last executing test programs: 4m50.970006388s ago: executing program 2 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000390a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e0001"], 0xe0}}, 0x0) 4m50.887797259s ago: executing program 2 (id=461): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m50.802818791s ago: executing program 2 (id=465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e21, 0xb, @rand_addr=' \x01\x00', 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1a7b4e20000010000000000e5615445644740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6322df3ee818a00000000000000000000000000000000000000003c00"}, 0xd8) 4m50.802446651s ago: executing program 2 (id=466): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40)={[{@errors_continue}, {@jqfmt_vfsv0}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@nolazytime}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x60) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x8c, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9900}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffff4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x13) waitid(0x0, r8, 0x0, 0x2100000a, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) capget(&(0x7f0000000040)={0x19980330, r8}, &(0x7f0000000180)={0xff, 0x1, 0x5, 0x2, 0xb, 0x8}) setsockopt$inet_int(r9, 0x0, 0x12, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) 4m50.122912055s ago: executing program 2 (id=484): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x4}, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000304000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m49.820214341s ago: executing program 2 (id=491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f00000002c0), 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r6, &(0x7f0000000080), 0x4) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f00000006c0)={0x30, r7, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5}, 0xe) (async) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000340)={0x0, 0xf8e, 0x5, 0x6}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) (async) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0x200}, 0x18) io_uring_setup(0x1b5b, &(0x7f0000000040)={0x0, 0x3b39, 0x4000, 0x0, 0x59}) 4m49.819732811s ago: executing program 32 (id=491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f00000002c0), 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r6, &(0x7f0000000080), 0x4) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f00000006c0)={0x30, r7, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5}, 0xe) (async) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000340)={0x0, 0xf8e, 0x5, 0x6}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) (async) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0x200}, 0x18) io_uring_setup(0x1b5b, &(0x7f0000000040)={0x0, 0x3b39, 0x4000, 0x0, 0x59}) 1m32.968585473s ago: executing program 0 (id=3521): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r3, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) r7 = dup(r5) inotify_rm_watch(r7, r6) unshare(0x6a040000) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYRES32, @ANYRES8], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000097ff8208582005109bc10000000109021200010000000000bf575a00"], 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000208000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2404c455}, 0x20000810) 1m32.199307269s ago: executing program 0 (id=3536): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYBLOB="d5b3b4a11506417063362d2443f5e89706d7817b7d1548fe982a3327cfe7a425f31bdaeab4e034a993caf8c4d743f6606a6bd4502d743a6dbfa7ce8a833ad041ae20d7608799a38f72b350e725d93f17ca24d435b24f9d7be1fc7b650f105bcdd055530339989ae763b4de505b08a755bf1644b2b595a255fe7928398e0fa7955dfd897c2c0913f345627b02791ef032f46136aa17c05bc97d5ab4e7ef0efb05785636732dab62deb3216ee860c51a8f6b6df10e9f6fe1f971"], 0xfe, 0x19c, &(0x7f0000000200)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000200), &(0x7f0000000500)=r3}, 0x20) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000580)="f7", 0x1, 0x8008, 0x0, 0x6}]) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@fallback, 0xffffffffffffffff, 0x37, 0x9}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@noblock_validity}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x1a902, 0xca80720d628e3a86) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) fstat(0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000004c0)=""/55, 0x37) 1m32.047993122s ago: executing program 0 (id=3537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) 1m31.998176073s ago: executing program 0 (id=3540): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1m31.943480424s ago: executing program 0 (id=3542): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8000, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$eJzs3E1sFFUcAPD/bL/5kIr4AYJW8YOotLR8yMGLRhMPmpjoAeOplkKQQg2tiZBG0QMeDYl349HEu4knvRj1YEy86t2QENML6GnMzM4s23a3n0sX3N8v2e17M7N97z9vXuf1vd0NoGMNZU9JxLaI+CMidlSzCw8Yqv64OT838c/83EQSafrm30l+3I35uYny0PJ1W6uZNI3oy5J9Dcq98k7E+NTU5IUiPzJ77v2RmYuXDp45N3568vTk+bHjx48c3td7bOxovj9dZ3yV4mcW1409H03v3f3q21dfnzhx9d2fv8nqu63YXx/HuqRLazhUPbuLPZo9Pbmhwu4ov2ZP2+s2JN3NDx7ehAqxel0RkTVXT55LoisGavt2xCuftrFqwG2Wpmna6P4cdfftFPifSvRv6FDlvT77/7d8bM7I485w/cWIOFhk5ucmbtbi767NHfQs+v+2lYYi4sTlf7/MHtGKeQgAgBV8n41/nms0/qvEA3XH3VOsoQxGxL0RsTMi7ouIXRFxf0R+7IMR5x5aY/mLV0iWjn8q19YV2Cpl478XirWtmwvGf+XoLwa7itz2PP6e5NSZqclDxTk5ED19WX50mTJ+ePn3z8t0/6J99eO/7JGVX44Fi3pc6140QXdyfHY8T6Rp+vHGwo/rn0Ts6W4UfxLlMk4SEbsjYs86yzjzzNd7m+1bOf5lLLPOtFrpVxFPV9v/8sLx/62mSurXJwciorY+Ofr8sbGjI/0xNXlopLwqlvrltytvNCt/Q/G3QNb+Wxpe/7VV4MGkP2Lm4qWz+XrtzNrLuPLnZ3V9esHqchZ/5duINV//vclbebq32Pbh+OzshdGI3uS1pdvHbr22zJfHZ/Ef2N+4/++sq/HDEZFdxPsi4pFiETdru8ci4vGI2L9M/D+99MR7zfY1b/9ms/Ktdb04Ucu2f9S3/9oTXWd//K5Z+UPFGmQU56Fx+x/JUweKLbW/f8tYbQXXddIAAADgLlPJ3wOfVIZr6UpleLj6Hv5dsaUyNT0z++yp6Q/On6y+V34weirlTNeOuvnQ0WJuuMyPLcofLuaNv+gayPPDE9NTJ9sdPHS4rU36f+avrnbXDrjtWrCOBtyl9H/oXPo/dC79HzqX/g+dq1H/3+gHC4C7g/s/dK68/z91ud3VANrA/R86l/4PHanpZ+MrG/rIf9NE0upf2DBRfnfCZpS1cqL8LopNL31g3S/vX/nURaW9Z7VjEt1L2iK6W1pEX8NdbfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EL/BQAA///5etKr") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r0, 0x0, 0x4f) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xfffffff8, 0x1, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4001) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/201, 0xc9}], 0x1}, 0xfffffffc}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x9, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x40010, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="070000000400000008000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008f6b8400000000000400"/31], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) 1m31.886176935s ago: executing program 0 (id=3543): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) (async, rerun: 64) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) (async, rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x10000000}) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r5 = dup(r2) statx(r0, &(0x7f0000000280)='./file0\x00', 0x6000, 0x800, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f0000000040)='./file1\x00', r9, r10) (async, rerun: 64) r11 = getuid() (rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsname={'fsname', 0x3d, 'ext3\x00'}}, {@fowner_eq}, {@euid_eq={'euid', 0x3d, r11}}, {@measure}, {@hash}]}, 0x1, 0x78d, &(0x7f0000001740)="$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") getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000740)=0xe8) stat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f0000000040)='./file1\x00', r14, r15) (async) statx(r5, &(0x7f0000000840)='./file1\x00', 0x6000, 0x20, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x1, &(0x7f0000000980)=[0xee01]) (async) statx(r0, &(0x7f00000009c0)='./file0\x00', 0x2000, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x98fecbc6346e818c}, [{0x2, 0x2, r6}, {0x2, 0x1, r7}, {0x2, 0xc, r8}, {0x2, 0x1, r9}, {0x2, 0x4, r11}, {0x2, 0x4, r12}, {0x2, 0x7, 0xee01}], {0x4, 0x2}, [{0x8, 0x0, r13}, {0x8, 0x2, r15}, {0x8, 0x1, r16}, {0x8, 0x5, r17}, {0x8, 0x2, r18}], {0x10, 0x4}, {0x20, 0x1}}, 0x84, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) 1m15.508113694s ago: executing program 33 (id=3543): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) (async, rerun: 64) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) (async, rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x10000000}) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r5 = dup(r2) statx(r0, &(0x7f0000000280)='./file0\x00', 0x6000, 0x800, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f0000000040)='./file1\x00', r9, r10) (async, rerun: 64) r11 = getuid() (rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsname={'fsname', 0x3d, 'ext3\x00'}}, {@fowner_eq}, {@euid_eq={'euid', 0x3d, r11}}, {@measure}, {@hash}]}, 0x1, 0x78d, &(0x7f0000001740)="$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") getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000740)=0xe8) stat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f0000000040)='./file1\x00', r14, r15) (async) statx(r5, &(0x7f0000000840)='./file1\x00', 0x6000, 0x20, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x1, &(0x7f0000000980)=[0xee01]) (async) statx(r0, &(0x7f00000009c0)='./file0\x00', 0x2000, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000b00)={{}, {0x1, 0x98fecbc6346e818c}, [{0x2, 0x2, r6}, {0x2, 0x1, r7}, {0x2, 0xc, r8}, {0x2, 0x1, r9}, {0x2, 0x4, r11}, {0x2, 0x4, r12}, {0x2, 0x7, 0xee01}], {0x4, 0x2}, [{0x8, 0x0, r13}, {0x8, 0x2, r15}, {0x8, 0x1, r16}, {0x8, 0x5, r17}, {0x8, 0x2, r18}], {0x10, 0x4}, {0x20, 0x1}}, 0x84, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) 25.047283047s ago: executing program 4 (id=4907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syncfs(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xffffffef, 0x0, 0x8848}, 0x20004804) 24.916012519s ago: executing program 4 (id=4908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)="d8000000190081154e81f782dbe782b60a1d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee40900dc00001fb791643a5ee4ce1b14d6d983501bd09089d616214d97a7c45fcff8f38d106de3665e8b30dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d9ffffffff1f215ce3bb9ad809d5e1cace89ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370c97", 0xd8}], 0x1}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8501}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 24.792142912s ago: executing program 4 (id=4913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000840a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 24.779440922s ago: executing program 4 (id=4915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', r2, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2401, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1000}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x930, &(0x7f0000000800)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r10, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ptrace$poke(0x21, r8, 0x0, 0x0) kcmp(r7, r8, 0x2, 0xffffffffffffffff, r5) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0)={0x4, {{0xa, 0x0, 0x0, @mcast1, 0xb}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)}) 23.975453498s ago: executing program 4 (id=4921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000002800000000000000010000000000000000010018"], 0x78}}, 0x0) 21.850346551s ago: executing program 4 (id=4953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0x12f, 0x70bd2b, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x0, 0xfffffffa, {0x7, 0x0, 0xa, 0x6, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0xffffff81}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0xb, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffff8, 0x4, 0x1, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x2, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x3, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x200006a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0x4b, 0x4, 0x6, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x7, 0x7, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x8003, 0x0, 0x0, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x5, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x9, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0xa2b, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x7, 0x7fff, 0x3d, 0x0, 0x11, 0x5fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x7a56, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x8, 0x3, 0x0, 0x9, 0x5, 0x5, 0x803, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x6, 0x8, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x5000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7d3, 0x2, 0x7, 0xf, 0x7f, 0xfffffff8, 0x400000, 0x7fffffff, 0x0, 0x80000001, 0x80, 0x4000005, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0x9, 0xb979, 0x517, 0x4bd, 0xe, 0x1, 0x9, 0x2, 0x7, 0x3ff, 0xfffffff8, 0x4, 0x9, 0x2, 0x400, 0x812, 0x0, 0xff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0x70, 0x80000000, 0xe, 0xc5f, 0x40, 0x6, 0x8, 0x5f44, 0x70, 0x4, 0x3, 0x98, 0x2, 0x8, 0xfff, 0xd, 0xbb7, 0x41, 0xf6, 0x5, 0x2, 0xfffff3e3, 0x7f, 0x4, 0x400, 0x101, 0x6, 0x0, 0x9, 0x400, 0x8, 0x37, 0x8, 0x3, 0xbcb4, 0x0, 0x49, 0x3, 0xffffffff, 0x6, 0x6, 0x101, 0x4, 0x8, 0x2, 0xce, 0x7, 0x400, 0x49, 0x0, 0x2, 0xb, 0x3, 0x8, 0x2, 0x7f, 0x2cc, 0x5, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x6, 0x5, 0x40000000, 0x7, 0x2, 0x5, 0xc1, 0x8000, 0xb, 0x326, 0xc, 0x1, 0x1, 0x9, 0x2000, 0x101, 0xc72e, 0x0, 0x3, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x72, 0x2000095a, 0x1, 0xfffffff8, 0x3, 0x1, 0x3, 0x80000001, 0x10001, 0x9, 0xe000000, 0x1, 0x40, 0x6, 0x8, 0x200000, 0x100, 0x4, 0x1, 0xfffffffe, 0x4, 0x8, 0x7ff, 0x8, 0x1, 0x6, 0x3, 0x1, 0x443, 0x6, 0x5, 0x1, 0xffffff80, 0x6, 0x80000003, 0x0, 0x8, 0xffffff24, 0x0, 0x1, 0x4, 0x8001, 0x6, 0xd0e, 0x15, 0x5, 0xfffffffd, 0x5a9a, 0xd020, 0xfffff000, 0x1, 0x9, 0x8c, 0x7ff, 0x6, 0xfffffffb, 0x986, 0x9, 0x13c8f99b, 0x2, 0x80000001, 0xfffffffd, 0x20075, 0x26, 0x0, 0xffffffff, 0x0, 0x1000, 0x557, 0xff, 0x6, 0x2, 0x609f, 0x1, 0xd0, 0x3, 0xf1a, 0xfff, 0x12, 0x69, 0x0, 0xffff, 0x3, 0x1800, 0xc, 0x8, 0x271, 0x12e, 0x5, 0xa61, 0x1, 0x8001, 0x0, 0x4, 0x0, 0xd, 0x8, 0x15, 0x0, 0x4, 0x6d6a, 0x9, 0x1, 0x9, 0x1000, 0xbe, 0x4, 0x0, 0x8, 0xffffe9b0, 0x20001, 0x4, 0x10000, 0x6, 0x3, 0x2, 0x4, 0x9, 0x101, 0x9, 0x2, 0x6, 0x1, 0xfffffe00]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) bpf$PROG_LOAD(0x5, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = inotify_init() syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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") inotify_add_watch(r4, &(0x7f0000000340)='./file2/../file0\x00', 0x61000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000900)={0x0, 0x10, 0x100}) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000000)={0x5, 0x3, 0x4, 0x5, 0x14, "91afb621a021869a"}) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x68c01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 21.808665592s ago: executing program 34 (id=4953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0x12f, 0x70bd2b, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x0, 0xfffffffa, {0x7, 0x0, 0xa, 0x6, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0xffffff81}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0xb, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffff8, 0x4, 0x1, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x2, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x3, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x200006a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0x4b, 0x4, 0x6, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x7, 0x7, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x8003, 0x0, 0x0, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x5, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x9, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0xa2b, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x7, 0x7fff, 0x3d, 0x0, 0x11, 0x5fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x7a56, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x8, 0x3, 0x0, 0x9, 0x5, 0x5, 0x803, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x6, 0x8, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x5000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7d3, 0x2, 0x7, 0xf, 0x7f, 0xfffffff8, 0x400000, 0x7fffffff, 0x0, 0x80000001, 0x80, 0x4000005, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0x9, 0xb979, 0x517, 0x4bd, 0xe, 0x1, 0x9, 0x2, 0x7, 0x3ff, 0xfffffff8, 0x4, 0x9, 0x2, 0x400, 0x812, 0x0, 0xff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0x70, 0x80000000, 0xe, 0xc5f, 0x40, 0x6, 0x8, 0x5f44, 0x70, 0x4, 0x3, 0x98, 0x2, 0x8, 0xfff, 0xd, 0xbb7, 0x41, 0xf6, 0x5, 0x2, 0xfffff3e3, 0x7f, 0x4, 0x400, 0x101, 0x6, 0x0, 0x9, 0x400, 0x8, 0x37, 0x8, 0x3, 0xbcb4, 0x0, 0x49, 0x3, 0xffffffff, 0x6, 