last executing test programs: 1m30.323214503s ago: executing program 2 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2000000005}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000680)={[{@noinit_itable}], [{@uid_gt}, {@euid_eq}, {@subj_type}, {@flag='lazytime'}, {@seclabel}, {@dont_appraise}]}, 0x6, 0x623, &(0x7f0000001fc0)="$eJzs3U9oXNUaAPDvziR5SZv30j4ej9fyHi/QRQuPpklfserGti7somDBLkRcNDRJDZ3+oUnBxoIJuFBQEHEr0o3g2r10704EdedaqCIVBZWO3Jk77SSZSaZJZm6S+/vBzdxz7p0555s7Z+659+bMDaCwRtM/pYgDEQ8vJhEjTcuGo75wNFvvwU93LqVTEtXqSz8mkWR5jfWT7HFvlhiMiC/PRPy9vLrcudsLVyYr1bo3I47NX71xbO72wtHZq5OXpy9PX5s4/vSJk+PPTJyY2JI492aPZ8+9+O/33nrtqZmvKkeTOBUX+t+YihVxbJXRGI2HWYjN+X0RcTKdafG+7DS7IIRCK2efx/6I+GeMRLmWqhuJ2XdzrRzQVdVyRBUoqGQz7f/TBV8fsGM1+gGNY/vOjoMvdLlX0jv3T9cPgFbH31c/NxKDtWOjPQ+SpiOj+rmNfVtQflrGH3cOfpROsew8xK+Ptk7fFpTTzuJSRPyrVfxJrW77apGm8ZeW1SOJiPGIGMjq9/wm6pA0zXfjPMxaNhp/KSJOZY9p/pkNlj+6It3r+AEopnunsx35Ypp6vP9L+x6N/k+06P8Mt9h3bUTe+7/2/b/G/n6wdo68tKIflvZZzrd+yf6VGd+9c/aDduU39//SKS2/0RfshftLEQdXxP92GmzW/0njT1ps/3SVi6c6K+OFr384225Z3vFX70Ycbnn887hXms6tcX3y2MxsZXq8/rdlGZ9/8eon7crPO/50++9pE3/T9i+tfF76ntzosIzPzt+92m7Z8Lrxl74fSOrHmwNZzuuT8/M3JyIGknPZKk35x9euS2Odxmuk8R851Lr9L/v8Ly1/naHGV2YHbrx85UG7Zc3bP0nq9Vhv+zddTH5Y7bAO7aTxT62//Ve1/zTv/Q7L+OWVW/9pt2ytz//QZgIDAAAAAACAAirVrsEmpbFH86XS2Fh9vOw/Yk+pcn1u/n8z129dm4o4Uvt/yP5S40r3SD2dpOmJ7P9hG+njK9L/j4j9EfFheaiWHrt0vTKVd/AAAAAAAAAAAAAAAAAAAACwTezNxv837lP9c7k+/h8oiG7eYA7Y3rR/KK5a+191iyegCNrt/+d6XA+g9/T/obi0fygu7R+KS/uH4tL+obi0fygu7R8AAAAAdqX9/733bRIRi88O1abUQLbMiCDY3frzrgCQm3LeFQBy8+jSv84+FE5H/f/fsh8H7H51gBwkrTJrnYPq2o3/XstnAgAAAAAAAAAAAABdcPhA+/H/xgbD7vYEw/6WulkPoPc2Mf7fTwfADuen/6G4NnyMP7i19QDys94o/rbN3fh/AAAAAAAAAAAAAOiZ4dqUlMayscDDUSqNjUX8NSL2RX8yM1uZHo+Iv0XEN+X+v6TpibwrDQAAAAAAAAAAAAAAAAAAALvM3O2FK5OVyvTN5pnfV+Xs7pnGXVB7UNZz8YTPiqT3b8tQROS+Ubo209eUk0Qsplt+W1Ts5lxsj2rUZnL+YgIAAAAAAAAAAAAAAAAAgAJqGnvc2sGPe1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi9x/f/f9KZQx2vnHeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDO9GcAAAD//4+rO+Q=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) semctl$IPC_INFO(0x0, 0x2, 0x3, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000004c0)={{0x10, 0xc}, 0x1, 0x2, 0xfffffff9, {0x8, 0x96}, 0x6, 0x2}) 1m30.202616244s ago: executing program 2 (id=360): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="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", 0x13c}], 0x1}}], 0x2, 0x40090) sendto$inet(r0, &(0x7f00000002c0)="92", 0x189, 0x10008095, 0x0, 0x0) 1m30.110487381s ago: executing program 2 (id=362): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat(r0, &(0x7f00000002c0)='./mnt\x00', 0x1e1a41, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, 0x0, r3, &(0x7f0000000100)='./mnt\x00') unlinkat(r3, &(0x7f00000000c0)='./mnt\x00', 0x200) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d6ad76d09311b0ff", @ANYRES16=r4, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000500000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002010400008000000000000000000000000000bb02350000b9010700050000000300000005000000"], 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1m29.844110843s ago: executing program 2 (id=365): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$eJzs3c9rXFsdAPDvzCR5SZtn33uKvFfBFirUHzSTH0gTFcSVuiiIBTcKNSbTWDPphMykNqFgqrsuXIiiIC7c+xe4sStLQVwrbl1Ji9YIVSpcmTtz00kyk041mfHlfj4wnXvnTOd7ziTfkzPnnjs3gNy62PynEDEZEb+PiHOt3f1PuNi62312b6l5K0SSXP9rIX1ecz97avb/zkbETkSMR8RXvxjxrcLhuPWt7dXFarWy0d4vN9bWy/Wt7Su31hZXKiuV2zPzVxcW5qfnZheOra0PfvidB9d+/eWxXz3/wZNHP/rtb5rVmmyXdbbjOLWaPhpvdzw2EhGfO4lgQ1Bqt2di2BXhv9L8+X0wIi6l+X8uSulPsz8vTrRmwElLkiT5d/JGr+KdBDi1iukYuFCciojWdrE4NdUaw38ozhSrtXrjUzdrm7eXW2Plt2K0ePNWtTLd/qzwVowWmvsz6fbL/dkD+3MR6Rj4x6WJdH9qqVZdHmxXBxxw9kD+/6PUyn8gJ/r/yA+cNvIf8kv+Q37Jf8gv+Q/5Jf8hv+Q/5Jf8h/yS/5Bfnfmfncj15pDqAgzWUX//xwZYD2CgvnLtWvOWZOe/L9/Z2lyt3bmyXKmvTq1tLk0t1TbWp1ZqtZX0nJ21V71etVZbn/l0bN4tNyr1Rrm+tX1jrbZ5u3EjPa//RmV0IK0C+vH2hYd/LETEzmcm0lt0/MmXq3C6JUkhhn0OMjAcpWF3QMDQOPQH+fUan/F7fkkY8P7W5St694yf7Vn0+Vg/keoAA1A8qvDF48FVBBi4y+85/gd5Zf4f8sv8P+TXK8b4hgeQA0fN/0f7Wn5d9Tv///z16gOcvCPn/4FTbbLL9b+SJPnemx3X7pqOiA9ExB9Ko29k1/oCToPiXwrt8f/lcx+bPFg6VvhnOgcwFhHf/fn1n95dbDQ2ZpqP/23v8cbP2o/PDqP+QG/7Z/iyPM3yGADIr91n95ay2yDjPv1CaxHC4fgj7bnJ8XQEc2a3sG+tQuGY1i7s3I+Id7vFL7Svd9468nFmt3Qo/jvt+0LrJdL6jqTXTR9M/Pc64n+0I/75//ldgXx42Ox/prvlXzHN6djLv/39z+QxrY/O+r9szXVn/Kz/K/Xo/y70GePbv/h+t8O76WLvp/cjznftf7N442msg/GbdbvcZ/wn3/jah3uVJb9svU63+JnmVrmxtl6ub21fuZXVYv7qwsL89NzsQjmdoy5nM9WHffbd3z3qFb/Z/rYe7f/TofZPtOv0iT7b/6+PPP76xSPif/xS99+/d9L7A+9/kuzV4ZN9xv/77J+/2ausGX+5x/tf7BY/stKIuT7j13/yJecOA8D/kfrW9upitVrZ6LIx2rvIhg0bg94YiQEGfVXPsTOYDgo4MS+Tftg1AQAAAAAAAAAAAPrVa/Xvw2NcTjzsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAb/CQAA//9AntRF") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x6, 0x3, 0x401, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1a009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x3338, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000a00)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r3, 0x0) timer_gettime(r3, &(0x7f0000000380)) 1m28.818870736s ago: executing program 2 (id=372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="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", 0x13c}], 0x1}}], 0x2, 0x40090) sendto$inet(r5, &(0x7f00000002c0)="92", 0x189, 0x10008095, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) 1m26.505146984s ago: executing program 2 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1m26.504872213s ago: executing program 32 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1m21.415359926s ago: executing program 5 (id=382): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x6, 0x3, 0x401, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1a009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x3338, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000a00)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r3, 0x0) timer_gettime(r3, &(0x7f0000000380)) 1m21.093148232s ago: executing program 5 (id=440): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x182, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) 1m17.568382798s ago: executing program 5 (id=480): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat(r0, &(0x7f00000002c0)='./mnt\x00', 0x1e1a41, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, 0x0, r3, &(0x7f0000000100)='./mnt\x00') unlinkat(r3, 0x0, 0x200) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d6ad76d09311b0ff", @ANYRES16=r4, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000500000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002010400008000000000000000000000000000bb02350000b9010700050000000300000005000000"], 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1m17.527248831s ago: executing program 33 (id=480): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat(r0, &(0x7f00000002c0)='./mnt\x00', 0x1e1a41, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, 0x0, r3, &(0x7f0000000100)='./mnt\x00') unlinkat(r3, 0x0, 0x200) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d6ad76d09311b0ff", @ANYRES16=r4, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000500000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002010400008000000000000000000000000000bb02350000b9010700050000000300000005000000"], 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1m6.677192511s ago: executing program 1 (id=598): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m6.625678656s ago: executing program 1 (id=601): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006"], 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = open$dir(&(0x7f0000000000)='./bus\x00', 0x28082, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) openat(r3, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x218, &(0x7f0000000540)=ANY=[@ANYBLOB="c55d98c22ced7743051815e18a42a976a04f03f5fcf07baeacc3cf97fd015ed73ba64b493542bbd282d5ec5b3f9c594ba6884783231de9d86430ae39d772b2a8b577f4ac8cf021d9297466b33f3acd95720424d58fc9b6580dc113d737205a2830ea5a36ab0afd8b9e8b4dad4f491e9afe6c986a7e48f6553da01441c2a66b1375639fc006ab02ae58588f8334843f692d26ac6f11b5bca5e9af9bb19ed36cd6606384f9109cf3eb2df61cce073ed7af05f9f7f233deab7ccfe6eedfcad0352719102b400aa0836e3e7fb81af84765795d306585e29d51e4a287", @ANYRES8=r3], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/130, 0x41100, 0x76, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x95}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0x37}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x6, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) 1m6.540532093s ago: executing program 1 (id=604): perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket(0x2b, 0x80801, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1m6.539201423s ago: executing program 1 (id=605): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x6, 0x3, 0x401, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1a009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x3338, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x3) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r5, 0x0, 0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000a00)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r4, 0x0) timer_gettime(r4, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000000000000000698d6f20f98e23336523c8897f37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbrfZ1qW2te3W5vuBstOdeTKzfxKeXZhZu/fmab3qWlXTllRWJSXZJVkXKUhKQgNb25RfzkjUklwd/fH5wp37D26WyuWpGdXp0uy1oqqOX/zw/OXbSx/bo3ffjb8fltXCw7XvxS+r/6+eW9uYDT+92Vajc81m28w5ts7X3LqletuxjWtrreHarR31Vae5sNBV05gfyy20bNdV0+hq3e5qu6ntVlfNY1NrqGVZOpaTOJnYvWfD4IEjKsszM6Z0LINBEkbidrZaJTMYW1lZPolBAQCA0+X3/F9OJP9/UnO15mrjT/l/So42/0eUn/9vxCaNOBvSmw8AJZPb+v7uRP4PAAAAAAAAAAAAAAAAAAAAAMC/YN3z8p7n5cNt+DcsIlkRCf9Pepw4Hoe4/gMJDhdHLDJxLyvivO5UOpVgG9SXqlITR2yZSPtzibxtQXn6RnlqQn0FWXEWt+L9SYLDYXyoEB8/GcRrJH6xU0lLLtp/UfLyX3x8cVd8WkQ6lYxcuRyJtyQvnx5JUxyZ9+/rXvyrSdXrt8q7+h/x2wEAAAAAcBZYuq2w8/k3WE3SsjRcNmRXfbCz935A8vJzz/cDKisZ6cUPyfmh5I4bAAAAAIB+4nZf1I3j2K1+LozIwaP68dRZ2eCm2bOx53mLm43+vtOUiCR0pN9E5BSc8KMufH0WXMD9NE7yVwkAAADAcegl/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rXfxcPC9odZeyzS3WAyRwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDr8CAAD//4DOGY4=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) 1m6.170430522s ago: executing program 1 (id=610): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsgid(0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x0) 1m6.035969493s ago: executing program 0 (id=616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x26000400) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x4}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 1m5.979843028s ago: executing program 1 (id=618): timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x24048090) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x11700411, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r7, 0x0, 0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r7, 0x1, &(0x7f0000000a00)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r0, 0x0) 1m5.979668378s ago: executing program 0 (id=619): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x12, 0x20}, 0x20) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x1}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x40) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1m5.979466588s ago: executing program 34 (id=618): timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x24048090) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x11700411, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r7, 0x0, 0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r7, 0x1, &(0x7f0000000a00)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r0, 0x0) 1m5.934346322s ago: executing program 0 (id=621): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x6, 0x3, 0x401, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1a009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x3338, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x3) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r5, 0x0, 0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000a00)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r4, 