last executing test programs: 22m19.880140343s ago: executing program 32 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x2c, r1, 0x1, 0xd0, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 22m19.113397194s ago: executing program 33 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) 22m16.883138095s ago: executing program 34 (id=376): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1062, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=ANY=[], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 22m6.715036739s ago: executing program 35 (id=629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x1, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 22m6.687140229s ago: executing program 36 (id=631): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) 22m6.342799514s ago: executing program 37 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27, 0xffff}, 0x6) 22m1.068715048s ago: executing program 38 (id=746): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 21m35.980028522s ago: executing program 39 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 21m34.213823787s ago: executing program 40 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffff00000002, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000580)=[{&(0x7f0000000340)=""/221, 0xdd}]}, &(0x7f0000000040)="ff33501ef663", 0x0, 0x800804, 0x10032, 0x1000, 0x0}) 21m18.293115181s ago: executing program 41 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 21m14.737570311s ago: executing program 42 (id=2258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000580)=""/237, 0x2a, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x28) 21m8.557858198s ago: executing program 43 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 21m3.782839936s ago: executing program 44 (id=2623): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a1, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 20m18.340469796s ago: executing program 45 (id=4152): mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) umount2(0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 20m3.207892279s ago: executing program 46 (id=4552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQES(&(0x7f00005a7000/0x4000)=nil, 0x4000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000003a40)=[{{&(0x7f00000003c0)={0x2, 0x1, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000540)="a9050000000074000000000035528c2771cc874d997efa5ff0850d2cf1bde5c064c60000", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)="ba0ac9697c3a940000edd9bb9449bfe71847200b", 0x14}], 0x1}}], 0x2, 0x840) 19m52.401699052s ago: executing program 47 (id=4831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 17m39.714513521s ago: executing program 0 (id=7521): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r1 = gettid() madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000100)={0xe, 0x9, 0xc}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) lchown(0x0, 0x0, 0xee00) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4, 0x3) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 17m39.216603808s ago: executing program 0 (id=7540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x4, 0xb0) listen(r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) alarm(0x4000000000002) lchown(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x26, 0x0) 17m38.071256554s ago: executing program 0 (id=7541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) 17m37.946916296s ago: executing program 0 (id=7543): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$binfmt_elf64(r2, 0x0, 0x7c8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x7079, 0x800, 0x7, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x10fffff, 0xffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x200000000000000) 17m37.266357585s ago: executing program 0 (id=7548): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 17m36.765171963s ago: executing program 0 (id=7553): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_getres(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) ioperm(0x3c, 0x1, 0x7) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17m35.860509355s ago: executing program 48 (id=7553): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_getres(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) ioperm(0x3c, 0x1, 0x7) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15m44.519224104s ago: executing program 5 (id=8498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f0000000540)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='ext4_insert_range\x00', r1, 0x0, 0xffffffffbffffffc}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a79b930ed81f315299e1914f52d8d59fcd86ad95cd0750e6babf7100"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) 15m43.913058633s ago: executing program 5 (id=8500): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x7, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15m43.38789802s ago: executing program 5 (id=8501): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x3, 0x5d8, &(0x7f0000000bc0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x40800, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noxattr}, {@version_L}, {@cache_mmap}, {@ignoreqv}, {@access_any}, {@cachetag={'cachetag', 0x3d, '#,[)\xf3,$*\\*\\%]-]'}}]}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x2}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000020c0)=[{&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000f40)=""/222, 0xde}], 0x2, 0x0, 0x80000001) syz_clone(0x2024100, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x9, 0x1, 0x6, 0x0, 0xfffffffffffffffd, 0x3f}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702618c5528ffffb7030000080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(0x0, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15m42.347628705s ago: executing program 5 (id=8510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002800010004000040fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(0x0, 0xc1, 0xeaf2cd83cb2d4e12, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 15m41.513212377s ago: executing program 5 (id=8515): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) 15m41.26184014s ago: executing program 5 (id=8518): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x3}, 0x18) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=rdma']) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r5, &(0x7f0000000040)=""/181, 0xb5) inotify_add_watch(r5, &(0x7f0000000100)='./file0\x00', 0x1000010) 15m41.26142122s ago: executing program 49 (id=8518): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x3}, 0x18) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=rdma']) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r5, &(0x7f0000000040)=""/181, 0xb5) inotify_add_watch(r5, &(0x7f0000000100)='./file0\x00', 0x1000010) 12m0.012384587s ago: executing program 7 (id=10794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) close(r0) 11m59.904057389s ago: executing program 7 (id=10797): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="00000000000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52c, &(0x7f0000000640)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000500), 0x24, 0x0) chmod(&(0x7f0000000180)='./file1\x00', 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000010201602a606433c2bb8a000a0000003c0001802c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000bb0c0002"], 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r3}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[0x1], [], 0x0, 0x0, 0x8, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000000401010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"], 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 11m59.652149552s ago: executing program 7 (id=10804): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a0000000000000008000100010000000400"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11m59.600873553s ago: executing program 7 (id=10805): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) 11m59.473966205s ago: executing program 7 (id=10806): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x3000) 11m59.403641706s ago: executing program 7 (id=10809): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r0) 11m59.371426556s ago: executing program 50 (id=10809): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r0) 11m22.168608131s ago: executing program 6 (id=12670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r3}) io_uring_enter(r0, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 11m22.140847951s ago: executing program 6 (id=12672): io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x75e7, 0x2, 0xfffffffe, 0x3bd}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) 11m21.265425913s ago: executing program 6 (id=12717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)}], 0x1}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 11m20.421202685s ago: executing program 6 (id=12750): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 11m20.395235776s ago: executing program 6 (id=12752): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x10}, 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11m20.157794309s ago: executing program 6 (id=12758): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803e}, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 11m20.157712939s ago: executing program 51 (id=12758): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803e}, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 8m34.836022449s ago: executing program 3 (id=15349): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008080, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x3d) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 8m34.835930539s ago: executing program 3 (id=15350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000001640)) 8m34.82747459s ago: executing program 3 (id=15352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8m34.78023023s ago: executing program 3 (id=15354): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0xa04d}}, {@errors_continue}]}, 0xdf, 0x52e, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 8m34.77946032s ago: executing program 3 (id=15356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0xf, 0xab, 0x2, 0x2c, @remote, @remote, 0x20, 0x80, 0x4, 0x7}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x1) close(0x3) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x40}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r3, &(0x7f00000003c0), 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@abort}, {@debug}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) vmsplice(r7, 0x0, 0x0, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0xffffffffffffffff) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000}, 0x20) r9 = syz_open_dev$MSR(0x0, 0x7, 0x0) sendfile(r9, r4, 0x0, 0x400004000000e) 8m34.689200111s ago: executing program 3 (id=15360): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 8m34.678016612s ago: executing program 52 (id=15360): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 3.696283002s ago: executing program 4 (id=24034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140), 0x800) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x677, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000700)="e4a601e2c794f73d35acedf6c374babbf5cb2e2c061d7f794bec0086411471cd0d03010c000000282ffce6a3396d13d1a664b1ded217e35934f1bc4d5c99", 0x3e}], 0x1) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)) fcntl$lock(r4, 0x26, &(0x7f0000000080)) 3.252397558s ago: executing program 8 (id=24042): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") 3.02830795s ago: executing program 8 (id=24045): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x4, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r5, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000006c0)={0xa8, 0x1, 0x2, 0x58279163a16bcc6a, 0x0, 0x0, {0x2b90df86e9768d2a, 0x0, 0xc}, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) socket$inet6_tcp(0xa, 0x1, 0x0) 2.882416732s ago: executing program 9 (id=24047): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) membarrier(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f00000001c0)={0x82, 0x8}, 0x20) (fail_nth: 1) 2.759977684s ago: executing program 9 (id=24051): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000340)='./file0/file0\x00', 0x0) 2.714932935s ago: executing program 9 (id=24053): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x4, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r4, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000006c0)={0xa8, 0x1, 0x2, 0x58279163a16bcc6a, 0x0, 0x0, {0x2b90df86e9768d2a, 0x0, 0xc}, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 2.187820691s ago: executing program 8 (id=24061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c20000000800450000b000000000001190780000000000000000000017c1009c907801000000000000000b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b265e5992c2209db5127a4a84d3d6e53d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a328f865412904b133eebafc6eb170fb00621144ab13a642475fc21552dce5cda9c06"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x800000, &(0x7f0000000b00)={[{@nobh}, {@jqfmt_vfsv1}, {@usrjquota}, {@nouser_xattr}, {@nouser_xattr}], [{@context={'context', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\x8c\x05\x16\xe88\x81\xf4S\x88\x80\xa8\xa2N:\xcb\x87V\nW\xe3\'\x91\vMq\xb2M\xb7\x19\n\x96\xbc\tt\x7f\x7f\xdf\x98\xb1\x9c\xb4>\x92\x89\x19\x85\xa9\xf2\xc8\x9fY\x9esjK{\xcc\x8d\xe8\x1a[\x9c\xa8\a\x84~\xbe_\xbf\x10a\r5Fp}n\xeae\xf9V\xe5\x9d\x89\xd6\v\xca\x9e\xcbg{r\x04)7\xee\xac\x9eI\xcf\x80\x91l:\xd3\xb4\xe7$\x013\xdde\xe9\xde\xf8\xcf\x18\xa1\x8d\xac\x84\xe6\x12#\xf4\xd7\xc8\x93\x1cff3\xc3\xce\x04\x0f\x1f{}\x95\xa6\x10\fqn\x89T\xc6C\xaaP\x11Cn\xe6#\x16~\xd8]\x13\x8fA\xc7,\x00\x00\x00\x00\x00\x00\xf50\xd8m\x1f\rg\x03\x06E\xfb\\~e\x87\xde\xc57Y\xff\x18\xb2^\x96M\x17P\x8eAH\xc1~@)\x9eld\xaa)\x153\xd7m\xf3\xef\x1e\xf6\x99\xc7\x0fq\xd4\xf1\xfd\xd1W\xc903D%#\x81{}\xa6\xfe\xd4Vv&i\f\x87z\r\x15\xf0+\xe0\x94~\xb7\xbbC4\x83F0\\O7\x91A\xbd\xc0\x92\\7\xc5F\xbc\xee\xf6\xf6\x1c/\x84\xd4d\x0e\xf2\xbdj-\x04T\xc7T0M\xa1\x90\xbb\xa3\xd2i\xb8\xf7M\x88x\xec\xe8c\xedp\x90\xac\xe1\xe0\x14\x1e\xd5\xfe\xdef3~9i\xc5\xd1\v\"\xc6\xd5\xe0\x93\xd1\r\x87\x83\xe5<\xb7\xb1'}}, {@subj_type={'subj_type', 0x3d, '\b\x00\x9dI\xc1A\xc2)c\x00\x00\x00\x00\x00\x00\x00\xfa\xff\xff\xc7\xfb\x8f\xc9\x1a\xc6'}}, {@hash}, {@uid_gt}]}, 0x1, 0x78b, &(0x7f0000001a00)="$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") timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e2200000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="01000000030000000000000000000000080003001100000076691ad94740cc7b01c29a367ffb0b464dc8abe0bb9671fe7d76e783c99e87740fc54ca00dee8451a3bd8544f2bf1a5610c3e50a733668152701d11ba5caea94fefd5c8caebe2e1361f4967d56c329f3d31f43095773f985e3106763d930b416b94cac5caa4b748e3cc28715d61226727cd93e886a5dc18979a2fa0a957eeee81d"], 0x54}}, 0x20004010) gettid() timer_settime(0x0, 0x0, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000440)=""/274, 0x112, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) recvmmsg(r5, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0xffffffea}, {{0x0, 0x0, 0x0}, 0xd}], 0x2, 0x1, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000640)=ANY=[], 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 2.120560212s ago: executing program 2 (id=24063): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') rename(&(0x7f0000000340)='./file0/file0\x00', 0x0) 1.971972624s ago: executing program 2 (id=24064): r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @private=0xa0100fd}, 0x1, 0x0, 0x2}}, 0x2e) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60012060, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r6, 0x2, {0x2, 0x1, 0x4}, 0x2}, 0x18) mknodat$null(r0, &(0x7f0000000440)='./bus\x00', 0x1, 