0x6, 0x101, 0x4, 0x8, 0x2, 0xce, 0x7, 0x400, 0x49, 0x0, 0x2, 0xb, 0x3, 0x8, 0x2, 0x7f, 0x2cc, 0x5, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x6, 0x5, 0x40000000, 0x7, 0x2, 0x5, 0xc1, 0x8000, 0xb, 0x326, 0xc, 0x1, 0x1, 0x9, 0x2000, 0x101, 0xc72e, 0x0, 0x3, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x72, 0x2000095a, 0x1, 0xfffffff8, 0x3, 0x1, 0x3, 0x80000001, 0x10001, 0x9, 0xe000000, 0x1, 0x40, 0x6, 0x8, 0x200000, 0x100, 0x4, 0x1, 0xfffffffe, 0x4, 0x8, 0x7ff, 0x8, 0x1, 0x6, 0x3, 0x1, 0x443, 0x6, 0x5, 0x1, 0xffffff80, 0x6, 0x80000003, 0x0, 0x8, 0xffffff24, 0x0, 0x1, 0x4, 0x8001, 0x6, 0xd0e, 0x15, 0x5, 0xfffffffd, 0x5a9a, 0xd020, 0xfffff000, 0x1, 0x9, 0x8c, 0x7ff, 0x6, 0xfffffffb, 0x986, 0x9, 0x13c8f99b, 0x2, 0x80000001, 0xfffffffd, 0x20075, 0x26, 0x0, 0xffffffff, 0x0, 0x1000, 0x557, 0xff, 0x6, 0x2, 0x609f, 0x1, 0xd0, 0x3, 0xf1a, 0xfff, 0x12, 0x69, 0x0, 0xffff, 0x3, 0x1800, 0xc, 0x8, 0x271, 0x12e, 0x5, 0xa61, 0x1, 0x8001, 0x0, 0x4, 0x0, 0xd, 0x8, 0x15, 0x0, 0x4, 0x6d6a, 0x9, 0x1, 0x9, 0x1000, 0xbe, 0x4, 0x0, 0x8, 0xffffe9b0, 0x20001, 0x4, 0x10000, 0x6, 0x3, 0x2, 0x4, 0x9, 0x101, 0x9, 0x2, 0x6, 0x1, 0xfffffe00]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) bpf$PROG_LOAD(0x5, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = inotify_init() syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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") inotify_add_watch(r4, &(0x7f0000000340)='./file2/../file0\x00', 0x61000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000900)={0x0, 0x10, 0x100}) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000000)={0x5, 0x3, 0x4, 0x5, 0x14, "91afb621a021869a"}) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x68c01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 2.292645653s ago: executing program 3 (id=5296): fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xffffff40}, &(0x7f0000000100)=0x1, 0x0, 0xd5b, 0x3, 0x4, 0x83e, 0x12, 0x101}}], 0x58}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='ext4_mark_inode_dirty\x00', r3, 0x0, 0xc}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f3, &(0x7f0000000740)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r4, 0x12, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r5, r3, 0x23, 0x10, 0x0, @void, @value=r5, @void, @void, r6}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r1, r2, 0x8, 0x4, r2, @void, @value=r2, @void, @void, r6}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 2.288048283s ago: executing program 5 (id=5297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2.177477866s ago: executing program 5 (id=5300): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000c3ff0000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.139243117s ago: executing program 5 (id=5301): memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c, 0x5) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c, 0x5) (async) dup(r2) (async) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) (async) 1.819003083s ago: executing program 1 (id=5309): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4) 1.751765734s ago: executing program 1 (id=5310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a01040000f5ffffff00000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e0001"], 0xe0}}, 0x0) 1.640156207s ago: executing program 3 (id=5311): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a00000000000000000000ffffff80000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 1.596723737s ago: executing program 1 (id=5313): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000280)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@data_err_ignore, 0x0}, {@grpquota}, {@usrquota}, {@grpquota}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@acl}, {@bsdgroups}, {@dax_always}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") syz_io_uring_submit(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000700000084000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095", @ANYBLOB="1800003d00000000000000000000000000181200", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRES64=r1, @ANYRESDEC], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000491fc5bb2b7d02aa60ee531577242a567d5bdd03a1432dce251aaf72826e783f317cb234c9b896304d3412fb3638e9ba19569cb2d0923f69f3d4aaf311a086c05652b850577d979d8d556d4be39ceae884f30e7e4147773c6e848938d1fe0a3459f674f3f7f2957111aeb926849b3e049a2227032d3a150412277f85480e3fa782fc94cf57f36fdd3c7074125b339c790f297077a15e51b7359ec98d4c12bf7a74aa0a98f3547e668ffa6ef787cb9d99a44251322c74ab7006", @ANYRES64=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)='5', 0x1}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg$unix(r6, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1}}], 0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4) 1.442744351s ago: executing program 3 (id=5315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="390200000000000000001407000018"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r8, 0x2004, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 1.068102448s ago: executing program 5 (id=5316): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) timer_create(0x0, 0x0, &(0x7f0000001240)=0x0) timer_gettime(r2, &(0x7f0000001280)) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) 950.622931ms ago: executing program 5 (id=5317): prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x10c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x4e21, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, @in=@private=0xa010100, {0x4, 0x6, 0x10000, 0x40000000000004, 0xffffffffffffffff, 0x3, 0x7f}, {0x0, 0x100000000, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@encap={0x1c, 0x4, {0x2, 0x4e21, 0x27, @in6=@empty}}]}, 0x10c}}, 0x804) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x80000) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r4, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") mlockall(0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r9, 0x0, 0x5}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000280)={0x5, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/105, 0x69}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) brk(0x5d555ede6000) 679.119876ms ago: executing program 1 (id=5318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001480)=""/4122, 0x101a, 0x4b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0) sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r4, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'ipvlan0\x00'}) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r6, 0x5452, &(0x7f0000001840)=0x5d4) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRESDEC=r5], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 675.261976ms ago: executing program 7 (id=5319): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1, 0x0, 0x13}}], 0x2, 0x931766f6319eed44) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x3}, 0x8) 560.115989ms ago: executing program 7 (id=5320): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x22090, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc099ad758a27c85f}, 0x0, 0xc8, 0x0, 0x5, 0x8000000000000, 0x0, 0x0, 0x0, 0x95ad, 0x0, 0x384}, 0x0, 0x101, 0xffffffffffffffff, 0x1) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}, {@size={'size', 0x3d, [0x70]}}]}) 457.01524ms ago: executing program 1 (id=5323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) shutdown(r0, 0x1) (async) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x6012}, {r0}, {0xffffffffffffffff, 0x22cc}, {r0, 0x4000}, {r0, 0x52688d78959d0aa5}, {r0, 0x3000}, {r0}, {r0, 0xc022}, {r0, 0x434}], 0x9, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000500)={[0x5]}, 0x8) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000280), 0x74, 0x103b81) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0xff, 0x0, 0x0, 0x0, 0x80000ff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) (async) r5 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'vcan0\x00', 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x80100, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f00000002c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) (async) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0xbe3a, 0x4e20, 0x7, 0x2, 0x20, 0xa0, 0x33}, {0x3, 0x10001, 0x4, 0x460, 0x9, 0x4, 0x0, 0x10000}, {0x10, 0xe, 0x8001, 0x48000000000}, 0x100, 0x6e6bb5, 0x1, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4d6, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x3507, 0x3, 0x3, 0x4, 0x7, 0x8000, 0x3}}, 0xe8) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 392.102852ms ago: executing program 5 (id=5324): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000580)={0x0, 0x1, 0x0, 0xa527}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xa00}, 0x78) 391.787642ms ago: executing program 1 (id=5325): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000008", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 323.812703ms ago: executing program 7 (id=5328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) setresgid(0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x2000018c, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='xprtrdma_nomrs_err\x00', r1, 0x0, 0x8}, 0x18) 323.331633ms ago: executing program 3 (id=5329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20008005, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x504) recvmmsg(r2, 0x0, 0x0, 0x10001, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40030000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 233.728305ms ago: executing program 7 (id=5330): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="170000000200010000ffbe8c5ee1768810003c000203000afaff3f000057fc5ad90a00bb6a8800f2d5c8db0000dba67e00df01800a000000fc0607bdff59100ac45761547a1608945b61d5b13a3da400001fb700674f21c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee5ede4af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded20000e088895d950d", 0xb8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r3, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) accept4$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x400007, 0x8}, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="61108e000b000900b0ca24a800000000e77ed1e3c2d8636d"], &(0x7f0000000200)='GPL\x00', 0x1}, 0x94) 233.587595ms ago: executing program 7 (id=5331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 193.416316ms ago: executing program 6 (id=5333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90050000}, 0x48) 186.451346ms ago: executing program 7 (id=5334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000002340)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYBLOB="c16c3de024e397c3821217a45f33207f1cf2a2c4a0ee3b7c5e1f23ca337bcfe6fd793ca3bcbe4a6c37340335fb58ee15657aba1c6296b89415e00e4e04ebd51a1fc03475046387a04746621b52ac369aa7894a443a72df8e7e99c31e2c6866bd13ca4502513b608aa41955fa16187042cb7b3110ab885868ce30606bf15f065b7154a25df5a953d73776f8d425023a8920c6be221943bf0f7149636668e1aa110610053ebfe376247b5b0fe9bab1ef", @ANYRES64=r0, @ANYRESOCT=r0], 0x0, 0x7a, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[], 0x0, 0x307, &(0x7f0000000200)="$eJzs3UtrG1cUwPEzeliSXddalFJKCxcXSkvxYAu666Km2FAqaLGtQhwIjONxIjSWjEYYZEKsRSDbrLPwIssQCIHssgkhW2/yCZI4O2+8ixciE0bzsB4TRSLIj+T/W1hHc8+Zez1zZeNraebwjzubpY20iGhyIt7ISkzi/rOG/Pp879WPy8++8p4rtTi/MpdTKiYil288mH5am/j/8ddPUrKfvXJ4lHuz/8OKyLuV6xJTRVuVHUcZaq1SqbldqPWiXdKV+s8yDdtUxbJtVmt+u7FmmWrDqmxt1ZVRXp8c36qatq2Mcl2VzLqqVVStWlfGNaNYVrquq8lxgYhkwyjW06b1KyzcP3YcOXIcx0k1xHGciOxGECT9x9SnDRbnSdf575vbMznioxwZTsOxkxj4/OPz473+X98d7Pw7u6c0LJyS5Uur/8zn8wtLSqVFNm9vF7YL3qPX/nJCimKJKXtLv602xZ0jPtHcr4t/5xdmVUtWft7c9et3twveL4f5jVb9QVDUVi9B/ZxXrzrrkzJ+Um9KTqbkG4mszwX1EmurH5Nffmqr12VKXlyViliy7s7ktvqbc0r99W++q/9MKw8AAAAAAAAAgItIV6GT9Xst/FdvRtdTrXd8hO0Zd7Ob5yWE6+uzMiXN6PX52cj1/YR8nzjDbxwAAAAAgC+IXd8pGZZlVkcTxO9l+nSRFBE3ELk17Q6m7w6/9Uc8WO9jItLbFO/fRUeQ+d3r7+GSPzAZ5YEKgvQQI4wIgg9rlIzmo6ApI1HJsaEmwMxY5JFPVzUZ6fzpCGSQZEkPPbG1hF3fSQ08tXrKm8GW7yJzHO3j+3EMK+ltkfAM9q/6c6iXwweDdPeBmjnw9mv1+aHxNlziAwAAAHCBtP3hBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzkj4+X/Nv9P/IBcPC67b39kk/i3iey/J1n2feK77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAceh8AAP//8yCz0A==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000ec0)=ANY=[@ANYRES8=r3, @ANYRESOCT=r4, @ANYRES32=r1, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB="7a443bc9c88d6e44a50f4de9ef6a7af3f47e30982fb1b67c053cb5d97d9b4465838a3c2812e82acbe2558c9a50de79ab3b59c89d7cf34089860515143f7cfae0e6059f22339f8e84cf5db29abc8032aedefa57010bc6b391da9b2c7c6d145fee3b402d60e2d6865ffb18596b6ec9e4ad28d1212247833539420bfab18ab020c1f758f367417f77f6f9108e861747b9659fdd5a54cbf5a04ff89b2d849ba7dc2d5e97a7a65a560ba3a0ac34c35157a8fc963f0c94598abab8ed5138afc925", @ANYRESHEX=r2], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x3c, 0x1, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000029ac0aa0d50fd42fa00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYRES16, @ANYBLOB="0000000000000000b703000004e00000850000001b000000b700000000fa008034"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0xfffffecb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) ftruncate(r6, 0x2000009) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0x72}], 0x1, 0xe7b, 0x0, 0x1) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @lookup={{}, @void}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xfffffffffffffe6e, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2008406, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r11, @ANYBLOB="00000000000000b7030000008fc201851a00001b000000cab20000000007009500"], &(0x7f0000000180)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r12}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) 127.986297ms ago: executing program 6 (id=5335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000003c0)={0x4}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000300), 0x1) (async) fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r6}, 0x10) (async) syz_emit_ethernet(0x5e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/671], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r7}, 0x18) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r9, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r10, 0x5608) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) fadvise64(r8, 0x4, 0x5, 0x4) 126.364207ms ago: executing program 6 (id=5336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe000000}, 0x50) 122.102707ms ago: executing program 6 (id=5337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e21, 0xb, @rand_addr=' \x01\x00', 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1a7b4e20000010000000000e5615445644740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6322df3ee818a00"}, 0xd8) 94.516088ms ago: executing program 6 (id=5338): prctl$PR_SET_NAME(0xf, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="1b0000000000005b7132cc1c9700000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='+}[@\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf250a0045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f00000004c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb07a9dbec07d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690d1049c884d79e243210c733da8adfb6db6f3b3464aca805a08f3cacf9bce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519bccdcfda872f503656169", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$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") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) socket$kcm(0x10, 0x2, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x18) memfd_create(&(0x7f0000002500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xa8\xc5\x13\xba\x81\x8f?