0x0) timer_gettime(r4, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000000000000000698d6f20f98e23336523c8897f37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbrfZ1qW2te3W5vuBstOdeTKzfxKeXZhZu/fmab3qWlXTllRWJSXZJVkXKUhKQgNb25RfzkjUklwd/fH5wp37D26WyuWpGdXp0uy1oqqOX/zw/OXbSx/bo3ffjb8fltXCw7XvxS+r/6+eW9uYDT+92Vajc81m28w5ts7X3LqletuxjWtrreHarR31Vae5sNBV05gfyy20bNdV0+hq3e5qu6ntVlfNY1NrqGVZOpaTOJnYvWfD4IEjKsszM6Z0LINBEkbidrZaJTMYW1lZPolBAQCA0+X3/F9OJP9/UnO15mrjT/l/So42/0eUn/9vxCaNOBvSmw8AJZPb+v7uRP4PAAAAAAAAAAAAAAAAAAAAAMC/YN3z8p7n5cNt+DcsIlkRCf9Pepw4Hoe4/gMJDhdHLDJxLyvivO5UOpVgG9SXqlITR2yZSPtzibxtQXn6RnlqQn0FWXEWt+L9SYLDYXyoEB8/GcRrJH6xU0lLLtp/UfLyX3x8cVd8WkQ6lYxcuRyJtyQvnx5JUxyZ9+/rXvyrSdXrt8q7+h/x2wEAAAAAcBZYuq2w8/k3WE3SsjRcNmRXfbCz935A8vJzz/cDKisZ6cUPyfmh5I4bAAAAAIB+4nZf1I3j2K1+LozIwaP68dRZ2eCm2bOx53mLm43+vtOUiCR0pN9E5BSc8KMufH0WXMD9NE7yVwkAAADAcegl/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rXfxcPC9odZeyzS3WAyRwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDr8CAAD//4DOGY4=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) 1m3.818720943s ago: executing program 0 (id=642): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x6, 0x3, 0x401, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1a009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x3338, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x3) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r5, 0x0, 0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000a00)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r4, 0x0) timer_gettime(r4, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000000000000000698d6f20f98e23336523c8897f37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) 1m2.913513626s ago: executing program 0 (id=650): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xd9f, 0x6, 0x98, 0x9, 0x7, 0xffffffff, "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"}}, 0xeb7) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001200), 0x82, 0x0) fsetxattr$security_ima(r2, &(0x7f0000001240), 0x0, 0x0, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000001580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001b00), 0x0, 0x0) preadv(r2, &(0x7f0000001fc0)=[{&(0x7f0000001c80)=""/8, 0x8}, {&(0x7f0000001d80)=""/181, 0xb5}, {&(0x7f0000001e40)=""/103, 0x67}, {0x0}], 0x4, 0x4, 0x800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$eJzs3c9rE1sUwPHTpm3SljZ58HjwHjw94EY3QxsXLjVIC2JAqU1RF8LUTjRkTMpMqEREsxG3/hGuKu7cCerSTTfiQvfuiiC66UIcyUymJm1a0+ZHY/v9QHtPcu7hnrbTclJIsn71yZ181jWyZkkGYyqDIhXZEElUo5qB2jroxyNSryKnxr99/P/KtesXU+n0zJzqbGr+dFJVJ4+/Cre+mHwZlbXEjfUvyU9r/6z9u/5j/nbO1ZyrhWJJTV0sFkvmom3pUs7NG6qXbct0Lc0VXMtpyGft4vJyWc3C0sTYsmO5rpqFsuatspaKWnLKat4ycwU1DEMnxuRoG2phT2Z1bs5M7Zj2Ih3tCF032uxOx0lVmiczqz3oCQAA9Jnd5/9ggN95/k8vBOsO8//d+8Nn3pTGF4L5//lTkdbmf5HG+f9DW/P/QE+/oX2u0nDrN/M/DgXHSZljtd/fRsz/AAAAAAAAAAAAAAAAAAAAAAD8CTY8L+55Xjxcw4+oiMREJLx90H2iO/b58z97QO2iw+qeuBcTsR+vZEYlWIN8Kis5scWSKYnLd/96qAni2QvpmSn1JeS1/XAlU62srhGJhvWhRLP6Y39NB/XaWD8stWfwBecnJS5/Nz8/2bR+RE6eqOvfkLi8uylFsWXJv66ffa1+rtY/mFY9fym9pX7U3wcAAAAAwGFg6KZtj9/9vL8hJtvzQf0e/j+w5fH1kPzXyktUAgAAAACAtrnle3nTti1nH0FURNoo30PgDXT9iM4FEemLNrYE50SkD9roVRATkeAe3U/5583ylqq8FvYMiUi7X1esh5fWQf9lAgAAANBpv4b+PRS9f9TFjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHpafT2wcP+2VJjYpbzuuIi83Xx7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODI+RkAAP//KGghCg==") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RTC_WIE_ON(r0, 0x700f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) inotify_init() setpgid(r4, r4) 1m2.645163358s ago: executing program 0 (id=654): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="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", 0x13c}], 0x1}}], 0x2, 0x40090) sendto$inet(r0, &(0x7f00000002c0)="92", 0x189, 0x10008095, 0x0, 0x0) 1m2.645012408s ago: executing program 35 (id=654): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="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", 0x13c}], 0x1}}], 0x2, 0x40090) sendto$inet(r0, &(0x7f00000002c0)="92", 0x189, 0x10008095, 0x0, 0x0) 3.101180177s ago: executing program 3 (id=1424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0, 0x0, 0x5}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002300)={'syztnl1\x00', &(0x7f0000002280)={'syztnl1\x00', 0x0, 0x4, 0xf7, 0x7f, 0x7fff, 0x11, @mcast2, @local, 0x8000, 0x40, 0x7}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r6, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="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", 0x13c}], 0x1}}], 0x2, 0x40090) sendto$inet(r6, &(0x7f00000002c0)="92", 0x189, 0x10008095, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x46bc, 0x3, 0x20, 0x0, 0x0) 2.958545429s ago: executing program 8 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 2.905404983s ago: executing program 8 (id=1431): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000a80)='kfree\x00'}, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r5, &(0x7f0000000800)='-1\x00', 0x3) r6 = open_tree(0xffffffffffffffff, 0x0, 0x1001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=@newtaction={0x18f4, 0x30, 0xffff, 0x3, 0x0, {}, [{0x18e0, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x400, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x33cabbbe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6b40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1a6d, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3179, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x801, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf9, 0xfffffffc, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}, @m_csum={0x1068, 0x18, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x480000, 0x5, 0xdaf0, 0xe2c0}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x0, 0x6}, 0x22}}]}, {0x1004, 0x6, "3823274155994732a5ef187a7418586f22c5c02010f5ad233ebcd606223c45359d89c6223e4ae608d2423facea0af02a250e996186c1faa4fb46dfe9cd466c333509237f037618f15cb048c68d0b17c25f6b0ddc71a601342a5d856188c2d7638921c944b84b50cbe39cf8eb24d37efe6ca96429cae329d978a49ca2fc14092d38a2dfc586c81933a01bd74a0590412dd1b1d3c3c268ebde058f02499c2de6b023320889215e91235bff94b41d9738ae48576a734188a2bcb3345f44f1f2a706a6ff170031cfacdbe75312b590e70a8904ca604e20876d2d11607bf275b322c356e7eee03f23a04f901104b7795656c23b06ac5c1b6d28906a12bb634ae5fffce55bb9628147f7ee7b0ab29f78a54b0f2b473549341df989e2bbf522e19264e7435bb1a6b1e1e93faea841ce7d70eebe86b875155b4e16107c5f79286b4821fda28c97fceb1167eba268984242803ff7512afe2fc7f931d8f1885b24bd6767ad5939d289a692fd60689eaa5af28e7aa0a75fbfb43b81133bab0693ac525276c1c9c773cc9aba93a8e20bb8e3d3bc2779190e5f82ac2e75bda20b1aeaf05cf2cc46b13e484df7efa04739e6bf6b098b1bc91651a253f772291d2a53d6f18cdfdabce98bb6da41cea5d56ef8aca5ba7f09746c6e9b74943e7522f6120767cd907a5992442e104bcbc0243d243f1731870118acccd2fbeaaa204e6b18ad27ed789b48eb830bd79151f41e7a7340502e1ba293fd9ba2001159f241c09e166f21a74f8073d612aee6dc481c9120270c7e93e6e5244aa7cc5e6bc2fb595dedd69788f457dfbc97f931bc5271498dbd6f6dbfa3edc13ae240275c9393fcdcc618701b781a796c54c90e2cd7c70903cf3d15d78a731959e37f54b53b1c3ea5cc9737c417296e82fdff218ae67eebb37db7427d9bd06228fa8d955e8fefc2f485293fef5c833d8d62f9c51fd26debd1a7f6081e5137538eb0ee4f2b1afdcd9a6f82426d143c935a09eea4c356c6151678aa708a4b8321125699031b46497110f5c0afe7b7ac5331f5648dc7df91fa411797a9fa622b2d560697fb29d04f2786c06dfee2aa342035ed318d0d051fe31f36445f9cc1f2b35ec593794d05287dbf6432f834c2a1aafecd72aded414553762efd79aaab1ae1c2f79a1b13eda9988396da2f41eacdd30589cb6cadfbd30011d6442c5ac3fb043cd70522c126642cadd8a26e69a5fea623bc2a3715d79d469b556c648047c050c2a072c3970e92bd2ce462a1fd1ae524c00ac5689364e35e0d223c85f64ad09f83de4b16310746f8141fc5d8401f28685e140bf58000f78704360669364186826d545c2a9d105ac90f8f0e5eb5778a0adc3442ecaf94b9a7288cfdfce31474fc47958b02e06e5c59c269cb20325313f7edad102dacfd520155e4b1e72801c50bd6de23d94b6aeaabe432738a7540146a75a3fd879c710936e6f2caf819abc185c289e5a3b72a3073ba11c2233a59aa7e693906621e2374212a651fb201a82e10467261b0220f37575bddfb8ef3043e5e0fd34265db372acdd79bc76130599699a60074758dfc67ecad38c4bcc7a3ae7f1013685616e0a1d86cfd06be11fca39a4823cd832956983b5c0b7613b401ba976370864e0cb49fb3e43862f688e23f30cb8c69302a8fbd414be4bac47a4d2a8c377c0f0869a350d4b5838c857c2de0624a9e3b678813fdd34e1da722e151baf2d637628902641a5e984da5e5e82891e4ed5b88f727ccd35e73bfc4c2140d82f7f947b716e85e5a0fd679ac48bc02b63cf17b426ebc9bbf46877f23a144ac3f536ecfa343abb855bc53db3a92dbad93a21a64f229a1993fa4a66834370d553f1b8fb12da8f97d4047ec64814c6fbd7abdd5023d21a968958516ea140669adfc5f05aa00298fb30a796ff387f5f11f319465a6ce6c362b5eb18e4499aa0c647acc86d88e817baddf8722f298617eba560d44a48db65b3f5e613c9ff63a80b2a7a167bbd0bbc56faa0e6a5a8421bfcee27d8efd8c9a3bb54c2349bf68a4e055b644ba97f8162cfe90cf188f101488755266633c9fd12fcdd0fdac58f2f62b7bd4031f74d6513f26599929ba822869a2a27d9349fafa9794224642fbefa200ce4d51eeb3c41c5b0b2ae081b044ba0ce4ac06d5455ee91d2f566e2e9c52ec68e46a1450fc71c36fb422c47d8de85ae3ca2eaca7caf940540681654b6139ef0966b770d75c50a2bd5a416730a464174c825287b11bb30e1756d602b0b885b3a082b5686ae52fe91ffb69eb69c8d23c082fb9d23e29844b937a5feeabe27dfd360589a737622d6add406245a3583db356cdea3d566c7b45acac219998e415d2ba2839c0474a06acd9cf6088c65b51f7e3aec3ed13c96bf3cbfcc706ec65e87825fd2cf150d16368d2668224bf112098fe77ee5c452e0c861393ea3d07dc4cd8b837f4627acc93b6b2d0a63dfbb21603f2ce151d27edf8ffa8d762b6a49fce3629243905ee1a9706af3748067fa5f1778540fe19de58e3eeac194c75c43b75bf083671e483e54ec78c6e030cf2bb22ce1a4947b5b38c64f9d76c8871e125afcaac9dbd05e40a54fba56e641ab2f04721189b4ba5cc6054786e91b9b526f5667924cf794bce69319b6c7266ad7c5c0041b556bea6e4ad54ec84de42f06a8c6916e9478227a1e16c3003e836b2cae57459aacaa8a40c2a8ccf041ce409add8904a0995e979ee841575c2ecf30dfd1931859035e50ec3846caf146f557673da62bba5e00ec89814f2fba7d57636f9735bda97579191971f3d9a943118106959bc2dfd78437535d3b08833f21a0c309f3eca930f4538060882eff51032e2dcf1ed96b699707cd8f8a8bd6f53e6cc1029c18e040ba1c8037ab4d3bcfc5b92c6e849d2cc3c85b8b0d76f10ed3ce86405d550fe345a9dd52022b77d955d6cb064e4b14d4aee4c662a89dda4203105b12c644d186c4e1b514ede05ec90c7b5a715a29348ef66ed3a59907caf8398723a656bb0735ed1d54f912c534ecbc3e09449cf496925206b0fa35571c3a0a7a2bf7d52e74de118f32af29b22c036854e821403d57ec0623a7f005ccc4a29458415ad12f0dccd5b1c9b94a1922dcc99efa3c583cdd207459d50f4f26d8bab7d5abe3f46176aea5eb24df11c5f857507c42119767092df21ffc9f4c58a1bdaf676bc69a70c12fae7b599e2b1185c34548bb2f14572f8f3cdcf8c830cb45cbf5599f93e2ee9d1457987844544eb73ba3659d232f9a1e68b31fcf29966e3873a3e211aa3e6804749bb99cae6bd5d82a4d77af04151ae083628bc18a1b4d8694d3b9a67627ae8a41b5f0c74532289867c82e7a950fa9a763ca654096be5e5b423d8ce354c07191889ed7fcb923d7f28c9cf0e3775db2ab9aacfb65835dff3e0bccecfd2506c9e64b26cd51e9b084f482f281884e42c1d93eb9f1dd7354697c72f9b9f00725c25ee1a0b0807e054d43bdbe2faaa0b148c14ac46a7ea05c53dff9f32466b00c6c48328c5eb82fe48dff26aed6ec54ba85d01b16d85542e5e4c626eacba8e068ed01b5c88c50bf481948e38bf002494f9f115a7e460a31ef726db49286289cc22cb022ed8db9210efbcc8cb14cc0dd4a1e98fb154421f98373f9248306d52458ed3393e1dc39411d60077b8524f8a745f147ec08d31ce9e97459074bee4aa907f1c42187b61c22024a3cd7a801e775950119e3e8bdce46cfbe0f9d9624ff8d312889f82de6e578420b9a1b17f6a941d96dae6550ea62fa2014d6c64b234140cc6d95e1348a4d67aec5c883d287e34b702b9e852ffd2ffa879ac6f7a35d944e832458ae206f06cb63a32278ee542b5a306a51454074561975c0458d44e1c6016bb87eae681963817581408c27fc7903a4930e9a394d58fd76f0c7f990cadeb1732f63f19a59877f0511f83e8bc2ece91dc0d907d9608c667c0ccbed4bcd4ae3784d6bf71c380f545b024f37438cc280d99f4d248cc29d0857e7b674626d20b53eb0bd4ed64a1343cf7bdb59a0c5186c9b620b35b3de7b85a9cf1db6d2e0eb93180710e657527137fb6f47ae50071d6f002780f0fe707e4cfd580622313795ca543215718c60f2128576e9a2f323481f274f914d17ed007be67a7f3e0d2990e7b9edd23a2eed98decff83f143dea27566bbce0f87d060468b5355aac4d790e1af9fa6d5475f73252231ff28f262df2a3f83a9813037105c529cef55005d1b8fbdbc1f2e02d3d2d79e1685cd27e285923b407432ba9cdacb170b38d0d6925217fcd8ade25679b3709727b83ca8b291921835c6e1de367dcdbe87184f1f87bda12bb7ca279b869de81b3cfca7a0ce66dfc2c399830618ae85ba82afc325baa4ccefd11c1d98344e28186570e555b4eb1db4b0ecbd4273b8d092895a2b61549a581599d17c3b2148db3aee2a299a6e53a3b2239619f3c519450ba6923da2478a3ef9bb05a6e8eb7a18d48c9d4c76f0204dfe8ed2d2ac5be5a85968eab6cb9d857a0fc5ae37329513e2ddbfde6045305d0e6e8f1c9db1d4bc77243190f8b0288932f582fde78ae993816a2e21d02be24fea31c03ee5612343df21022bd88a415ab23cc8232b609e8f957d0b3ea0d56bf1392597a3743da80375d9ec82ea805cf79158149f887a5f7355b8749476f955c60a19b5c000e228795bea4397327182f679c45ebfa8e7cfa33307f0afa734623d60a7d1cb1e2ee1e735441f94d0f5bd2e7d9b4aae80049c50c6dece8a7243ec4ade161fbac0b26dc3269724e50af202a00350aaef0562daeba821b20d42e88f222c34222a4f1344e7b09c06acffe56f1c8a2789e208dd73bb5ef6309906766e7097d7ee8d4d7311bb009650f3e37349fb74390962bf364d8f229f171d84c31c244e3130790975194d6d7fcf9b4c8e54e98e8ee09e8113d8e83b2d18ac75f822fe79356d910cce92cd6356eb9144e3a43ff42d521857ab71456c378f9d5b0bbfc24c2735dcf4aa31a54dfc25fe1e736f796cd703bb46621635ef755cddc6c822d15d4d27242759daa5fea80e1f584e893675aac08a085f554e9b8dea6c899450ac35fd6de0efe0f72cf5d0f746b00450f1fa1dc7ffcef201b9864bcaedbcb27b506abd107c681cdf6868d1169f6104960446b7c402103965de5a4e50608dbc8495b938168bce3cdfa7a9303a012ccaa5314ee3ff49c6d6b02c02ec98ad4dcd4c4fde4ec10ce8208bf975e0a5f3bec01a3b5f68f40b2681c23ad366063649985e66b02426c7a433ef1e22abf9437ed85d7539e803acb52abef4875caaf836bbe1f79cb225f991472c1ef3e1c0554ebd8360f7343a1479f749aaa2eff437073504f23d82ff25c4b291199fd4224668f8903ad212d56d0e89bd14830ddb85444fd07de7fbf4a06c1a1e8d5a2106558eef5255c6df4a0eae10ed5c102dcade4a3b9d736836e8a5eb2ba3356f9eb8c3f7caef02e9fe2099408d6f8da9010e981b1bf5891792c03b3c77f5769272ceb46d18aa0ca87e5d99f6c7903421dd668d98b6cba01efc78c5e439b2c1c89ee583d20fb2fe5a17f7bf739de013af99dfe1368f0705d81faf1e78a7bee670228168a30bfcc9eb29fc4111857152d7446b1737ab0bf9517f23b5be9445e8d1f84b10294c3862b65a142c297e1e983fd4b93c2b0efb8aa95b1252bff9126e918d09a9dea5d76c1f25952dd605028a14237bc6ccbd2d1b38e5c288878bb34a41f3e3d7aa5130792b47e4bf5c1242b3b8b7f1a709851cde6b028bdfe328d72b9352a8281499385f0cc89976b345025abb72cd7b4eb0eecb8a347057dd41de"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x18f4}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) sendto$inet6(r6, &(0x7f00000001c0)="12339d48aee4c99e3be56d957109a766a5034a15a12a", 