0x103) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x443880, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r8, &(0x7f0000001d80)=ANY=[@ANYBLOB="000086dd000011000000000000006e711fbe0f982f0100000000000000120000000000000001ff02000000000000000000000000000187000000000000000001000000000000042022eb0000ffff0c000800050086dd080088be00000002160906070100000000000007080022eb000000082004f008020000000000002a000494030800655800000002a3fa0b2ebb6f37cd91bd4ca16e6e047ca9589db0023c2e468c4d7e65171d5f256e08ca59ac43b9d7d089b016f69ebc37a8f1393fd6a1b1613b0cfb5e13fcd2317875c6cbd60edd184c3da4208ada877e2bf6a166e1f9f1a11139ae395798fd6d42fdf3213fe3011a32a8555423acd7764776ae173c672505014da90883765cc90f06628a42d06f51031b0edb8bdaf0a567b6a15459b55b339fc39099bdf7465ea37208f964ad89a434760773b51e0c18385d285d004623384c284a67fe492c978b5683bb745c81ad8faac6894ad1247ef0e4b7e16317ef19caecba1f833d7ab32b10db075a2961bf34bbd37cc33582107f06631df7c9f340d8657e6c102aaf06a279df7587be59b8449e7a0e0987a14c2197d270c1333ba22d5ee4aa97bb44a0b5e47c60753fd72c2cc07d0f9f7dbc239f11ff49363b3dde011182ed42fd2c9a6d208f12ea593fca6e2487e0dc39e09b51edede485c3c8e3c344a4eafd92c93dc59e0fb44019f6c4ab1899863e3ae65fe5f7aaf4929958cc373201b30c95fba0dfb570d4513ad1975754b899c8d8da4e20bae524b01bcb789051c32fcf831bba444eb19402fd4f17637b4649cd50c305ae71755968142a1ef55e35b0004679be8f912e10663691076118049042f94545c60798fe755db603a3f55311bbe17a3b180132cd9e5b660e08554c87bfba845f17b7b56b2ef93fa73406a71b91b4c82ebe80a5d675b40cd4d3b1c0783d2071b966c34cad93af384149c89b9b8e4e4f53775274b9ffb5ffc76c6e6bf3f64b0a61b52ae2abdcd92ee7649a983c4e5e41bfbda2fd2b7d0457c7ab85492571d150c201ac353e8f9944bc54b9bb5974d9d783955c1ba854bd9159a00fe61259020f7395624e12f12977cc5c499b0a149e605467b05156384b702855e848f852c8cca39218f44775039c0da353b2cc959b0a52c3e786bb338d3318b534724d0a560147b0e6b5938df49e615111b40d29cbbe0503a292b53c692f5cc74ab2585dd8bdc0343ea86b778b3c93540b2188069fc2554b2892dbcfe5aeba1eb2d0dfecab86e2f1ba558c82fa8f06d199ee0a7f051827d120b01919b89e731e3c795c399dcd008ce6dea61c98ed59fc1e19bec269b7fd0fea7ec009145cc8ec0f51e66db3cd3f372f33d7d0efcfcab4268def3071ff357190313dd43d9862a338165c71d06ec1c621c0f4f57145302d29f25a4f20d8f23ce022bcfce952895acfc8c5e11626f91b67cddddcd760beb785b97ece9da2c55812c3c351c956a38cda593a88d1c1006667f98892752a713ad8d58af57e633ac4212bdea0b5ce0a312b338f0575365b40b0cc0b7efb70f75d5a1f70dfd394c7e6c09bf5ad84b94a79eb98f3470f2aa3fdad97254e9435678fc8fdbeed58799c76a512faa6492293e80da4ea60e0ede30f304d43f69b5d3e0ce244a0620866cb31a34e588ad212f28118e2bc5a430bc799477a182e44d793d153ec7aa2b35b5d91baf644dcaea04e7200ae5cb707ae7e04a7e9f41dc01700bd40210dc7e8eee6406afdd23337fdd81f00ae4da9b4d017ec27fc5f3613e5cd694a53a8113afe2d416cf735a9024518e1eda2307ac0d93fb5888eb56b342b9b51f66a561430699d4b8f21cd92dc9fcc2c2379b0c9d8ff58ef3bbd9f9d80b0ba3e2517a798c9907fa26393778de93cd5f784fd465c454164e6f95fba78e57123c4ed85a769ddf9cbb85b5920c810551106446c7872ef47292934d28d1f2450159314f6ac92a86492534f04cf71bebd8b4fd8c04f87bafb0bb46bec88fe4257c6e69ad939856a32b1cb95eb81d02ab313737f2fecf6645016b1e736dc4d2834640336250c8718480f692cfcb6825ea09edd84ac4a536074909b3a256ecf1842f55a9488b4fb7a5dfaa79783b9d9cc7a36b28e1f0db84dcbdfa096f67fccc23dce710e0a2e52c2dca2379d411518d5870309e3a78d45df3a8a131f1213cd965b4137faab649a32bde829344997c9c7fd17aaa3dcd80ae26fa1cd7f67f1bc62a754f2ba12a921c90d70e8207892dd36e354f255828977078a57a0625888e8d21969ffeade4c6735387d4509b55ba3ca6ecbf28cb267be8fd61433863836f828cf0d97bfc23a1615b49f3cecf8245676c8ddf0ed4f7e7e53a8cbf94dd896449b30f7632562b6ceebf5bf2cdf4a8d3dcc4c88f2192adfafbcc6726197a16a7c4121116d92ef0fbf8b2b36d74cdde4600673ae4f9b2a6d1cb2bc46bc00514a4bb8c53067db429aa2ccfcea35ae35cbb8f2ac2a02fe7ee994e95d6c2af4da7954370b8618942e81161f18fc82efee8052dfb4bee654ca65715e8975e9b2b66f5aef685856f65d4940a13ccc450a64eec26ee5cd42e556636c48b0c29013286757e1c8ba57cbb0a4c0f8c8b00bca519a28b93ac655a107bb5ef2e0fa98e480afa5c2034c9e46fd94c37634ccc39798018a2debfb57a21a590d4074ed06d4be2190cf66c0c25ce3c797272d22a45453cb1298f5fc3010708b12156da3dbf98c95a4073006030794e8480fd34a2f8cc5657f8171277b616cbffc1050dbb98b9ac373afef117678c193bca9887fcebbb86a7bd2522755da0b62ff07b5556baad9fd08b11c07c24548bc1580441096c1cfc20808441508272bca549ed7b1562137330d0fb993c5dc380354c79a28021676aba3084b7e06488025e66635cae4b9cb3ca98643b7f40b60527eba6df3a1e56838cdfa8e45dc0340b0aab431d8066a79340704633f61cb9952ddc942575a13cc0233d2177a4876d969f28bd76946014a1e5d6687abd560cf5a7e3a941897d9fa99842cc50d2f45d34373fd0048ecd5ab6598e56f22f60306b48bcb299d214f6c88e88ee610639e35eda907c8fba10c46102eb9ece7b643b99255208655c4538b69cc875b235c86900cf0d26673ad8714ad3799eb70115aadd3f4348e96e56ee73e8ee27be19e28df802392bdbb0507f1b0934adfe9e717152177b3a6f14263ce3073d08f0cf412c4c60fbd4c3d5e6e57145e39ffa83a6adef9b5495d0390a0af75ff5a98acadefbbe8c01a3afcc0a481f3ecc419b911f55840b0129d0d16c19d2c421c3493531e787d053b012af4f22fb3f1932af5201f9de37ca69f67873c363126b42f663edfb42e3c3a366d4c358d203a3e59300e77f8ef880a885a5835829dfe11246e00a0c541b807af7eca4d485489ec851c048d8f14e4b0ca455350c46ed47db3b2074d6673fd3c8dbab04ab6c369b0483edb1343f5e671b7d3c5f3a76fc968804189beff1884351a1e3a4503312bcfd4fa695a1a5382249f290b45899fdb239442132bb3ba146822946aa48f780df4a23d3e82ef77a751b5621059d30448884610f957a32836e55682eacef97338a4d7931389fa0cd5e2087bca23d3d795cf607b09a72ada0a0625168f2b632224ef6c0e256f837791489a08b8780efcc53fec6f931c575747656708b7f0bfa5de5e23f7d99cda8dfe494b97ebc3b538bb36a8321d4ceaf2815457f589be6f4441e047f44276e309f6d6633983c2e1302885bc5f788e9cdf56bdd56c1423712c2341c9197961f344fb25fa51633386164f1732621f453e39c91688d1b0cc85cb7337bd147da19f443c3f94e8ce7d4ce996812b91b5b57c3581bedafed5101204d6511455a159197d52194eb2f734de875ef0dd04403d9d8e51826d8bffb7ab21844b458a4519e03f853e0644e3d62c7806f40406db746f997f704c576e576901bd3570fd53b3e9f84818d71bd57637c5fb94c73419a495eadf3c56b602dfd10b70804072d5b77b1e0f989c0b85776af2049fd10a3704efa60a4f04a00fa928a146a429d387a93dcf0aee57aa6c852032766e6a180a9d62ea4b4a87aa0643d81371bbdee29dfb469f3bde57e89538e3fd5fa32330d323dd04b6cef5423ecd55d0ce4df1f3cbeb2eb150b34858d41d38f2def87ffd50ee4493e678a97a0c5381bc28bbe0687d100de7feac80a29dfbf432d0dc7f73ade11e5b9d8627efb13908b5a5043f0918333358ad1015fabf14f6679ad285029718ff40896774e40de192d052823e1cc8c0dcc325809f38fd4dd8ac8ddd7b13f9b78e9a9a96294f32e0191e69550a3644114a15c733693e76f9bc53cb6e2e63da7560d8a86295cf8e318e34f7170f7e6562fb8c7ead2e05c3539e89718f87322c06af15f077e6a6dc108c277c97f8bfb114f9e2ad712a8db4232b2bd174b46170427865f859d64e017da105a938cd53c551cdd91a6ee3d237e88ac8d650a661f5e713f95a585d0ce8b2646775f0ecbe388b9cec017b0de1b1d2eaad2816b359fc82dced572e116c50adb91280dc41cb943bb2facca2ae52ad299f6bafa90f375d06ce7c2c3f8cc797e072d83cc6b3e2ac30a3ff8cc60ce44f29c8a58dfbc214762c56a584d152df143975e9ab96f87f54fb4b8657d87ea6462c26d00a1b98c7ed798c618f99b85c4c7bef77f0ca1d0ffcc734db83301854e0e7959653eb14e5351a225c199d847e931852d5d01e887c15d2a93f60065372d4cf6e2cc2499a7c0a6519a7ad03f87490086c7ec8f7ce8e7610dcdb8df66beaadb884fcc0fb0744161f6c63e36ba69a8a08d715231a31ef7d45b8af2bf3ed9e821b2136ef89742409c8319fe58bef23440d9f05e6e6e8426c7b5e7eeb5ff82e1620b7530e8040f05e4835c48e471f37b5397b287c33040a036807fd20cd9c7c855a4b1cfdcc26c9759a7f8b0e3d5e8d354a25e50beb88671ff23e02ebcb191abc7bded17c60f686068a3559cd81094ab2a51098f27fef8e00a5dea758cd2a27fc4c2c54e12b93486e988f32fe00528bf9c8e94f8cea8315d7fa608a0d0f3b555840aebf546f3dcaf11a23d262ab20c98ee9953a9b93f42c186972cf6d2f9843928a80eda755212095151232a7d4eb605466a0c0ae0165623de7283f284d3bf6c268b4fa5b430bc74605aa7672b7459dcbc6d7ed52cb324c56613533964da91d94475ba283527d0c64dd1e6112c1c37ccf1050194eff07da860554b04c1491b276e29611956e1814481c904ef5d106d53ea34833ea063ff105572be335b8d5d45ae0644d9c3194744c7bce0056f71b9efa2660f555cb1fec1a43749af9f1109576bf12fb35b14c7e4e33ec995b48d801cc21e253c2681e2f12a27636d5db63bb1d9d5223ada6d8eb10dd9335d66a397ad5b65fad3023f7288421925bd4ad53ffb5993498f89b22e01ca6768cca9ad6d236cb19ea850752eafb9419af996e906ff3578f22365ea86b596f0ef6a0bf0fac7d08732c839fd5751be19c690a267a318d7b37aadb46c953dbc948b7d8e0aa8872b1e0a5c47953078f7be12ea78a0c2685615d2bd866b1676678be4ed11acb3d35e71d2cc10bcf93de0e1d7e676534984b3e3c1363e87c123fa0ad02b3448821bbe3615e0963fc8f2524f81e4561bcb38dc2a0082ff24a561171ba0f4edc5360dd31f58867ce2111ba052bfaf443959dba1c5d4f7ecaef29b44ce25925e91454a215c4f9e11ef4b9f9adb1d7f953b062c9f5d31085af5562207f72e3d6364da2ed6194ae0397522765d4732686d68addd9ae6c2b7ef0cc24cae64ccbb065872990b12b86c54fcb7fbf3071273a30982d31a6e417406abe057710ce7e1b18fbb87353f8925c34ac2a528a7deba0890c99341cffcf0cf8ecb676aecc07092408f15bb0335192f54fea6389c24d299dcdfa30885800629145617942b1a6a71242280c8e0790615bb50f93211243a03b6f8f2aeeac90900ad49978957bc6ea3fcad8de47509937aed7739541fad3898c"], 0xfce) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@gettaction={0x90, 0x32, 0x708, 0x70bd27, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10b}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x90}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1.824215006s ago: executing program 4 (id=24065): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000400000002c2f34ac50000000c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002340)=ANY=[@ANYBLOB="180000090000000000000000000000001809000037da64085850bd4e76ca9af914d6056099439372c8d711b8e2a39960e599e5a2de3a13973cfca98c5b6fc773f23a0c45aa49531e4fe64b2f961c3a9dd356e7af975ddb9573e9161b27a204660287be028739d3c52064a39ad61f91427caa7b53603bff49a7d2da8f57e4bf3cc961a53ae5a23704a10a5869a0a4d51016bc441245295bcdfad9b2c170eecc713a77c7b4a7e5fb8af81924eaf9fc27a19db8ce1365e019098c2e9704e79357c0d5096f90e401c86889e2c0bc38218ac333d60591b3", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.743808798s ago: executing program 4 (id=24066): r0 = socket(0x10, 0x3, 0x0) close(r0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000980)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100000000000}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r5 = gettid() timer_create(0x0, &(0x7f0000000840)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000f8000000f8000000040000001000000000000009010000000300000008000006040000000100cf0007000000070000000500000007000000f9ffffff030000000500000006000000080000000e000000e00f0000050000007f0000000d000000480000001000000000000002000000000a0000000000000e02000000020000000200000005000013080000000d0000000b000000000400000300000081000000f103000007000000ff7f14ea65c7f0aef6af38c5231024d9ff0000090000000100004008000000010000000600000008000000030000000000000002000085070000001000000005000000060000000b00000005000000fdffffff0700000000000008050000000f000000000000090000000000300000"], &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0xa, 0x8001}) 1.654203769s ago: executing program 2 (id=24067): kexec_load(0x4, 0xa, 0x0, 0x0) 1.593795709s ago: executing program 2 (id=24068): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x89c8, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003", @ANYBLOB="0dcd311aeac61fbfda6bb1e5ebd3365a4644006395f5daa41bc149c60587b0e98755b9e6fae1fa31b220860f23c3e3ed06e0a80061ca6b2bd48a2417933d6279ba4b391afa4362fdf18018b9f54ee86f023b918900dae62975a283922d6791eb42abbb146d0b1f", @ANYRES32=r1, @ANYRES32, @ANYRES16=r1, @ANYRESOCT=r0, @ANYBLOB="9fcaeaaa0e28a9b1515970a008db8c0bf452fb218490d333b8a100ee5baf1020a8c8202acab30cead462e412592b59d7768dba10b785640757e23e7735d1fb5dd393e3939df218239e345270faded6bc995037dc63575bd53513dce1292779c683cd88b12f5bb4616a8b99e60f26cf36a1b1ae1209f84be6b16bb083d7a0e354bd453c2533f9978365fcb0f64a8d58f22ad855db39bda215d1decf75"], 0x64}, 0x1, 0x0, 0x0, 0x200488d1}, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x10) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x15, 0x0, 0x0, 0x1, 0x0, r4}]) 1.5476349s ago: executing program 9 (id=24069): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.53020883s ago: executing program 8 (id=24070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0)}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 1.353050453s ago: executing program 9 (id=24071): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x4, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r5, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000006c0)={0xa8, 0x1, 0x2, 0x58279163a16bcc6a, 0x0, 0x0, {0x2b90df86e9768d2a, 0x0, 0xc}, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) socket$inet6_tcp(0xa, 0x1, 0x0) 1.179605465s ago: executing program 1 (id=24072): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) 1.138877066s ago: executing program 1 (id=24073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.069969386s ago: executing program 1 (id=24074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.032981727s ago: executing program 1 (id=24075): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140), 0x800) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x677, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000700)="e4a601e2c794f73d35acedf6c374babbf5cb2e2c061d7f794bec0086411471cd0d03010c000000282ffce6a3396d13d1a664b1ded217e35934f1bc4d5c99", 0x3e}], 0x1) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)) fcntl$lock(r4, 0x26, &(0x7f0000000080)) 815.56586ms ago: executing program 4 (id=24076): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000400000002c2f34ac50000000c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 677.934632ms ago: executing program 2 (id=24077): mknod$loop(0x0, 0x100000000000600d, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") 673.225922ms ago: executing program 4 (id=24078): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000002040000000000000000000009030000000000000061"], 0x0, 0x5b, 0x0, 0x0, 0x5, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="09000000080004000b0012800b00010062726964676500001800028005002a00000000000c0023000900000000000000"], 0x48}}, 0x0) 669.530362ms ago: executing program 8 (id=24079): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)=0x5, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000001, 0x4, 0x5, 0x0, "00000100"}) r1 = syz_open_pts(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x454, &(0x7f0000000c00)="$eJzs289vFFUcAPDvzLZA+WFXxB/8UKtobPzR0oLKwYtGEy8mJl7wWNtCkIUaWhMhRNAYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1sztDt8tuaZdtB9nPJ5n2vZk3ee+7b97um3m7AQyssexPErEzIn6PiNFmdmWBsea/G9cvzP5z/cJsEvX6O38ljXJ/X78wWxQtztuRZ8bTiPSzJPZ3qHfx3PlTM7Xa/Nk8P7l0+oPJxXPnXzh5eubE/In5M9NHjx45PPXyS9Mv9iXO+7O27vt44cDeN9+98tbssSvv/fxtpYi/LY4+GVvt4NP1ep+rK9eulnQyVGJDWJdsDGTdNdwY/6NRieXOG403Pi21ccCGque6HL5UB+5hSZTdAqAcxQd9dv9bbJs3+yjftVebN0BZ3DfyrXlkKNK8zHDb/W0/jUXEsUv/fpVtsTHPIQAAVvg+m/8832n+l8ZDLeXuy9eGqvlayu6IeCAi9kTEgxGNsg9HxCPrrL99keTW+U96tafA1iib/72Sr22tnP8Vs7+oVvLcrkb8w8nxk7X5Q/lrMh7DW7P81Cp1/PD6b190O9Y6/8u2rP5iLpi34+rQ1pXnzM0szdxJzK2ufRKxb6hT/MnNlYAkIvZGxL4e6zj57DcHuh27ffyr6MM6U/3riGea/X8p2uIvJKuvT05ui9r8ocniqrjVL79efrtb/XcUfx9k/b+94/V/M/5q0rpeu7j+Oi7/8XnXe5qJnq7/5R1b8v8fzSwtnZ2K2JKcaDa6df/08rlFviifxT9+sPP43x3Lr8T+iMgu4kcj4rGIeDzvuyci4smIONgWV+v99U+vPfV+t/jvhv6fa+v/atQvthRp6//lxJZo39M5UTn143crKq2uJ/6s/480UuP5nrW8/62lXb1dzQAAAPD/k0bEzkjSiZvpkXRiovkd/j2xPa0tLC49d3zhwzNzzd8IVGM4LZ50jbY8D53Kb+uL/HRb/nD+3PjLykgjPzG7UJsrO3gYcDtuGf9pY/xn/qyU3Tpgw/m9FgyulvGflNkOYPP5/IfBZfzD4Oow/kfKaAew+Tp9/l8soR3A5msb/5b9YIC4/4fBZfzD4God/74AAANjcSRu/yP5Tolt0ctZEvdMItK7ohn9SSQ9joK1JnaWHeD6E2W/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTHfwEAAP//fQ3xRw==") ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001100)) (fail_nth: 1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x41}, 0x18) 522.508604ms ago: executing program 9 (id=24080): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)=0x5, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000001, 0x4, 0x5, 0x0, "00000100"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x3, 0x4}}, './bus\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffff00000002, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000580)=[{&(0x7f0000000340)=""/221, 0xdd}]}, &(0x7f0000000040)="ff33501ef663", 0x0, 0x800804, 0x10032, 0x1000, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x740, 0x2f8, 0x2f8, 0x440, 0x0, 0x0, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@dev={0xfe, 0x80, '\x00', 0x38}, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_pts(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@errors_remount}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@resgid}, {@quota}]}, 0x1, 0x454, &(0x7f0000000c00)="$eJzs289vFFUcAPDvzLZA+WFXxB/8UKtobPzR0oLKwYtGEy8mJl7wWNtCkIUaWhMhRNAYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1sztDt8tuaZdtB9nPJ5n2vZk3ee+7b97um3m7AQyssexPErEzIn6PiNFmdmWBsea/G9cvzP5z/cJsEvX6O38ljXJ/X78wWxQtztuRZ8bTiPSzJPZ3qHfx3PlTM7Xa/Nk8P7l0+oPJxXPnXzh5eubE/In5M9NHjx45PPXyS9Mv9iXO+7O27vt44cDeN9+98tbssSvv/fxtpYi/LY4+GVvt4NP1ep+rK9eulnQyVGJDWJdsDGTdNdwY/6NRieXOG403Pi21ccCGque6HL5UB+5hSZTdAqAcxQd9dv9bbJs3+yjftVebN0BZ3DfyrXlkKNK8zHDb/W0/jUXEsUv/fpVtsTHPIQAAVvg+m/8832n+l8ZDLeXuy9eGqvlayu6IeCAi9kTEgxGNsg9HxCPrrL99keTW+U96tafA1iib/72Sr22tnP8Vs7+oVvLcrkb8w8nxk7X5Q/lrMh7DW7P81Cp1/PD6b190O9Y6/8u2rP5iLpi34+rQ1pXnzM0szdxJzK2ufRKxb6hT/MnNlYAkIvZGxL4e6zj57DcHuh27ffyr6MM6U/3riGea/X8p2uIvJKuvT05ui9r8ocniqrjVL79efrtb/XcUfx9k/b+94/V/M/5q0rpeu7j+Oi7/8XnXe5qJnq7/5R1b8v8fzSwtnZ2K2JKcaDa6df/08rlFviifxT9+sPP43x3Lr8T+iMgu4kcj4rGIeDzvuyci4smIONgWV+v99U+vPfV+t/jvhv6fa+v/atQvthRp6//lxJZo39M5UTn143crKq2uJ/6s/480UuP5nrW8/62lXb1dzQAAAPD/k0bEzkjSiZvpkXRiovkd/j2xPa0tLC49d3zhwzNzzd8IVGM4LZ50jbY8D53Kb+uL/HRb/nD+3PjLykgjPzG7UJsrO3gYcDtuGf9pY/xn/qyU3Tpgw/m9FgyulvGflNkOYPP5/IfBZfzD4Oow/kfKaAew+Tp9/l8soR3A5msb/5b9YIC4/4fBZfzD4God/74AAANjcSRu/yP5Tolt0ctZEvdMItK7ohn9SSQ9joK1JnaWHeD6E2W/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTHfwEAAP//fQ3xRw==") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x41}, 0x18) 519.653044ms ago: executing program 2 (id=24081): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x0) unshare(0x30020400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySG8rLm+kn+vD3PDEfEt0cjHq2srnfhytWz09Vaw3sR+xfPXdy/cOXqvvlz02dmz8yenzrwwsFDky9OHZzakDi358/Hjr/25Mfvv/383HfVfUkcjpOD787Eijg2yniMx508xNbygYg4lCXafC4Pmy0QQqlV8t/HwYh4PMaiUs81jMX8R4U2DuipWiWiBpRUov9DSTXHAc1j++6Og0/2eFTSP7eONA6AVsc/0Dg3EsP1Y6Ntt5OWI6PGuY0dG1B/Vsc/13Z/nj1i2XmIP+9unYENqKeTpesR8US7+JN623bUI83iT5e1I4mIyYj6OaCs/JUHaEPSku7FeZi1rDf+NCIO589Z+dF11j++It/v+AEop5tH8h35Upa7t//Lxh7N8U+0Gf+Mttl3rUfR+7/O47/m/n64fo48XTEOy8YsJ9q/5eDKgp8+PPZpp/pbx3/ZI6u/ORbsh1vXI3aviP+DLNh8/JPFn7TZ/tkqpw53V8er3/9yrNOyouOv3YjY0/b4596oNEutcX1y/9x8dXay8bNtHV9/89aXneovOv5s+2/rEH/L9k9Xvi77TC52WcdXJ26c67Rs9L7xpz8PJY3jzaG85J3pxcVLUxFDyfF8lZbyA2u3pblO8z2y+Pc+077/L/v9v778fUaafzK7cPGNs7c7LVvP9m+5mHyn1mUbOsnin7n/9l/V/7OyT7qs4483Lz/Vadla8Y88SGAAAAAAAABQQmn9GmySTtxNp+nERGO+7GOxLa1eWFh8du7C5fMzEXvr/w85mDavdI818kmWn8r/H7aZP7Ai/1xE7IyIzyoj9fzE6QvVmaKDBwAAAAAAAAAAAAAAAAAAgE1iez7/v3mf6t8rjfn/QEn08gZzwOam/0N51fv/qls8AWVg/w/lpf9Deen/UF76P5SX/g/lpf9Deen/UF76PwAAAABsSTufvvljEhFLL43UH5mhfJkZQbC1DRbdAKAwlaIbABTm7qV/g30ona7G/3/lXw7Y++YABUjaFdYHB7W1O//Ntq8EAAAAAAAAAAAAAHpgz67O8//NDYatzbQ/KK8HmP/vqwPgIeer/6G8HOMD95vFP9xpgfn/AAAAAAAAAAAAANA3o/VHkk7kc4FHI00nJiL+HxE7YjCZm6/OTkbEIxHxQ2Xwf1l+quhGAwAAAAAAAAAAAAAAAAAAwBazcOXq2elqdfZSa+LvVSVbO9G8C2of6no5/uOrIun/xzISEYVvlJ4lBlpKkoilbMtvioZdWojN0Yx6ouA/TAAAAAAAAAAAAAAAAAAAUEItc4/b2/1Fn1sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP137/7/vUsUHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HD6NwAA//+ipUAx") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x44}}, 0x0) 447.663515ms ago: executing program 8 (id=24082): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x4, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r5, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000006c0)={0xa8, 0x1, 0x2, 0x58279163a16bcc6a, 0x0, 0x0, {0x2b90df86e9768d2a, 0x0, 0xc}, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 281.684747ms ago: executing program 4 (id=24083): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000400000002c2f34ac50000000c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002340)=ANY=[@ANYBLOB="180000090000000000000000000000001809000037da64085850bd4e76ca9af914d6056099439372c8d711b8e2a39960e599e5a2de3a13973cfca98c5b6fc773f23a0c45aa49531e4fe64b2f961c3a9dd356e7af975ddb9573e9161b27a204660287be028739d3c52064a39ad61f91427caa7b53603bff49a7d2da8f57e4bf3cc961a53ae5a23704a10a5869a0a4d51016bc441245295bcdfad9b2c170eecc713a77c7b4a7e5fb8af81924eaf9fc27a19db8ce1365e019098c2e9704e79357c0d5096f90e401c86889e2c0bc38218ac333d60591b3", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16.3329ms ago: executing program 1 (id=24084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c0001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 0s ago: executing program 1 (id=24085): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000500), 0x24, 0x0) chmod(&(0x7f0000000180)='./file1\x00', 0x4) kernel console output (not intermixed with test programs): 9075][T15931] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1355.380103][T15931] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1355.380156][T15931] System zones: 0-2, 18-18, 34-35 [ 