\xf8p\xc4\xf2\n\xc6\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\x108u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10\xe6\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 298.519829][T12579] memory: usage 307200kB, limit 307200kB, failcnt 3373 [ 298.616791][T15975] lo speed is unknown, defaulting to 1000 [ 298.617597][T12579] memory+swap: usage 307696kB, limit 9007199254740988kB, failcnt 0 [ 298.720687][T15975] lo speed is unknown, defaulting to 1000 [ 298.721366][T12579] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 298.791122][T12579] Memory cgroup stats for /syz3: [ 298.791873][T15967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.811506][T12579] cache 0 [ 298.814467][T12579] rss 0 [ 298.817323][T12579] shmem 0 [ 298.820301][T12579] mapped_file 0 [ 298.823758][T12579] dirty 0 [ 298.826722][T12579] writeback 0 [ 298.830000][T12579] workingset_refault_anon 417 [ 298.834727][T12579] workingset_refault_file 7559 [ 298.839575][T12579] swap 507904 [ 298.842912][T12579] swapcached 4096 [ 298.846538][T12579] pgpgin 460465 [ 298.850033][T12579] pgpgout 460464 [ 298.853700][T12579] pgfault 321613 [ 298.857243][T12579] pgmajfault 292 [ 298.860883][T12579] inactive_anon 4096 [ 298.864794][T12579] active_anon 0 [ 298.868338][T12579] inactive_file 0 [ 298.872053][T12579] active_file 0 [ 298.875534][T12579] unevictable 0 [ 298.878986][T12579] hierarchical_memory_limit 314572800 [ 298.884403][T12579] hierarchical_memsw_limit 9223372036854771712 [ 298.890671][T12579] total_cache 0 [ 298.894171][T12579] total_rss 0 [ 298.897459][T12579] total_shmem 0 [ 298.900910][T12579] total_mapped_file 0 [ 298.904982][T12579] total_dirty 0 [ 298.908544][T12579] total_writeback 0 [ 298.912354][T12579] total_workingset_refault_anon 417 [ 298.917609][T12579] total_workingset_refault_file 7559 [ 298.922903][T12579] total_swap 507904 [ 298.926749][T12579] total_swapcached 4096 [ 298.930916][T12579] total_pgpgin 460465 [ 298.934978][T12579] total_pgpgout 460464 [ 298.939219][T12579] total_pgfault 321613 [ 298.943288][T12579] total_pgmajfault 292 [ 298.947417][T12579] total_inactive_anon 4096 [ 298.951866][T12579] total_active_anon 0 [ 298.955939][T12579] total_inactive_file 0 [ 298.960143][T12579] total_active_file 0 [ 298.964119][T12579] total_unevictable 0 [ 298.965091][T15967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.968145][T12579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4242,pid=15930,uid=0 [ 298.968265][T12579] Memory cgroup out of memory: Killed process 15930 (syz.3.4242) total-vm:93892kB, anon-rss:1072kB, file-rss:22252kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 298.971919][ T29] audit: type=1400 audit(2000000240.622:10677): avc: denied { associate } for pid=15985 comm="syz.4.4259" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 298.977824][T15984] loop4: detected capacity change from 0 to 512 [ 298.992404][ T29] audit: type=1400 audit(2000000240.622:10678): avc: denied { mounton } for pid=15983 comm="syz.4.4259" path="/proc/576/task" dev="proc" ino=54311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 299.059667][ T29] audit: type=1400 audit(2000000240.622:10679): avc: denied { mount } for pid=15983 comm="syz.4.4259" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 299.104317][T15989] __nla_validate_parse: 13 callbacks suppressed [ 299.104335][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 299.124966][T15989] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 299.143514][ T29] audit: type=1326 audit(2000000240.806:10680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15996 comm="syz.5.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 299.168199][T15989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4262'. [ 299.183523][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4261'. [ 299.205030][T15997] lo speed is unknown, defaulting to 1000 [ 299.269873][T16011] netlink: 'syz.4.4271': attribute type 29 has an invalid length. [ 299.272663][T16009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4270'. [ 299.317923][T15997] lo speed is unknown, defaulting to 1000 [ 299.410858][T16024] netlink: 'syz.5.4275': attribute type 9 has an invalid length. [ 299.418892][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4275'. [ 299.439980][T16024] macvlan2: entered promiscuous mode [ 299.445477][T16024] macvlan2: entered allmulticast mode [ 299.512754][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4279'. [ 299.557843][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4281'. [ 299.581394][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4279'. [ 299.609660][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4279'. [ 299.633375][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4282'. [ 299.655833][T16047] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 299.663250][T16047] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 299.765575][T16063] loop4: detected capacity change from 0 to 1024 [ 299.785381][T16063] EXT4-fs error (device loop4): __ext4_fill_super:5504: inode #2: comm syz.4.4290: iget: checksum invalid [ 299.798632][T16068] batadv_slave_1: entered promiscuous mode [ 299.804055][T16063] EXT4-fs (loop4): get root inode failed [ 299.810153][T16063] EXT4-fs (loop4): mount failed [ 299.869337][T16077] netlink: 'syz.6.4296': attribute type 1 has an invalid length. [ 299.894699][T16064] batadv_slave_1: left promiscuous mode [ 299.910130][T16085] netlink: 'syz.4.4298': attribute type 3 has an invalid length. [ 299.960597][T16092] bridge0: port 3(batadv2) entered blocking state [ 299.967180][T16092] bridge0: port 3(batadv2) entered disabled state [ 299.973857][T16092] batadv2: entered allmulticast mode [ 299.979707][T16092] batadv2: entered promiscuous mode [ 300.064240][T16108] netlink: 'syz.5.4307': attribute type 10 has an invalid length. [ 300.266327][T16133] loop4: detected capacity change from 0 to 164 [ 300.276328][T16133] syz.4.4316: attempt to access beyond end of device [ 300.276328][T16133] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 300.292668][T16133] syz.4.4316: attempt to access beyond end of device [ 300.292668][T16133] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 300.346375][T16136] loop4: detected capacity change from 0 to 1024 [ 300.365039][T16136] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 300.382079][T16136] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 300.391067][T16136] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e028, mo2=0000] [ 300.399499][T16136] System zones: 0-1, 3-12 [ 300.404019][T16136] EXT4-fs (loop4): orphan cleanup on readonly fs [ 300.410884][T16136] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4317: Freeing blocks not in datazone - block = 0, count = 4096 [ 300.424964][T16136] EXT4-fs (loop4): Remounting filesystem read-only [ 300.431614][T16136] EXT4-fs (loop4): 1 orphan inode deleted [ 300.437679][T16136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.456185][T16139] atomic_op ffff888138bf1128 conn xmit_atomic 0000000000000000 [ 300.478265][T11806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.505121][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 300.514372][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 300.659586][T16151] loop4: detected capacity change from 0 to 2048 [ 300.669644][T16151] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.4321: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 300.687321][T16151] EXT4-fs (loop4): get root inode failed [ 300.692983][T16151] EXT4-fs (loop4): mount failed [ 300.959943][T16167] loop6: detected capacity change from 0 to 512 [ 300.966788][T16167] EXT4-fs: Ignoring removed nobh option [ 300.984751][T16167] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.4327: corrupted inode contents [ 300.998935][T16167] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.4327: mark_inode_dirty error [ 301.011563][T16167] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.4327: corrupted inode contents [ 301.026014][T16167] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.4327: mark_inode_dirty error [ 301.039207][T16167] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4327: Failed to acquire dquot type 0 [ 301.051475][T16167] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4327: corrupted inode contents [ 301.070605][T16167] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.4327: mark_inode_dirty error [ 301.084070][T16167] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4327: corrupted inode contents [ 301.096777][T16167] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4327: mark_inode_dirty error [ 301.110140][T16167] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4327: corrupted inode contents [ 301.124027][T16167] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 301.132865][T16167] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4327: corrupted inode contents [ 301.148353][T16167] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.4327: mark_inode_dirty error [ 301.159775][T16167] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 301.170389][T16167] EXT4-fs (loop6): 1 truncate cleaned up [ 301.176503][T16167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.193321][T16167] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.256876][T14662] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.289424][T16172] loop6: detected capacity change from 0 to 764 [ 301.299564][T16172] rock: directory entry would overflow storage [ 301.305737][T16172] rock: sig=0x4f50, size=4, remaining=3 [ 301.311366][T16172] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 301.469564][T16179] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16179 comm=syz.6.4330 [ 301.519882][T16165] syz.3.4326 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 301.534109][T16165] CPU: 1 UID: 0 PID: 16165 Comm: syz.3.4326 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.534223][T16165] Tainted: [W]=WARN [ 301.534231][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.534246][T16165] Call Trace: [ 301.534252][T16165] [ 301.534261][T16165] __dump_stack+0x1d/0x30 [ 301.534284][T16165] dump_stack_lvl+0xe8/0x140 [ 301.534307][T16165] dump_stack+0x15/0x1b [ 301.534410][T16165] dump_header+0x81/0x220 [ 301.534448][T16165] oom_kill_process+0x342/0x400 [ 301.534489][T16165] out_of_memory+0x979/0xb80 [ 301.534530][T16165] try_charge_memcg+0x5e6/0x9e0 [ 301.534689][T16165] obj_cgroup_charge_pages+0xa6/0x150 [ 301.534727][T16165] __memcg_kmem_charge_page+0x9f/0x170 [ 301.534784][T16165] __alloc_frozen_pages_noprof+0x188/0x360 [ 301.534882][T16165] alloc_pages_mpol+0xb3/0x250 [ 301.535014][T16165] alloc_pages_noprof+0x90/0x130 [ 301.535181][T16165] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 301.535233][T16165] __kvmalloc_node_noprof+0x30f/0x4e0 [ 301.535308][T16165] ? ip_set_alloc+0x1f/0x30 [ 301.535330][T16165] ? ip_set_alloc+0x1f/0x30 [ 301.535354][T16165] ? __kmalloc_cache_noprof+0x189/0x320 [ 301.535403][T16165] ip_set_alloc+0x1f/0x30 [ 301.535482][T16165] hash_netiface_create+0x282/0x740 [ 301.535516][T16165] ? __pfx_hash_netiface_create+0x10/0x10 [ 301.535544][T16165] ip_set_create+0x3cc/0x960 [ 301.535638][T16165] ? __nla_parse+0x40/0x60 [ 301.535693][T16165] nfnetlink_rcv_msg+0x4c6/0x590 [ 301.535736][T16165] netlink_rcv_skb+0x120/0x220 [ 301.535765][T16165] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 301.535801][T16165] nfnetlink_rcv+0x16b/0x1690 [ 301.535853][T16165] ? __list_del_entry_valid_or_report+0x65/0x130 [ 301.535914][T16165] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 301.535955][T16165] ? should_fail_ex+0x30/0x280 [ 301.535980][T16165] ? selinux_nlmsg_lookup+0x99/0x890 [ 301.536103][T16165] ? __rcu_read_unlock+0x34/0x70 [ 301.536149][T16165] ? __netlink_lookup+0x266/0x2a0 [ 301.536251][T16165] netlink_unicast+0x5c0/0x690 [ 301.536279][T16165] netlink_sendmsg+0x58b/0x6b0 [ 301.536303][T16165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.536380][T16165] __sock_sendmsg+0x142/0x180 [ 301.536420][T16165] ____sys_sendmsg+0x31e/0x4e0 [ 301.536453][T16165] ___sys_sendmsg+0x17b/0x1d0 [ 301.536537][T16165] __x64_sys_sendmsg+0xd4/0x160 [ 301.536566][T16165] x64_sys_call+0x191e/0x2ff0 [ 301.536597][T16165] do_syscall_64+0xd2/0x200 [ 301.536630][T16165] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.536699][T16165] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 301.536799][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.536818][T16165] RIP: 0033:0x7f4f13f9eba9 [ 301.536831][T16165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.536911][T16165] RSP: 002b:00007f4f12a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.536933][T16165] RAX: ffffffffffffffda RBX: 00007f4f141e5fa0 RCX: 00007f4f13f9eba9 [ 301.536945][T16165] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 301.536955][T16165] RBP: 00007f4f14021e19 R08: 0000000000000000 R09: 0000000000000000 [ 301.536966][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.536979][T16165] R13: 00007f4f141e6038 R14: 00007f4f141e5fa0 R15: 00007fff0b5b24e8 [ 301.537005][T16165] [ 301.863484][T16165] memory: usage 307200kB, limit 307200kB, failcnt 3650 [ 301.870715][T16165] memory+swap: usage 307684kB, limit 9007199254740988kB, failcnt 0 [ 301.878695][T16165] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 301.886005][T16165] Memory cgroup stats for /syz3: [ 301.894041][T16165] cache 0 [ 301.902002][T16165] rss 0 [ 301.904828][T16165] shmem 0 [ 301.905122][T16181] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 301.907871][T16165] mapped_file 0 [ 301.907881][T16165] dirty 0 [ 301.923234][T16165] writeback 0 [ 301.927083][T16165] workingset_refault_anon 443 [ 301.931744][T16165] workingset_refault_file 7870 [ 301.936580][T16165] swap 495616 [ 301.939882][T16165] swapcached 0 [ 301.943305][T16165] pgpgin 463119 [ 301.946792][T16165] pgpgout 463119 [ 301.950371][T16165] pgfault 324685 [ 301.950382][T16165] pgmajfault 311 [ 301.950390][T16165] inactive_anon 0 [ 301.950469][T16165] active_anon 0 [ 301.950476][T16165] inactive_file 0 [ 301.950484][T16165] active_file 0 [ 301.972301][T16165] unevictable 0 [ 301.975751][T16165] hierarchical_memory_limit 314572800 [ 301.981130][T16165] hierarchical_memsw_limit 9223372036854771712 [ 301.987344][T16165] total_cache 0 [ 301.991394][T16165] total_rss 0 [ 301.994665][T16165] total_shmem 0 [ 301.998108][T16165] total_mapped_file 0 [ 302.002093][T16165] total_dirty 0 [ 302.005586][T16165] total_writeback 0 [ 302.009444][T16165] total_workingset_refault_anon 443 [ 302.014640][T16165] total_workingset_refault_file 7870 [ 302.019935][T16165] total_swap 495616 [ 302.024309][T16165] total_swapcached 0 [ 302.028190][T16165] total_pgpgin 463119 [ 302.032219][T16165] total_pgpgout 463119 [ 302.036304][T16165] total_pgfault 324685 [ 302.040415][T16165] total_pgmajfault 311 [ 302.044513][T16165] total_inactive_anon 0 [ 302.048661][T16165] total_active_anon 0 [ 302.052661][T16165] total_inactive_file 0 [ 302.057338][T16165] total_active_file 0 [ 302.061399][T16165] total_unevictable 0 [ 302.065412][T16165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4326,pid=16164,uid=0 [ 302.080162][T16165] Memory cgroup out of memory: Killed process 16164 (syz.3.4326) total-vm:93760kB, anon-rss:1196kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 302.186290][T16198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 302.194115][T16198] SELinux: failed to load policy [ 302.301917][T16212] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16212 comm=syz.5.4342 [ 302.521756][T16239] vlan0: entered allmulticast mode [ 302.594265][T16248] tipc: New replicast peer: 255.255.255.83 [ 302.600234][T16248] tipc: Enabled bearer , priority 10 [ 302.713212][T16254] hub 9-0:1.0: USB hub found [ 302.726085][T16254] hub 9-0:1.0: 8 ports detected [ 302.836795][T16268] loop4: detected capacity change from 0 to 512 [ 302.847878][T16268] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 302.867200][T16274] lo speed is unknown, defaulting to 1000 [ 302.917906][T16274] lo speed is unknown, defaulting to 1000 [ 302.931094][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.940853][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.536783][ T29] kauditd_printk_skb: 874 callbacks suppressed [ 303.536799][ T29] audit: type=1326 audit(2000000244.859:11553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.566639][ T29] audit: type=1326 audit(2000000244.859:11554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.624264][ T29] audit: type=1326 audit(2000000244.859:11555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.647895][ T29] audit: type=1326 audit(2000000244.859:11556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.671604][ T29] audit: type=1326 audit(2000000244.868:11557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.695234][ T29] audit: type=1326 audit(2000000244.868:11558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.718826][ T29] audit: type=1326 audit(2000000244.868:11559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.742389][ T29] audit: type=1326 audit(2000000244.868:11560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.766057][ T29] audit: type=1326 audit(2000000244.868:11561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.790250][ T29] audit: type=1326 audit(2000000244.868:11562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.6.