0x16, 0x800, &(0x7f0000000200)={0xa, 0x4e23, 0x100000, @private0, 0x7}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000580)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073"], 0x34}}, 0x0) 2.753378646s ago: executing program 6 (id=1434): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') unlinkat(r2, &(0x7f00000000c0)='./mnt\x00', 0x200) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x1e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000500000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002010400008000000000000000000000000000bb02350000b9010700050000000300000005000000"], 0x17c}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.666574613s ago: executing program 3 (id=1435): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) setreuid(0xee00, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) getpriority(0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 2.647404664s ago: executing program 7 (id=1436): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 2.406703134s ago: executing program 8 (id=1438): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000004c0)={[{@grpquota}, {@nogrpid}, {@quota}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = getpid() unshare(0x2c020400) syz_clone(0x2080000, 0x0, 0x3c, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="1a1c25bd7000fbdbdf254f0000000c00990006000000040000008c007a8008163525d1000000240001003e2ecef878e8e870cbef597c4a91dbb88a4f976549d08c6e330a991bdbf8fc1f0c0003002ba6b95d565d831d14000100ddbd2dd7bc90df60f79e175dabf764e00c0003005611cf870915d77708000400b20a000014000100cb1ec6392af917888391fd3a4013ef8514000100452ed36269bbb75375593ccae9b05463"], 0xac}, 0x1, 0x0, 0x0, 0xc890}, 0x4008000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@filename='./file1\x00', 0x0, &(0x7f0000000200)={0x0, 0x6, 0x8, 0x6, 0x6, 0x7, 0x1ce, 0xf67, 0xf}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r8, 0x1276, 0x0) 2.313127591s ago: executing program 7 (id=1439): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000003680)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2.148689805s ago: executing program 6 (id=1440): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) 1.940356121s ago: executing program 7 (id=1441): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xfffff801}}, @var={0x8, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x30, 0x2e, 0x61, 0x5f, 0x2e, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x4a, 0x0, 0x1, 0x3}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.763092126s ago: executing program 7 (id=1443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x148, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x11c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xfe, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}]}}, @TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xb2a1, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x1, 0x2, 0x9, 0x7fffffff}, {0x6, 0x7fff, 0x9, 0x7}, {0x3, 0xde5, 0x1, 0xbd}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x49f, 0x7, 0x81, 0xb}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1000, 0x3, 0x2e4, 0x9}, {0x6, 0x8000, 0x8, 0x7}, {0x1, 0x5, 0x5127, 0x800}, {0x80, 0x3, 0x2, 0x1e0}]}}]}}]}, 0x148}}, 0x24040084) 1.710272671s ago: executing program 6 (id=1444): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.532541985s ago: executing program 3 (id=1445): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat(r0, &(0x7f00000002c0)='./mnt\x00', 0x1e1a41, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00') unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d6ad76d09311b0ff", @ANYRES16=r3, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000500000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002010400008000000000000000000000000000bb02350000b9010700050000000300000005000000"], 0x17c}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1.531781685s ago: executing program 6 (id=1446): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat(r0, &(0x7f00000002c0)='./mnt\x00', 0x1e1a41, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00') unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d6ad76d09311b0ff", @ANYRES16=r3, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000500000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002010400008000000000000000000000000000bb02350000b9010700050000000300000005000000"], 0x17c}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1.451206112s ago: executing program 8 (id=1447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) 1.435923893s ago: executing program 7 (id=1448): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00\x00', 0xfdef, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="52894df65b7ceb77cdff0000000000000000b7080000300400207b8af8ff00000000bfa2007383beb60007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80000400, &(0x7f00000004c0)="05cbf773d813d2ee023d9a193a499df4a785956135808692f0b532dad9035b4b1a050c60144c5af66b33884ff9de68459585fc4a731bff7d5fc359a230ffb470bf5e394daa6a14f143fcee9892bb5c9979955b583014a0634e30bb6f697797022dd49873f3fdf776e84daeb7a53efe87aa745e63974cf273d5f12c9a38910f7b42a21fb0e398b82327862135393e1cb5e8fbab6005a655a474a3e61caa2e7740f29aa565baaa725b680fe376d4c6922d045bd56c885ad4d3ea9f24da4eef9f3113b38eb9caa33388", 0xc8, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000380)="b536e9") sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be23", 0x23a, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tgkill(0x0, 0x0, 0x13) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") 1.261792627s ago: executing program 4 (id=1450): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nouid32}]}, 0x1, 0x3e2, &(0x7f0000000c80)="$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") io_setup(0x1, &(0x7f00000004c0)) unlink(&(0x7f0000000000)='./file1\x00') 1.074508092s ago: executing program 8 (id=1451): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000003680)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 956.867122ms ago: executing program 4 (id=1452): r0 = socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0ef", 0xeb}], 0x1}, 0x9fc) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890c, &(0x7f0000000100)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 955.321402ms ago: executing program 3 (id=1453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 942.081293ms ago: executing program 7 (id=1454): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xdd6, 0x6, 0x98, 0x9, 0x7, 0xffffffff, "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"}}, 0xeee) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001200), 0x82, 0x0) fsetxattr$security_ima(r2, &(0x7f0000001240), 0x0, 0x0, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000001580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001b00), 0x0, 0x0) preadv(r2, &(0x7f0000001fc0)=[{&(0x7f0000001c80)=""/8, 0x8}, {&(0x7f0000001d80)=""/181, 0xb5}, {&(0x7f0000001e40)=""/103, 0x67}, {0x0}], 0x4, 0x4, 0x800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$eJzs3c9rE1sUwPHTpm3SljZ58HjwHjw94EY3QxsXLjVIC2JAqU1RF8LUTjRkTMpMqEREsxG3/hGuKu7cCerSTTfiQvfuiiC66UIcyUymJm1a0+ZHY/v9QHtPcu7hnrbTclJIsn71yZ181jWyZkkGYyqDIhXZEElUo5qB2jroxyNSryKnxr99/P/KtesXU+n0zJzqbGr+dFJVJ4+/Cre+mHwZlbXEjfUvyU9r/6z9u/5j/nbO1ZyrhWJJTV0sFkvmom3pUs7NG6qXbct0Lc0VXMtpyGft4vJyWc3C0sTYsmO5rpqFsuatspaKWnLKat4ycwU1DEMnxuRoG2phT2Z1bs5M7Zj2Ih3tCF032uxOx0lVmiczqz3oCQAA9Jnd5/9ggN95/k8vBOsO8//d+8Nn3pTGF4L5//lTkdbmf5HG+f9DW/P/QE+/oX2u0nDrN/M/DgXHSZljtd/fRsz/AAAAAAAAAAAAAAAAAAAAAAD8CTY8L+55Xjxcw4+oiMREJLx90H2iO/b58z97QO2iw+qeuBcTsR+vZEYlWIN8Kis5scWSKYnLd/96qAni2QvpmSn1JeS1/XAlU62srhGJhvWhRLP6Y39NB/XaWD8stWfwBecnJS5/Nz8/2bR+RE6eqOvfkLi8uylFsWXJv66ffa1+rtY/mFY9fym9pX7U3wcAAAAAwGFg6KZtj9/9vL8hJtvzQf0e/j+w5fH1kPzXyktUAgAAAACAtrnle3nTti1nH0FURNoo30PgDXT9iM4FEemLNrYE50SkD9roVRATkeAe3U/5583ylqq8FvYMiUi7X1esh5fWQf9lAgAAANBpv4b+PRS9f9TFjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHpafT2wcP+2VJjYpbzuuIi83Xx7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODI+RkAAP//KGghCg==") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RTC_WIE_ON(r0, 0x700f) inotify_init() setpgid(r4, r4) 923.373824ms ago: executing program 6 (id=1455): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4) 864.561439ms ago: executing program 3 (id=1456): syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x41100, 0x5}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 692.960324ms ago: executing program 6 (id=1457): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000004c0)={[{@grpquota}, {@nogrpid}, {@quota}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = getpid() unshare(0x2c020400) syz_clone(0x2080000, 0x0, 0x3c, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="1a1c25bd7000fbdbdf254f0000000c00990006000000040000008c007a8008163525d1000000240001003e2ecef878e8e870cbef597c4a91dbb88a4f976549d08c6e330a991bdbf8fc1f0c0003002ba6b95d565d831d14000100ddbd2dd7bc90df60f79e175dabf764e00c0003005611cf870915d77708000400b20a000014000100cb1ec6392af917888391fd3a4013ef8514000100452ed36269bbb75375593ccae9b05463"], 0xac}, 0x1, 0x0, 0x0, 0xc890}, 0x4008000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@filename='./file1\x00', 0x0, &(0x7f0000000200)={0x0, 0x6, 0x8, 0x6, 0x6, 0x7, 0x1ce, 0xf67, 0xf}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r8, 0x1276, 0x0) 656.187676ms ago: executing program 4 (id=1458): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x12c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x100, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xb2a1, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x1, 0x2, 0x9, 0x7fffffff}, {0x6, 0x7fff, 0x9, 0x7}, {0x3, 0xde5, 0x1, 0xbd}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x49f, 0x7, 0x81, 0xb}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1000, 0x3, 0x2e4, 0x9}, {0x6, 0x8000, 0x8, 0x7}, {0x1, 0x5, 0x5127, 0x800}, {0x80, 0x3, 0x2, 0x1e0}]}}]}}]}, 0x12c}}, 0x24040084) 544.735116ms ago: executing program 8 (id=1459): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x50) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x125d, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ustat(0xb, &(0x7f0000000780)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) 472.676761ms ago: executing program 4 (id=1460): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0ef", 0xeb}], 0x1}, 0x9fc) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000018c0)={0x114, 0x18, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 452.294853ms ago: executing program 3 (id=1461): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//ysA4A0=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0xffffffffffffffff, 0x0) 327.662523ms ago: executing program 4 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="20002cbd7000fedbdf25010000000900030073797a31000000001400020076657468305f746f5f626174616476000900010073797a3200000000050004000200000014000200766c616e30000000000000000000000014000200687372300000000000000000000000000900030073797a30000000000900030073797a30000000000900010073797a3000004234"], 0x94}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000085) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nouid32}]}, 0x1, 