1355.380727][T15931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.386587][T15931] netlink: 'syz.4.23656': attribute type 9 has an invalid length. [ 1355.386607][T15931] netlink: 'syz.4.23656': attribute type 6 has an invalid length. [ 1355.410804][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.673923][T15944] loop1: detected capacity change from 0 to 1764 [ 1355.710983][T15502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.734958][T15951] FAULT_INJECTION: forcing a failure. [ 1355.734958][T15951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.748157][T15951] CPU: 0 UID: 0 PID: 15951 Comm: syz.9.23665 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1355.748209][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1355.748286][T15951] Call Trace: [ 1355.748293][T15951] [ 1355.748301][T15951] __dump_stack+0x1d/0x30 [ 1355.748333][T15951] dump_stack_lvl+0xe8/0x140 [ 1355.748386][T15951] dump_stack+0x15/0x1b [ 1355.748423][T15951] should_fail_ex+0x265/0x280 [ 1355.748459][T15951] should_fail+0xb/0x20 [ 1355.748536][T15951] should_fail_usercopy+0x1a/0x20 [ 1355.748561][T15951] _copy_from_user+0x1c/0xb0 [ 1355.748596][T15951] ___sys_sendmsg+0xc1/0x1d0 [ 1355.748671][T15951] __x64_sys_sendmsg+0xd4/0x160 [ 1355.748699][T15951] x64_sys_call+0x2999/0x2fb0 [ 1355.748719][T15951] do_syscall_64+0xd2/0x200 [ 1355.748750][T15951] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1355.748837][T15951] ? clear_bhb_loop+0x40/0x90 [ 1355.748934][T15951] ? clear_bhb_loop+0x40/0x90 [ 1355.748957][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.748981][T15951] RIP: 0033:0x7f1e5360e929 [ 1355.749047][T15951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.749068][T15951] RSP: 002b:00007f1e51c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.749105][T15951] RAX: ffffffffffffffda RBX: 00007f1e53835fa0 RCX: 00007f1e5360e929 [ 1355.749121][T15951] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1355.749136][T15951] RBP: 00007f1e51c77090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.749150][T15951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.749163][T15951] R13: 0000000000000000 R14: 00007f1e53835fa0 R15: 00007fff6bc9d758 [ 1355.749197][T15951] [ 1356.051995][T15965] bond2: entered promiscuous mode [ 1356.057190][T15965] bond2: entered allmulticast mode [ 1356.070912][T15965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1356.091175][T15965] bond2 (unregistering): Released all slaves [ 1356.138229][T15977] loop4: detected capacity change from 0 to 128 [ 1356.169742][T15977] FAULT_INJECTION: forcing a failure. [ 1356.169742][T15977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.183582][T15977] CPU: 1 UID: 0 PID: 15977 Comm: syz.4.23674 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1356.183618][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1356.183670][T15977] Call Trace: [ 1356.183677][T15977] [ 1356.183685][T15977] __dump_stack+0x1d/0x30 [ 1356.183707][T15977] dump_stack_lvl+0xe8/0x140 [ 1356.183730][T15977] dump_stack+0x15/0x1b [ 1356.183750][T15977] should_fail_ex+0x265/0x280 [ 1356.183773][T15977] should_fail+0xb/0x20 [ 1356.183838][T15977] should_fail_usercopy+0x1a/0x20 [ 1356.183864][T15977] _copy_from_user+0x1c/0xb0 [ 1356.183890][T15977] io_submit_one+0x52/0x11d0 [ 1356.183986][T15977] __se_sys_io_submit+0xfb/0x280 [ 1356.184008][T15977] __x64_sys_io_submit+0x43/0x50 [ 1356.184027][T15977] x64_sys_call+0xfc4/0x2fb0 [ 1356.184047][T15977] do_syscall_64+0xd2/0x200 [ 1356.184071][T15977] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1356.184155][T15977] ? clear_bhb_loop+0x40/0x90 [ 1356.184175][T15977] ? clear_bhb_loop+0x40/0x90 [ 1356.184260][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.184304][T15977] RIP: 0033:0x7f17f18ce929 [ 1356.184319][T15977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.184337][T15977] RSP: 002b:00007f17eff37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1356.184359][T15977] RAX: ffffffffffffffda RBX: 00007f17f1af5fa0 RCX: 00007f17f18ce929 [ 1356.184373][T15977] RDX: 0000200000001fc0 RSI: 0000000000000001 RDI: 00007f17eff0e000 [ 1356.184387][T15977] RBP: 00007f17eff37090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.184399][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.184422][T15977] R13: 0000000000000000 R14: 00007f17f1af5fa0 R15: 00007ffc6b0a5e48 [ 1356.184442][T15977] [ 1356.388357][T15984] netlink: 'syz.9.23677': attribute type 9 has an invalid length. [ 1356.418425][T15982] loop2: detected capacity change from 0 to 736 [ 1356.469297][T15992] loop9: detected capacity change from 0 to 128 [ 1356.493791][T15985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.501094][T15985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.537141][T15996] loop4: detected capacity change from 0 to 512 [ 1356.553075][T15996] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1356.562419][T15996] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1356.585498][T15996] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1356.601841][T15996] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1356.610229][T15985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.617799][T15996] System zones: 0-2, 18-18, 34-35 [ 1356.626088][T15996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.640185][T15985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.700092][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.720198][T15985] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.729166][T15985] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.738338][T15985] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.747427][T15985] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.775946][T16013] loop4: detected capacity change from 0 to 128 [ 1356.809754][T16019] syz.2.23693: attempt to access beyond end of device [ 1356.809754][T16019] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1356.856747][T16026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16026 comm=syz.4.23687 [ 1356.906238][T16034] loop9: detected capacity change from 0 to 512 [ 1356.921911][T16036] loop1: detected capacity change from 0 to 128 [ 1356.928554][T16034] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1356.937690][T16034] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1356.966080][T16036] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1356.993637][T16034] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1357.003653][T16036] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1357.020982][T16034] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1357.032443][T16036] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 4095 (only 1 groups) [ 1357.041545][T16034] System zones: 0-2, 18-18, 34-35 [ 1357.053445][T16034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.083901][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.097700][T16040] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 1357.142011][T14983] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1357.575096][T16062] syz.4.23707: attempt to access beyond end of device [ 1357.575096][T16062] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1357.802018][T16073] loop2: detected capacity change from 0 to 512 [ 1357.810151][T16073] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1357.810171][T16073] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1357.821052][T16073] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1357.821293][T16073] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1357.821326][T16073] System zones: 0-2, 18-18, 34-35 [ 1357.821953][T16073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.826346][T16076] loop4: detected capacity change from 0 to 512 [ 1357.873728][T15502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.913433][T16076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1357.913548][T16076] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1357.915952][T16076] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.23712: corrupted inode contents [ 1357.971237][T16076] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.23712: mark_inode_dirty error [ 1357.971590][T16076] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.23712: corrupted inode contents [ 1357.971705][T16076] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.23712: mark_inode_dirty error [ 1357.987086][T16087] loop8: detected capacity change from 0 to 512 [ 1357.999960][T16087] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1358.000026][T16087] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1358.012419][T16087] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1358.012659][T16087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1358.012693][T16087] System zones: 0-2, 18-18, 34-35 [ 1358.013220][T16087] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.025216][T16092] syz.2.23718: attempt to access beyond end of device [ 1358.025216][T16092] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1358.033989][T15146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.128900][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.193892][T16110] loop9: detected capacity change from 0 to 512 [ 1358.201878][T16110] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1358.201961][T16110] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1358.202578][T16110] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1358.202802][T16110] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1358.202832][T16110] System zones: 0-2, 18-18, 34-35 [ 1358.203347][T16110] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.233808][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.291344][T16117] FAULT_INJECTION: forcing a failure. [ 1358.291344][T16117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.291373][T16117] CPU: 0 UID: 0 PID: 16117 Comm: syz.4.23729 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1358.291405][T16117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1358.291419][T16117] Call Trace: [ 1358.291427][T16117] [ 1358.291436][T16117] __dump_stack+0x1d/0x30 [ 1358.291568][T16117] dump_stack_lvl+0xe8/0x140 [ 1358.291591][T16117] dump_stack+0x15/0x1b [ 1358.291611][T16117] should_fail_ex+0x265/0x280 [ 1358.291633][T16117] should_fail+0xb/0x20 [ 1358.291649][T16117] should_fail_usercopy+0x1a/0x20 [ 1358.291804][T16117] _copy_from_user+0x1c/0xb0 [ 1358.291828][T16117] __sys_bind+0x106/0x2a0 [ 1358.291866][T16117] __x64_sys_bind+0x3f/0x50 [ 1358.291954][T16117] x64_sys_call+0x2086/0x2fb0 [ 1358.291980][T16117] do_syscall_64+0xd2/0x200 [ 1358.292006][T16117] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1358.292093][T16117] ? clear_bhb_loop+0x40/0x90 [ 1358.292113][T16117] ? clear_bhb_loop+0x40/0x90 [ 1358.292270][T16117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.292295][T16117] RIP: 0033:0x7f17f18ce929 [ 1358.292314][T16117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.292335][T16117] RSP: 002b:00007f17eff37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1358.292359][T16117] RAX: ffffffffffffffda RBX: 00007f17f1af5fa0 RCX: 00007f17f18ce929 [ 1358.292375][T16117] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000005 [ 1358.292391][T16117] RBP: 00007f17eff37090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.292420][T16117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.292434][T16117] R13: 0000000000000000 R14: 00007f17f1af5fa0 R15: 00007ffc6b0a5e48 [ 1358.292455][T16117] [ 1358.342217][T16121] loop4: detected capacity change from 0 to 512 [ 1358.373341][T16123] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1358.422302][T16121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.575117][T16134] loop9: detected capacity change from 0 to 2048 [ 1358.584663][T16121] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.601841][T16121] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.23731: corrupted inode contents [ 1358.615530][T16121] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.23731: mark_inode_dirty error [ 1358.627548][T16121] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.23731: corrupted inode contents [ 1358.640968][T16121] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.23731: mark_inode_dirty error [ 1358.678252][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.696146][T16136] __nla_validate_parse: 11 callbacks suppressed [ 1358.696240][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23734'. [ 1358.713510][T16143] loop9: detected capacity change from 0 to 512 [ 1358.739098][T16143] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1358.748275][T16143] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1358.762932][T16145] syz.4.23736: attempt to access beyond end of device [ 1358.762932][T16145] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1358.777351][T16143] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1358.797568][T16143] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1358.823994][T16143] System zones: 0-2, 18-18, 34-35 [ 1358.844276][T16143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.891716][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.903059][T16160] netlink: 40 bytes leftover after parsing attributes in process `syz.8.23745'. [ 1358.951594][T16165] FAULT_INJECTION: forcing a failure. [ 1358.951594][T16165] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.964318][T16165] CPU: 0 UID: 0 PID: 16165 Comm: syz.9.23744 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1358.964347][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1358.964359][T16165] Call Trace: [ 1358.964367][T16165] [ 1358.964377][T16165] __dump_stack+0x1d/0x30 [ 1358.964402][T16165] dump_stack_lvl+0xe8/0x140 [ 1358.964425][T16165] dump_stack+0x15/0x1b [ 1358.964444][T16165] should_fail_ex+0x265/0x280 [ 1358.964468][T16165] should_failslab+0x8c/0xb0 [ 1358.964495][T16165] kmem_cache_alloc_noprof+0x50/0x310 [ 1358.964526][T16165] ? vm_area_alloc+0x2c/0xb0 [ 1358.964554][T16165] vm_area_alloc+0x2c/0xb0 [ 1358.964580][T16165] mmap_region+0xa3a/0x1560 [ 1358.964629][T16165] do_mmap+0x9b3/0xbe0 [ 1358.964667][T16165] __se_sys_remap_file_pages+0x55e/0x600 [ 1358.964697][T16165] ? fput+0x8f/0xc0 [ 1358.964730][T16165] __x64_sys_remap_file_pages+0x67/0x80 [ 1358.964753][T16165] x64_sys_call+0x2c64/0x2fb0 [ 1358.964777][T16165] do_syscall_64+0xd2/0x200 [ 1358.964802][T16165] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1358.964832][T16165] ? clear_bhb_loop+0x40/0x90 [ 1358.964856][T16165] ? clear_bhb_loop+0x40/0x90 [ 1358.964892][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.964913][T16165] RIP: 0033:0x7f1e5360e929 [ 1358.964928][T16165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.964945][T16165] RSP: 002b:00007f1e51c77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1358.964964][T16165] RAX: ffffffffffffffda RBX: 00007f1e53835fa0 RCX: 00007f1e5360e929 [ 1358.964979][T16165] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 1358.964994][T16165] RBP: 00007f1e51c77090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.965008][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.965023][T16165] R13: 0000000000000000 R14: 00007f1e53835fa0 R15: 00007fff6bc9d758 [ 1358.965045][T16165] [ 1359.273648][T16175] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1359.281118][T16175] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1359.282420][T16176] loop9: detected capacity change from 0 to 2048 [ 1359.331823][T16178] syz.2.23751: attempt to access beyond end of device [ 1359.331823][T16178] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1359.394494][T16184] loop8: detected capacity change from 0 to 512 [ 1359.405346][T16184] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1359.414613][T16184] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1359.424291][T16192] loop9: detected capacity change from 0 to 512 [ 1359.433705][T16184] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1359.443754][T16192] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1359.444344][T16184] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1359.462874][T16184] System zones: 0-2, 18-18, 34-35 [ 1359.468678][T16184] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1359.496150][T16192] EXT4-fs (loop9): 1 truncate cleaned up [ 1359.503278][T16192] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1359.529445][T16202] FAULT_INJECTION: forcing a failure. [ 1359.529445][T16202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.542729][T16202] CPU: 0 UID: 0 PID: 16202 Comm: syz.8.23760 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1359.542761][T16202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1359.542775][T16202] Call Trace: [ 1359.542783][T16202] [ 1359.542793][T16202] __dump_stack+0x1d/0x30 [ 1359.542819][T16202] dump_stack_lvl+0xe8/0x140 [ 1359.542842][T16202] dump_stack+0x15/0x1b [ 1359.542862][T16202] should_fail_ex+0x265/0x280 [ 1359.542926][T16202] should_fail+0xb/0x20 [ 1359.542946][T16202] should_fail_usercopy+0x1a/0x20 [ 1359.543033][T16202] _copy_from_user+0x1c/0xb0 [ 1359.543060][T16202] ___sys_sendmsg+0xc1/0x1d0 [ 1359.543122][T16202] __x64_sys_sendmsg+0xd4/0x160 [ 1359.543150][T16202] x64_sys_call+0x2999/0x2fb0 [ 1359.543175][T16202] do_syscall_64+0xd2/0x200 [ 1359.543202][T16202] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1359.543321][T16202] ? clear_bhb_loop+0x40/0x90 [ 1359.543343][T16202] ? clear_bhb_loop+0x40/0x90 [ 1359.543369][T16202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.543393][T16202] RIP: 0033:0x7f70ae05e929 [ 1359.543408][T16202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1359.543431][T16202] RSP: 002b:00007f70ac6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.543511][T16202] RAX: ffffffffffffffda RBX: 00007f70ae285fa0 RCX: 00007f70ae05e929 [ 1359.543544][T16202] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1359.543583][T16202] RBP: 00007f70ac6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.543595][T16202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.543607][T16202] R13: 0000000000000000 R14: 00007f70ae285fa0 R15: 00007ffc9372d248 [ 1359.543638][T16202] [ 1359.756460][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23764'. [ 1359.765674][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23764'. [ 1359.790682][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23763'. [ 1359.805377][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23764'. [ 