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 303.916549][T16333] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 303.924801][T16333] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 304.577580][T16371] lo speed is unknown, defaulting to 1000 [ 304.684443][T16371] lo speed is unknown, defaulting to 1000 [ 304.886428][T16383] macvtap0: refused to change device tx_queue_len [ 305.190080][T16402] tipc: Enabling of bearer rejected, failed to enable media [ 305.218419][T16400] lo speed is unknown, defaulting to 1000 [ 305.263061][T16403] loop4: detected capacity change from 0 to 512 [ 305.263145][T16405] __nla_validate_parse: 21 callbacks suppressed [ 305.263162][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4415'. [ 305.346111][T16403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.4412: error while reading EA inode 32 err=-116 [ 305.459456][T16400] lo speed is unknown, defaulting to 1000 [ 305.494097][T16403] EXT4-fs (loop4): Remounting filesystem read-only [ 305.500849][T16403] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 305.527417][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4418'. [ 305.536378][T16415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4418'. [ 305.552963][T16414] loop6: detected capacity change from 0 to 764 [ 305.561812][T16414] rock: directory entry would overflow storage [ 305.568020][T16414] rock: sig=0x4f50, size=4, remaining=3 [ 305.568981][T16403] EXT4-fs (loop4): 1 orphan inode deleted [ 305.573581][T16414] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 305.634616][T16403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.759525][T16403] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.774774][T16432] loop6: detected capacity change from 0 to 512 [ 305.809616][T16432] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 305.839410][T16432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 305.858680][T16432] System zones: 1-12 [ 305.868816][T16432] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4424: corrupted in-inode xattr: e_value size too large [ 305.911098][T16432] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4424: couldn't read orphan inode 15 (err -117) [ 305.931761][T16433] lo speed is unknown, defaulting to 1000 [ 305.975137][T16432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.116330][T16433] lo speed is unknown, defaulting to 1000 [ 306.161453][T14662] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.209348][T16456] netlink: 'syz.4.4432': attribute type 3 has an invalid length. [ 306.234151][T16459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16459 comm=syz.6.4431 [ 306.252443][T16459] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4431'. [ 306.304974][T16466] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4435'. [ 306.324190][T16466] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4435'. [ 306.367838][T16468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'. [ 306.442111][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4440'. [ 306.442168][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4440'. [ 306.459790][T16478] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 306.507784][T16480] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4441'. [ 306.519613][T16475] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 306.578890][T16485] loop6: detected capacity change from 0 to 512 [ 306.597074][T16485] EXT4-fs: Ignoring removed nobh option [ 306.633339][T16485] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.670094][T16483] atomic_op ffff88811bb6c128 conn xmit_atomic 0000000000000000 [ 306.769208][T16491] tipc: Enabling of bearer rejected, failed to enable media [ 306.875125][T14662] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.926033][T16495] loop6: detected capacity change from 0 to 164 [ 307.073620][T16495] ISOFS: unable to read i-node block [ 307.078944][T16495] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 307.182593][T16500] lo speed is unknown, defaulting to 1000 [ 307.190196][T16500] lo speed is unknown, defaulting to 1000 [ 307.196843][T16500] lo speed is unknown, defaulting to 1000 [ 307.300942][T16500] infiniband sz1: set active [ 307.305708][T16500] infiniband sz1: added lo [ 307.314835][T15617] lo speed is unknown, defaulting to 1000 [ 307.378140][T16500] RDS/IB: sz1: added [ 307.382185][T16500] smc: adding ib device sz1 with port count 1 [ 307.388476][T16500] smc: ib device sz1 port 1 has pnetid [ 307.395540][T16500] lo speed is unknown, defaulting to 1000 [ 307.464080][T16500] lo speed is unknown, defaulting to 1000 [ 307.496517][T16500] lo speed is unknown, defaulting to 1000 [ 307.530516][T16500] lo speed is unknown, defaulting to 1000 [ 307.564042][T16500] lo speed is unknown, defaulting to 1000 [ 307.599240][T16500] lo speed is unknown, defaulting to 1000 [ 307.610100][T15617] lo speed is unknown, defaulting to 1000 [ 307.638623][T16500] lo speed is unknown, defaulting to 1000 [ 308.331710][T16531] tipc: Enabling of bearer rejected, already enabled [ 308.578688][T16570] vlan2: entered allmulticast mode [ 308.756937][T16578] 9pnet: Could not find request transport: 0xffffffffffffffff [ 308.868164][T16601] sctp: [Deprecated]: syz.6.4481 (pid 16601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.868164][T16601] Use struct sctp_sack_info instead [ 308.907585][T16606] loop6: detected capacity change from 0 to 128 [ 308.915558][T16606] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.945620][T16606] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.978989][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 308.979003][ T29] audit: type=1400 audit(2000000249.890:11825): avc: denied { read write open } for pid=16605 comm="syz.6.4483" path="/130/mnt/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 309.026150][ T29] audit: type=1326 audit(2000000249.899:11826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 309.036967][T16622] netlink: 'syz.3.4488': attribute type 4 has an invalid length. [ 309.050521][ T29] audit: type=1326 audit(2000000249.899:11827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 309.081764][ T29] audit: type=1326 audit(2000000249.899:11828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 309.105815][ T29] audit: type=1326 audit(2000000249.899:11829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 309.130062][ T29] audit: type=1326 audit(2000000249.899:11830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 309.153782][ T29] audit: type=1326 audit(2000000249.899:11831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 309.177816][ T29] audit: type=1326 audit(2000000249.899:11832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 309.201430][ T29] audit: type=1326 audit(2000000249.899:11833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 309.225829][ T29] audit: type=1400 audit(2000000249.899:11834): avc: denied { read } for pid=16605 comm="syz.6.4483" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 309.315130][T14662] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.339188][T16644] vlan2: entered allmulticast mode [ 309.585713][T16662] loop6: detected capacity change from 0 to 764 [ 309.596253][T16662] rock: directory entry would overflow storage [ 309.602426][T16662] rock: sig=0x4f50, size=4, remaining=3 [ 309.608697][T16662] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 310.306676][T16721] tipc: New replicast peer: 255.255.255.255 [ 310.311395][T16676] syz.6.4508 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 310.312875][T16721] tipc: Enabled bearer , priority 10 [ 310.327505][T16676] CPU: 1 UID: 0 PID: 16676 Comm: syz.6.4508 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 310.327543][T16676] Tainted: [W]=WARN [ 310.327552][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.327567][T16676] Call Trace: [ 310.327575][T16676] [ 310.327583][T16676] __dump_stack+0x1d/0x30 [ 310.327625][T16676] dump_stack_lvl+0xe8/0x140 [ 310.327650][T16676] dump_stack+0x15/0x1b [ 310.327671][T16676] dump_header+0x81/0x220 [ 310.327712][T16676] oom_kill_process+0x342/0x400 [ 310.327785][T16676] out_of_memory+0x979/0xb80 [ 310.327888][T16676] try_charge_memcg+0x5e6/0x9e0 [ 310.327927][T16676] obj_cgroup_charge_pages+0xa6/0x150 [ 310.327969][T16676] __memcg_kmem_charge_page+0x9f/0x170 [ 310.328051][T16676] __alloc_frozen_pages_noprof+0x188/0x360 [ 310.328101][T16676] alloc_pages_mpol+0xb3/0x250 [ 310.328160][T16676] alloc_pages_noprof+0x90/0x130 [ 310.328193][T16676] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 310.328252][T16676] __kvmalloc_node_noprof+0x30f/0x4e0 [ 310.328297][T16676] ? ip_set_alloc+0x1f/0x30 [ 310.328325][T16676] ? ip_set_alloc+0x1f/0x30 [ 310.328354][T16676] ip_set_alloc+0x1f/0x30 [ 310.328378][T16676] hash_netiface_create+0x282/0x740 [ 310.328428][T16676] ? __pfx_hash_netiface_create+0x10/0x10 [ 310.328458][T16676] ip_set_create+0x3cc/0x960 [ 310.328533][T16676] ? __nla_parse+0x40/0x60 [ 310.328570][T16676] nfnetlink_rcv_msg+0x4c6/0x590 [ 310.328665][T16676] netlink_rcv_skb+0x120/0x220 [ 310.328707][T16676] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 310.328741][T16676] nfnetlink_rcv+0x16b/0x1690 [ 310.328767][T16676] ? nlmon_xmit+0x4f/0x60 [ 310.328804][T16676] ? consume_skb+0x49/0x150 [ 310.328876][T16676] ? nlmon_xmit+0x4f/0x60 [ 310.328912][T16676] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 310.328948][T16676] ? __dev_queue_xmit+0x1200/0x2000 [ 310.329038][T16676] ? __dev_queue_xmit+0x182/0x2000 [ 310.329072][T16676] ? ref_tracker_free+0x37d/0x3e0 [ 310.329166][T16676] ? __netlink_deliver_tap+0x4dc/0x500 [ 310.329209][T16676] netlink_unicast+0x5c0/0x690 [ 310.329293][T16676] netlink_sendmsg+0x58b/0x6b0 [ 310.329329][T16676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.329362][T16676] __sock_sendmsg+0x142/0x180 [ 310.329455][T16676] ____sys_sendmsg+0x31e/0x4e0 [ 310.329492][T16676] ___sys_sendmsg+0x17b/0x1d0 [ 310.329609][T16676] __x64_sys_sendmsg+0xd4/0x160 [ 310.329666][T16676] x64_sys_call+0x191e/0x2ff0 [ 310.329755][T16676] do_syscall_64+0xd2/0x200 [ 310.329796][T16676] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 310.329827][T16676] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 310.329865][T16676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.329902][T16676] RIP: 0033:0x7f6cb60eeba9 [ 310.329921][T16676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.329946][T16676] RSP: 002b:00007f6cb4b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.329969][T16676] RAX: ffffffffffffffda RBX: 00007f6cb6335fa0 RCX: 00007f6cb60eeba9 [ 310.330041][T16676] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 310.330057][T16676] RBP: 00007f6cb6171e19 R08: 0000000000000000 R09: 0000000000000000 [ 310.330072][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.330088][T16676] R13: 00007f6cb6336038 R14: 00007f6cb6335fa0 R15: 00007ffdf3fa8788 [ 310.330168][T16676] [ 310.330187][T16676] memory: usage 307200kB, limit 307200kB, failcnt 199 [ 310.675389][T16676] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 310.681738][T16719] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 310.684118][T16676] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 310.700529][T16676] Memory cgroup stats for /syz6: [ 310.700955][T16676] cache 0 [ 310.708874][T16676] rss 0 [ 310.712238][T16676] shmem 0 [ 310.715237][T16676] mapped_file 0 [ 310.718694][T16676] dirty 0 [ 310.718704][T16676] writeback 0 [ 310.718712][T16676] workingset_refault_anon 31 [ 310.729530][T16676] workingset_refault_file 0 [ 310.734047][T16676] swap 184320 [ 310.737327][T16676] swapcached 8192 [ 310.740954][T16676] pgpgin 62244 [ 310.745105][T16676] pgpgout 62241 [ 310.748669][T16676] pgfault 31647 [ 310.752121][T16676] pgmajfault 27 [ 310.755622][T16676] inactive_anon 4096 [ 310.759526][T16676] active_anon 4096 [ 310.763253][T16676] inactive_file 0 [ 310.766956][T16676] active_file 4096 [ 310.770669][T16676] unevictable 0 [ 310.774125][T16676] hierarchical_memory_limit 314572800 [ 310.780365][T16676] hierarchical_memsw_limit 9223372036854771712 [ 310.786540][T16676] total_cache 0 [ 310.790023][T16676] total_rss 0 [ 310.793320][T16676] total_shmem 0 [ 310.796802][T16676] total_mapped_file 0 [ 310.800780][T16676] total_dirty 0 [ 310.804238][T16676] total_writeback 0 [ 310.808851][T16676] total_workingset_refault_anon 31 [ 310.814045][T16676] total_workingset_refault_file 0 [ 310.819090][T16676] total_swap 184320 [ 310.822897][T16676] total_swapcached 8192 [ 310.827044][T16676] total_pgpgin 62244 [ 310.830962][T16676] total_pgpgout 62241 [ 310.834984][T16676] total_pgfault 31647 [ 310.838972][T16676] total_pgmajfault 27 [ 310.843592][T16676] total_inactive_anon 4096 [ 310.848012][T16676] total_active_anon 4096 [ 310.852364][T16676] total_inactive_file 0 [ 310.856520][T16676] total_active_file 4096 [ 310.860790][T16676] total_unevictable 0 [ 310.864896][T16676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4508,pid=16675,uid=0 [ 310.880397][T16676] Memory cgroup out of memory: Killed process 16675 (syz.6.4508) total-vm:95808kB, anon-rss:1072kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 311.012749][T16732] lo speed is unknown, defaulting to 1000 [ 311.098243][T16732] lo speed is unknown, defaulting to 1000 [ 311.123130][T16732] lo speed is unknown, defaulting to 1000 [ 311.234161][T16754] __nla_validate_parse: 16 callbacks suppressed [ 311.234177][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4535'. [ 311.291752][T16756] netlink: 'syz.5.4536': attribute type 3 has an invalid length. [ 311.346657][T16754] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4535'. [ 311.374172][T16764] loop6: detected capacity change from 0 to 1024 [ 311.405201][T16764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.449118][T16776] SELinux: Context is not valid (left unmapped). [ 311.465389][T16764] EXT4-fs error (device loop6): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.6.4538: path /138/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 311.522071][T15629] tipc: Node number set to 1838447435 [ 311.558846][T16778] loop4: detected capacity change from 0 to 512 [ 311.572895][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4545'. [ 311.630559][T16784] lo speed is unknown, defaulting to 1000 [ 311.799198][T16784] lo speed is unknown, defaulting to 1000 [ 311.841987][T16784] lo speed is unknown, defaulting to 1000 [ 311.869490][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4545'. [ 311.895592][T16778] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 311.905032][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4545'. [ 311.946521][T16778] EXT4-fs (loop4): mount failed [ 312.086532][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4550'. [ 312.117486][T16800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16800 comm=syz.5.4550 [ 312.169159][T16806] loop4: detected capacity change from 0 to 512 [ 312.171733][T16803] lo speed is unknown, defaulting to 1000 [ 312.188185][T16799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.199647][T16799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.210932][T16806] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.4551: error while reading EA inode 32 err=-116 [ 312.216254][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4550'. [ 312.223399][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4550'. [ 312.263466][T16806] EXT4-fs (loop4): Remounting filesystem read-only [ 312.270277][T16806] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 312.303197][T16806] EXT4-fs (loop4): 1 orphan inode deleted [ 312.309405][T16806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.337214][T16806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.375675][T16803] lo speed is unknown, defaulting to 1000 [ 312.423065][T16803] lo speed is unknown, defaulting to 1000 [ 312.459637][T16816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4555'. [ 312.469224][T16816] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 312.561376][T16821] netlink: 464 bytes leftover after parsing attributes in process `syz.4.4557'. [ 312.670479][T16834] loop4: detected capacity change from 0 to 128 [ 312.795962][T14662] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.830377][T16842] tipc: Enabling of bearer rejected, already enabled [ 312.858194][T16847] loop6: detected capacity change from 0 to 764 [ 312.865416][T16840] atomic_op ffff888118e4d528 conn xmit_atomic 0000000000000000 [ 312.875049][T16847] rock: directory entry would overflow storage [ 312.881273][T16847] rock: sig=0x4f50, size=4, remaining=3 [ 312.886843][T16847] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 312.950851][T16868] program syz.3.4575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.966574][T16868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.979623][T16868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.120892][T16886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16886 comm=syz.4.4583 [ 313.259993][T16906] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 313.298264][T16914] bond0: (slave team0): Releasing backup interface [ 313.306869][T16914] team0 (unregistering): Port device team_slave_0 removed [ 313.316867][T16914] team0 (unregistering): Port device team_slave_1 removed [ 313.392362][T16920] tipc: Enabling of bearer rejected, already enabled [ 313.593154][T16947] tipc: Enabling of bearer rejected, already enabled [ 313.662706][T16955] loop4: detected capacity change from 0 to 512 [ 313.679263][T16955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.707509][T11806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.724492][T16963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16963 comm=syz.4.4610 [ 313.751801][T16965] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 313.759575][T16965] SELinux: failed to load policy [ 314.015755][T16984] loop9: detected capacity change from 0 to 7 [ 314.021994][T16984] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.029900][T16984] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.037800][T16984] loop9: unable to read partition table [ 314.043697][T16984] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 314.043697][T16984] ) failed (rc=-5) [ 314.098943][T16990] loop6: detected capacity change from 0 to 512 [ 314.119491][T16992] loop4: detected capacity change from 0 to 1024 [ 314.144142][T16990] EXT4-fs: Ignoring removed bh option [ 314.241683][T16992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.256792][T16990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.277980][T16992] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.4622: Allocating blocks 385-513 which overlap fs metadata [ 314.359208][T16999] EXT4-fs (loop4): pa ffff8881072ab380: logic 16, phys. 129, len 24 [ 314.367343][T16999] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 314.391800][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 314.404227][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 314.404227][ T51] [ 314.414051][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 314.420088][ T51] EXT4-fs (loop4): Free/Dirty block details [ 314.426036][ T51] EXT4-fs (loop4): free_blocks=128 [ 314.431165][ T51] EXT4-fs (loop4): dirty_blocks=0 [ 314.436267][ T51] EXT4-fs (loop4): Block reservation details [ 314.442270][ T51] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 314.452465][T17003] sctp: [Deprecated]: syz.1.4625 (pid 17003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.452465][T17003] Use struct sctp_sack_info instead [ 314.478523][T14662] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.604125][T17007] loop4: detected capacity change from 0 to 512 [ 314.689747][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 314.689762][ T29] audit: type=1326 audit(310.931:12241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.3.