0x3e2, &(0x7f0000000c80)="$eJzs3MtuG1UYAOB/JjeSXhwkFqiwiASCICCuAwGKkChsuWyAB7CStFS4TdUYiZYsCmLFigVix6IvwIIHqCqEhMQr8AKoUoXSLGBnNPaM48ZxYjdO3bTfJ418zsxx/vk9k8k5E88J4LE1FxFnI2IsIhYjopSvT/MlrreWrN3dzY3lrc2N5SQajU/+SSLJ1xU/K8lfj+WV+TQi/S7imevdcdevXvuiWqutXsnr5frFy+X1q9devXCxen71/OqlyptnKpWlxbcqrw8t15+ef+nM2PtnT/38V+nW0uTkdLa/x/NtnXnEE8OJNxdz7c9kp6XhhHhoTI56BwAA6Eua9/3Hm/3/Uow1Sy2lKG+MdOcAAACAoWi8m7/uY2LfFgAAAMDDKzGyBwAAgEdc8T2Au5sby8Uywq8jPHB33ouI2e1nm7fa+Y+3HwOeOMTnW+ci4vILSSlbYudzyAAAh+BW1v85vVv/L42nO9pN5dOiTA85/tyOenf/J7095JD3yPp/70TEVlf/Ly2azI7ltRPNruJEcu5CbfV0RJyMiPmYmMrqlT1ifPDvLx/32pbl/3ty4mSxZPGz1+0W6e3xqXvfs1KtVw+Sc6c730ScGt8t/6Td/00iYuYAMca+vvF2r23753+4GjciXtz1+G/P3JPsPT9RuXk+lIuzott/3/76Ua/4o84/O/4ze+c/m3TO17Q+eIybn//5bK9tneOfQc7/yeTTZrkYl31VrdevVCImkw+71y9uv7eoF+2z/Oef2/33v7j+JfmcVsfza8Cgvv/ht1f6yT9bsvitsWBj6j5CDSzLf2Wg4z944Y2bf3w2eP6F7Pi35gCbz9fsdf0r/j71u4MH/fwAAADgKEib9zWSdKFdTtOFhdb9jqdiJq2trddfPrf25aWV1v2P2ZhIiztdpY77oZXWv9Hb9cUd9dci4smI+LE03awvLK/VVkadPAAAADwmjvUY/2f+Lo167wAAAIChme275bAf/wIAAAAelP7H/wAAAMARdJB5/RQUFB7VwqivTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEfb/wEAAP//nSC1kQ==") io_setup(0x1, &(0x7f00000004c0)) unlink(&(0x7f0000000000)='./file1\x00') 0s ago: executing program 4 (id=1463): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/111, 0x6f}, {}, {&(0x7f00000004c0)=""/212, 0xd4}], 0x4, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x2000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x43c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "7b3ba6d6b5eed034db41132e4ea4223af821fb813ea5e2289283c684dcf3658a84ba974237956e3972e882ee198cdc526209eea775de46f92aaa084afb5f2b146a22bbfbfc46a6db197d8a10c7eff999d4c73162a9497ebd42f3ab9c4de8a2f6c2eccf9111a4c608b3372c1ca2640b3e7550f87c77df5efc14978fb23152e6c2498e1b88a52685dec8ae87126f366161dd0aa4d3409ddee1484adb0907d984f690632b457e13c2d9b1c15259a388e9923e24bc12703480fd10d34de9466f5f9e491c"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':/(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf30e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "a7b0ce9f5763b05ca73b8f98689634a7612aec463f874f308ee456a888301e0a20f3717ebab782107e244d58f2a7bfe28e4d7f9e7c0f3308510a563ff17e58aa532b8abc3397b218dd85b92e127eca9b82b9baa14d96d13b2ba27f4b0b963e8bc3c9387709ec75b460fe4e1b77c8aeae63d97f0bd765305b39c0b437dc13b526c8f44e6db638fd86e9eda043acbe5fc92c53d1303e8c0399befddd338cf92f3061b26c359627acfd3c566f83affb69495c1d70f94654ca6a8da506c9d0a7fec5b0"}, @ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "ebe6e833c425861fcbbe352ebc7601e6609a1afbfdd8c421f81ce27e0d809cadf3a34786b2e502bddc8e73babffb7b8b416380a296b4fb4f95ea05cb409e79cfbad54552903bb134dfa0eea9f94a60aeacbbd250faba239230ed070505c3c998161f877e2a6fb992c7539eb1b4726554d0f9211a1044c238d086545632d5a92bd56d5d49cc90eafacf89b1289f54c24ae46ac34803bd2e0770c20797824fd5a841728c045d55af6a7e29a1"}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "8ee4f4df7ea30e2dc126b231cd2abfd4e42352f35b9926255a49f15f41042143f6488be95fefec77706f9aa99828ded2c5dab87f94a41b7f5d840875a4dd396eac624490cd486751c3b8e49b431172ff7cd9cd3dba5e730f6da4d401c6422a97138f4c0747b30d0771cfa062faee566cf3fdc9aad1a6bc3b84cb5431"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}]}]}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x400c4}, 0x44800) kernel console output (not intermixed with test programs): 201][ T7121] [ 123.578025][ T7126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7126 comm=syz.6.906 [ 123.723299][ T3393] IPVS: starting estimator thread 0... [ 123.769180][ T7123] lo speed is unknown, defaulting to 1000 [ 123.876834][ T7131] IPVS: using max 2544 ests per chain, 127200 per kthread [ 123.919767][ T7138] loop3: detected capacity change from 0 to 2048 [ 123.981444][ T7138] netlink: 'syz.3.909': attribute type 27 has an invalid length. [ 124.058477][ T7136] lo speed is unknown, defaulting to 1000 [ 124.154163][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.199301][ T7138] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.263084][ T7145] loop7: detected capacity change from 0 to 2048 [ 124.273005][ T7138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.343229][ T7145] netlink: 'syz.7.910': attribute type 27 has an invalid length. [ 124.434267][ T7151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.811199][ T7170] loop3: detected capacity change from 0 to 8192 [ 124.903532][ T7177] lo speed is unknown, defaulting to 1000 [ 124.979640][ T10] IPVS: starting estimator thread 0... [ 125.105818][ T7189] IPVS: using max 3216 ests per chain, 160800 per kthread [ 125.143028][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 125.143045][ T29] audit: type=1400 audit(1754205749.148:4914): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.201174][ T29] audit: type=1400 audit(1754205749.148:4915): avc: denied { open } for pid=3297 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.225400][ T29] audit: type=1400 audit(1754205749.148:4916): avc: denied { ioctl } for pid=3297 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.251061][ T29] audit: type=1400 audit(1754205749.187:4917): avc: denied { create } for pid=7195 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.271098][ T29] audit: type=1400 audit(1754205749.187:4918): avc: denied { prog_run } for pid=7181 comm="syz.6.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 125.352930][ T29] audit: type=1400 audit(1754205749.356:4919): avc: denied { getattr } for pid=7198 comm="syz.8.924" name="/" dev="iomem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.376270][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7202 comm=syz.3.925 [ 125.393758][ T29] audit: type=1400 audit(1754205749.356:4920): avc: denied { lock } for pid=7198 comm="syz.8.924" path="socket:[20570]" dev="sockfs" ino=20570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 125.466793][ T29] audit: type=1400 audit(1754205749.435:4921): avc: denied { create } for pid=7199 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.487633][ T29] audit: type=1326 audit(1754205749.445:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549a92eb69 code=0x7ffc0000 [ 125.511251][ T29] audit: type=1326 audit(1754205749.445:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549a92eb69 code=0x7ffc0000 [ 125.763900][ T7210] lo speed is unknown, defaulting to 1000 [ 125.826693][ T7212] loop4: detected capacity change from 0 to 2048 [ 126.386164][ T7219] lo speed is unknown, defaulting to 1000 [ 126.463764][ T7212] EXT4-fs mount: 38 callbacks suppressed [ 126.463785][ T7212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.488831][ T7212] netlink: 'syz.4.929': attribute type 27 has an invalid length. [ 126.548969][ T7212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.560873][ T7212] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.587141][ T7212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.646923][ T7212] __nla_validate_parse: 18 callbacks suppressed [ 126.646938][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 126.662244][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 126.692580][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 126.742647][ T7239] lo speed is unknown, defaulting to 1000 [ 126.762340][ T7242] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 126.816489][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 126.825394][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 126.840790][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 126.858693][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 126.888011][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.937'. [ 126.908577][ T7258] loop8: detected capacity change from 0 to 1024 [ 126.919578][ T7230] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.939195][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.026448][ T7262] loop4: detected capacity change from 0 to 2048 [ 127.051924][ T7262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.077407][ T10] hid (null): invalid report_size -1413666444 [ 127.083703][ T10] hid (null): unknown global tag 0xd [ 127.089102][ T10] hid (null): report_id 2222385494 is invalid [ 127.095240][ T10] hid (null): global environment stack underflow [ 127.101615][ T10] hid (null): unknown global tag 0xf4 [ 127.107041][ T10] hid (null): unknown global tag 0x1c [ 127.112561][ T10] hid (null): unknown global tag 0xe [ 127.117859][ T10] hid (null): unknown global tag 0xc [ 127.120504][ T7262] netlink: 'syz.4.940': attribute type 27 has an invalid length. [ 127.123203][ T10] hid (null): unknown global tag 0xd [ 127.136275][ T10] hid (null): unknown global tag 0xe [ 127.136913][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.8.941'. [ 127.141725][ T10] hid (null): unknown global tag 0x9f [ 127.155853][ T10] hid (null): unknown global tag 0xe [ 127.161208][ T10] hid (null): unknown global tag 0xe [ 127.161227][ T10] hid (null): unknown global tag 0xe [ 127.161341][ T10] hid (null): unknown global tag 0xc [ 127.161446][ T10] hid (null): unknown global tag 0xe [ 127.161493][ T10] hid (null): bogus close delimiter [ 127.161504][ T10] hid (null): unknown global tag 0xc [ 127.165319][ T10] hid (null): invalid report_count 32141 [ 127.165353][ T10] hid (null): unknown global tag 0xd [ 127.165378][ T10] hid (null): unknown global tag 0xe [ 127.165423][ T10] hid (null): unknown global tag 0xc [ 127.170131][ T10] hid (null): unknown global tag 0xc [ 127.170145][ T10] hid (null): unknown global tag 0xe [ 127.170179][ T10] hid (null): unknown global tag 0xc [ 127.170229][ T10] hid (null): unknown global tag 0xc [ 127.170263][ T10] hid (null): unknown global tag 0xc [ 127.174052][ T10] hid (null): unknown global tag 0xd [ 127.174090][ T10] hid (null): unknown global tag 0x3d [ 127.174149][ T10] hid (null): unknown global tag 0xe [ 127.174182][ T10] hid (null): invalid report_count 52049 [ 127.174228][ T10] hid (null): unknown global tag 0xc [ 127.326760][ T7275] loop3: detected capacity change from 0 to 128 [ 127.342241][ T10] hid-generic 0006:0098:0009.0029: collection stack underflow [ 127.350036][ T10] hid-generic 0006:0098:0009.0029: item 0 0 0 12 parsing failed [ 127.354592][ T7275] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.362005][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.377821][ T7275] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.389426][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.392043][ T10] hid-generic 0006:0098:0009.0029: probe with driver hid-generic failed with error -22 [ 127.408330][ T7273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.494860][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.598430][ T7277] loop4: detected capacity change from 0 to 512 [ 127.634310][ T7277] EXT4-fs (loop4): too many log groups per flexible block group [ 127.642134][ T7277] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 127.760743][ T7270] lo speed is unknown, defaulting to 1000 [ 127.826284][ T7277] EXT4-fs (loop4): mount failed [ 127.952591][ T7288] loop6: detected capacity change from 0 to 512 [ 127.990931][ T7288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.020551][ T7288] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.103057][ T7288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19028 sclass=netlink_route_socket pid=7288 comm=syz.6.946 [ 128.134143][ T7297] loop3: detected capacity change from 0 to 2048 [ 128.147514][ T7288] capability: warning: `syz.6.946' uses 32-bit capabilities (legacy support in use) [ 128.199391][ T7297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.217454][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.241331][ T7301] loop8: detected capacity change from 0 to 2048 [ 128.271702][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.286968][ T7303] FAULT_INJECTION: forcing a failure. [ 128.286968][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 128.288761][ T7301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.299705][ T7303] CPU: 1 UID: 0 PID: 7303 Comm: syz.6.950 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 128.299752][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.299765][ T7303] Call Trace: [ 128.299773][ T7303] [ 128.299782][ T7303] __dump_stack+0x1d/0x30 [ 128.299891][ T7303] dump_stack_lvl+0xe8/0x140 [ 128.299911][ T7303] dump_stack+0x15/0x1b [ 128.299979][ T7303] should_fail_ex+0x265/0x280 [ 128.300013][ T7303] should_failslab+0x8c/0xb0 [ 128.300049][ T7303] kmem_cache_alloc_node_noprof+0x57/0x320 [ 128.300081][ T7303] ? __alloc_skb+0x101/0x320 [ 128.300143][ T7303] __alloc_skb+0x101/0x320 [ 128.300170][ T7303] ? audit_log_start+0x365/0x6c0 [ 128.300204][ T7303] audit_log_start+0x380/0x6c0 [ 128.300235][ T7303] audit_seccomp+0x48/0x100 [ 128.300337][ T7303] ? __seccomp_filter+0x68c/0x10d0 [ 128.300369][ T7303] __seccomp_filter+0x69d/0x10d0 [ 128.300392][ T7303] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 128.300421][ T7303] ? vfs_write+0x75e/0x8e0 [ 128.300476][ T7303] ? __rcu_read_unlock+0x4f/0x70 [ 128.300522][ T7303] ? __fget_files+0x184/0x1c0 [ 128.300549][ T7303] __secure_computing+0x82/0x150 [ 128.300571][ T7303] syscall_trace_enter+0xcf/0x1e0 [ 128.300597][ T7303] do_syscall_64+0xac/0x200 [ 128.300668][ T7303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.300693][ T7303] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.300715][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.300737][ T7303] RIP: 0033:0x7f5d47bfeb69 [ 128.300789][ T7303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.300808][ T7303] RSP: 002b:00007f5d4625f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 128.300827][ T7303] RAX: ffffffffffffffda RBX: 00007f5d47e25fa0 RCX: 00007f5d47bfeb69 [ 128.300841][ T7303] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 [ 128.300854][ T7303] RBP: 00007f5d4625f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.300866][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.300879][ T7303] R13: 0000000000000000 R14: 00007f5d47e25fa0 R15: 00007ffe0a530f78 [ 128.300898][ T7303] [ 128.539197][ T7301] netlink: 'syz.8.951': attribute type 27 has an invalid length. [ 128.602489][ T10] lo speed is unknown, defaulting to 1000 [ 128.608247][ T10] syz0: Port: 1 Link DOWN [ 128.626990][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.636545][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.652556][ T7317] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 128.664615][ T7314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.680569][ T10] lo speed is unknown, defaulting to 1000 [ 128.686456][ T10] syz0: Port: 1 Link ACTIVE [ 128.701137][ T7317] bond2: entered promiscuous mode [ 128.706220][ T7317] bond2: entered allmulticast mode [ 128.711789][ T7317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.762729][ T6196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.663583][ T7353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7353 comm=syz.8.964 [ 129.767305][ T7359] tipc: Can't bind to reserved service type 1 [ 129.837091][ T7368] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 129.852571][ T7368] bond3: entered promiscuous mode [ 129.857801][ T7368] bond3: entered allmulticast mode [ 129.863324][ T7368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.905110][ T7372] netlink: 'syz.8.969': attribute type 1 has an invalid length. [ 129.915603][ T7371] lo speed is unknown, defaulting to 1000 [ 130.043493][ T7372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.081985][ T7376] gretap1: entered promiscuous mode [ 130.149722][ T7372] macvlan2: entered promiscuous mode [ 130.155081][ T7372] macvlan2: entered allmulticast mode [ 130.195219][ T7372] bond3: entered promiscuous mode [ 130.207863][ T7372] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.227227][ T7372] bond3: left promiscuous mode [ 130.262911][ T7381] loop3: detected capacity change from 0 to 2048 [ 130.312464][ T7381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.493755][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.562581][ T7386] loop3: detected capacity change from 0 to 2048 [ 130.586697][ T7386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.627531][ T7386] netlink: 'syz.3.974': attribute type 27 has an invalid length. [ 130.677075][ T7386] bond2: left promiscuous mode [ 130.681911][ T7386] bond2: left allmulticast mode [ 130.701577][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 130.701657][ T29] audit: type=1400 audit(1754205754.671:5265): avc: denied { read write } for pid=7391 comm="syz.8.976" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.731960][ T29] audit: type=1400 audit(1754205754.671:5266): avc: denied { open } for pid=7391 comm="syz.8.976" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.760174][ T7393] loop8: detected capacity change from 0 to 2048 [ 130.768830][ T7386] bond3: left promiscuous mode [ 130.773753][ T7386] bond3: left allmulticast mode [ 130.793364][ T7393] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.810873][ T29] audit: type=1400 audit(1754205754.731:5267): avc: denied { ioctl } for pid=7391 comm="syz.8.976" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.828511][ T7393] netlink: 'syz.8.976': attribute type 27 has an invalid length. [ 130.836336][ T29] audit: type=1400 audit(1754205754.731:5268): avc: denied { write } for pid=7388 comm="syz.6.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.845785][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.864368][ T29] audit: type=1326 audit(1754205754.731:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.6.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d47bfeb69 code=0x7ffc0000 [ 130.894258][ T29] audit: type=1326 audit(1754205754.731:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.6.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d47bfeb69 code=0x7ffc0000 [ 130.896255][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.917762][ T29] audit: type=1326 audit(1754205754.731:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.6.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5d47bfeb69 code=0x7ffc0000 [ 130.947389][ T29] audit: type=1326 audit(1754205754.731:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.6.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d47bfeb69 code=0x7ffc0000 [ 130.970853][ T29] audit: type=1326 audit(1754205754.731:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.6.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d47bfeb69 code=0x7ffc0000 [ 130.994183][ T29] audit: type=1400 audit(1754205754.731:5274): avc: denied { map_create } for pid=7388 comm="syz.6.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.018675][ T7395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.055602][ T7398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.071129][ T7390] lo speed is unknown, defaulting to 1000 [ 131.098908][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.119547][ T7393] gretap1: left promiscuous mode [ 131.124914][ T10] lo speed is unknown, defaulting to 1000 [ 131.130728][ T10] syz0: Port: 1 Link DOWN [ 131.166650][ T6196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.252801][ T7410] hub 9-0:1.0: USB hub found [ 131.257639][ T7410] hub 9-0:1.0: 8 ports detected [ 131.397304][ T1068] hid (null): invalid report_size -1413666444 [ 131.403578][ T1068] hid (null): unknown global tag 0xd [ 131.409574][ T1068] hid (null): report_id 2222385494 is invalid [ 131.415811][ T1068] hid (null): global environment stack underflow [ 131.422314][ T1068] hid (null): unknown global tag 0xf4 [ 131.427820][ T1068] hid (null): unknown global tag 0x1c [ 131.433343][ T1068] hid (null): unknown global tag 0xe [ 131.438672][ T1068] hid (null): unknown global tag 0xc [ 131.443992][ T1068] hid (null): unknown global tag 0xd [ 131.449379][ T1068] hid (null): unknown global tag 0xe [ 131.454737][ T1068] hid (null): unknown global tag 0x9f [ 131.460232][ T1068] hid (null): unknown global tag 0xe [ 131.465529][ T1068] hid (null): unknown global tag 0xe [ 131.470854][ T1068] hid (null): unknown global tag 0xe [ 131.476227][ T1068] hid (null): unknown global tag 0xc [ 131.481595][ T1068] hid (null): unknown global tag 0xe [ 131.486946][ T1068] hid (null): bogus close delimiter [ 131.492207][ T1068] hid (null): unknown global tag 0xc [ 131.501616][ T1068] hid (null): invalid report_count 32141 [ 131.507310][ T1068] hid (null): unknown global tag 0xd [ 131.512811][ T1068] hid (null): unknown global tag 0xe [ 131.518141][ T1068] hid (null): unknown global tag 0xc [ 131.528148][ T1068] hid (null): unknown global tag 0xc [ 131.533514][ T1068] hid (null): unknown global tag 0xe [ 131.538843][ T1068] hid (null): unknown global tag 0xc [ 131.544197][ T1068] hid (null): unknown global tag 0xc [ 131.549521][ T1068] hid (null): unknown global tag 0xc [ 131.559052][ T1068] hid (null): unknown global tag 0xd [ 131.564476][ T1068] hid (null): unknown global tag 0x3d [ 131.570015][ T1068] hid (null): unknown global tag 0xe [ 131.575341][ T1068] hid (null): invalid report_count 52049 [ 131.581060][ T1068] hid (null): unknown global tag 0xc [ 131.704279][ T7418] loop6: detected capacity change from 0 to 128 [ 131.737235][ T7418] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.754047][ T7418] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.779780][ T7420] lo speed is unknown, defaulting to 1000 [ 131.802443][ T1068] hid-generic 0006:0098:0009.002A: collection stack underflow [ 131.809960][ T1068] hid-generic 0006:0098:0009.002A: item 0 0 0 12 parsing failed [ 131.831350][ T1068] hid-generic 0006:0098:0009.002A: probe with driver hid-generic failed with error -22 [ 131.876502][ T7422] lo speed is unknown, defaulting to 1000 [ 131.954038][ T7430] Falling back ldisc for ttyS3. [ 132.042342][ T7442] loop7: detected capacity change from 0 to 2048 [ 132.232453][ T7442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.273743][ T7449] loop4: detected capacity change from 0 to 2048 [ 132.277612][ T7442] netlink: 'syz.7.989': attribute type 27 has an invalid length. [ 132.343430][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.354807][ T7449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.376834][ T7442] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.384272][ T7449] netlink: 'syz.4.991': attribute type 27 has an invalid length. [ 132.401328][ T7452] __nla_validate_parse: 30 callbacks suppressed [ 132.401346][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.989'. [ 132.415173][ T7454] siw: device registration error -23 [ 132.416717][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.989'. [ 132.430882][ T7442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.448899][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.989'. [ 132.493556][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.989'. [ 132.495333][ T7458] loop6: detected capacity change from 0 to 2048 [ 132.502431][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.989'. [ 132.507462][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.528905][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.989'. [ 132.545121][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 132.550391][ T7455] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.554272][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 132.576242][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 132.591756][ T7460] FAULT_INJECTION: forcing a failure. [ 132.591756][ T7460] name failslab, interval 1, probability 0, space 0, times 0 [ 132.604678][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz.3.994 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 132.604712][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.604752][ T7460] Call Trace: [ 132.604758][ T7460] [ 132.604764][ T7460] __dump_stack+0x1d/0x30 [ 132.604786][ T7460] dump_stack_lvl+0xe8/0x140 [ 132.604805][ T7460] dump_stack+0x15/0x1b [ 132.604820][ T7460] should_fail_ex+0x265/0x280 [ 132.604856][ T7460] should_failslab+0x8c/0xb0 [ 132.604883][ T7460] kmem_cache_alloc_noprof+0x50/0x310 [ 132.604912][ T7460] ? skb_clone+0x151/0x1f0 [ 132.604987][ T7460] skb_clone+0x151/0x1f0 [ 132.605005][ T7460] __netlink_deliver_tap+0x2c9/0x500 [ 132.605046][ T7460] netlink_unicast+0x66b/0x690 [ 132.605088][ T7460] netlink_sendmsg+0x58b/0x6b0 [ 132.605228][ T7460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.605265][ T7460] __sock_sendmsg+0x145/0x180 [ 132.605354][ T7460] sock_write_iter+0x165/0x1b0 [ 132.605383][ T7460] do_iter_readv_writev+0x421/0x4c0 [ 132.605476][ T7460] vfs_writev+0x2df/0x8b0 [ 132.605517][ T7460] do_writev+0xe7/0x210 [ 132.605548][ T7460] __x64_sys_writev+0x45/0x50 [ 132.605576][ T7460] x64_sys_call+0x1e9a/0x2ff0 [ 132.605646][ T7460] do_syscall_64+0xd2/0x200 [ 132.605670][ T7460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.605697][ T7460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.605720][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.605815][ T7460] RIP: 0033:0x7f549a92eb69 [ 132.605832][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.605852][ T7460] RSP: 002b:00007f5498f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 132.605873][ T7460] RAX: ffffffffffffffda RBX: 00007f549ab55fa0 RCX: 00007f549a92eb69 [ 132.605886][ T7460] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000008 [ 132.605900][ T7460] RBP: 00007f5498f97090 R08: 0000000000000000 