1359.815944][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 1359.815961][ T29] audit: type=1400 audit(1749364445.328:203897): avc: denied { setattr } for pid=16191 comm="syz.9.23758" name="blkio.bfq.io_queued_recursive" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1359.861381][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23764'. [ 1359.888449][ T29] audit: type=1326 audit(1749364445.398:203898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1359.892833][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23765'. [ 1359.946396][ T29] audit: type=1326 audit(1749364445.398:203899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1359.970851][ T29] audit: type=1326 audit(1749364445.408:203900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1359.994634][ T29] audit: type=1326 audit(1749364445.408:203901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1360.018974][ T29] audit: type=1326 audit(1749364445.448:203902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1360.021536][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23765'. [ 1360.042791][ T29] audit: type=1326 audit(1749364445.448:203903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1360.076281][ T29] audit: type=1326 audit(1749364445.448:203904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1360.100773][ T29] audit: type=1326 audit(1749364445.448:203905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1360.125061][ T29] audit: type=1326 audit(1749364445.448:203906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16217 comm="syz.4.23767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17f18ce929 code=0x7ffc0000 [ 1360.137721][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23764'. [ 1360.158815][T16226] loop9: detected capacity change from 0 to 512 [ 1360.167107][T16226] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1360.179292][T16226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1360.191657][T16226] System zones: 1-12 [ 1360.222521][T16226] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1360.315464][T16226] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #11: comm syz.9.23766: corrupted inode contents [ 1360.355728][T16236] loop4: detected capacity change from 0 to 512 [ 1360.380274][T16236] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1360.390190][T16236] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1360.403396][T16226] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #11: comm syz.9.23766: mark_inode_dirty error [ 1360.409266][T16236] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1360.428575][T16236] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1360.430880][T16226] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.23766: invalid indirect mapped block 1 (level 1) [ 1360.436594][T16236] System zones: 0-2, 18-18, 34-35 [ 1360.484953][T16226] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #11: comm syz.9.23766: corrupted inode contents [ 1360.518293][T16226] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1360.539104][T16226] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #11: comm syz.9.23766: corrupted inode contents [ 1360.555486][T16226] EXT4-fs error (device loop9): ext4_truncate:4597: inode #11: comm syz.9.23766: mark_inode_dirty error [ 1360.566981][T16226] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1360.583123][T16226] EXT4-fs (loop9): 1 truncate cleaned up [ 1360.755990][T16256] tmpfs: Bad value for 'mpol' [ 1360.822673][T16260] loop2: detected capacity change from 0 to 512 [ 1360.829786][T16260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1360.840690][T16260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 1360.849370][T16260] System zones: 1-12 [ 1360.853820][T16260] EXT4-fs (loop2): 1 truncate cleaned up [ 1360.860978][T16260] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 1360.873512][T16260] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 1360.907373][T16267] loop1: detected capacity change from 0 to 512 [ 1360.907909][T16269] loop2: detected capacity change from 0 to 128 [ 1360.920725][T16267] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1360.929840][T16267] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1360.940495][T16267] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1360.950426][T16267] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1360.959189][T16267] System zones: 0-2, 18-18, 34-35 [ 1361.015869][T16279] program syz.1.23787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1361.016046][T16280] loop2: detected capacity change from 0 to 512 [ 1361.040098][T16280] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.047621][T16284] loop1: detected capacity change from 0 to 512 [ 1361.055370][T16280] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.23788: corrupted inode contents [ 1361.068826][T16280] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.23788: mark_inode_dirty error [ 1361.080589][T16280] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.23788: corrupted inode contents [ 1361.090210][T16284] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.092964][T16280] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.23788: mark_inode_dirty error [ 1361.124712][T16284] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23789: corrupted inode contents [ 1361.137951][T16284] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.23789: mark_inode_dirty error [ 1361.151219][T16284] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23789: corrupted inode contents [ 1361.164359][T16284] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.23789: mark_inode_dirty error [ 1362.375417][T16323] loop1: detected capacity change from 0 to 512 [ 1362.395179][T16323] EXT4-fs mount: 14 callbacks suppressed [ 1362.395198][T16323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.421238][T16323] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.435820][T16323] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23800: corrupted inode contents [ 1362.450519][T16323] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.23800: mark_inode_dirty error [ 1362.462315][T16323] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23800: corrupted inode contents [ 1362.475488][T16323] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.23800: mark_inode_dirty error [ 1363.421761][T14983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.466046][T16330] loop9: detected capacity change from 0 to 512 [ 1363.472939][T16330] EXT4-fs: Ignoring removed bh option [ 1363.480030][T16330] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1363.489218][T16330] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1363.503002][T16330] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1363.514150][T16330] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1363.522704][T16330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.633538][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.647722][T16341] loop8: detected capacity change from 0 to 512 [ 1363.654432][T16341] EXT4-fs: Ignoring removed bh option [ 1363.662143][T16341] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1363.671302][T16341] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1363.679760][T16348] loop2: detected capacity change from 0 to 2048 [ 1363.684754][T16341] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1363.751889][T16354] loop4: detected capacity change from 0 to 512 [ 1363.759349][T16354] EXT4-fs: Ignoring removed bh option [ 1363.776523][T16341] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1363.785235][T16341] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.800416][T16354] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1363.810146][T16354] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1363.841112][T16358] batadv1: entered promiscuous mode [ 1363.850617][T16354] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1363.863587][T16354] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1363.873478][T16354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1363.945823][T16364] SET target dimension over the limit! [ 1363.995987][T16366] loop9: detected capacity change from 0 to 2048 [ 1364.338920][T15146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.371829][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.430083][T16374] loop8: detected capacity change from 0 to 2048 [ 1364.474303][T16384] loop4: detected capacity change from 0 to 2048 [ 1364.500471][T16374] FAULT_INJECTION: forcing a failure. [ 1364.500471][T16374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.500505][T16374] CPU: 1 UID: 0 PID: 16374 Comm: syz.8.23810 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1364.500643][T16374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1364.500657][T16374] Call Trace: [ 1364.500664][T16374] [ 1364.500691][T16374] __dump_stack+0x1d/0x30 [ 1364.500722][T16374] dump_stack_lvl+0xe8/0x140 [ 1364.500744][T16374] dump_stack+0x15/0x1b [ 1364.500759][T16374] should_fail_ex+0x265/0x280 [ 1364.500827][T16374] should_fail+0xb/0x20 [ 1364.500924][T16374] should_fail_usercopy+0x1a/0x20 [ 1364.500945][T16374] _copy_from_user+0x1c/0xb0 [ 1364.500968][T16374] ___sys_sendmsg+0xc1/0x1d0 [ 1364.501033][T16374] __x64_sys_sendmsg+0xd4/0x160 [ 1364.501091][T16374] x64_sys_call+0x2999/0x2fb0 [ 1364.501114][T16374] do_syscall_64+0xd2/0x200 [ 1364.501136][T16374] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1364.501163][T16374] ? clear_bhb_loop+0x40/0x90 [ 1364.501276][T16374] ? clear_bhb_loop+0x40/0x90 [ 1364.501306][T16374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.501367][T16374] RIP: 0033:0x7f70ae05e929 [ 1364.501383][T16374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.501402][T16374] RSP: 002b:00007f70ac6a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1364.501423][T16374] RAX: ffffffffffffffda RBX: 00007f70ae286080 RCX: 00007f70ae05e929 [ 1364.501437][T16374] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 1364.501450][T16374] RBP: 00007f70ac6a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.501463][T16374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.501512][T16374] R13: 0000000000000000 R14: 00007f70ae286080 R15: 00007ffc9372d248 [ 1364.501531][T16374] [ 1364.739789][T16397] FAULT_INJECTION: forcing a failure. [ 1364.739789][T16397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.753011][T16397] CPU: 0 UID: 0 PID: 16397 Comm: syz.9.23819 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1364.753095][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1364.753105][T16397] Call Trace: [ 1364.753110][T16397] [ 1364.753116][T16397] __dump_stack+0x1d/0x30 [ 1364.753150][T16397] dump_stack_lvl+0xe8/0x140 [ 1364.753169][T16397] dump_stack+0x15/0x1b [ 1364.753184][T16397] should_fail_ex+0x265/0x280 [ 1364.753239][T16397] should_fail+0xb/0x20 [ 1364.753327][T16397] should_fail_usercopy+0x1a/0x20 [ 1364.753349][T16397] _copy_from_user+0x1c/0xb0 [ 1364.753373][T16397] tipc_setsockopt+0x388/0x620 [ 1364.753398][T16397] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1364.753424][T16397] __sys_setsockopt+0x184/0x200 [ 1364.753445][T16397] __x64_sys_setsockopt+0x64/0x80 [ 1364.753464][T16397] x64_sys_call+0x2bd5/0x2fb0 [ 1364.753511][T16397] do_syscall_64+0xd2/0x200 [ 1364.753633][T16397] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1364.753657][T16397] ? clear_bhb_loop+0x40/0x90 [ 1364.753677][T16397] ? clear_bhb_loop+0x40/0x90 [ 1364.753700][T16397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.753734][T16397] RIP: 0033:0x7f1e5360e929 [ 1364.753753][T16397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.753790][T16397] RSP: 002b:00007f1e51c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1364.753811][T16397] RAX: ffffffffffffffda RBX: 00007f1e53835fa0 RCX: 00007f1e5360e929 [ 1364.753823][T16397] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 1364.753836][T16397] RBP: 00007f1e51c77090 R08: 0000000000000010 R09: 0000000000000000 [ 1364.753847][T16397] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1364.753860][T16397] R13: 0000000000000000 R14: 00007f1e53835fa0 R15: 00007fff6bc9d758 [ 1364.753881][T16397] [ 1364.836287][T16401] loop9: detected capacity change from 0 to 512 [ 1364.865315][ T29] kauditd_printk_skb: 922 callbacks suppressed [ 1364.865333][ T29] audit: type=1326 audit(1749364450.380:204829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.1.23822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1364.878664][T16401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1364.894254][ T29] audit: type=1326 audit(1749364450.380:204830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.1.23822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1364.894365][ T29] audit: type=1326 audit(1749364450.380:204831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.1.23822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1364.905093][T16401] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1364.911465][ T29] audit: type=1326 audit(1749364450.380:204832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.1.23822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1364.953104][T16406] loop1: detected capacity change from 0 to 2048 [ 1364.953774][ T29] audit: type=1326 audit(1749364450.380:204833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.1.23822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1364.953804][ T29] audit: type=1326 audit(1749364450.380:204834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.1.23822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1365.135622][ T29] audit: type=1326 audit(1749364450.380:204835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.1.23822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1365.135658][ T29] audit: type=1326 audit(1749364450.380:204836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.1.23822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1365.318531][ T29] audit: type=1400 audit(1749364450.490:204837): avc: denied { read write } for pid=16400 comm="syz.9.23821" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1365.318570][ T29] audit: type=1400 audit(1749364450.490:204838): avc: denied { open } for pid=16400 comm="syz.9.23821" path="/80/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1365.450604][T16427] loop2: detected capacity change from 0 to 512 [ 1365.466341][T16427] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1365.475447][T16427] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1365.493231][T16433] loop4: detected capacity change from 0 to 2048 [ 1365.495959][T16427] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1365.500424][T16429] FAULT_INJECTION: forcing a failure. [ 1365.500424][T16429] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.511428][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.521486][T16429] CPU: 1 UID: 0 PID: 16429 Comm: syz.8.23830 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1365.521517][T16429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1365.521531][T16429] Call Trace: [ 1365.521539][T16429] [ 1365.521549][T16429] __dump_stack+0x1d/0x30 [ 1365.521571][T16429] dump_stack_lvl+0xe8/0x140 [ 1365.521607][T16429] dump_stack+0x15/0x1b [ 1365.521624][T16429] should_fail_ex+0x265/0x280 [ 1365.521646][T16429] should_failslab+0x8c/0xb0 [ 1365.521740][T16429] __kmalloc_noprof+0xa5/0x3e0 [ 1365.521768][T16429] ? tracepoint_probe_unregister+0x168/0x650 [ 1365.521859][T16429] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 1365.521887][T16429] tracepoint_probe_unregister+0x168/0x650 [ 1365.521986][T16429] ? __pfx_bpf_link_release+0x10/0x10 [ 1365.522018][T16429] bpf_probe_unregister+0x37/0x50 [ 1365.522069][T16429] bpf_raw_tp_link_release+0x27/0x50 [ 1365.522094][T16429] bpf_link_free+0xae/0x340 [ 1365.522125][T16429] ? __pfx_bpf_link_release+0x10/0x10 [ 1365.522234][T16429] bpf_link_release+0x45/0x60 [ 1365.522267][T16429] __fput+0x298/0x650 [ 1365.522297][T16429] ____fput+0x1c/0x30 [ 1365.522333][T16429] task_work_run+0x12e/0x1a0 [ 1365.522368][T16429] exit_to_user_mode_loop+0xe4/0x100 [ 1365.522393][T16429] do_syscall_64+0x1d6/0x200 [ 1365.522416][T16429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1365.522457][T16429] ? clear_bhb_loop+0x40/0x90 [ 1365.522549][T16429] ? clear_bhb_loop+0x40/0x90 [ 1365.522571][T16429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.522594][T16429] RIP: 0033:0x7f70ae05e929 [ 1365.522611][T16429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.522630][T16429] RSP: 002b:00007f70ac6c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1365.522651][T16429] RAX: 0000000000000000 RBX: 00007f70ae285fa0 RCX: 00007f70ae05e929 [ 1365.522724][T16429] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1365.522737][T16429] RBP: 00007f70ac6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.522750][T16429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.522763][T16429] R13: 0000000000000000 R14: 00007f70ae285fa0 R15: 00007ffc9372d248 [ 1365.522782][T16429] [ 1365.523135][T16427] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1365.665265][T16439] __nla_validate_parse: 5 callbacks suppressed [ 1365.665282][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23833'. [ 1365.666109][T16427] System zones: 0-2, 18-18, 34-35 [ 1365.787730][T16427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.800806][T16439] hsr_slave_0: left promiscuous mode [ 1365.809450][T16439] hsr_slave_1: left promiscuous mode [ 1365.850183][T15502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.864595][T16449] loop1: detected capacity change from 0 to 512 [ 1365.894730][T16449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1365.909683][T16449] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1365.923867][T16449] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23835: corrupted inode contents [ 1365.924104][T16458] loop8: detected capacity change from 0 to 512 [ 1365.942427][T16449] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.23835: mark_inode_dirty error [ 1365.954067][T16459] loop9: detected capacity change from 0 to 128 [ 1365.961000][T16455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23837'. [ 1365.961964][T16458] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1365.972443][T16455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23837'. [ 1365.980183][T16458] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1365.981516][T16449] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23835: corrupted inode contents [ 1365.992031][T16459] EXT4-fs warning (device loop9): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1366.000498][T16449] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.23835: mark_inode_dirty error [ 1366.011063][T16459] EXT4-fs (loop9): Couldn't mount because of unsupported optional features (fffc1829) [ 1366.056355][T16458] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1366.067114][T16458] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1366.076175][T16458] System zones: 0-2, 18-18, 34-35 [ 1366.084759][T16458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.115961][T14983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.125151][T16459] loop9: detected capacity change from 0 to 512 [ 1366.133400][T16459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1366.164602][T15146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.181405][T16459] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1366.211801][T16459] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1366.341322][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.367651][T16472] loop1: detected capacity change from 0 to 8192 [ 1366.423807][T16472] loop1: p1 p2 p3 [ 1366.455087][T16487] FAULT_INJECTION: forcing a failure. [ 1366.455087][T16487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.459528][T16488] netlink: 28 bytes leftover after parsing attributes in process `syz.8.23847'. [ 1366.468230][T16487] CPU: 0 UID: 0 PID: 16487 Comm: syz.9.23848 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1366.468316][T16487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1366.468328][T16487] Call Trace: [ 1366.468336][T16487] [ 1366.468345][T16487] __dump_stack+0x1d/0x30 [ 1366.468373][T16487] dump_stack_lvl+0xe8/0x140 [ 1366.468392][T16487] dump_stack+0x15/0x1b [ 1366.468409][T16487] should_fail_ex+0x265/0x280 [ 1366.468465][T16487] should_fail+0xb/0x20 [ 1366.468483][T16487] should_fail_usercopy+0x1a/0x20 [ 1366.468505][T16487] _copy_from_user+0x1c/0xb0 [ 1366.468530][T16487] do_arpt_set_ctl+0x3aa/0x9a0 [ 1366.468620][T16487] ? _raw_spin_unlock_bh+0x36/0x40 [ 1366.468710][T16487] ? tcp_release_cb+0xf1/0x370 [ 1366.468730][T16487] ? _raw_spin_unlock_bh+0x36/0x40 [ 1366.468761][T16487] nf_setsockopt+0x199/0x1b0 [ 1366.468788][T16487] ip_setsockopt+0x102/0x110 [ 1366.468833][T16487] tcp_setsockopt+0x95/0xb0 [ 1366.468856][T16487] sock_common_setsockopt+0x69/0x80 [ 1366.468897][T16487] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1366.468984][T16487] __sys_setsockopt+0x184/0x200 [ 1366.469078][T16487] __x64_sys_setsockopt+0x64/0x80 [ 1366.469100][T16487] x64_sys_call+0x2bd5/0x2fb0 [ 1366.469122][T16487] do_syscall_64+0xd2/0x200 [ 1366.469180][T16487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1366.469226][T16487] ? clear_bhb_loop+0x40/0x90 [ 1366.469248][T16487] ? clear_bhb_loop+0x40/0x90 [ 1366.469303][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.469325][T16487] RIP: 0033:0x7f1e5360e929 [ 1366.469420][T16487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1366.469439][T16487] RSP: 002b:00007f1e51c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1366.469521][T16487] RAX: ffffffffffffffda RBX: 00007f1e53835fa0 RCX: 00007f1e5360e929 [ 1366.469546][T16487] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1366.469559][T16487] RBP: 00007f1e51c77090 R08: 0000000000000438 R09: 0000000000000000 [ 1366.469573][T16487] R10: 0000200000000f80 R11: 0000000000000246 R12: 0000000000000001 [ 1366.469586][T16487] R13: 0000000000000000 R14: 00007f1e53835fa0 R15: 00007fff6bc9d758 [ 1366.469605][T16487] [ 1366.703926][T16488] netlink: 7 bytes leftover after parsing attributes in process `syz.8.23847'. [ 1366.788722][T16497] loop8: detected capacity change from 0 to 512 [ 1366.806790][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23850'. [ 1366.827856][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23849'. [ 1366.858033][T16502] loop1: detected capacity change from 0 to 512 [ 1366.864533][T16497] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1366.873755][T16497] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1366.883115][T16502] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1366.903540][T16497] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1366.920284][T16505] loop4: detected capacity change from 0 to 512 [ 1366.928078][T16505] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1366.937345][T16505] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1366.945876][T16497] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1366.957709][T16502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 1366.958714][T16510] SELinux: policydb version 0 does not match my version range 15-34 [ 1366.966675][T16497] System zones: 0-2, 18-18, 34-35 [ 1366.974066][T16510] SELinux: failed to load policy [ 1366.985336][T16505] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1366.994858][T16505] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1366.996545][T16502] System zones: 1-12 [ 1367.015474][T16505] System zones: 0-2, 18-18, 34-35 [ 1367.017454][T16497] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.021116][T16505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.048433][T16502] EXT4-fs (loop1): 1 truncate cleaned up [ 1367.054488][T16502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.081382][T15146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.122656][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23853'. [ 1367.133442][T16502] EXT4-fs warning (device loop1): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 1367.148906][T16502] EXT4-fs warning (device loop1): ext4_group_extend:1891: can't read last block, resize aborted [ 1367.169526][T16505] validate_nla: 4 callbacks suppressed [ 1367.169541][T16505] netlink: 'syz.4.23853': attribute type 9 has an invalid length. [ 1367.182928][T16505] netlink: 'syz.4.23853': attribute type 6 has an invalid length. [ 1367.184846][T16525] loop8: detected capacity change from 0 to 2048 [ 1367.209657][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.224455][T14983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.288987][T16537] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1367.295856][T16535] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1367.360446][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23863'. [ 1367.473404][T16549] loop9: detected capacity change from 0 to 512 [ 1367.473904][T16551] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1367.501237][T16549] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1367.510924][T16549] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1367.555653][T16554] loop1: detected capacity change from 0 to 128 [ 1367.575865][T16549] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1367.633222][T16549] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1367.720994][T16559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23870'. [ 1367.734161][T16549] System zones: 0-2, 18-18, 34-35 [ 1367.756019][T16561] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1367.762734][T16561] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1367.770395][T16561] vhci_hcd vhci_hcd.0: Device attached [ 1367.780112][T16561] loop4: detected capacity change from 0 to 512 [ 1367.786710][T16561] EXT4-fs: Ignoring removed bh option [ 1367.793353][T16549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.811029][T16561] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1367.820145][T16561] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1367.829375][T16551] loop8: detected capacity change from 0 to 2048 [ 1367.859161][T16561] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1367.868749][T16561] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1367.877661][T16561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.894641][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.955877][T16567] FAULT_INJECTION: forcing a failure. [ 1367.955877][T16567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.969044][T16567] CPU: 0 UID: 0 PID: 16567 Comm: syz.9.23871 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1367.969076][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1367.969090][T16567] Call Trace: [ 1367.969127][T16567] [ 1367.969137][T16567] __dump_stack+0x1d/0x30 [ 1367.969161][T16567] dump_stack_lvl+0xe8/0x140 [ 1367.969182][T16567] dump_stack+0x15/0x1b [ 1367.969207][T16567] should_fail_ex+0x265/0x280 [ 1367.969308][T16567] should_fail+0xb/0x20 [ 1367.969367][T16567] should_fail_usercopy+0x1a/0x20 [ 1367.969419][T16567] _copy_to_user+0x20/0xa0 [ 1367.969447][T16567] simple_read_from_buffer+0xb5/0x130 [ 1367.969478][T16567] proc_fail_nth_read+0x100/0x140 [ 1367.969500][T16567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1367.969557][T16567] vfs_read+0x1a0/0x6f0 [ 1367.969580][T16567] ? __rcu_read_unlock+0x4f/0x70 [ 1367.969606][T16567] ? __fget_files+0x184/0x1c0 [ 1367.969638][T16567] ksys_read+0xda/0x1a0 [ 1367.969659][T16567] __x64_sys_read+0x40/0x50 [ 1367.969682][T16567] x64_sys_call+0x2d77/0x2fb0 [ 1367.969742][T16567] do_syscall_64+0xd2/0x200 [ 1367.969762][T16567] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1367.969854][T16567] ? clear_bhb_loop+0x40/0x90 [ 1367.969877][T16567] ? clear_bhb_loop+0x40/0x90 [ 1367.969903][T16567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.969928][T16567] RIP: 0033:0x7f1e5360d33c [ 1367.969946][T16567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1367.970007][T16567] RSP: 002b:00007f1e51c77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1367.970037][T16567] RAX: ffffffffffffffda RBX: 00007f1e53835fa0 RCX: 00007f1e5360d33c [ 1367.970053][T16567] RDX: 000000000000000f RSI: 00007f1e51c770a0 RDI: 0000000000000004 [ 1367.970068][T16567] RBP: 00007f1e51c77090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.970083][T16567] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1367.970096][T16567] R13: 0000000000000000 R14: 00007f1e53835fa0 R15: 00007fff6bc9d758 [ 1367.970115][T16567] [ 1368.290391][T16562] vhci_hcd: connection closed [ 1368.303978][T16729] vhci_hcd: stop threads [ 1368.313079][T16729] vhci_hcd: release socket [ 1368.318144][T16729] vhci_hcd: disconnect device [ 1368.387639][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.387639][T16554] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 1368.426209][T16576] sd 0:0:1:0: device reset [ 1368.440986][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.440986][T16554] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1368.485102][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.485102][T16554] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1368.507906][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.507906][T16554] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1368.536383][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.536383][T16554] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1368.571371][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.571371][T16554] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1368.600827][T16582] FAULT_INJECTION: forcing a failure. [ 1368.600827][T16582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.614009][T16582] CPU: 1 UID: 0 PID: 16582 Comm: syz.9.23876 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1368.614040][T16582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1368.614054][T16582] Call Trace: [ 1368.614062][T16582] [ 1368.614112][T16582] __dump_stack+0x1d/0x30 [ 1368.614135][T16582] dump_stack_lvl+0xe8/0x140 [ 1368.614157][T16582] dump_stack+0x15/0x1b [ 1368.614176][T16582] should_fail_ex+0x265/0x280 [ 1368.614202][T16582] should_fail+0xb/0x20 [ 1368.614218][T16582] should_fail_usercopy+0x1a/0x20 [ 1368.614250][T16582] _copy_from_user+0x1c/0xb0 [ 1368.614279][T16582] ___sys_sendmsg+0xc1/0x1d0 [ 1368.614349][T16582] __x64_sys_sendmsg+0xd4/0x160 [ 1368.614378][T16582] x64_sys_call+0x2999/0x2fb0 [ 1368.614401][T16582] do_syscall_64+0xd2/0x200 [ 1368.614422][T16582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1368.614451][T16582] ? clear_bhb_loop+0x40/0x90 [ 1368.614473][T16582] ? clear_bhb_loop+0x40/0x90 [ 1368.614578][T16582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.614601][T16582] RIP: 0033:0x7f1e5360e929 [ 1368.614619][T16582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.614641][T16582] RSP: 002b:00007f1e51c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.614744][T16582] RAX: ffffffffffffffda RBX: 00007f1e53835fa0 RCX: 00007f1e5360e929 [ 1368.614760][T16582] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1368.614776][T16582] RBP: 00007f1e51c77090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.614789][T16582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.614805][T16582] R13: 0000000000000000 R14: 00007f1e53835fa0 R15: 00007fff6bc9d758 [ 1368.614826][T16582] [ 1368.794617][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.794617][T16554] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1368.812850][T16584] loop8: detected capacity change from 0 to 512 [ 1368.838005][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.838005][T16554] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1368.874724][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.874724][T16554] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1368.889715][T16586] loop9: detected capacity change from 0 to 512 [ 1368.900181][T16584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1368.935520][T16584] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.957015][T16554] syz.1.23870: attempt to access beyond end of device [ 1368.957015][T16554] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1368.982416][T16584] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.23877: corrupted inode contents [ 1369.009204][T16586] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1369.032371][T16584] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.23877: mark_inode_dirty error [ 1369.057945][T16586] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1369.094173][T16584] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.23877: corrupted inode contents [ 1369.121326][T16593] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1369.121820][T16586] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.23878: corrupted inode contents [ 1369.153425][T16584] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.23877: mark_inode_dirty error [ 1369.186161][T16586] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.23878: mark_inode_dirty error [ 1369.198681][T15146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.207704][T16586] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.23878: corrupted inode contents [ 1369.222552][T16586] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.23878: mark_inode_dirty error [ 1369.249198][T16597] loop1: detected capacity change from 0 to 512 [ 1369.271937][T16597] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1369.281632][T16597] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1369.295794][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.305569][T16597] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1369.324303][T16597] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1369.332485][T16597] System zones: 0-2, 18-18, 34-35 [ 1369.343145][T16597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.403265][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.413001][T16610] FAULT_INJECTION: forcing a failure. [ 1369.413001][T16610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.426721][T16610] CPU: 1 UID: 0 PID: 16610 Comm: syz.9.23883 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1369.426751][T16610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1369.426763][T16610] Call Trace: [ 1369.426769][T16610] [ 1369.426777][T16610] __dump_stack+0x1d/0x30 [ 1369.426826][T16610] dump_stack_lvl+0xe8/0x140 [ 1369.426844][T16610] dump_stack+0x15/0x1b [ 1369.426861][T16610] should_fail_ex+0x265/0x280 [ 1369.426933][T16610] should_fail+0xb/0x20 [ 1369.426952][T16610] should_fail_usercopy+0x1a/0x20 [ 1369.427046][T16610] strncpy_from_user+0x25/0x230 [ 1369.427077][T16610] path_getxattrat+0xab/0x2a0 [ 1369.427111][T16610] __x64_sys_fgetxattr+0x59/0x70 [ 1369.427135][T16610] x64_sys_call+0x2a12/0x2fb0 [ 1369.427203][T16610] do_syscall_64+0xd2/0x200 [ 1369.427225][T16610] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1369.427270][T16610] ? clear_bhb_loop+0x40/0x90 [ 1369.427364][T16610] ? clear_bhb_loop+0x40/0x90 [ 1369.427387][T16610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.427425][T16610] RIP: 0033:0x7f1e5360e929 [ 1369.427480][T16610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.427501][T16610] RSP: 002b:00007f1e51c77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 1369.427523][T16610] RAX: ffffffffffffffda RBX: 00007f1e53835fa0 RCX: 00007f1e5360e929 [ 1369.427537][T16610] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1369.427551][T16610] RBP: 00007f1e51c77090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.427565][T16610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.427579][T16610] R13: 0000000000000000 R14: 00007f1e53835fa0 R15: 00007fff6bc9d758 [ 1369.427609][T16610] [ 1369.617806][T14983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.699248][T16615] loop1: detected capacity change from 0 to 1024 [ 1369.709504][T16611] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1369.716933][T16611] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1369.738390][T16615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1369.767119][T16615] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1369.798212][T16615] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1369.832739][T16615] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.23886: lblock 2 mapped to illegal pblock 2 (length 1) [ 1369.869631][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 1369.869695][ T29] audit: type=1326 audit(1749364455.393:205065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.9.23887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5360e929 code=0x7ffc0000 [ 1369.900311][ T29] audit: type=1326 audit(1749364455.393:205066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.9.23887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5360e929 