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 314.720878][T17007] EXT4-fs: Ignoring removed oldalloc option [ 314.745589][ T29] audit: type=1326 audit(310.968:12242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.3.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 314.768585][ T29] audit: type=1326 audit(310.968:12243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.3.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 314.791886][ T29] audit: type=1326 audit(310.968:12244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.3.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 314.815274][ T29] audit: type=1326 audit(310.968:12245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.3.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 314.838267][T15629] IPVS: starting estimator thread 0... [ 314.859448][T17007] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.4624: Parent and EA inode have the same ino 15 [ 314.873812][T17007] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.4624: Parent and EA inode have the same ino 15 [ 314.899255][T17007] EXT4-fs (loop4): 1 orphan inode deleted [ 314.909487][T17007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.934744][T17025] IPVS: using max 2736 ests per chain, 136800 per kthread [ 314.973714][T11806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.004231][T17030] netlink: 'syz.5.4634': attribute type 4 has an invalid length. [ 315.058586][ T29] audit: type=1400 audit(311.273:12246): avc: denied { create } for pid=17034 comm="syz.6.4635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 315.181796][ T29] audit: type=1326 audit(311.346:12247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.5.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 315.205539][ T29] audit: type=1326 audit(311.346:12248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.5.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 315.228579][ T29] audit: type=1326 audit(311.346:12249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.5.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 315.252187][ T29] audit: type=1326 audit(311.346:12250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17045 comm="syz.5.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 315.296774][T17056] can: request_module (can-proto-3) failed. [ 315.337207][T17066] tipc: Enabling of bearer rejected, already enabled [ 315.632062][T17119] loop6: detected capacity change from 0 to 764 [ 315.640931][T17119] rock: directory entry would overflow storage [ 315.647142][T17119] rock: sig=0x4f50, size=4, remaining=3 [ 315.652780][T17119] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 315.717845][T17124] siw: device registration error -23 [ 315.802766][T17121] loop4: detected capacity change from 0 to 1024 [ 315.872592][T17121] EXT4-fs: inline encryption not supported [ 315.893413][T17121] EXT4-fs: Ignoring removed bh option [ 316.000593][T17131] macvtap0: refused to change device tx_queue_len [ 316.023125][T17121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.125566][T11806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.381161][T17161] loop6: detected capacity change from 0 to 128 [ 316.399348][T17155] bond2 (unregistering): Released all slaves [ 316.825893][T17188] loop9: detected capacity change from 0 to 7 [ 316.845031][T17188] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.866150][T17188] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.874880][T17188] loop9: unable to read partition table [ 316.901742][T17188] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 316.901742][T17188] ) failed (rc=-5) [ 316.912857][T17189] lo speed is unknown, defaulting to 1000 [ 316.952030][T17190] lo speed is unknown, defaulting to 1000 [ 317.091801][T17189] lo speed is unknown, defaulting to 1000 [ 317.098082][T17189] lo speed is unknown, defaulting to 1000 [ 317.106524][T17202] netlink: 'syz.1.4691': attribute type 4 has an invalid length. [ 317.112096][T17190] lo speed is unknown, defaulting to 1000 [ 317.142742][T15628] lo speed is unknown, defaulting to 1000 [ 317.148533][T15628] syz2: Port: 1 Link ACTIVE [ 317.166931][T17190] lo speed is unknown, defaulting to 1000 [ 317.186257][T17208] loop6: detected capacity change from 0 to 764 [ 317.214169][T17208] rock: directory entry would overflow storage [ 317.220445][T17208] rock: sig=0x4f50, size=4, remaining=3 [ 317.226182][T17208] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 317.424353][T17230] tipc: Enabling of bearer rejected, already enabled [ 317.885651][T17265] netlink: 'syz.3.4714': attribute type 3 has an invalid length. [ 318.057092][T17272] lo speed is unknown, defaulting to 1000 [ 318.183248][T17274] lo speed is unknown, defaulting to 1000 [ 318.186802][T17272] lo speed is unknown, defaulting to 1000 [ 318.229320][T17272] lo speed is unknown, defaulting to 1000 [ 318.469034][T17274] lo speed is unknown, defaulting to 1000 [ 318.541149][T17274] lo speed is unknown, defaulting to 1000 [ 318.603319][T17283] net_ratelimit: 1 callbacks suppressed [ 318.603333][T17283] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 318.758751][T17292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17292 comm=syz.4.4723 [ 319.070893][T17316] netlink: 'syz.6.4731': attribute type 10 has an invalid length. [ 319.260496][T17327] netlink: 'syz.6.4737': attribute type 3 has an invalid length. [ 319.410756][T17336] lo speed is unknown, defaulting to 1000 [ 319.437573][T17339] loop6: detected capacity change from 0 to 512 [ 319.453133][T17332] lo speed is unknown, defaulting to 1000 [ 319.504068][T17343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17343 comm=syz.4.4741 [ 319.537052][T17336] lo speed is unknown, defaulting to 1000 [ 319.559028][T17336] lo speed is unknown, defaulting to 1000 [ 319.585960][T17339] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.4739: error while reading EA inode 32 err=-116 [ 319.656264][T15628] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 319.664136][T15628] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 319.706163][T15628] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 319.735481][T17339] EXT4-fs (loop6): Remounting filesystem read-only [ 319.742349][T17339] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 319.755207][T15628] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 319.837967][T17339] EXT4-fs (loop6): 1 orphan inode deleted [ 319.838734][T17339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.839920][T17339] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.843010][T17332] lo speed is unknown, defaulting to 1000 [ 320.031661][T17332] lo speed is unknown, defaulting to 1000 [ 320.303536][T17374] loop4: detected capacity change from 0 to 512 [ 320.319344][T17366] __nla_validate_parse: 17 callbacks suppressed [ 320.319410][T17366] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4748'. [ 320.335708][T17366] bridge_slave_0: default FDB implementation only supports local addresses [ 320.368876][T17374] EXT4-fs: Ignoring removed nobh option [ 320.476927][T17374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.666554][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 320.666567][ T29] audit: type=1400 audit(316.456:12397): avc: denied { ioctl } for pid=17392 comm="syz.6.4759" path="socket:[59675]" dev="sockfs" ino=59675 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.734846][T11806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.788262][T17385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.964264][T17407] loop9: detected capacity change from 0 to 7 [ 320.994888][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4768'. [ 321.013496][T17407] Buffer I/O error on dev loop9, logical block 0, async page read [ 321.021581][T17407] Buffer I/O error on dev loop9, logical block 0, async page read [ 321.029443][T17407] loop9: unable to read partition table [ 321.058123][T17418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17418 comm=syz.1.4770 [ 321.081513][T17407] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 321.081513][T17407] ) failed (rc=-5) [ 321.112944][T17422] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 321.135776][ T29] audit: type=1107 audit(316.881:12398): pid=17415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 321.154095][T17422] SELinux: failed to load policy [ 321.216295][T17428] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 321.438139][ T29] audit: type=1326 audit(317.167:12399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.3.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 321.461595][T17448] loop4: detected capacity change from 0 to 1024 [ 321.478758][T17448] EXT4-fs: Ignoring removed orlov option [ 321.489338][ T29] audit: type=1326 audit(317.167:12400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.3.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 321.512335][ T29] audit: type=1326 audit(317.185:12401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.3.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 321.535222][ T29] audit: type=1326 audit(317.185:12402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.3.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 321.558455][ T29] audit: type=1326 audit(317.185:12403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.3.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 321.581520][ T29] audit: type=1326 audit(317.185:12404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.3.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 321.604480][ T29] audit: type=1326 audit(317.185:12405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.3.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 321.613238][T17448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 321.627506][ T29] audit: type=1326 audit(317.185:12406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17443 comm="syz.3.4782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 321.689385][T17448] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.4784: lblock 0 mapped to illegal pblock 0 (length 1) [ 321.711661][T17448] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.4784: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 321.810006][T17466] loop6: detected capacity change from 0 to 128 [ 321.823959][T17466] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.873411][T17466] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.912991][T17468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4790'. [ 321.987466][T11806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 322.115354][T17472] siw: device registration error -23 [ 322.185813][T17484] sctp: [Deprecated]: syz.4.4796 (pid 17484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.185813][T17484] Use struct sctp_sack_info instead [ 322.249590][T17489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.258154][T17490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.268910][T17490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.289564][T17495] lo speed is unknown, defaulting to 1000 [ 322.330898][T17495] lo speed is unknown, defaulting to 1000 [ 322.339255][T17495] lo speed is unknown, defaulting to 1000 [ 322.389441][T17489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.478639][T17499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17499 comm=syz.3.4801 [ 322.502520][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4800'. [ 322.625594][T17496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.639084][T17496] vlan2: entered allmulticast mode [ 322.644302][T17496] bond2: entered allmulticast mode [ 322.833343][T17505] lo speed is unknown, defaulting to 1000 [ 322.887253][T17505] lo speed is unknown, defaulting to 1000 [ 322.893808][T17505] lo speed is unknown, defaulting to 1000 [ 323.367533][T17516] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4807'. [ 323.394959][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4808'. [ 323.548465][T17526] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4811'. [ 323.579356][T17532] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.651137][T17546] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 323.669534][T17532] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.701149][T17532] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.800751][T17532] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.832076][T17579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17579 comm=syz.3.4828 [ 323.879712][T17585] vlan0: entered allmulticast mode [ 323.885063][T17585] dummy0: entered allmulticast mode [ 323.897589][ T288] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.908719][ T288] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.917100][ T288] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.930039][ T288] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.994816][T17590] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4835'. [ 324.033519][T17594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4837'. [ 324.077460][T17602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4840'. [ 324.261534][T17611] siw: device registration error -23 [ 324.543787][T17613] bond3 (unregistering): Released all slaves [ 324.720478][T17625] loop4: detected capacity change from 0 to 512 [ 324.727266][T17625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 324.739121][T17625] EXT4-fs (loop4): 1 truncate cleaned up [ 324.747519][T17625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.787764][T11806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.847787][T17647] netlink: 'syz.6.4855': attribute type 4 has an invalid length. [ 324.936933][T17660] veth0_macvtap: left promiscuous mode [ 325.100692][T17686] tipc: Enabling of bearer rejected, already enabled [ 325.123540][T17684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=17684 comm=syz.3.4871 [ 325.168449][T17698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17698 comm=syz.6.4877 [ 325.224045][T17702] loop4: detected capacity change from 0 to 1756 [ 325.249281][T17710] FAULT_INJECTION: forcing a failure. [ 325.249281][T17710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.262648][T17710] CPU: 0 UID: 0 PID: 17710 Comm: syz.1.4884 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 325.262674][T17710] Tainted: [W]=WARN [ 325.262680][T17710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.262690][T17710] Call Trace: [ 325.262694][T17710] [ 325.262700][T17710] __dump_stack+0x1d/0x30 [ 325.262717][T17710] dump_stack_lvl+0xe8/0x140 [ 325.262797][T17710] dump_stack+0x15/0x1b [ 325.262810][T17710] should_fail_ex+0x265/0x280 [ 325.262830][T17710] should_fail+0xb/0x20 [ 325.262950][T17710] should_fail_usercopy+0x1a/0x20 [ 325.262970][T17710] _copy_from_user+0x1c/0xb0 [ 325.263016][T17710] ___sys_sendmsg+0xc1/0x1d0 [ 325.263051][T17710] __x64_sys_sendmsg+0xd4/0x160 [ 325.263076][T17710] x64_sys_call+0x191e/0x2ff0 [ 325.263137][T17710] do_syscall_64+0xd2/0x200 [ 325.263166][T17710] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 325.263188][T17710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 325.263278][T17710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.263296][T17710] RIP: 0033:0x7f81b66aeba9 [ 325.263320][T17710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.263336][T17710] RSP: 002b:00007f81b5117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.263352][T17710] RAX: ffffffffffffffda RBX: 00007f81b68f5fa0 RCX: 00007f81b66aeba9 [ 325.263363][T17710] RDX: 0000000020040084 RSI: 0000200000003140 RDI: 0000000000000007 [ 325.263374][T17710] RBP: 00007f81b5117090 R08: 0000000000000000 R09: 0000000000000000 [ 325.263385][T17710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.263407][T17710] R13: 00007f81b68f6038 R14: 00007f81b68f5fa0 R15: 00007ffe16455558 [ 325.263452][T17710] [ 325.471055][T17714] loop4: detected capacity change from 0 to 764 [ 325.490483][T17722] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 325.554245][T17732] loop9: detected capacity change from 0 to 7 [ 325.560490][T17732] Buffer I/O error on dev loop9, logical block 0, async page read [ 325.581664][T17732] Buffer I/O error on dev loop9, logical block 0, async page read [ 325.589636][T17732] loop9: unable to read partition table [ 325.595391][T17732] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 325.595391][T17732] ) failed (rc=-5) [ 325.700844][T17756] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 325.732825][T17759] lo speed is unknown, defaulting to 1000 [ 325.784158][T17759] lo speed is unknown, defaulting to 1000 [ 325.790752][T17759] lo speed is unknown, defaulting to 1000 [ 325.839779][T17767] __nla_validate_parse: 8 callbacks suppressed [ 325.839795][T17767] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4875'. [ 325.857574][T17767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=17767 comm=syz.5.4875 [ 325.883036][T17767] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000000e [ 325.950587][T17771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4906'. [ 325.959574][T17771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4906'. [ 325.968587][T17771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4906'. [ 325.978554][T17771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4906'. [ 326.065192][T17778] 9pnet_fd: Insufficient options for proto=fd [ 326.126192][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 326.126216][ T29] audit: type=1400 audit(321.488:12669): avc: denied { bind } for pid=17781 comm="syz.3.