R09: 0000000000000000 [ 132.605913][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.605955][ T7460] R13: 0000000000000000 R14: 00007f549ab55fa0 R15: 00007ffeee93ad18 [ 132.605974][ T7460] [ 132.611323][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.989'. [ 132.638121][ T7458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.842468][ T7455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.864013][ T7460] 0·: renamed from hsr0 [ 132.890895][ T7460] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.901215][ T7460] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.919917][ T7460] 0·: entered allmulticast mode [ 132.924831][ T7460] hsr_slave_0: entered allmulticast mode [ 132.930539][ T7460] hsr_slave_1: entered allmulticast mode [ 132.936933][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.970146][ T7460] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 132.986520][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.024864][ T7472] loop6: detected capacity change from 0 to 256 [ 133.049758][ T7472] vfat: Bad value for 'tz' [ 133.154081][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.263721][ T7495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7495 comm=syz.4.997 [ 133.292179][ T7489] Invalid option length (1265) for dns_resolver key [ 133.299178][ T7482] lo speed is unknown, defaulting to 1000 [ 133.343475][ T7489] loop3: detected capacity change from 0 to 512 [ 133.383403][ T7489] EXT4-fs (loop3): too many log groups per flexible block group [ 133.391193][ T7489] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 133.398885][ T7489] EXT4-fs (loop3): mount failed [ 133.537883][ T7503] loop4: detected capacity change from 0 to 512 [ 133.586564][ T7503] EXT4-fs (loop4): too many log groups per flexible block group [ 133.594413][ T7503] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 133.629380][ T7503] EXT4-fs (loop4): mount failed [ 133.693445][ T7513] loop3: detected capacity change from 0 to 512 [ 133.718623][ T7513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.800661][ T7513] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1006: bg 0: block 321: padding at end of block bitmap is not set [ 134.006469][ T7518] lo speed is unknown, defaulting to 1000 [ 134.049072][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.176652][ T7535] loop6: detected capacity change from 0 to 2048 [ 134.216848][ T7535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.227437][ T7534] loop4: detected capacity change from 0 to 8192 [ 134.250585][ T7535] netlink: 'syz.6.1013': attribute type 27 has an invalid length. [ 134.268717][ T7540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7540 comm=syz.3.1015 [ 134.423225][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.461051][ T7541] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.491078][ T7550] loop7: detected capacity change from 0 to 2048 [ 134.500678][ T7541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.588270][ T7550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.626514][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.653822][ T7550] netlink: 'syz.7.1019': attribute type 27 has an invalid length. [ 134.806007][ T7564] loop6: detected capacity change from 0 to 1024 [ 134.824810][ T7564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.832812][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.859512][ T7564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.862246][ T7560] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.873069][ T7564] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 16: comm syz.6.1022: bad entry in directory: rec_len is too small for name_len - offset=76, inode=16, rec_len=16, size=1024 fake=0 [ 134.898252][ T7560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.899599][ T7564] EXT4-fs (loop6): Remounting filesystem read-only [ 134.975412][ T7574] loop3: detected capacity change from 0 to 512 [ 135.004251][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.027438][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.060910][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.137889][ T7574] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.203930][ T7586] loop6: detected capacity change from 0 to 2048 [ 135.212115][ T7583] loop8: detected capacity change from 0 to 1024 [ 135.237524][ T7586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.276890][ T7586] netlink: 'syz.6.1028': attribute type 27 has an invalid length. [ 135.327177][ T7595] siw: device registration error -23 [ 135.376420][ T7594] loop8: detected capacity change from 0 to 8192 [ 135.387315][ T7596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.395170][ T7596] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.411221][ T7596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.475203][ T7603] hub 9-0:1.0: USB hub found [ 135.493347][ T7599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7599 comm=syz.4.1031 [ 135.528069][ T7603] hub 9-0:1.0: 8 ports detected [ 135.534392][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.562034][ T7607] loop6: detected capacity change from 0 to 1024 [ 135.572948][ T7607] EXT4-fs: Ignoring removed orlov option [ 135.594965][ T7607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.688251][ T10] hid (null): invalid report_size -1413666444 [ 135.694562][ T10] hid (null): unknown global tag 0xd [ 135.694651][ T10] hid (null): report_id 2222385494 is invalid [ 135.694670][ T10] hid (null): global environment stack underflow [ 135.694739][ T10] hid (null): unknown global tag 0xf4 [ 135.694862][ T10] hid (null): unknown global tag 0x1c [ 135.695025][ T10] hid (null): unknown global tag 0xe [ 135.695055][ T10] hid (null): unknown global tag 0xc [ 135.695104][ T10] hid (null): unknown global tag 0xd [ 135.695185][ T10] hid (null): unknown global tag 0xe [ 135.695231][ T10] hid (null): unknown global tag 0x9f [ 135.695251][ T10] hid (null): unknown global tag 0xe [ 135.695264][ T10] hid (null): unknown global tag 0xe [ 135.695276][ T10] hid (null): unknown global tag 0xe [ 135.695328][ T10] hid (null): unknown global tag 0xc [ 135.695434][ T10] hid (null): unknown global tag 0xe [ 135.695490][ T10] hid (null): bogus close delimiter [ 135.695502][ T10] hid (null): unknown global tag 0xc [ 135.699559][ T10] hid (null): invalid report_count 32141 [ 135.699590][ T10] hid (null): unknown global tag 0xd [ 135.699614][ T10] hid (null): unknown global tag 0xe [ 135.699657][ T10] hid (null): unknown global tag 0xc [ 135.703744][ T10] hid (null): unknown global tag 0xc [ 135.703761][ T10] hid (null): unknown global tag 0xe [ 135.703786][ T10] hid (null): unknown global tag 0xc [ 135.703832][ T10] hid (null): unknown global tag 0xc [ 135.703863][ T10] hid (null): unknown global tag 0xc [ 135.707703][ T10] hid (null): unknown global tag 0xd [ 135.707741][ T10] hid (null): unknown global tag 0x3d [ 135.707765][ T10] hid (null): unknown global tag 0xe [ 135.707812][ T10] hid (null): invalid report_count 52049 [ 135.707854][ T10] hid (null): unknown global tag 0xc [ 135.728556][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.745682][ T10] hid-generic 0006:0098:0009.002B: collection stack underflow [ 135.756854][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 135.756949][ T29] audit: type=1400 audit(1754205759.694:5662): avc: denied { setattr } for pid=7615 comm="syz.8.1038" name="vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 135.761880][ T10] hid-generic 0006:0098:0009.002B: item 0 0 0 12 parsing failed [ 135.955887][ T10] hid-generic 0006:0098:0009.002B: probe with driver hid-generic failed with error -22 [ 135.987047][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.998896][ T29] audit: type=1400 audit(1754205759.932:5663): avc: denied { create } for pid=7621 comm="syz.6.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.072807][ T7619] loop8: detected capacity change from 0 to 128 [ 136.100562][ T7619] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.482259][ T7619] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.574049][ T29] audit: type=1400 audit(1754205760.448:5664): avc: denied { getattr } for pid=7635 comm="syz.4.1042" name="/" dev="iomem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 136.622916][ T29] audit: type=1400 audit(1754205760.548:5665): avc: denied { lock } for pid=7640 comm="syz.3.1040" path="socket:[21322]" dev="sockfs" ino=21322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 136.656047][ T29] audit: type=1326 audit(1754205760.548:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.7.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 136.679767][ T29] audit: type=1326 audit(1754205760.548:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.7.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 136.684947][ T7644] loop4: detected capacity change from 0 to 2048 [ 136.703292][ T29] audit: type=1326 audit(1754205760.548:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.7.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 136.733172][ T29] audit: type=1326 audit(1754205760.548:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.7.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 136.756726][ T29] audit: type=1326 audit(1754205760.548:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.7.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 136.780264][ T29] audit: type=1326 audit(1754205760.548:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.7.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 136.839286][ T7644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.854621][ T7657] loop7: detected capacity change from 0 to 512 [ 136.874180][ T7657] EXT4-fs (loop7): orphan cleanup on readonly fs [ 136.922184][ T7644] netlink: 'syz.4.1045': attribute type 27 has an invalid length. [ 136.930548][ T7657] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1043: Failed to acquire dquot type 1 [ 136.968821][ T7660] netlink: 'syz.3.1048': attribute type 1 has an invalid length. [ 136.986473][ T7657] EXT4-fs (loop7): 1 truncate cleaned up [ 136.993048][ T7657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.015066][ T7642] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 137.028384][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.038106][ T7661] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.052080][ T7661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.080552][ T7616] lo speed is unknown, defaulting to 1000 [ 137.084221][ T7662] bond4: entered promiscuous mode [ 137.091966][ T7662] bond4: entered allmulticast mode [ 137.098843][ T7662] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.113719][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.199504][ T7666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7666 comm=syz.6.1049 [ 137.224543][ T7668] loop3: detected capacity change from 0 to 764 [ 137.254936][ T7668] iso9660: Unknown parameter '00000000000000000000' [ 137.366838][ T7675] loop3: detected capacity change from 0 to 8192 [ 137.374147][ T7680] hub 9-0:1.0: USB hub found [ 137.379019][ T7680] hub 9-0:1.0: 8 ports detected [ 137.463091][ T7685] loop6: detected capacity change from 0 to 512 [ 137.538120][ T7685] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1058: corrupted inode contents [ 137.552294][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.627840][ T7685] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.1058: mark_inode_dirty error [ 137.684973][ T7685] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1058: corrupted inode contents [ 137.709814][ T7685] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1058: mark_inode_dirty error [ 137.769872][ T7685] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1058: corrupted inode contents [ 137.770361][ T7704] loop3: detected capacity change from 0 to 512 [ 137.790767][ T7685] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 137.801816][ T7685] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1058: corrupted inode contents [ 137.816110][ T7685] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.1058: mark_inode_dirty error [ 137.827513][ T7685] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 137.838015][ T7685] EXT4-fs (loop6): 1 truncate cleaned up [ 137.844008][ T7685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.857978][ T5708] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 1 [ 137.869902][ T7685] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.890321][ T7685] __nla_validate_parse: 32 callbacks suppressed [ 137.890334][ T7685] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1058'. [ 137.922517][ T7704] EXT4-fs (loop3): too many log groups per flexible block group [ 137.930333][ T7704] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 137.942011][ T7685] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm ,&#^%: iget: bad i_size value: 360287970189639690 [ 137.951309][ T7704] EXT4-fs (loop3): mount failed [ 137.988626][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.005928][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1059'. [ 138.018519][ T7721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7721 comm=syz.4.1067 [ 138.057155][ T7723] loop3: detected capacity change from 0 to 2048 [ 138.066723][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 138.092542][ T7725] loop6: detected capacity change from 0 to 8192 [ 138.109845][ T7723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.139470][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 138.157531][ T7723] netlink: 'syz.3.1069': attribute type 27 has an invalid length. [ 138.188415][ T7723] 0·: left allmulticast mode [ 138.193126][ T7723] hsr_slave_0: left allmulticast mode [ 138.198688][ T7723] hsr_slave_1: left allmulticast mode [ 138.205263][ T7723] bond4: left promiscuous mode [ 138.210122][ T7723] bond4: left allmulticast mode [ 138.247348][ T7733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.268027][ T7733] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.277500][ T7733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.282454][ T7736] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1070'. [ 138.306867][ T7729] lo speed is unknown, defaulting to 1000 [ 138.312838][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 138.334811][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.526545][ T7752] loop3: detected capacity change from 0 to 512 [ 138.540472][ T7752] EXT4-fs (loop3): too many log groups per flexible block group [ 138.548263][ T7752] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 138.555438][ T7752] EXT4-fs (loop3): mount failed [ 138.616904][ T7759] hub 9-0:1.0: USB hub found [ 138.625331][ T7759] hub 9-0:1.0: 8 ports detected [ 138.661802][ T7763] loop3: detected capacity change from 0 to 8192 [ 138.727488][ T7768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7768 comm=syz.8.1082 [ 138.769078][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1082'. [ 138.797676][ T7770] loop7: detected capacity change from 0 to 1024 [ 138.868166][ T7770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.990298][ T7789] loop3: detected capacity change from 0 to 1024 [ 138.999618][ T7789] EXT4-fs: Ignoring removed orlov option [ 139.013228][ T7789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.132774][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.188228][ T7793] loop4: detected capacity change from 0 to 512 [ 139.363943][ T7793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.443387][ T7793] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.454327][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 139.478286][ T7806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7806 comm=syz.6.1092 [ 139.511999][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1092'. [ 139.553227][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.565713][ T7793] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1089: corrupted xattr block 19: overlapping e_value [ 139.581943][ T7793] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 139.591370][ T7793] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1089: corrupted xattr block 19: overlapping e_value [ 139.605507][ T7793] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 139.614739][ T7793] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1089: corrupted xattr block 19: overlapping e_value [ 139.628988][ T7793] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1089: corrupted xattr block 19: overlapping e_value [ 139.643903][ T7793] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 139.671917][ T7818] netlink: 'syz.8.1094': attribute type 1 has an invalid length. [ 139.682881][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.692837][ T7818] bond4: entered promiscuous mode [ 139.698017][ T7818] bond4: entered allmulticast mode [ 139.703333][ T7818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.721598][ T7818] netlink: 7 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 139.753279][ T3373] hid (null): invalid report_size -1413666444 [ 139.759495][ T3373] hid (null): unknown global tag 0xd [ 139.759586][ T3373] hid (null): report_id 2222385494 is invalid [ 139.759667][ T3373] hid (null): global environment stack underflow [ 139.777544][ T3373] hid (null): unknown global tag 0xf4 [ 139.783197][ T3373] hid (null): unknown global tag 0x1c [ 139.788804][ T3373] hid (null): unknown global tag 0xe [ 139.794233][ T3373] hid (null): unknown global tag 0xc [ 139.799595][ T3373] hid (null): unknown global tag 0xd [ 139.805001][ T3373] hid (null): unknown global tag 0xe [ 139.810461][ T3373] hid (null): unknown global tag 0x9f [ 139.815919][ T3373] hid (null): unknown global tag 0xe [ 139.821274][ T3373] hid (null): unknown global tag 0xe [ 139.826593][ T3373] hid (null): unknown global tag 0xe [ 139.831970][ T3373] hid (null): unknown global tag 0xc [ 139.837305][ T3373] hid (null): unknown global tag 0xe [ 139.842754][ T3373] hid (null): bogus close delimiter [ 139.847991][ T3373] hid (null): unknown global tag 0xc [ 139.856855][ T3373] hid (null): invalid report_count 32141 [ 139.862706][ T3373] hid (null): unknown global tag 0xd [ 139.868156][ T3373] hid (null): unknown global tag 0xe [ 139.873505][ T3373] hid (null): unknown global tag 0xc [ 139.883370][ T7832] loop4: detected capacity change from 0 to 128 [ 139.883472][ T3373] hid (null): unknown global tag 0xc [ 139.893407][ T7833] loop8: detected capacity change from 0 to 1024 [ 139.895027][ T3373] hid (null): unknown global tag 0xe [ 139.906752][ T3373] hid (null): unknown global tag 0xc [ 139.910509][ T7833] EXT4-fs: Ignoring removed orlov option [ 139.912135][ T3373] hid (null): unknown global tag 0xc [ 139.923062][ T3373] hid (null): unknown global tag 0xc [ 139.923447][ T7832] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.932139][ T3373] hid (null): unknown global tag 0xd [ 139.945500][ T3373] hid (null): unknown global tag 0x3d [ 139.950946][ T3373] hid (null): unknown global tag 0xe [ 139.956322][ T3373] hid (null): invalid report_count 52049 [ 139.958621][ T7833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.962045][ T3373] hid (null): unknown global tag 0xc [ 139.963408][ T3373] hid-generic 0006:0098:0009.002C: collection stack underflow [ 139.987349][ T3373] hid-generic 0006:0098:0009.002C: item 0 0 0 12 parsing failed [ 139.995419][ T3373] hid-generic 0006:0098:0009.002C: probe with driver hid-generic failed with error -22 [ 140.000285][ T7830] lo speed is unknown, defaulting to 1000 [ 140.013214][ T7832] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.045137][ T6196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.146241][ T7844] Invalid option length (1265) for dns_resolver key [ 140.164981][ T7844] loop3: detected capacity change from 0 to 512 [ 140.183441][ T7844] /dev/loop3: Can't open blockdev [ 140.335590][ T7858] loop4: detected capacity change from 0 to 1024 [ 140.357426][ T7858] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 140.434609][ T7867] loop6: detected capacity change from 0 to 1024 [ 140.454821][ T7869] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 140.477218][ T7867] EXT4-fs: Ignoring removed orlov option [ 140.489779][ T7867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.524696][ T7869] bond4: entered promiscuous mode [ 140.529877][ T7869] bond4: entered allmulticast mode [ 140.547763][ T7869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.558107][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.602623][ T7881] Invalid option length (1265) for dns_resolver key [ 140.660641][ T7881] loop7: detected capacity change from 0 to 512 [ 140.716713][ T7881] EXT4-fs (loop7): too many log groups per flexible block group [ 140.724495][ T7881] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 140.735689][ T7889] loop4: detected capacity change from 0 to 2048 [ 140.740158][ T7881] EXT4-fs (loop7): mount failed [ 140.786609][ T7889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.839179][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 140.839219][ T29] audit: type=1400 audit(1754205764.739:6079): avc: denied { create } for pid=7887 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.867295][ T7889] netlink: 'syz.4.1119': attribute type 27 has an invalid length. [ 141.016156][ T7889] bond4: left promiscuous mode [ 141.020990][ T7889] bond4: left allmulticast mode [ 141.067706][ T7897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.075658][ T7897] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.095979][ T7897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.216496][ T29] audit: type=1400 audit(1754205764.769:6080): avc: denied { write } for pid=7887 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.236754][ T29] audit: type=1400 audit(1754205764.769:6081): avc: denied { nlmsg_write } for pid=7887 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.266841][ T7910] loop6: detected capacity change from 0 to 2048 [ 141.349653][ T7913] hub 9-0:1.0: USB hub found [ 141.360641][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.400718][ T7913] hub 9-0:1.0: 8 ports detected [ 141.402866][ T7910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.469217][ T7910] netlink: 'syz.6.1124': attribute type 27 has an invalid length. [ 141.544730][ T7918] loop4: detected capacity change from 0 to 8192 [ 141.730870][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.808183][ T7921] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.902439][ T7921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.966546][ T7929] loop4: detected capacity change from 0 to 8192 [ 141.998196][ T7934] Invalid option length (1265) for dns_resolver key [ 142.130037][ T7939] loop8: detected capacity change from 0 to 2048 [ 142.146442][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.159967][ T29] audit: type=1326 audit(1754205766.051:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 142.183562][ T29] audit: type=1326 audit(1754205766.051:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 142.183650][ T7942] loop4: detected capacity change from 0 to 1024 [ 142.206998][ T29] audit: type=1326 audit(1754205766.051:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49d392eba3 code=0x7ffc0000 [ 142.209173][ T29] audit: type=1326 audit(1754205766.100:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49d392d61f code=0x7ffc0000 [ 142.272206][ T7934] loop7: detected capacity change from 0 to 512 [ 142.308418][ T7939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.353917][ T7949] loop6: detected capacity change from 0 to 512 [ 142.378171][ T7953] IPVS: Error connecting to the multicast addr [ 142.451446][ T29] audit: type=1326 audit(1754205766.110:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f12f9eb69 code=0x7ffc0000 [ 142.474911][ T29] audit: type=1326 audit(1754205766.110:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f12f9eb69 code=0x7ffc0000 [ 142.485883][ T7939] netlink: 'syz.8.1132': attribute type 27 has an invalid length. [ 142.498562][ T29] audit: type=1326 audit(1754205766.110:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.4.