ T3004] d_delete_notify+0x32/0x100 [ 67.086159][ T3004] vfs_unlink+0x30b/0x420 [ 67.090532][ T3004] do_unlinkat+0x24e/0x480 [ 67.094974][ T3004] __x64_sys_unlink+0x2e/0x40 [ 67.099662][ T3004] x64_sys_call+0x2dcf/0x3000 [ 67.104357][ T3004] do_syscall_64+0xd2/0x200 [ 67.108873][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.114776][ T3004] [ 67.117111][ T3004] read to 0xffff88811a13c600 of 4 bytes by task 3004 on cpu 1: [ 67.124658][ T3004] lookup_fast+0xf0/0x320 [ 67.129020][ T3004] walk_component+0x3f/0x220 [ 67.133632][ T3004] path_lookupat+0xfe/0x2a0 [ 67.138180][ T3004] filename_lookup+0x147/0x340 [ 67.142966][ T3004] do_readlinkat+0x7d/0x320 [ 67.147485][ T3004] __x64_sys_readlink+0x47/0x60 [ 67.152345][ T3004] x64_sys_call+0x28de/0x3000 [ 67.157036][ T3004] do_syscall_64+0xd2/0x200 [ 67.161563][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.167477][ T3004] [ 67.169820][ T3004] value changed: 0x00300180 -> 0x00004080 [ 67.175537][ T3004] [ 67.177865][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 67.184047][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.193367][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.203443][ T3004] ==================================================================