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 326.182913][T17788] netlink: 'syz.5.4914': attribute type 10 has an invalid length. [ 326.227684][T17791] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4916'. [ 326.239600][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4916'. [ 326.248514][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4916'. [ 326.257574][T17791] netlink: 'syz.5.4916': attribute type 20 has an invalid length. [ 326.271757][ T3427] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.278125][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4916'. [ 326.281052][ T3427] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.289040][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4916'. [ 326.289148][T17791] netlink: 'syz.5.4916': attribute type 20 has an invalid length. [ 326.297546][ T3427] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.323488][ T3427] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.329291][T17792] loop4: detected capacity change from 0 to 1024 [ 326.351760][T17792] EXT4-fs: Ignoring removed orlov option [ 326.367767][T17792] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 326.401321][ T29] audit: type=1326 audit(321.747:12670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 326.412508][T17739] syz.1.4896 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 326.424320][ T29] audit: type=1326 audit(321.747:12671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 326.424415][ T29] audit: type=1326 audit(321.747:12672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 326.424451][ T29] audit: type=1326 audit(321.747:12673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 326.424479][ T29] audit: type=1326 audit(321.747:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 326.424508][ T29] audit: type=1326 audit(321.747:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 326.426916][T17792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.439081][T17739] CPU: 1 UID: 0 PID: 17739 Comm: syz.1.4896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 326.439182][T17739] Tainted: [W]=WARN [ 326.439192][T17739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.439208][T17739] Call Trace: [ 326.439218][T17739] [ 326.439226][T17739] __dump_stack+0x1d/0x30 [ 326.439329][T17739] dump_stack_lvl+0xe8/0x140 [ 326.439355][T17739] dump_stack+0x15/0x1b [ 326.439376][T17739] dump_header+0x81/0x220 [ 326.439418][T17739] oom_kill_process+0x342/0x400 [ 326.439545][T17739] out_of_memory+0x979/0xb80 [ 326.439588][T17739] try_charge_memcg+0x5e6/0x9e0 [ 326.439717][T17739] obj_cgroup_charge_pages+0xa6/0x150 [ 326.439759][T17739] __memcg_kmem_charge_page+0x9f/0x170 [ 326.439802][T17739] __alloc_frozen_pages_noprof+0x188/0x360 [ 326.439871][T17739] alloc_pages_mpol+0xb3/0x250 [ 326.439995][T17739] alloc_pages_noprof+0x90/0x130 [ 326.440036][T17739] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 326.440094][T17739] __kvmalloc_node_noprof+0x30f/0x4e0 [ 326.440210][T17739] ? ip_set_alloc+0x1f/0x30 [ 326.440236][T17739] ? ip_set_alloc+0x1f/0x30 [ 326.440261][T17739] ? __kmalloc_cache_noprof+0x189/0x320 [ 326.440329][T17739] ip_set_alloc+0x1f/0x30 [ 326.440355][T17739] hash_netiface_create+0x282/0x740 [ 326.440411][T17739] ? __pfx_hash_netiface_create+0x10/0x10 [ 326.440444][T17739] ip_set_create+0x3cc/0x960 [ 326.440563][T17739] ? __nla_parse+0x40/0x60 [ 326.440602][T17739] nfnetlink_rcv_msg+0x4c6/0x590 [ 326.440649][T17739] netlink_rcv_skb+0x120/0x220 [ 326.440680][T17739] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 326.440719][T17739] nfnetlink_rcv+0x16b/0x1690 [ 326.440759][T17739] ? __list_del_entry_valid_or_report+0x65/0x130 [ 326.440825][T17739] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 326.440870][T17739] ? should_fail_ex+0x30/0x280 [ 326.440966][T17739] ? selinux_nlmsg_lookup+0x99/0x890 [ 326.441072][T17739] ? __rcu_read_unlock+0x34/0x70 [ 326.441100][T17739] ? __netlink_lookup+0x266/0x2a0 [ 326.441137][T17739] netlink_unicast+0x5c0/0x690 [ 326.441169][T17739] netlink_sendmsg+0x58b/0x6b0 [ 326.441258][T17739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.441292][T17739] __sock_sendmsg+0x142/0x180 [ 326.441379][T17739] ____sys_sendmsg+0x31e/0x4e0 [ 326.441459][T17739] ___sys_sendmsg+0x17b/0x1d0 [ 326.441511][T17739] __x64_sys_sendmsg+0xd4/0x160 [ 326.441550][T17739] x64_sys_call+0x191e/0x2ff0 [ 326.441603][T17739] do_syscall_64+0xd2/0x200 [ 326.441697][T17739] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 326.441728][T17739] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.441766][T17739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.441792][T17739] RIP: 0033:0x7f81b66aeba9 [ 326.441880][T17739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.441904][T17739] RSP: 002b:00007f81b5117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.441929][T17739] RAX: ffffffffffffffda RBX: 00007f81b68f5fa0 RCX: 00007f81b66aeba9 [ 326.441946][T17739] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 326.441963][T17739] RBP: 00007f81b6731e19 R08: 0000000000000000 R09: 0000000000000000 [ 326.441979][T17739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.441996][T17739] R13: 00007f81b68f6038 R14: 00007f81b68f5fa0 R15: 00007ffe16455558 [ 326.442055][T17739] [ 326.442086][T17739] memory: usage 307104kB, limit 307200kB, failcnt 7585 [ 326.510376][ T29] audit: type=1326 audit(321.820:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 326.532227][T17739] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 326.555012][ T29] audit: type=1326 audit(321.820:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.5.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 326.621593][ T29] audit: type=1400 audit(321.913:12678): avc: denied { ioctl } for pid=17789 comm="syz.4.4915" path="/353/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.623585][T17739] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 326.623602][T17739] Memory cgroup stats for /syz1: [ 326.992574][T17739] cache 102400 [ 327.000934][T17739] rss 0 [ 327.003721][T17739] shmem 0 [ 327.006694][T17739] mapped_file 0 [ 327.010203][T17739] dirty 0 [ 327.013140][T17739] writeback 0 [ 327.016499][T17739] workingset_refault_anon 464 [ 327.020636][T11806] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /353/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 327.021171][T17739] workingset_refault_file 11050 [ 327.021182][T17739] swap 266240 [ 327.051313][T17739] swapcached 16384 [ 327.055039][T17739] pgpgin 483275 [ 327.059310][T17739] pgpgout 483246 [ 327.060118][T11806] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /353/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 327.062870][T17739] pgfault 310575 [ 327.062881][T17739] pgmajfault 272 [ 327.087571][T11806] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 327.088407][T17739] inactive_anon 8192 [ 327.088427][T17739] active_anon 8192 [ 327.088433][T17739] inactive_file 0 [ 327.088439][T17739] active_file 102400 [ 327.088445][T17739] unevictable 0 [ 327.088451][T17739] hierarchical_memory_limit 314572800 [ 327.092105][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 327.111637][T17739] hierarchical_memsw_limit 9223372036854771712 [ 327.111651][T17739] total_cache 102400 [ 327.151724][T11806] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /353/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 327.156071][T17739] total_rss 0 [ 327.156091][T17739] total_shmem 0 [ 327.156180][T17739] total_mapped_file 0 [ 327.156189][T17739] total_dirty 0 [ 327.156197][T17739] total_writeback 0 [ 327.156206][T17739] total_workingset_refault_anon 464 [ 327.156216][T17739] total_workingset_refault_file 11050 [ 327.156225][T17739] total_swap 266240 [ 327.156234][T17739] total_swapcached 16384 [ 327.156243][T17739] total_pgpgin 483275 [ 327.156251][T17739] total_pgpgout 483246 [ 327.156260][T17739] total_pgfault 310575 [ 327.156327][T17739] total_pgmajfault 272 [ 327.156336][T17739] total_inactive_anon 8192 [ 327.156345][T17739] total_active_anon 8192 [ 327.156353][T17739] total_inactive_file 0 [ 327.156362][T17739] total_active_file 102400 [ 327.156371][T17739] total_unevictable 0 [ 327.156380][T17739] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4896,pid=17738,uid=0 [ 327.156467][T17739] Memory cgroup out of memory: Killed process 17738 (syz.1.4896) total-vm:93760kB, anon-rss:1072kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 327.274427][T17816] 9pnet_fd: Insufficient options for proto=fd [ 327.320620][T11806] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /353/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 327.347119][T17822] netlink: 'syz.3.4924': attribute type 9 has an invalid length. [ 327.364470][T11806] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 327.395099][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 327.427196][T11806] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /353/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 327.454081][T17828] tipc: Enabling of bearer rejected, already enabled [ 327.545916][T11806] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /353/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 327.569773][T11806] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 327.659172][T17845] lo speed is unknown, defaulting to 1000 [ 327.716858][T17845] lo speed is unknown, defaulting to 1000 [ 327.723442][T17845] lo speed is unknown, defaulting to 1000 [ 327.880732][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 327.932566][T11806] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /353/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 327.962605][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 327.995424][T17851] netlink: 'syz.1.4934': attribute type 6 has an invalid length. [ 328.042886][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 328.089932][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 328.127160][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 328.236223][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 328.279180][T17764] Set syz1 is full, maxelem 65536 reached [ 328.292073][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 328.308141][T11806] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 328.392737][T17862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17862 comm=syz.6.4938 [ 328.486685][T17871] tipc: Enabled bearer , priority 0 [ 328.542233][T17871] FAULT_INJECTION: forcing a failure. [ 328.542233][T17871] name failslab, interval 1, probability 0, space 0, times 0 [ 328.554945][T17871] CPU: 1 UID: 0 PID: 17871 Comm: syz.5.4942 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 328.555038][T17871] Tainted: [W]=WARN [ 328.555047][T17871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 328.555061][T17871] Call Trace: [ 328.555067][T17871] [ 328.555074][T17871] __dump_stack+0x1d/0x30 [ 328.555100][T17871] dump_stack_lvl+0xe8/0x140 [ 328.555126][T17871] dump_stack+0x15/0x1b [ 328.555148][T17871] should_fail_ex+0x265/0x280 [ 328.555221][T17871] should_failslab+0x8c/0xb0 [ 328.555258][T17871] __kmalloc_noprof+0xa5/0x3e0 [ 328.555335][T17871] ? unregister_netdevice_many_notify+0x4c9/0x15d0 [ 328.555366][T17871] ? unlist_netdevice+0x2cc/0x320 [ 328.555402][T17871] unregister_netdevice_many_notify+0x4c9/0x15d0 [ 328.555501][T17871] ? skb_queue_purge_reason+0x151/0x250 [ 328.555547][T17871] ? __tun_detach+0x517/0xad0 [ 328.555574][T17871] unregister_netdevice_queue+0x1f5/0x220 [ 328.555603][T17871] __tun_detach+0x7db/0xad0 [ 328.555641][T17871] ? __pfx_tun_chr_close+0x10/0x10 [ 328.555700][T17871] tun_chr_close+0x5a/0x100 [ 328.555722][T17871] __fput+0x298/0x650 [ 328.555756][T17871] fput_close_sync+0x6e/0x120 [ 328.555819][T17871] __x64_sys_close+0x56/0xf0 [ 328.555840][T17871] x64_sys_call+0x2738/0x2ff0 [ 328.555876][T17871] do_syscall_64+0xd2/0x200 [ 328.555916][T17871] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 328.555947][T17871] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 328.555987][T17871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.556170][T17871] RIP: 0033:0x7fdff91feba9 [ 328.556186][T17871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.556270][T17871] RSP: 002b:00007fdff7c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 328.556289][T17871] RAX: ffffffffffffffda RBX: 00007fdff9445fa0 RCX: 00007fdff91feba9 [ 328.556300][T17871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 328.556310][T17871] RBP: 00007fdff7c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 328.556321][T17871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.556331][T17871] R13: 00007fdff9446038 R14: 00007fdff9445fa0 R15: 00007ffe9a1eac38 [ 328.556349][T17871] [ 328.787653][T17871] tipc: Disabling bearer [ 329.079940][T17900] lo speed is unknown, defaulting to 1000 [ 329.109919][T17809] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.119286][T17902] hub 9-0:1.0: USB hub found [ 329.127559][T17902] hub 9-0:1.0: 8 ports detected [ 329.145146][T17900] lo speed is unknown, defaulting to 1000 [ 329.156518][T17902] kernel profiling enabled (shift: 9) [ 329.163318][T17900] lo speed is unknown, defaulting to 1000 [ 329.480020][T17906] lo speed is unknown, defaulting to 1000 [ 329.592567][T17906] lo speed is unknown, defaulting to 1000 [ 329.611524][T17906] lo speed is unknown, defaulting to 1000 [ 330.015018][T17906] chnl_net:caif_netlink_parms(): no params data found [ 330.183433][T17906] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.191342][T17906] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.475183][T17906] bridge_slave_0: entered allmulticast mode [ 330.499196][T17906] bridge_slave_0: entered promiscuous mode [ 330.519291][T17906] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.526426][T17906] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.562665][T17906] bridge_slave_1: entered allmulticast mode [ 330.654563][T17906] bridge_slave_1: entered promiscuous mode [ 330.708883][T17906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.720559][T17906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.851400][T17906] team0: Port device team_slave_0 added [ 330.906898][T17906] team0: Port device team_slave_1 added [ 331.060044][T17906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.067718][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.093743][T17906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.133221][T17906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.140276][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.166317][T17906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.234551][T17950] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 331.255597][T17950] SELinux: failed to load policy [ 331.289797][T17949] syzkaller0: entered promiscuous mode [ 331.295438][T17949] syzkaller0: entered allmulticast mode [ 331.306471][T17906] hsr_slave_0: entered promiscuous mode [ 331.320007][T17906] hsr_slave_1: entered promiscuous mode [ 331.331240][T17906] debugfs: 'hsr0' already exists in 'hsr' [ 331.336983][T17906] Cannot create hsr debugfs directory [ 331.374567][T17960] lo speed is unknown, defaulting to 1000 [ 331.433686][T17960] lo speed is unknown, defaulting to 1000 [ 331.459253][T17960] lo speed is unknown, defaulting to 1000 [ 331.538773][T17964] program syz.3.4966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.561256][T17964] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 331.588183][T17906] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.617440][T17906] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.635119][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 331.635150][ T29] audit: type=1400 audit(326.571:12812): avc: denied { read write } for pid=17973 comm="syz.3.4970" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.664452][ T29] audit: type=1400 audit(326.571:12813): avc: denied { open } for pid=17973 comm="syz.3.4970" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.692049][T17906] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.695804][ T29] audit: type=1400 audit(326.626:12814): avc: denied { ioctl } for pid=17973 comm="syz.3.4970" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.802919][ T29] audit: type=1400 audit(326.728:12815): avc: denied { bind } for pid=17973 comm="syz.3.