code=0x7ffc0000 [ 1369.942579][T16615] EXT4-fs (loop1): Remounting filesystem read-only [ 1369.949177][T16615] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1369.986452][T16615] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1370.013088][T16615] EXT4-fs (loop1): 1 orphan inode deleted [ 1370.034250][T16615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.054655][ T29] audit: type=1326 audit(1749364455.463:205067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.9.23887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5360e929 code=0x7ffc0000 [ 1370.054790][T16615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.088347][ T29] audit: type=1326 audit(1749364455.463:205068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.9.23887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5360e929 code=0x7ffc0000 [ 1370.091760][T16630] loop9: detected capacity change from 0 to 512 [ 1370.112530][ T29] audit: type=1326 audit(1749364455.463:205069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.9.23887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5360e929 code=0x7ffc0000 [ 1370.112587][ T29] audit: type=1326 audit(1749364455.463:205070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.9.23887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5360e929 code=0x7ffc0000 [ 1370.112644][ T29] audit: type=1326 audit(1749364455.463:205071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.9.23887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5360e929 code=0x7ffc0000 [ 1370.112678][ T29] audit: type=1326 audit(1749364455.463:205072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16616 comm="syz.9.23887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5360e929 code=0x7ffc0000 [ 1370.250563][T16630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1370.278558][T16630] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.292214][T16630] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.23891: corrupted inode contents [ 1370.306062][T16630] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.23891: mark_inode_dirty error [ 1370.322424][T16630] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.23891: corrupted inode contents [ 1370.335919][T16630] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.23891: mark_inode_dirty error [ 1370.367218][T16599] kexec: Could not allocate control_code_buffer [ 1370.402993][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.414995][T16640] FAULT_INJECTION: forcing a failure. [ 1370.414995][T16640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.428617][T16640] CPU: 1 UID: 0 PID: 16640 Comm: syz.4.23895 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1370.428692][T16640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1370.428700][T16640] Call Trace: [ 1370.428704][T16640] [ 1370.428710][T16640] __dump_stack+0x1d/0x30 [ 1370.428725][T16640] dump_stack_lvl+0xe8/0x140 [ 1370.428738][T16640] dump_stack+0x15/0x1b [ 1370.428749][T16640] should_fail_ex+0x265/0x280 [ 1370.428830][T16640] should_fail+0xb/0x20 [ 1370.428842][T16640] should_fail_usercopy+0x1a/0x20 [ 1370.428926][T16640] _copy_from_user+0x1c/0xb0 [ 1370.428970][T16640] ___sys_sendmsg+0xc1/0x1d0 [ 1370.428989][T16640] __x64_sys_sendmsg+0xd4/0x160 [ 1370.429077][T16640] x64_sys_call+0x2999/0x2fb0 [ 1370.429088][T16640] do_syscall_64+0xd2/0x200 [ 1370.429100][T16640] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1370.429113][T16640] ? clear_bhb_loop+0x40/0x90 [ 1370.429199][T16640] ? clear_bhb_loop+0x40/0x90 [ 1370.429211][T16640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.429221][T16640] RIP: 0033:0x7f17f18ce929 [ 1370.429230][T16640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1370.429240][T16640] RSP: 002b:00007f17eff37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1370.429325][T16640] RAX: ffffffffffffffda RBX: 00007f17f1af5fa0 RCX: 00007f17f18ce929 [ 1370.429331][T16640] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1370.429338][T16640] RBP: 00007f17eff37090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.429359][T16640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.429369][T16640] R13: 0000000000000000 R14: 00007f17f1af5fa0 R15: 00007ffc6b0a5e48 [ 1370.429385][T16640] [ 1370.669877][T16644] __nla_validate_parse: 4 callbacks suppressed [ 1370.669896][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23894'. [ 1370.797014][T16666] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1370.802084][T16668] loop8: detected capacity change from 0 to 512 [ 1370.835997][T16668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1370.866470][T16677] FAULT_INJECTION: forcing a failure. [ 1370.866470][T16677] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.871731][T16673] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1370.879424][T16677] CPU: 0 UID: 0 PID: 16677 Comm: syz.2.23906 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1370.879456][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1370.879468][T16677] Call Trace: [ 1370.879475][T16677] [ 1370.879522][T16677] __dump_stack+0x1d/0x30 [ 1370.879546][T16677] dump_stack_lvl+0xe8/0x140 [ 1370.879566][T16677] dump_stack+0x15/0x1b [ 1370.879584][T16677] should_fail_ex+0x265/0x280 [ 1370.879605][T16677] should_failslab+0x8c/0xb0 [ 1370.879629][T16677] kmem_cache_alloc_noprof+0x50/0x310 [ 1370.879679][T16677] ? audit_log_start+0x365/0x6c0 [ 1370.879743][T16677] audit_log_start+0x365/0x6c0 [ 1370.879791][T16677] audit_seccomp+0x48/0x100 [ 1370.879878][T16677] ? __seccomp_filter+0x68c/0x10d0 [ 1370.879902][T16677] __seccomp_filter+0x69d/0x10d0 [ 1370.879969][T16677] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1370.880092][T16677] ? vfs_write+0x75e/0x8e0 [ 1370.880113][T16677] ? __rcu_read_unlock+0x4f/0x70 [ 1370.880136][T16677] ? __fget_files+0x184/0x1c0 [ 1370.880212][T16677] __secure_computing+0x82/0x150 [ 1370.880283][T16677] syscall_trace_enter+0xcf/0x1e0 [ 1370.880370][T16677] do_syscall_64+0xac/0x200 [ 1370.880393][T16677] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1370.880419][T16677] ? clear_bhb_loop+0x40/0x90 [ 1370.880518][T16677] ? clear_bhb_loop+0x40/0x90 [ 1370.880540][T16677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.880562][T16677] RIP: 0033:0x7f458d63e929 [ 1370.880653][T16677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1370.880672][T16677] RSP: 002b:00007f458bca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000d [ 1370.880693][T16677] RAX: ffffffffffffffda RBX: 00007f458d865fa0 RCX: 00007f458d63e929 [ 1370.880707][T16677] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000019 [ 1370.880777][T16677] RBP: 00007f458bca7090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.880790][T16677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.880802][T16677] R13: 0000000000000000 R14: 00007f458d865fa0 R15: 00007ffc7fa8c238 [ 1370.880821][T16677] [ 1370.895175][T16668] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.961426][T16673] netlink: 72 bytes leftover after parsing attributes in process `syz.9.23905'. [ 1370.970260][T16668] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.23904: corrupted inode contents [ 1371.132913][T16668] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.23904: mark_inode_dirty error [ 1371.159777][T16668] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.23904: corrupted inode contents [ 1371.181259][T16668] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.23904: mark_inode_dirty error [ 1371.231799][T15146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.233684][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23909'. [ 1371.249176][T16692] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1371.287524][T16694] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1371.400933][T16710] netlink: 'syz.1.23917': attribute type 1 has an invalid length. [ 1371.410151][T16708] loop2: detected capacity change from 0 to 512 [ 1371.436300][T16712] loop4: detected capacity change from 0 to 512 [ 1371.450637][T16712] EXT4-fs: Ignoring removed nobh option [ 1371.480500][T16712] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.23918: corrupted inode contents [ 1371.500420][T16720] loop1: detected capacity change from 0 to 512 [ 1371.514454][T16712] EXT4-fs (loop4): Remounting filesystem read-only [ 1371.521902][T16712] EXT4-fs (loop4): 1 truncate cleaned up [ 1371.528117][T16712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.529176][T16720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.541487][T16712] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.553973][T16729] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1371.566933][T16720] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.574634][T16729] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1371.594104][T16729] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 1371.613048][T16714] Falling back ldisc for ttyS3. [ 1371.622203][T16720] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23921: corrupted inode contents [ 1371.637639][T16712] 9pnet_fd: Insufficient options for proto=fd [ 1371.649869][T16720] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.23921: mark_inode_dirty error [ 1371.665307][T16720] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23921: corrupted inode contents [ 1371.692529][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.702708][T16720] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.23921: mark_inode_dirty error [ 1371.728633][T14983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.745666][T16725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23922'. [ 1371.789451][T16741] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1372.061095][T16777] loop4: detected capacity change from 0 to 2048 [ 1372.072445][T16779] FAULT_INJECTION: forcing a failure. [ 1372.072445][T16779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.086161][T16779] CPU: 1 UID: 0 PID: 16779 Comm: syz.2.23945 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1372.086205][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1372.086219][T16779] Call Trace: [ 1372.086228][T16779] [ 1372.086237][T16779] __dump_stack+0x1d/0x30 [ 1372.086264][T16779] dump_stack_lvl+0xe8/0x140 [ 1372.086288][T16779] dump_stack+0x15/0x1b [ 1372.086311][T16779] should_fail_ex+0x265/0x280 [ 1372.086415][T16779] should_fail+0xb/0x20 [ 1372.086431][T16779] should_fail_usercopy+0x1a/0x20 [ 1372.086457][T16779] _copy_from_user+0x1c/0xb0 [ 1372.086487][T16779] ___sys_sendmsg+0xc1/0x1d0 [ 1372.086529][T16779] __x64_sys_sendmsg+0xd4/0x160 [ 1372.086563][T16779] x64_sys_call+0x2999/0x2fb0 [ 1372.086589][T16779] do_syscall_64+0xd2/0x200 [ 1372.086627][T16779] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1372.086659][T16779] ? clear_bhb_loop+0x40/0x90 [ 1372.086683][T16779] ? clear_bhb_loop+0x40/0x90 [ 1372.086753][T16779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.086777][T16779] RIP: 0033:0x7f458d63e929 [ 1372.086793][T16779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.086811][T16779] RSP: 002b:00007f458bca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1372.086830][T16779] RAX: ffffffffffffffda RBX: 00007f458d865fa0 RCX: 00007f458d63e929 [ 1372.086843][T16779] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1372.086865][T16779] RBP: 00007f458bca7090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.086880][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.086895][T16779] R13: 0000000000000000 R14: 00007f458d865fa0 R15: 00007ffc7fa8c238 [ 1372.086917][T16779] [ 1372.302647][T16765] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1372.309311][T16765] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1372.317008][T16765] vhci_hcd vhci_hcd.0: Device attached [ 1372.325937][T16767] netlink: 'syz.1.23939': attribute type 10 has an invalid length. [ 1372.333956][T16767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23939'. [ 1372.334145][T16765] loop8: detected capacity change from 0 to 512 [ 1372.349841][T16765] EXT4-fs: Ignoring removed bh option [ 1372.350009][T16787] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1372.356001][T16767] dummy0: entered promiscuous mode [ 1372.372527][T16765] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1372.381712][T16765] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1372.393425][T16767] bridge0: port 3(dummy0) entered blocking state [ 1372.399839][T16767] bridge0: port 3(dummy0) entered disabled state [ 1372.407011][T16767] dummy0: entered allmulticast mode [ 1372.407220][T16765] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1372.413767][T16767] bridge0: port 3(dummy0) entered blocking state [ 1372.427777][T16767] bridge0: port 3(dummy0) entered forwarding state [ 1372.431692][T16765] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1372.484760][T16793] loop2: detected capacity change from 0 to 512 [ 1372.495651][T16765] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1372.508226][T13179] vhci_hcd: vhci_device speed not set [ 1372.526882][T16793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1372.539185][T16784] vhci_hcd: connection closed [ 1372.539306][T17662] vhci_hcd: stop threads [ 1372.548372][T17662] vhci_hcd: release socket [ 1372.552957][T17662] vhci_hcd: disconnect device [ 1372.569327][T16803] loop1: detected capacity change from 0 to 128 [ 1372.575887][T13179] usb 17-1: new full-speed USB device number 5 using vhci_hcd [ 1372.583550][T13179] usb 17-1: enqueue for inactive port 0 [ 1372.589226][T13179] usb 17-1: enqueue for inactive port 0 [ 1372.597151][T16793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1372.623228][T13179] usb 17-1: enqueue for inactive port 0 [ 1372.632905][T16793] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1372.650810][T16793] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.23948: corrupted xattr block 19: overlapping e_value [ 1372.666001][T16793] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1372.675044][T16793] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.23948: corrupted xattr block 19: overlapping e_value [ 1372.690015][T16793] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 1372.699948][T16793] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.23948: corrupted xattr block 19: overlapping e_value [ 1372.713903][T13179] vhci_hcd: vhci_device speed not set [ 1372.744675][T15502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.775359][T16817] loop2: detected capacity change from 0 to 512 [ 1372.789201][T16817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1372.808483][T16817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 1372.817402][T16817] System zones: 1-12 [ 1372.821791][T16817] EXT4-fs (loop2): 1 truncate cleaned up [ 1372.834133][T16729] Buffer I/O error on dev loop1, logical block 305, lost async page write [ 1372.852940][T16817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1372.867486][T16817] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 1372.879039][T16817] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 1372.905137][T15502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.931287][T16827] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1373.021753][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23963'. [ 1373.034255][T16838] FAULT_INJECTION: forcing a failure. [ 1373.034255][T16838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1373.047422][T16838] CPU: 0 UID: 0 PID: 16838 Comm: syz.4.23965 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1373.047472][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1373.047484][T16838] Call Trace: [ 1373.047491][T16838] [ 1373.047499][T16838] __dump_stack+0x1d/0x30 [ 1373.047520][T16838] dump_stack_lvl+0xe8/0x140 [ 1373.047540][T16838] dump_stack+0x15/0x1b [ 1373.047639][T16838] should_fail_ex+0x265/0x280 [ 1373.047662][T16838] should_fail+0xb/0x20 [ 1373.047682][T16838] should_fail_usercopy+0x1a/0x20 [ 1373.047708][T16838] _copy_from_user+0x1c/0xb0 [ 1373.047796][T16838] ___sys_sendmsg+0xc1/0x1d0 [ 1373.047826][T16838] __x64_sys_sendmsg+0xd4/0x160 [ 1373.047855][T16838] x64_sys_call+0x2999/0x2fb0 [ 1373.047880][T16838] do_syscall_64+0xd2/0x200 [ 1373.047981][T16838] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1373.048018][T16838] ? clear_bhb_loop+0x40/0x90 [ 1373.048042][T16838] ? clear_bhb_loop+0x40/0x90 [ 1373.048065][T16838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.048085][T16838] RIP: 0033:0x7f17f18ce929 [ 1373.048110][T16838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1373.048130][T16838] RSP: 002b:00007f17eff37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1373.048151][T16838] RAX: ffffffffffffffda RBX: 00007f17f1af5fa0 RCX: 00007f17f18ce929 [ 1373.048164][T16838] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 1373.048177][T16838] RBP: 00007f17eff37090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.048189][T16838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.048202][T16838] R13: 0000000000000000 R14: 00007f17f1af5fa0 R15: 00007ffc6b0a5e48 [ 1373.048229][T16838] [ 1373.244054][T16846] loop2: detected capacity change from 0 to 512 [ 1373.251122][T16846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1373.264013][T16845] loop1: detected capacity change from 0 to 512 [ 1373.282530][T16846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 1373.284041][T15146] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.290605][T16846] System zones: 1-12 [ 1373.313100][T16845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1373.326126][T16845] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.347660][T16845] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23968: corrupted inode contents [ 1373.350965][T16846] EXT4-fs (loop2): 1 truncate cleaned up [ 1373.362899][T16856] FAULT_INJECTION: forcing a failure. [ 1373.362899][T16856] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.365698][T16846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1373.377940][T16856] CPU: 1 UID: 0 PID: 16856 Comm: syz.4.23971 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1373.377983][T16856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1373.377996][T16856] Call Trace: [ 1373.378005][T16856] [ 1373.378015][T16856] __dump_stack+0x1d/0x30 [ 1373.378058][T16856] dump_stack_lvl+0xe8/0x140 [ 1373.378079][T16856] dump_stack+0x15/0x1b [ 1373.378136][T16856] should_fail_ex+0x265/0x280 [ 1373.378157][T16856] should_failslab+0x8c/0xb0 [ 1373.378182][T16856] kmem_cache_alloc_noprof+0x50/0x310 [ 1373.378210][T16856] ? audit_log_start+0x365/0x6c0 [ 1373.378275][T16856] audit_log_start+0x365/0x6c0 [ 1373.378382][T16856] audit_seccomp+0x48/0x100 [ 1373.378408][T16856] ? __seccomp_filter+0x68c/0x10d0 [ 1373.378432][T16856] __seccomp_filter+0x69d/0x10d0 [ 1373.378457][T16856] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1373.378559][T16856] ? vfs_write+0x75e/0x8e0 [ 1373.378580][T16856] ? __rcu_read_unlock+0x4f/0x70 [ 1373.378603][T16856] ? __fget_files+0x184/0x1c0 [ 1373.378698][T16856] __secure_computing+0x82/0x150 [ 1373.378721][T16856] syscall_trace_enter+0xcf/0x1e0 [ 1373.378746][T16856] do_syscall_64+0xac/0x200 [ 1373.378768][T16856] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1373.378837][T16856] ? clear_bhb_loop+0x40/0x90 [ 1373.378858][T16856] ? clear_bhb_loop+0x40/0x90 [ 1373.378881][T16856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.378903][T16856] RIP: 0033:0x7f17f18ce929 [ 1373.378920][T16856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1373.378989][T16856] RSP: 002b:00007f17eff37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1373.379011][T16856] RAX: ffffffffffffffda RBX: 00007f17f1af5fa0 RCX: 00007f17f18ce929 [ 1373.379048][T16856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1373.379062][T16856] RBP: 00007f17eff37090 R08: 0000000000000001 R09: 0000000000000000 [ 1373.379075][T16856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.379165][T16856] R13: 0000000000000000 R14: 00007f17f1af5fa0 R15: 00007ffc6b0a5e48 [ 1373.379183][T16856] [ 1373.390674][T16845] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.23968: mark_inode_dirty error [ 1373.439452][T16815] loop9: detected capacity change from 0 to 2048 [ 1373.457480][T16815] ext2: Unknown parameter 'hash' [ 1373.458315][T16846] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 1373.470373][T16845] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.23968: corrupted inode contents [ 1373.504177][T16846] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 1373.519798][T16845] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.23968: mark_inode_dirty error [ 1373.696153][T15502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.729979][T14983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.763624][T16878] FAULT_INJECTION: forcing a failure. [ 1373.763624][T16878] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.776446][T16878] CPU: 0 UID: 0 PID: 16878 Comm: syz.8.23982 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1373.776479][T16878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1373.776493][T16878] Call Trace: [ 1373.776500][T16878] [ 1373.776508][T16878] __dump_stack+0x1d/0x30 [ 1373.776611][T16878] dump_stack_lvl+0xe8/0x140 [ 1373.776692][T16878] dump_stack+0x15/0x1b [ 1373.776711][T16878] should_fail_ex+0x265/0x280 [ 1373.776761][T16878] should_failslab+0x8c/0xb0 [ 1373.776787][T16878] kmem_cache_alloc_noprof+0x50/0x310 [ 1373.776817][T16878] ? audit_log_start+0x365/0x6c0 [ 1373.776904][T16878] audit_log_start+0x365/0x6c0 [ 1373.776937][T16878] audit_seccomp+0x48/0x100 [ 1373.777008][T16878] ? __seccomp_filter+0x68c/0x10d0 [ 1373.777037][T16878] __seccomp_filter+0x69d/0x10d0 [ 1373.777063][T16878] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1373.777085][T16878] ? vfs_write+0x75e/0x8e0 [ 1373.777142][T16878] __secure_computing+0x82/0x150 [ 1373.777294][T16878] syscall_trace_enter+0xcf/0x1e0 [ 1373.777321][T16878] do_syscall_64+0xac/0x200 [ 1373.777342][T16878] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1373.777387][T16878] ? clear_bhb_loop+0x40/0x90 [ 1373.777407][T16878] ? clear_bhb_loop+0x40/0x90 [ 1373.777427][T16878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.777451][T16878] RIP: 0033:0x7f70ae05e929 [ 1373.777470][T16878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1373.777561][T16878] RSP: 002b:00007f70ac6c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1373.777628][T16878] RAX: ffffffffffffffda RBX: 00007f70ae285fa0 RCX: 00007f70ae05e929 [ 1373.777643][T16878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1373.777658][T16878] RBP: 00007f70ac6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.777669][T16878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.777681][T16878] R13: 0000000000000000 R14: 00007f70ae285fa0 R15: 00007ffc9372d248 [ 1373.777702][T16878] [ 1373.993715][T16884] FAULT_INJECTION: forcing a failure. [ 1373.993715][T16884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.006888][T16884] CPU: 0 UID: 0 PID: 16884 Comm: syz.4.23984 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1374.006920][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1374.006932][T16884] Call Trace: [ 1374.006940][T16884] [ 1374.006948][T16884] __dump_stack+0x1d/0x30 [ 1374.007048][T16884] dump_stack_lvl+0xe8/0x140 [ 1374.007068][T16884] dump_stack+0x15/0x1b [ 1374.007084][T16884] should_fail_ex+0x265/0x280 [ 1374.007153][T16884] should_fail+0xb/0x20 [ 1374.007174][T16884] should_fail_usercopy+0x1a/0x20 [ 1374.007199][T16884] _copy_from_user+0x1c/0xb0 [ 1374.007292][T16884] wants_mount_setattr+0x128/0x640 [ 1374.007362][T16884] ? __rcu_read_unlock+0x4f/0x70 [ 1374.007390][T16884] __se_sys_mount_setattr+0x10f/0x240 [ 1374.007489][T16884] __x64_sys_mount_setattr+0x67/0x80 [ 1374.007519][T16884] x64_sys_call+0xda0/0x2fb0 [ 1374.007539][T16884] do_syscall_64+0xd2/0x200 [ 1374.007565][T16884] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1374.007620][T16884] ? clear_bhb_loop+0x40/0x90 [ 1374.007640][T16884] ? clear_bhb_loop+0x40/0x90 [ 1374.007660][T16884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.007687][T16884] RIP: 0033:0x7f17f18ce929 [ 1374.007716][T16884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.007736][T16884] RSP: 002b:00007f17eff37038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 1374.007758][T16884] RAX: ffffffffffffffda RBX: 00007f17f1af5fa0 RCX: 00007f17f18ce929 [ 1374.007774][T16884] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffffff [ 1374.007836][T16884] RBP: 00007f17eff37090 R08: 0000000000000020 R09: 0000000000000000 [ 1374.007849][T16884] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1374.007862][T16884] R13: 0000000000000001 R14: 00007f17f1af5fa0 R15: 00007ffc6b0a5e48 [ 1374.007883][T16884] [ 1374.224150][T16886] batadv_slave_1: entered promiscuous mode [ 1374.241265][T16886] loop9: detected capacity change from 0 to 2048 [ 1374.274417][T16894] loop4: detected capacity change from 0 to 512 [ 1374.285791][T16894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1374.288726][T16886] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1374.315031][T16894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 1374.315377][T16886] EXT4-fs error (device loop9): ext4_find_extent:939: inode #2: comm syz.9.23985: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1374.340556][T16894] System zones: 1-12 [ 1374.344890][T16894] EXT4-fs (loop4): 1 truncate cleaned up [ 1374.350648][T16905] FAULT_INJECTION: forcing a failure. [ 1374.350648][T16905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.351807][T16902] loop1: detected capacity change from 0 to 2048 [ 1374.364432][T16905] CPU: 1 UID: 0 PID: 16905 Comm: syz.8.23991 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1374.364511][T16905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1374.364523][T16905] Call Trace: [ 1374.364531][T16905] [ 1374.364540][T16905] __dump_stack+0x1d/0x30 [ 1374.364564][T16905] dump_stack_lvl+0xe8/0x140 [ 1374.364584][T16905] dump_stack+0x15/0x1b [ 1374.364601][T16905] should_fail_ex+0x265/0x280 [ 1374.364690][T16905] should_fail+0xb/0x20 [ 1374.364708][T16905] should_fail_usercopy+0x1a/0x20 [ 1374.364739][T16905] _copy_from_user+0x1c/0xb0 [ 1374.364764][T16905] wants_mount_setattr+0x128/0x640 [ 1374.364793][T16905] ? __rcu_read_unlock+0x4f/0x70 [ 1374.364850][T16905] __se_sys_mount_setattr+0x10f/0x240 [ 1374.364878][T16905] __x64_sys_mount_setattr+0x67/0x80 [ 1374.364902][T16905] x64_sys_call+0xda0/0x2fb0 [ 1374.364961][T16905] do_syscall_64+0xd2/0x200 [ 1374.364984][T16905] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1374.365010][T16905] ? clear_bhb_loop+0x40/0x90 [ 1374.365116][T16905] ? clear_bhb_loop+0x40/0x90 [ 1374.365138][T16905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.365160][T16905] RIP: 0033:0x7f70ae05e929 [ 1374.365178][T16905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.365269][T16905] RSP: 002b:00007f70ac6c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 1374.365296][T16905] RAX: ffffffffffffffda RBX: 00007f70ae285fa0 RCX: 00007f70ae05e929 [ 1374.365310][T16905] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffffff [ 1374.365324][T16905] RBP: 00007f70ac6c7090 R08: 0000000000000020 R09: 0000000000000000 [ 1374.365337][T16905] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1374.365350][T16905] R13: 0000000000000001 R14: 00007f70ae285fa0 R15: 00007ffc9372d248 [ 1374.365369][T16905] [ 1374.372737][T16886] EXT4-fs (loop9): Remounting filesystem read-only [ 1374.385017][T16894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.439534][T16885] batadv_slave_1: left promiscuous mode [ 1374.583821][T16894] EXT4-fs warning (device loop4): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 1374.618944][T16894] EXT4-fs warning (device loop4): ext4_group_extend:1891: can't read last block, resize aborted [ 1374.634921][T14787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.670531][T14415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.907931][T16930] loop9: detected capacity change from 0 to 128 [ 1374.916615][ T29] kauditd_printk_skb: 687 callbacks suppressed [ 1374.916633][ T29] audit: type=1400 audit(1749364460.445:205748): avc: denied { create } for pid=16939 comm="syz.8.24006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1374.959649][T16940] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24006'. [ 1374.968997][T16940] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24006'. [ 1374.984835][ T29] audit: type=1400 audit(1749364460.475:205749): avc: denied { mounton } for pid=16929 comm="syz.9.24002" path="/113/file1" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1375.008606][ T29] audit: type=1400 audit(1749364460.475:205750): avc: denied { write } for pid=16939 comm="syz.8.24006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1375.042419][T16945] loop2: detected capacity change from 0 to 512 [ 1375.061592][T16945] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1375.062391][T16945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 1375.062426][T16945] System zones: 1-12 [ 1375.062805][T16945] EXT4-fs (loop2): 1 truncate cleaned up [ 1375.063225][T16945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1375.109329][T16945] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 1375.109503][T16945] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 1375.151077][T15502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.339660][ T29] audit: type=1326 audit(1749364460.856:205751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.1.24015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1375.339753][ T29] audit: type=1326 audit(1749364460.856:205752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.1.24015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1375.339786][ T29] audit: type=1326 audit(1749364460.856:205753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.1.24015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1375.339817][ T29] audit: type=1326 audit(1749364460.856:205754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.1.24015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1375.339869][ T29] audit: type=1326 audit(1749364460.856:205755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.1.24015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1375.341384][ T29] audit: type=1326 audit(1749364460.856:205756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.1.24015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1375.368120][T16968] FAULT_INJECTION: forcing a failure. [ 1375.368120][T16968] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.388575][ T29] audit: type=1326 audit(1749364460.856:205757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.1.24015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808c14e929 code=0x7ffc0000 [ 1375.520317][T16968] CPU: 0 UID: 0 PID: 16968 Comm: syz.2.24016 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1375.520406][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1375.520480][T16968] Call Trace: [ 1375.520489][T16968] [ 1375.520499][T16968] __dump_stack+0x1d/0x30 [ 1375.520524][T16968] dump_stack_lvl+0xe8/0x140 [ 1375.520544][T16968] dump_stack+0x15/0x1b [ 1375.520561][T16968] should_fail_ex+0x265/0x280 [ 1375.520584][T16968] should_failslab+0x8c/0xb0 [ 1375.520639][T16968] kmem_cache_alloc_noprof+0x50/0x310 [ 1375.520685][T16968] ? flock_lock_inode+0x135/0xf60 [ 1375.520710][T16968] flock_lock_inode+0x135/0xf60 [ 1375.520735][T16968] ? file_has_perm+0x324/0x370 [ 1375.520785][T16968] locks_lock_inode_wait+0x6f/0x2a0 [ 1375.520806][T16968] ? selinux_file_lock+0x38/0x50 [ 1375.520862][T16968] __se_sys_flock+0x2f1/0x3b0 [ 1375.520890][T16968] __x64_sys_flock+0x31/0x40 [ 1375.520943][T16968] x64_sys_call+0x2eed/0x2fb0 [ 1375.520977][T16968] do_syscall_64+0xd2/0x200 [ 1375.521003][T16968] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1375.521069][T16968] ? clear_bhb_loop+0x40/0x90 [ 1375.521169][T16968] ? clear_bhb_loop+0x40/0x90 [ 1375.521245][T16968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.521266][T16968] RIP: 0033:0x7f458d63e929 [ 1375.521283][T16968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1375.521328][T16968] RSP: 002b:00007f458bca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 1375.521351][T16968] RAX: ffffffffffffffda RBX: 00007f458d865fa0 RCX: 00007f458d63e929 [ 1375.521366][T16968] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 1375.521380][T16968] RBP: 00007f458bca7090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.521393][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.521407][T16968] R13: 0000000000000000 R14: 00007f458d865fa0 R15: 00007ffc7fa8c238 [ 1375.521427][T16968] [ 1375.744203][T16966] netlink: 'syz.1.24015': attribute type 13 has an invalid length. [ 1375.863183][T16966] bridge0: port 3(dummy0) entered disabled state [ 1375.863320][T16966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.863634][T16966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.971747][T16966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.983001][T16966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.019674][T16983] loop2: detected capacity change from 0 to 1024 [ 1376.030098][T16983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1376.030579][T16983] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1376.034392][T16983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1376.073054][T16983] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.24022: lblock 2 mapped to illegal pblock 2 (length 1) [ 1376.087874][T16966] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.097760][T16966] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.097799][T16966] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.097890][T16966] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.112407][T16983] EXT4-fs (loop2): Remounting filesystem read-only [ 1376.112476][T16983] EXT4-fs (loop2): 1 orphan inode deleted [ 1376.112986][T16983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1376.113683][T16983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.148079][T16986] loop8: detected capacity change from 0 to 1024 [ 1376.157993][T16986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1376.158169][T16986] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1376.169157][T16986] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1376.170391][T16986] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.24023: lblock 2 mapped to illegal pblock 2 (length 1) [ 1376.170523][T16986] EXT4-fs (loop8): Remounting filesystem read-only [ 1376.170635][T16986] EXT4-fs (loop8): 1 orphan inode deleted [ 1376.171286][T16986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1376.172725][T16986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.183803][T16988] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1376.230216][T16988] loop2: detected capacity change from 0 to 2048 [ 1376.729296][T17013] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1376.729392][T17013] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1376.729483][T17013] vhci_hcd vhci_hcd.0: Device attached [ 1376.733678][T17013] loop1: detected capacity change from 0 to 512 [ 1376.734010][T17013] EXT4-fs: Ignoring removed bh option [ 1376.735314][T17013] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1376.735330][T17013] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1376.735951][T17013] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1376.736169][T17013] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1376.931282][T15364] vhci_hcd: vhci_device speed not set [ 1377.001472][T15364] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 1377.108139][T17016] vhci_hcd: connection reset by peer [ 1377.108444][T17608] vhci_hcd: stop threads [ 1377.108457][T17608] vhci_hcd: release socket [ 1377.108472][T17608] vhci_hcd: disconnect device [ 1377.117573][T17028] FAULT_INJECTION: forcing a failure. [ 1377.117573][T17028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.117664][T17028] CPU: 0 UID: 0 PID: 17028 Comm: syz.2.24037 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1377.117697][T17028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1377.117712][T17028] Call Trace: [ 1377.117719][T17028] [ 1377.117727][T17028] __dump_stack+0x1d/0x30 [ 1377.117751][T17028] dump_stack_lvl+0xe8/0x140 [ 1377.117771][T17028] dump_stack+0x15/0x1b [ 1377.117790][T17028] should_fail_ex+0x265/0x280 [ 1377.117814][T17028] should_fail+0xb/0x20 [ 1377.117831][T17028] should_fail_usercopy+0x1a/0x20 [ 1377.117855][T17028] _copy_from_user+0x1c/0xb0 [ 1377.117937][T17028] ___sys_sendmsg+0xc1/0x1d0 [ 1377.117970][T17028] __sys_sendmmsg+0x178/0x300 [ 1377.118081][T17028] __x64_sys_sendmmsg+0x57/0x70 [ 1377.118105][T17028] x64_sys_call+0x2f2f/0x2fb0 [ 1377.118130][T17028] do_syscall_64+0xd2/0x200 [ 1377.118162][T17028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1377.118193][T17028] ? clear_bhb_loop+0x40/0x90 [ 1377.118280][T17028] ? clear_bhb_loop+0x40/0x90 [ 1377.118337][T17028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.118358][T17028] RIP: 0033:0x7f458d63e929 [ 1377.118375][T17028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.118394][T17028] RSP: 002b:00007f458bca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1377.118418][T17028] RAX: ffffffffffffffda RBX: 00007f458d865fa0 RCX: 00007f458d63e929 [ 1377.118435][T17028] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1377.118450][T17028] RBP: 00007f458bca7090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.118470][T17028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.118482][T17028] R13: 0000000000000000 R14: 00007f458d865fa0 R15: 00007ffc7fa8c238 [ 1377.118503][T17028] [ 1377.322856][T17040] loop8: detected capacity change from 0 to 1024 [ 1377.327986][T17040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1377.432923][T17040] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1377.443986][T17040] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1377.454865][T17040] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.24042: lblock 2 mapped to illegal pblock 2 (length 1) [ 1377.469057][T17040] EXT4-fs (loop8): Remounting filesystem read-only [ 1377.469179][T17040] EXT4-fs (loop8): 1 orphan inode deleted [ 1377.668384][T17063] FAULT_INJECTION: forcing a failure. [ 1377.668384][T17063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.681642][T17063] CPU: 1 UID: 0 PID: 17063 Comm: syz.9.24047 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1377.681675][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1377.681725][T17063] Call Trace: [ 1377.681732][T17063] [ 1377.681741][T17063] __dump_stack+0x1d/0x30 [ 1377.681765][T17063] dump_stack_lvl+0xe8/0x140 [ 1377.681786][T17063] dump_stack+0x15/0x1b [ 1377.681805][T17063] should_fail_ex+0x265/0x280 [ 1377.681827][T17063] should_fail+0xb/0x20 [ 1377.681908][T17063] should_fail_usercopy+0x1a/0x20 [ 1377.681928][T17063] _copy_from_user+0x1c/0xb0 [ 1377.681951][T17063] wants_mount_setattr+0x128/0x640 [ 1377.682011][T17063] ? __rcu_read_unlock+0x4f/0x70 [ 1377.682046][T17063] __se_sys_mount_setattr+0x10f/0x240 [ 1377.682078][T17063] __x64_sys_mount_setattr+0x67/0x80 [ 1377.682106][T17063] x64_sys_call+0xda0/0x2fb0 [ 1377.682175][T17063] do_syscall_64+0xd2/0x200 [ 1377.682195][T17063] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1377.682287][T17063] ? clear_bhb_loop+0x40/0x90 [ 1377.682312][T17063] ? clear_bhb_loop+0x40/0x90 [ 1377.682336][T17063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.682412][T17063] RIP: 0033:0x7f1e5360e929 [ 1377.682430][T17063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.682452][T17063] RSP: 002b:00007f1e51c77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 1377.682475][T17063] RAX: ffffffffffffffda RBX: 00007f1e53835fa0 RCX: 00007f1e5360e929 [ 1377.682491][T17063] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffffff [ 1377.682525][T17063] RBP: 00007f1e51c77090 R08: 0000000000000020 R09: 0000000000000000 [ 1377.682539][T17063] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1377.682552][T17063] R13: 0000000000000000 R14: 00007f1e53835fa0 R15: 00007fff6bc9d758 [ 1377.682571][T17063] [ 1377.735290][T17065] loop1: detected capacity change from 0 to 512 [ 1377.737059][T17065] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1377.737079][T17065] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1377.737664][T17065] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1377.737865][T17065] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1377.737918][T17065] System zones: 0-2, 18-18, 34-35 [ 1377.971837][T17078] loop2: detected capacity change from 0 to 1764 [ 1377.972341][T17078] iso9660: Unknown parameter '' [ 1377.975454][T17078] FAULT_INJECTION: forcing a failure. [ 1377.975454][T17078] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.975484][T17078] CPU: 0 UID: 0 PID: 17078 Comm: syz.2.24054 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1377.975580][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1377.975592][T17078] Call Trace: [ 1377.975601][T17078] [ 1377.975611][T17078] __dump_stack+0x1d/0x30 [ 1377.975636][T17078] dump_stack_lvl+0xe8/0x140 [ 1377.975657][T17078] dump_stack+0x15/0x1b [ 1377.975674][T17078] should_fail_ex+0x265/0x280 [ 1377.975693][T17078] should_failslab+0x8c/0xb0 [ 1377.975782][T17078] kmem_cache_alloc_noprof+0x50/0x310 [ 1377.975812][T17078] ? audit_log_start+0x365/0x6c0 [ 1377.975848][T17078] audit_log_start+0x365/0x6c0 [ 1377.975956][T17078] audit_seccomp+0x48/0x100 [ 1377.975983][T17078] ? __seccomp_filter+0x68c/0x10d0 [ 1377.976048][T17078] __seccomp_filter+0x69d/0x10d0 [ 1377.976128][T17078] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1377.976152][T17078] ? vfs_write+0x75e/0x8e0 [ 1377.976172][T17078] ? __rcu_read_unlock+0x4f/0x70 [ 1377.976218][T17078] ? __fget_files+0x184/0x1c0 [ 1377.976245][T17078] __secure_computing+0x82/0x150 [ 1377.976277][T17078] syscall_trace_enter+0xcf/0x1e0 [ 1377.976305][T17078] do_syscall_64+0xac/0x200 [ 1377.976331][T17078] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1377.976372][T17078] ? clear_bhb_loop+0x40/0x90 [ 1377.976392][T17078] ? clear_bhb_loop+0x40/0x90 [ 1377.976416][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.976442][T17078] RIP: 0033:0x7f458d63e929 [ 1377.976460][T17078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.976482][T17078] RSP: 002b:00007f458bca7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1377.976580][T17078] RAX: ffffffffffffffda RBX: 00007f458d865fa0 RCX: 00007f458d63e929 [ 1377.976597][T17078] RDX: 00000000000000b4 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1377.976613][T17078] RBP: 00007f458bca7090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.976627][T17078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.976642][T17078] R13: 0000000000000000 R14: 00007f458d865fa0 R15: 00007ffc7fa8c238 [ 1377.976661][T17078] [ 1378.198337][T17087] loop1: detected capacity change from 0 to 1024 [ 1378.198994][T17087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1378.199099][T17087] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1378.201325][T17087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1378.202313][T17087] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.24057: lblock 2 mapped to illegal pblock 2 (length 1) [ 1378.202447][T17087] EXT4-fs (loop1): Remounting filesystem read-only [ 1378.202541][T17087] EXT4-fs (loop1): 1 orphan inode deleted [ 1378.258156][T17091] loop1: detected capacity change from 0 to 1024 [ 1378.265035][T17091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1378.265282][T17091] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1378.266252][T17091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1378.267513][T17091] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.24058: lblock 2 mapped to illegal pblock 2 (length 1) [ 1378.267644][T17091] EXT4-fs (loop1): Remounting filesystem read-only [ 1378.267710][T17091] EXT4-fs (loop1): 1 orphan inode deleted [ 1378.361915][T17097] netlink: 'syz.2.24062': attribute type 1 has an invalid length. [ 1378.550144][T17100] loop8: detected capacity change from 0 to 2048 [ 1378.585119][T17104] netlink: 'syz.2.24064': attribute type 27 has an invalid length. [ 1378.592167][T17100] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1378.593190][T17104] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1378.690292][T17104] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1378.720483][T17107] loop4: detected capacity change from 0 to 512 [ 1378.745484][T17107] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.747479][T17100] loop8: detected capacity change from 0 to 1024 [ 1378.759475][T17107] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.24065: corrupted inode contents [ 1378.768189][T17100] EXT4-fs: Ignoring removed orlov option [ 1378.779172][T17107] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.24065: mark_inode_dirty error [ 1378.779398][T17107] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.24065: corrupted inode contents [ 1378.779518][T17107] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.24065: mark_inode_dirty error [ 1378.840593][T17100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1378.927454][T17117] loop4: detected capacity change from 0 to 2048 [ 1378.968321][T17118] loop2: detected capacity change from 0 to 8192 [ 1378.979513][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24068'. [ 1379.022616][T17122] random: crng reseeded on system resumption [ 1379.756850][T17140] loop4: detected capacity change from 0 to 512 [ 1379.771701][T17140] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.774097][T17140] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.24076: corrupted inode contents [ 1379.813452][T17140] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.24076: mark_inode_dirty error [ 1379.813670][T17140] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.24076: corrupted inode contents [ 1379.813801][T17140] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.24076: mark_inode_dirty error [ 1379.889996][T17144] loop2: detected capacity change from 0 to 1024 [ 1379.896863][T17144] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1379.916439][T17144] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1379.939884][T17149] loop8: detected capacity change from 0 to 512 [ 1379.942911][T17149] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1379.958609][T17144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1379.984881][T17149] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.24079: bad orphan inode 17 [ 1379.984996][T17149] EXT4-fs (loop8): Remounting filesystem read-only [ 1379.985010][T17149] ext4_test_bit(bit=16, block=4) = 1 [ 1379.985024][T17149] is_bad_inode(inode)=0 [ 1379.985032][T17149] NEXT_ORPHAN(inode)=2147418128 [ 1379.985104][T17149] max_ino=32 [ 1379.985112][T17149] i_nlink=0 [ 1379.999663][T17144] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.24077: lblock 2 mapped to illegal pblock 2 (length 1) [ 1380.005624][T17144] EXT4-fs (loop2): Remounting filesystem read-only [ 1380.005706][T17144] __quota_error: 295 callbacks suppressed [ 1380.005720][T17144] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1380.005738][T17144] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1380.005789][T17144] EXT4-fs (loop2): 1 orphan inode deleted [ 1380.019501][T17149] FAULT_INJECTION: forcing a failure. [ 1380.019501][T17149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.019530][T17149] CPU: 1 UID: 0 PID: 17149 Comm: syz.8.24079 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1380.019559][T17149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1380.019637][T17149] Call Trace: [ 1380.019646][T17149] [ 1380.019655][T17149] __dump_stack+0x1d/0x30 [ 1380.019680][T17149] dump_stack_lvl+0xe8/0x140 [ 1380.019701][T17149] dump_stack+0x15/0x1b [ 1380.019720][T17149] should_fail_ex+0x265/0x280 [ 1380.019819][T17149] should_fail+0xb/0x20 [ 1380.019835][T17149] should_fail_usercopy+0x1a/0x20 [ 1380.019937][T17149] _copy_to_user+0x20/0xa0 [ 1380.019963][T17149] simple_read_from_buffer+0xb5/0x130 [ 1380.020014][T17149] proc_fail_nth_read+0x100/0x140 [ 1380.020040][T17149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1380.020064][T17149] vfs_read+0x1a0/0x6f0 [ 1380.020083][T17149] ? ldsem_up_read+0x8a/0xd0 [ 1380.020132][T17149] ? __rcu_read_unlock+0x4f/0x70 [ 1380.020164][T17149] ? __fget_files+0x184/0x1c0 [ 1380.020188][T17149] ? tiocsti+0x19b/0x1d0 [ 1380.020210][T17149] ksys_read+0xda/0x1a0 [ 1380.020235][T17149] __x64_sys_read+0x40/0x50 [ 1380.020298][T17149] x64_sys_call+0x2d77/0x2fb0 [ 1380.020322][T17149] do_syscall_64+0xd2/0x200 [ 1380.020343][T17149] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1380.020372][T17149] ? clear_bhb_loop+0x40/0x90 [ 1380.020392][T17149] ? clear_bhb_loop+0x40/0x90 [ 1380.020415][T17149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.020439][T17149] RIP: 0033:0x7f70ae05d33c [ 1380.020507][T17149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1380.020524][T17149] RSP: 002b:00007f70ac6a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1380.020544][T17149] RAX: ffffffffffffffda RBX: 00007f70ae286080 RCX: 00007f70ae05d33c [ 1380.020559][T17149] RDX: 000000000000000f RSI: 00007f70ac6a60a0 RDI: 0000000000000006 [ 1380.020606][T17149] RBP: 00007f70ac6a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.020620][T17149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.020650][T17149] R13: 0000000000000000 R14: 00007f70ae286080 R15: 00007ffc9372d248 [ 1380.020670][T17149] [ 1380.080724][T17155] loop2: detected capacity change from 0 to 1024 [ 1380.090774][T17155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1380.098927][T17155] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1380.102775][T17155] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1380.103100][T17159] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1380.104137][T17155] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.24081: lblock 2 mapped to illegal pblock 2 (length 1) [ 1380.104296][T17155] EXT4-fs (loop2): Remounting filesystem read-only [ 1380.104311][T17155] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1380.104330][T17155] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1380.104458][T17155] EXT4-fs (loop2): 1 orphan inode deleted [ 1380.114089][T17159] loop9: detected capacity change from 0 to 512 [ 1380.331575][T17163] loop4: detected capacity change from 0 to 512 [ 1380.436039][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24081'. [ 1380.486786][T17159] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1380.511684][T17165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24081'. [ 1380.547033][T17172] loop1: detected capacity change from 0 to 512 [ 1380.550457][T17159] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.24080: bad orphan inode 17 [ 1380.564581][T17163] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1380.575145][T17172] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1380.584448][T17172] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1380.592529][T17163] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.24083: corrupted inode contents [ 1380.598497][T17159] EXT4-fs (loop9): Remounting filesystem read-only [ 1380.613234][T17159] ext4_test_bit(bit=16, block=4) = 1 [ 1380.613255][T17172] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1380.613390][T17159] ================================================================== [ 1380.619156][T17172] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1380.627739][T17159] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1380.637027][T17163] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.24083: mark_inode_dirty error [ 1380.643794][T17159] [ 1380.643806][T17159] write to 0xffffffff8693a0f8 of 88 bytes by task 17172 on cpu 0: [ 1380.643825][T17159] prb_reserve+0x696/0xaf0 [ 1380.643862][T17159] vprintk_store+0x56d/0x860 [ 1380.652433][T17172] System zones: [ 1380.662179][T17159] vprintk_emit+0x178/0x650 [ 1380.662207][T17159] vprintk_default+0x26/0x30 [ 1380.662227][T17159] vprintk+0x1d/0x30 [ 1380.662254][T17159] _printk+0x79/0xa0 [ 1380.664582][T17172] 0-2 [ 1380.672373][T17159] __ext4_msg+0x18f/0x1a0 [ 1380.672403][T17159] ext4_setup_super+0x1db/0x580 [ 1380.676823][T17172] , 18-18 [ 1380.681400][T17159] ext4_fill_super+0x27d4/0x34e0 [ 1380.684954][T17172] , 34-35 [ 1380.689444][T17159] get_tree_bdev_flags+0x28e/0x300 [ 1380.689472][T17159] get_tree_bdev+0x1f/0x30 [ 1380.694056][T17172] [ 1380.697552][T17163] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.24083: corrupted inode contents [ 1380.697947][T17159] ext4_get_tree+0x1c/0x30 [ 1380.702235][T17163] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.24083: mark_inode_dirty error [ 1380.704430][T17159] vfs_get_tree+0x57/0x1d0 [ 1380.704462][T17159] do_new_mount+0x207/0x680 [ 1380.773046][T17159] path_mount+0x4a4/0xb20 [ 1380.777399][T17159] __se_sys_mount+0x28f/0x2e0 [ 1380.782089][T17159] __x64_sys_mount+0x67/0x80 [ 1380.786700][T17159] x64_sys_call+0xd36/0x2fb0 [ 1380.791306][T17159] do_syscall_64+0xd2/0x200 [ 1380.795851][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.801796][T17159] [ 1380.804130][T17159] read to 0xffffffff8693a0f8 of 8 bytes by task 17159 on cpu 1: [ 1380.811784][T17159] _prb_read_valid+0x383/0x920 [ 1380.816583][T17159] prb_final_commit+0x136/0x1e0 [ 1380.821459][T17159] vprintk_store+0x741/0x860 [ 1380.826076][T17159] vprintk_emit+0x178/0x650 [ 1380.830609][T17159] vprintk_default+0x26/0x30 [ 1380.835218][T17159] vprintk+0x1d/0x30 [ 1380.839303][T17159] _printk+0x79/0xa0 [ 1380.843212][T17159] ext4_orphan_get+0x326/0x430 [ 1380.847993][T17159] ext4_orphan_cleanup+0x5fa/0xa00 [ 1380.853119][T17159] ext4_fill_super+0x3171/0x34e0 [ 1380.858070][T17159] get_tree_bdev_flags+0x28e/0x300 [ 1380.863194][T17159] get_tree_bdev+0x1f/0x30 [ 1380.867616][T17159] ext4_get_tree+0x1c/0x30 [ 1380.872047][T17159] vfs_get_tree+0x57/0x1d0 [ 1380.876474][T17159] do_new_mount+0x207/0x680 [ 1380.880988][T17159] path_mount+0x4a4/0xb20 [ 1380.885340][T17159] __se_sys_mount+0x28f/0x2e0 [ 1380.890031][T17159] __x64_sys_mount+0x67/0x80 [ 1380.894630][T17159] x64_sys_call+0xd36/0x2fb0 [ 1380.899490][T17159] do_syscall_64+0xd2/0x200 [ 1380.904004][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.909910][T17159] [ 1380.912245][T17159] value changed: 0x0000000000003d39 -> 0x0000000000005d39 [ 1380.919358][T17159] [ 1380.921687][T17159] Reported by Kernel Concurrency Sanitizer on: [ 1380.927839][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.9.24080 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 1380.940085][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1380.950170][T17159] ================================================================== [ 1380.958951][T17159] is_bad_inode(inode)=0 [ 1380.963127][T17159] NEXT_ORPHAN(inode)=2147418128 [ 1380.967994][T17159] max_ino=32 [ 1380.971239][T17159] i_nlink=0 [ 1382.008322][T15364] usb 3-1: enqueue for inactive port 0 [ 1382.013926][T15364] usb 3-1: enqueue for inactive port 0 [ 1382.087905][T15364] vhci_hcd: vhci_device speed not set