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 331.806982][T17906] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.822931][T17981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17981 comm=syz.1.4971 [ 331.857856][ T29] audit: type=1326 audit(326.774:12816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.1.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 331.881564][ T29] audit: type=1326 audit(326.774:12817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.1.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 331.915004][ T29] audit: type=1326 audit(326.811:12818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.1.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 331.938553][ T29] audit: type=1326 audit(326.811:12819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.1.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 331.961711][ T29] audit: type=1326 audit(326.811:12820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.1.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 331.985539][ T29] audit: type=1326 audit(326.811:12821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.1.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 331.989863][T17986] 9pnet_fd: Insufficient options for proto=fd [ 332.079437][T17906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.100354][T17996] __nla_validate_parse: 1 callbacks suppressed [ 332.100367][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4974'. [ 332.107919][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4973'. [ 332.124842][T17906] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.140818][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.147891][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.167272][T17991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4973'. [ 332.180591][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.187762][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.263402][T17906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.424731][T18011] macvtap0: refused to change device tx_queue_len [ 332.461547][T17906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.479398][T18020] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4981'. [ 332.725982][T18042] wireguard0: entered promiscuous mode [ 332.731493][T18042] wireguard0: entered allmulticast mode [ 332.784595][T17906] veth0_vlan: entered promiscuous mode [ 332.801998][T17906] veth1_vlan: entered promiscuous mode [ 332.833306][T17906] veth0_macvtap: entered promiscuous mode [ 332.842202][T17906] veth1_macvtap: entered promiscuous mode [ 332.869195][T17906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.901428][T17906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.930015][ T3427] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.962170][ T3427] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.986429][ T3427] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.006977][ T3427] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.482457][T18074] bond4 (unregistering): Released all slaves [ 333.574272][T18085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=18085 comm=syz.1.4994 [ 333.779573][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4995'. [ 333.806539][T18096] loop9: detected capacity change from 0 to 7 [ 333.834105][T18096] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.843058][T18096] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.850903][T18096] loop9: unable to read partition table [ 333.869597][T18096] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 333.869597][T18096] ) failed (rc=-5) [ 333.943546][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 333.943585][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 333.943624][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.002851][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.002882][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.002909][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.002935][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.002970][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003060][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003083][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003176][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003203][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003226][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003253][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003304][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003327][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003366][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003426][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003453][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003481][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003508][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003559][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003613][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003639][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003666][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003692][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003753][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003778][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003798][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003897][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003949][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.003976][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004078][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004104][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004131][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004152][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004178][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004216][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004237][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004318][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004339][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004370][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004395][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004434][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004462][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004523][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004543][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004563][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004603][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004630][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004656][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004678][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004780][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004801][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004822][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004851][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004942][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004966][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.004991][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.005029][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.005060][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.005131][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.005162][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.005192][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.005273][T18103] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 334.128248][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5004'. [ 334.195840][T18117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=18117 comm=syz.1.5005 [ 334.757088][T18139] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.830674][T18142] loop7: detected capacity change from 0 to 128 [ 334.833719][T18139] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 334.840770][T18142] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 334.900696][T18142] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5013'. [ 334.925459][T18139] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.935843][T18139] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 334.978801][T18146] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5015'. [ 334.988428][T18146] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.995649][T18146] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.020209][T18139] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.030544][T18139] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.152998][T18139] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.163564][T18139] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.251686][T18161] tipc: Enabled bearer , priority 0 [ 335.261637][T18162] loop7: detected capacity change from 0 to 512 [ 335.269426][T18161] FAULT_INJECTION: forcing a failure. [ 335.269426][T18161] name failslab, interval 1, probability 0, space 0, times 0 [ 335.282254][T18161] CPU: 0 UID: 0 PID: 18161 Comm: syz.3.5021 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 335.282346][T18161] Tainted: [W]=WARN [ 335.282355][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.282369][T18161] Call Trace: [ 335.282374][T18161] [ 335.282397][T18161] __dump_stack+0x1d/0x30 [ 335.282417][T18161] dump_stack_lvl+0xe8/0x140 [ 335.282434][T18161] dump_stack+0x15/0x1b [ 335.282456][T18161] should_fail_ex+0x265/0x280 [ 335.282482][T18161] ? netdevice_event+0x2ae/0x610 [ 335.282504][T18161] should_failslab+0x8c/0xb0 [ 335.282525][T18161] __kmalloc_cache_noprof+0x4c/0x320 [ 335.282620][T18161] ? __pfx_netdevice_event+0x10/0x10 [ 335.282638][T18161] netdevice_event+0x2ae/0x610 [ 335.282719][T18161] ? __pfx_del_netdev_ips+0x10/0x10 [ 335.282743][T18161] ? __pfx_pass_all_filter+0x10/0x10 [ 335.282763][T18161] ? __pfx_netdevice_event+0x10/0x10 [ 335.282785][T18161] raw_notifier_call_chain+0x6f/0x1b0 [ 335.282884][T18161] ? call_netdevice_notifiers_info+0x9c/0x100 [ 335.282975][T18161] call_netdevice_notifiers_info+0xae/0x100 [ 335.283005][T18161] unregister_netdevice_many_notify+0xda9/0x15d0 [ 335.283114][T18161] unregister_netdevice_queue+0x1f5/0x220 [ 335.283146][T18161] __tun_detach+0x7db/0xad0 [ 335.283168][T18161] ? __pfx_tun_chr_close+0x10/0x10 [ 335.283190][T18161] tun_chr_close+0x5a/0x100 [ 335.283208][T18161] __fput+0x298/0x650 [ 335.283307][T18161] fput_close_sync+0x6e/0x120 [ 335.283344][T18161] __x64_sys_close+0x56/0xf0 [ 335.283397][T18161] x64_sys_call+0x2738/0x2ff0 [ 335.283486][T18161] do_syscall_64+0xd2/0x200 [ 335.283523][T18161] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 335.283544][T18161] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 335.283651][T18161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.283675][T18161] RIP: 0033:0x7f4f13f9eba9 [ 335.283689][T18161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.283717][T18161] RSP: 002b:00007f4f12a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 335.283734][T18161] RAX: ffffffffffffffda RBX: 00007f4f141e5fa0 RCX: 00007f4f13f9eba9 [ 335.283749][T18161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 335.283762][T18161] RBP: 00007f4f12a07090 R08: 0000000000000000 R09: 0000000000000000 [ 335.283772][T18161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.283783][T18161] R13: 00007f4f141e6038 R14: 00007f4f141e5fa0 R15: 00007fff0b5b24e8 [ 335.283806][T18161] [ 335.295453][T18161] tipc: Disabling bearer [ 335.573588][ T2394] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 335.581901][ T2394] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 335.620095][T18162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.736568][ T2394] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 335.744915][ T2394] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 335.796396][ T2394] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 335.804742][ T2394] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 335.844251][ T2394] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 335.852844][ T2394] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 335.957476][T18195] vlan0: entered allmulticast mode [ 336.007649][T18199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18199 comm=syz.1.5034 [ 336.062589][T18164] SELinux: failed to load policy [ 336.676976][T18218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5042'. [ 336.688090][T18218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5042'. [ 336.945783][T18234] netlink: 'syz.5.5049': attribute type 4 has an invalid length. [ 337.243366][T18253] lo speed is unknown, defaulting to 1000 [ 337.296277][T18253] lo speed is unknown, defaulting to 1000 [ 337.303193][T18253] lo speed is unknown, defaulting to 1000 [ 337.483200][T18275] netlink: 'syz.6.5065': attribute type 3 has an invalid length. [ 337.580161][T18167] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 337.604675][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 337.604691][ T29] audit: type=1400 audit(332.083:12940): avc: denied { nlmsg_read } for pid=18281 comm="syz.6.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 337.631300][ T29] audit: type=1400 audit(332.083:12941): avc: denied { setopt } for pid=18281 comm="syz.6.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.787868][ T29] audit: type=1400 audit(332.258:12942): avc: denied { shutdown } for pid=18292 comm="syz.3.5073" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.812326][T18295] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 337.985698][ T29] audit: type=1400 audit(332.286:12943): avc: denied { relabelto } for pid=18292 comm="syz.3.5073" name="" dev="pipefs" ino=63684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 338.041152][T18301] __nla_validate_parse: 2 callbacks suppressed [ 338.041187][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5075'. [ 338.462318][ T29] audit: type=1326 audit(332.876:12944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 338.629683][T18306] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5077'. [ 338.693311][ T29] audit: type=1326 audit(332.904:12945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 338.716419][ T29] audit: type=1326 audit(332.904:12946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 338.739412][ T29] audit: type=1326 audit(332.904:12947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 338.762505][ T29] audit: type=1326 audit(332.904:12948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 338.785534][ T29] audit: type=1326 audit(332.913:12949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18302 comm="syz.6.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb60eeba9 code=0x7ffc0000 [ 338.905526][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5079'. [ 339.108297][T18326] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5085'. [ 339.139551][T18328] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5085'. [ 339.185946][T18322] lo speed is unknown, defaulting to 1000 [ 339.229787][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5087'. [ 339.249175][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5087'. [ 339.298061][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5087'. [ 339.378480][T18338] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5088'. [ 339.388143][T18338] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5088'. [ 339.490132][T18322] lo speed is unknown, defaulting to 1000 [ 339.529346][T18322] lo speed is unknown, defaulting to 1000 [ 339.646874][T18351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=18351 comm=syz.3.5092 [ 339.974695][T18363] FAULT_INJECTION: forcing a failure. [ 339.974695][T18363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.987810][T18363] CPU: 0 UID: 0 PID: 18363 Comm: syz.3.5098 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 339.987883][T18363] Tainted: [W]=WARN [ 339.987909][T18363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.987923][T18363] Call Trace: [ 339.987930][T18363] [ 339.987937][T18363] __dump_stack+0x1d/0x30 [ 339.987960][T18363] dump_stack_lvl+0xe8/0x140 [ 339.988030][T18363] dump_stack+0x15/0x1b [ 339.988044][T18363] should_fail_ex+0x265/0x280 [ 339.988103][T18363] should_fail+0xb/0x20 [ 339.988121][T18363] should_fail_usercopy+0x1a/0x20 [ 339.988145][T18363] _copy_from_user+0x1c/0xb0 [ 339.988177][T18363] ___sys_sendmsg+0xc1/0x1d0 [ 339.988256][T18363] __x64_sys_sendmsg+0xd4/0x160 [ 339.988284][T18363] x64_sys_call+0x191e/0x2ff0 [ 339.988308][T18363] do_syscall_64+0xd2/0x200 [ 339.988382][T18363] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 339.988410][T18363] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 339.988467][T18363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.988487][T18363] RIP: 0033:0x7f4f13f9eba9 [ 339.988571][T18363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.988656][T18363] RSP: 002b:00007f4f12a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.988676][T18363] RAX: ffffffffffffffda RBX: 00007f4f141e5fa0 RCX: 00007f4f13f9eba9 [ 339.988690][T18363] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000005 [ 339.988703][T18363] RBP: 00007f4f12a07090 R08: 0000000000000000 R09: 0000000000000000 [ 339.988781][T18363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.988795][T18363] R13: 00007f4f141e6038 R14: 00007f4f141e5fa0 R15: 00007fff0b5b24e8 [ 339.988818][T18363] [ 340.565731][T18380] hub 9-0:1.0: USB hub found [ 340.580482][T18380] hub 9-0:1.0: 8 ports detected [ 341.018291][T18404] team0 (unregistering): Port device team_slave_0 removed [ 341.039450][T18404] team0 (unregistering): Port device team_slave_1 removed [ 341.130172][T18418] 9pnet_fd: Insufficient options for proto=fd [ 341.237522][T17906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.379552][T18451] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 341.556012][T18483] vlan2: entered allmulticast mode [ 341.589396][T18485] loop7: detected capacity change from 0 to 164 [ 342.077172][T18517] loop7: detected capacity change from 0 to 2048 [ 342.095786][T18532] lo speed is unknown, defaulting to 1000 [ 342.142567][T18517] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.5147: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 342.212193][T18517] EXT4-fs (loop7): get root inode failed [ 342.218724][T18517] EXT4-fs (loop7): mount failed [ 342.256572][T18532] lo speed is unknown, defaulting to 1000 [ 342.264127][T18532] lo speed is unknown, defaulting to 1000 [ 342.858504][T18626] lo speed is unknown, defaulting to 1000 [ 342.873778][T15618] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 342.882519][T15618] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.946833][T18626] lo speed is unknown, defaulting to 1000 [ 342.961591][T18626] lo speed is unknown, defaulting to 1000 [ 343.269427][ T29] kauditd_printk_skb: 6417 callbacks suppressed [ 343.269458][ T29] audit: type=1326 audit(337.316:19367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 343.400366][ T29] audit: type=1326 audit(337.353:19368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 343.424026][ T29] audit: type=1326 audit(337.362:19369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 343.677284][ T29] audit: type=1326 audit(337.473:19370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18650 comm="syz.1.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f81b66e1465 code=0x7ffc0000 [ 343.701148][ T29] audit: type=1326 audit(337.639:19371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18650 comm="syz.1.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 343.724243][ T29] audit: type=1326 audit(337.639:19372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 343.748171][ T29] audit: type=1326 audit(337.639:19373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.1.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f81b66aeba9 code=0x7ffc0000 [ 343.843912][T18656] __nla_validate_parse: 93 callbacks suppressed [ 343.843929][T18656] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5179'. [ 343.955018][T18666] netlink: 'syz.5.5184': attribute type 10 has an invalid length. [ 344.099288][T18680] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5190'. [ 344.146093][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5194'. [ 344.156833][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5194'. [ 344.166249][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5194'. [ 344.182518][ T29] audit: type=1400 audit(338.124:19374): avc: denied { setopt } for pid=18683 comm="syz.3.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 344.310219][T18719] netlink: 'syz.6.5206': attribute type 1 has an invalid length. [ 344.318690][T18719] netlink: 'syz.6.5206': attribute type 4 has an invalid length. [ 344.326582][T18719] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5206'. [ 344.345371][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5199'. [ 344.350502][ T29] audit: type=1326 audit(338.309:19375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18704 comm="syz.5.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 344.377885][ T29] audit: type=1326 audit(338.309:19376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18704 comm="syz.5.5199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fdff91feba9 code=0x7ffc0000 [ 344.440269][T18725] hub 9-0:1.0: USB hub found [ 344.445625][T18725] hub 9-0:1.0: 8 ports detected [ 344.532225][T18731] netlink: 196 bytes leftover after parsing attributes in process `syz.6.5208'. [ 344.600222][T18733] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5209'. [ 344.726465][T18752] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5218'. [ 344.754275][T18755] loop9: detected capacity change from 0 to 7 [ 344.765512][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.777789][T18755] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.785805][T18755] loop9: unable to read partition table [ 344.795868][T18755] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 344.795868][T18755] ) failed (rc=-5) [ 345.147219][T18743] loop7: detected capacity change from 0 to 8192 [ 345.276502][T18766] lo speed is unknown, defaulting to 1000 [ 345.309590][T18766] lo speed is unknown, defaulting to 1000 [ 345.315689][T18766] lo speed is unknown, defaulting to 1000 [ 345.329388][T18767] loop7: detected capacity change from 0 to 512 [ 345.337919][T18767] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.5223: error while reading EA inode 32 err=-116 [ 345.352157][T18767] EXT4-fs (loop7): Remounting filesystem read-only [ 345.359500][T18767] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 345.370074][T18767] EXT4-fs (loop7): 1 orphan inode deleted [ 345.376313][T18767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.389051][T18767] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.442296][T18775] loop9: detected capacity change from 0 to 7 [ 345.448983][T18775] Buffer I/O error on dev loop9, logical block 0, async page read [ 345.456894][T18775] Buffer I/O error on dev loop9, logical block 0, async page read [ 345.464733][T18775] loop9: unable to read partition table [ 345.470899][T18775] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 345.470899][T18775] ) failed (rc=-5) [ 345.530160][T18780] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 345.630836][T18800] loop7: detected capacity change from 0 to 512 [ 345.653011][T18800] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 345.666739][T18800] EXT4-fs (loop7): orphan cleanup on readonly fs [ 345.673320][T18800] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 345.747203][T18800] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 345.767228][T18800] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5236: bg 0: block 40: padding at end of block bitmap is not set [ 345.804969][T18800] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 345.837064][T18800] EXT4-fs (loop7): 1 truncate cleaned up [ 345.853837][T18800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.215557][T17906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.397109][T15618] IPVS: starting estimator thread 0... [ 346.495703][T18832] IPVS: using max 3024 ests per chain, 151200 per kthread [ 346.572772][T18857] xt_socket: unknown flags 0xe4 [ 346.617091][T18855] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.624286][T18855] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.862597][T18855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.941428][T18855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.052257][T18598] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.079748][T18593] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.116287][T18593] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.146668][T18593] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.236261][T18889] netlink: 'syz.7.5263': attribute type 1 has an invalid length. [ 347.286815][T18896] geneve3: entered promiscuous mode [ 347.313858][T18901] loop7: detected capacity change from 0 to 512 [ 347.342936][T18901] EXT4-fs: Ignoring removed nobh option [ 347.349047][T18901] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 347.363271][T18904] IPv6: sit1: Disabled Multicast RS [ 347.370383][T18904] sit1: entered allmulticast mode [ 347.393716][T18901] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.5269: iget: bad i_size value: 38620345925642 [ 347.408391][T18901] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5269: couldn't read orphan inode 15 (err -117) [ 347.529307][T18901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.551133][T18910] lo speed is unknown, defaulting to 1000 [ 347.581107][T18901] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ,&#^%: bg 0: block 5: invalid block bitmap [ 347.692508][T17906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.808690][T18910] lo speed is unknown, defaulting to 1000 [ 347.861543][T18910] lo speed is unknown, defaulting to 1000 [ 348.073779][T18924] loop7: detected capacity change from 0 to 2048 [ 348.652130][T18974] vhci_hcd: invalid port number 96 [ 348.657413][T18974] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 348.700521][T18984] atomic_op ffff8881042f4128 conn xmit_atomic 0000000000000000 [ 348.856657][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 348.856673][ T29] audit: type=1326 audit(342.472:19447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18983 comm="syz.3.5296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 348.898586][T18996] netlink: 'syz.5.5301': attribute type 13 has an invalid length. [ 348.913710][T18996] gretap0: refused to change device tx_queue_len [ 348.931917][T18996] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 348.990987][ T29] audit: type=1400 audit(342.592:19448): avc: denied { write } for pid=19002 comm="syz.7.5304" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 349.025609][T19010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19010 comm=syz.1.5306 [ 349.055702][T19003] loop7: detected capacity change from 0 to 2048 [ 349.088478][ T29] audit: type=1107 audit(342.675:19449): pid=19009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 349.108021][T19003] loop7: p1 < > p4 [ 349.113039][T19003] loop7: p4 size 8388608 extends beyond EOD, truncated [ 349.121153][ T29] audit: type=1326 audit(342.712:19450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 349.144914][ T29] audit: type=1326 audit(342.712:19451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 349.172230][ T29] audit: type=1326 audit(342.758:19452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 349.195316][ T29] audit: type=1326 audit(342.758:19453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 349.219143][ T29] audit: type=1326 audit(342.758:19454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 349.242393][ T29] audit: type=1326 audit(342.758:19455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 349.266097][ T29] audit: type=1326 audit(342.758:19456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.3.5307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f13f9eba9 code=0x7ffc0000 [ 349.314064][T19024] __nla_validate_parse: 29 callbacks suppressed [ 349.314077][T19024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5310'. [ 349.368018][T19024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5310'. [ 349.395080][T19030] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5314'. [ 349.416389][T19032] netlink: zone id is out of range [ 349.425324][T19032] netlink: zone id is out of range [ 349.435807][T19032] netlink: zone id is out of range [ 349.440985][T19032] netlink: zone id is out of range [ 349.538797][T19032] netlink: zone id is out of range [ 349.544208][T19032] netlink: zone id is out of range [ 349.549363][T19032] netlink: zone id is out of range [ 349.554470][T19032] netlink: zone id is out of range [ 349.559745][T19032] netlink: zone id is out of range [ 350.147595][T19055] lo speed is unknown, defaulting to 1000 [ 350.181854][T19055] lo speed is unknown, defaulting to 1000 [ 350.187973][T19055] lo speed is unknown, defaulting to 1000 [ 350.333665][T19061] sctp: [Deprecated]: syz.7.5319 (pid 19061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.333665][T19061] Use struct sctp_sack_info instead [ 350.482582][T19069] tipc: Started in network mode [ 350.487557][T19069] tipc: Node identity ac14140f, cluster identity 4711 [ 350.514173][T19069] tipc: New replicast peer: 255.255.255.83 [ 350.520061][T19069] tipc: Enabled bearer , priority 10 [ 350.614064][T19064] tmpfs: Too few inodes for current use [ 350.737925][T19099] loop9: detected capacity change from 0 to 7 [ 350.744402][T19099] Buffer I/O error on dev loop9, logical block 0, async page read [ 350.753301][T19099] Buffer I/O error on dev loop9, logical block 0, async page read [ 350.761536][T19099] loop9: unable to read partition table [ 350.767613][T19099] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 350.767613][T19099] ) failed (rc=-5) [ 350.822274][T19104] loop7: detected capacity change from 0 to 128 [ 350.868014][T19104] loop7: detected capacity change from 0 to 8192 [ 350.945007][T19104] ================================================================== [ 350.953135][T19104] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 350.953401][T19119] 9pnet_fd: Insufficient options for proto=fd [ 350.961654][T19104] [ 350.961662][T19104] write to 0xffff8881198d5ae8 of 8 bytes by task 19117 on cpu 1: [ 350.961681][T19104] sync_mapping_buffers+0x24b/0x7d0 [ 350.982934][T19104] fat_file_fsync+0xaa/0x100 [ 350.987535][T19104] vfs_fsync_range+0x10d/0x130 [ 350.988662][T19117] netlink: 348 bytes leftover after parsing attributes in process `syz.7.5334'. [ 350.992337][T19104] generic_file_write_iter+0x1b8/0x2f0 [ 350.992371][T19104] do_iter_readv_writev+0x499/0x540 [ 350.992403][T19104] vfs_writev+0x2df/0x8b0 [ 350.992438][T19104] __se_sys_pwritev2+0xfc/0x1c0 [ 350.992469][T19104] __x64_sys_pwritev2+0x67/0x80 [ 350.992498][T19104] x64_sys_call+0x2c55/0x2ff0 [ 350.992526][T19104] do_syscall_64+0xd2/0x200 [ 350.992561][T19104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.992601][T19104] [ 350.992607][T19104] read to 0xffff8881198d5ae8 of 8 bytes by task 19104 on cpu 0: [ 350.992627][T19104] mark_buffer_dirty_inode+0x95/0x1c0 [ 350.992656][T19104] fat16_ent_put+0x4e/0x60 [ 350.992677][T19104] fat_ent_write+0x69/0xe0 [ 350.992715][T19104] fat_chain_add+0x15d/0x440 [ 350.992755][T19104] fat_get_block+0x46c/0x5e0 [ 350.992780][T19104] __block_write_begin_int+0x3fd/0xf90 [ 350.992810][T19104] cont_write_begin+0x5fc/0x970 [ 350.992843][T19104] fat_write_begin+0x4f/0xe0 [ 350.992871][T19104] cont_write_begin+0x1ad/0x970 [ 350.992904][T19104] fat_write_begin+0x4f/0xe0 [ 350.992931][T19104] generic_cont_expand_simple+0xb0/0x150 [ 350.992965][T19104] fat_cont_expand+0x3e/0x170 [ 350.992989][T19104] fat_setattr+0x2a5/0x8a0 [ 350.993006][T19104] notify_change+0x809/0x890 [ 350.993026][T19104] do_ftruncate+0x34b/0x450 [ 350.993052][T19104] __x64_sys_ftruncate+0x68/0xc0 [ 350.993080][T19104] x64_sys_call+0x2d52/0x2ff0 [ 350.993105][T19104] do_syscall_64+0xd2/0x200 [ 350.993139][T19104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.993163][T19104] [ 350.993167][T19104] value changed: 0x0000000000000000 -> 0xffff888119941d08 [ 350.993177][T19104] [ 350.993181][T19104] Reported by Kernel Concurrency Sanitizer on: [ 350.993199][T19104] CPU: 0 UID: 0 PID: 19104 Comm: syz.7.5334 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 350.993234][T19104] Tainted: [W]=WARN [ 350.993243][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.002371][T19117] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5334'. [ 351.007789][T19104] ================================================================== [ 351.607610][T15631] tipc: Node number set to 2886997007