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f12f9eb69 code=0x7ffc0000 [ 142.532674][ T7934] EXT4-fs (loop7): too many log groups per flexible block group [ 142.540492][ T7934] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 142.549473][ T7939] bond4: left promiscuous mode [ 142.554306][ T7939] bond4: left allmulticast mode [ 142.565810][ T7934] EXT4-fs (loop7): mount failed [ 142.572854][ T7949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.593341][ T7953] loop4: detected capacity change from 0 to 8192 [ 142.637322][ T7949] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.788486][ T6196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.803653][ T7974] loop7: detected capacity change from 0 to 512 [ 142.852382][ T7974] EXT4-fs (loop7): orphan cleanup on readonly fs [ 142.858865][ T7974] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 142.888137][ T7984] siw: device registration error -23 [ 142.897607][ T7983] loop8: detected capacity change from 0 to 1024 [ 142.909951][ T7979] loop4: detected capacity change from 0 to 8192 [ 142.930574][ T7983] EXT4-fs: Ignoring removed orlov option [ 142.987267][ T7983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.007672][ T7974] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 143.138118][ T6196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.214144][ T7974] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1137: attempt to clear invalid blocks 2 len 1 [ 143.307529][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.324847][ T7987] lo speed is unknown, defaulting to 1000 [ 143.358499][ T7974] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1137: invalid indirect mapped block 1819239214 (level 0) [ 143.459096][ T7974] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1137: invalid indirect mapped block 1819239214 (level 1) [ 143.519282][ T7974] EXT4-fs (loop7): 1 truncate cleaned up [ 143.568978][ T7974] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.1137: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 143.617407][ T7991] FAULT_INJECTION: forcing a failure. [ 143.617407][ T7991] name failslab, interval 1, probability 0, space 0, times 0 [ 143.630146][ T7991] CPU: 0 UID: 0 PID: 7991 Comm: syz.3.1147 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 143.630203][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.630217][ T7991] Call Trace: [ 143.630223][ T7991] [ 143.630231][ T7991] __dump_stack+0x1d/0x30 [ 143.630256][ T7991] dump_stack_lvl+0xe8/0x140 [ 143.630277][ T7991] dump_stack+0x15/0x1b [ 143.630342][ T7991] should_fail_ex+0x265/0x280 [ 143.630375][ T7991] should_failslab+0x8c/0xb0 [ 143.630400][ T7991] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 143.630500][ T7991] ? sidtab_sid2str_get+0xa0/0x130 [ 143.630591][ T7991] kmemdup_noprof+0x2b/0x70 [ 143.630661][ T7991] sidtab_sid2str_get+0xa0/0x130 [ 143.630726][ T7991] security_sid_to_context_core+0x1eb/0x2e0 [ 143.630765][ T7991] security_sid_to_context+0x27/0x40 [ 143.630802][ T7991] avc_audit_post_callback+0x10f/0x520 [ 143.630864][ T7991] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 143.630892][ T7991] common_lsm_audit+0x1bb/0x230 [ 143.630926][ T7991] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 143.631008][ T7991] ? avc_denied+0xe4/0x100 [ 143.631032][ T7991] slow_avc_audit+0x104/0x140 [ 143.631075][ T7991] avc_has_perm+0x13a/0x180 [ 143.631102][ T7991] selinux_socket_connect_helper+0x19a/0x470 [ 143.631131][ T7991] selinux_socket_connect+0x31/0x70 [ 143.631162][ T7991] security_socket_connect+0x48/0x80 [ 143.631251][ T7991] __sys_connect+0x181/0x2b0 [ 143.631289][ T7991] __x64_sys_connect+0x3f/0x50 [ 143.631332][ T7991] x64_sys_call+0x2c08/0x2ff0 [ 143.631357][ T7991] do_syscall_64+0xd2/0x200 [ 143.631380][ T7991] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.631474][ T7991] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.631499][ T7991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.631531][ T7991] RIP: 0033:0x7f549a92eb69 [ 143.631548][ T7991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.631569][ T7991] RSP: 002b:00007f5498f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 143.631590][ T7991] RAX: ffffffffffffffda RBX: 00007f549ab55fa0 RCX: 00007f549a92eb69 [ 143.631604][ T7991] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 143.631696][ T7991] RBP: 00007f5498f97090 R08: 0000000000000000 R09: 0000000000000000 [ 143.631710][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.631724][ T7991] R13: 0000000000000000 R14: 00007f549ab55fa0 R15: 00007ffeee93ad18 [ 143.631745][ T7991] [ 144.142936][ T8008] __nla_validate_parse: 23 callbacks suppressed [ 144.142957][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1148'. [ 144.169025][ T8010] loop3: detected capacity change from 0 to 512 [ 144.219988][ T8010] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1150: corrupted inode contents [ 144.232064][ T8021] hub 9-0:1.0: USB hub found [ 144.237242][ T8021] hub 9-0:1.0: 8 ports detected [ 144.267832][ T8023] loop7: detected capacity change from 0 to 1024 [ 144.282814][ T8023] EXT4-fs: Ignoring removed orlov option [ 144.295578][ T8010] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1150: mark_inode_dirty error [ 144.310671][ T8010] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1150: corrupted inode contents [ 144.336424][ T8010] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1150: mark_inode_dirty error [ 144.354479][ T8010] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1150: corrupted inode contents [ 144.368129][ T8010] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 144.397165][ T8010] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1150: corrupted inode contents [ 144.415076][ T8010] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1150: mark_inode_dirty error [ 144.444862][ T8010] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 144.459368][ T8010] EXT4-fs (loop3): 1 truncate cleaned up [ 144.465730][ T8010] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.478839][ T3992] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 144.490542][ T8034] loop7: detected capacity change from 0 to 8192 [ 144.493696][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1150'. [ 144.522271][ T8010] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm ,&#^%: iget: bad i_size value: 360287970189639690 [ 144.611974][ T8047] FAULT_INJECTION: forcing a failure. [ 144.611974][ T8047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.625139][ T8047] CPU: 1 UID: 0 PID: 8047 Comm: syz.3.1166 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 144.625181][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.625194][ T8047] Call Trace: [ 144.625201][ T8047] [ 144.625210][ T8047] __dump_stack+0x1d/0x30 [ 144.625234][ T8047] dump_stack_lvl+0xe8/0x140 [ 144.625255][ T8047] dump_stack+0x15/0x1b [ 144.625330][ T8047] should_fail_ex+0x265/0x280 [ 144.625366][ T8047] should_fail+0xb/0x20 [ 144.625399][ T8047] should_fail_usercopy+0x1a/0x20 [ 144.625432][ T8047] strncpy_from_user+0x25/0x230 [ 144.625475][ T8047] path_getxattrat+0xab/0x2a0 [ 144.625515][ T8047] __x64_sys_fgetxattr+0x59/0x70 [ 144.625546][ T8047] x64_sys_call+0x1ab3/0x2ff0 [ 144.625611][ T8047] do_syscall_64+0xd2/0x200 [ 144.625639][ T8047] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.625664][ T8047] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.625685][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.625777][ T8047] RIP: 0033:0x7f549a92eb69 [ 144.625794][ T8047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.625897][ T8047] RSP: 002b:00007f5498f97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 144.625919][ T8047] RAX: ffffffffffffffda RBX: 00007f549ab55fa0 RCX: 00007f549a92eb69 [ 144.625931][ T8047] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000004 [ 144.625943][ T8047] RBP: 00007f5498f97090 R08: 0000000000000000 R09: 0000000000000000 [ 144.625955][ T8047] R10: 000000000000006b R11: 0000000000000246 R12: 0000000000000001 [ 144.625998][ T8047] R13: 0000000000000000 R14: 00007f549ab55fa0 R15: 00007ffeee93ad18 [ 144.626021][ T8047] [ 144.957265][ T8064] loop3: detected capacity change from 0 to 512 [ 144.964532][ T8064] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 144.979916][ T8068] loop7: detected capacity change from 0 to 2048 [ 145.403494][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 145.789583][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1175'. [ 145.963589][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 145.963605][ T29] audit: type=1400 audit(1754205769.827:6179): avc: denied { setopt } for pid=8089 comm="syz.6.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.079144][ T8099] loop6: detected capacity change from 0 to 512 [ 146.100073][ T8099] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.137931][ T29] audit: type=1400 audit(1754205769.827:6180): avc: denied { getopt } for pid=8090 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.140215][ T8068] netlink: 'syz.7.1174': attribute type 27 has an invalid length. [ 146.157600][ T29] audit: type=1400 audit(1754205769.827:6181): avc: denied { connect } for pid=8090 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.184926][ T29] audit: type=1400 audit(1754205769.827:6182): avc: denied { name_connect } for pid=8090 comm="syz.4.1177" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.207213][ T29] audit: type=1400 audit(1754205769.857:6183): avc: denied { bind } for pid=8089 comm="syz.6.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.226582][ T29] audit: type=1400 audit(1754205769.857:6184): avc: denied { name_bind } for pid=8089 comm="syz.6.1176" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.248513][ T29] audit: type=1400 audit(1754205769.857:6185): avc: denied { node_bind } for pid=8089 comm="syz.6.1176" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 146.270259][ T29] audit: type=1400 audit(1754205769.857:6186): avc: denied { write } for pid=8089 comm="syz.6.1176" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.302318][ T8100] loop3: detected capacity change from 0 to 2048 [ 146.330641][ T29] audit: type=1326 audit(1754205770.056:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549a92eb69 code=0x7ffc0000 [ 146.354141][ T29] audit: type=1326 audit(1754205770.075:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549a92eb69 code=0x7ffc0000 [ 146.380618][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1174'. [ 146.389633][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1174'. [ 146.416579][ T8106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.433074][ T8113] siw: device registration error -23 [ 146.448456][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1174'. [ 146.479740][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1174'. [ 146.488799][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1174'. [ 146.530672][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1174'. [ 146.603702][ T5763] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 146.619015][ T5763] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 714 with error 28 [ 146.631496][ T5763] EXT4-fs (loop3): This should not happen!! Data will be lost [ 146.631496][ T5763] [ 146.641163][ T5763] EXT4-fs (loop3): Total free blocks count 0 [ 146.647268][ T5763] EXT4-fs (loop3): Free/Dirty block details [ 146.653213][ T5763] EXT4-fs (loop3): free_blocks=2415919104 [ 146.659145][ T5763] EXT4-fs (loop3): dirty_blocks=720 [ 146.664428][ T5763] EXT4-fs (loop3): Block reservation details [ 146.670658][ T5763] EXT4-fs (loop3): i_reserved_data_blocks=45 [ 146.767700][ T8130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8130 comm=syz.7.1185 [ 146.978839][ T8139] loop3: detected capacity change from 0 to 512 [ 146.986115][ T8139] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 147.414109][ T8151] loop6: detected capacity change from 0 to 512 [ 147.466674][ T8158] hub 9-0:1.0: USB hub found [ 147.475900][ T8158] hub 9-0:1.0: 8 ports detected [ 147.499637][ T8151] EXT4-fs (loop6): too many log groups per flexible block group [ 147.507417][ T8151] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 147.545943][ T8151] EXT4-fs (loop6): mount failed [ 147.565552][ T8166] loop8: detected capacity change from 0 to 2048 [ 147.607912][ T8166] netlink: 'syz.8.1196': attribute type 27 has an invalid length. [ 147.623915][ T8164] loop7: detected capacity change from 0 to 8192 [ 147.649749][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.659413][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.669439][ T8166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.674797][ T8172] loop6: detected capacity change from 0 to 512 [ 147.685024][ T1068] lo speed is unknown, defaulting to 1000 [ 147.685043][ T1068] syz0: Port: 1 Link ACTIVE [ 147.806982][ T8179] loop7: detected capacity change from 0 to 2048 [ 147.836108][ T8179] netlink: 'syz.7.1201': attribute type 27 has an invalid length. [ 147.864001][ T8182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8182 comm=syz.4.1200 [ 147.883482][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.951309][ T8179] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.981468][ T8187] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 148.007449][ T8179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.233221][ T8215] netlink: 'syz.7.1211': attribute type 1 has an invalid length. [ 148.346920][ T8221] lo speed is unknown, defaulting to 1000 [ 148.389993][ T8227] loop6: detected capacity change from 0 to 512 [ 148.474828][ T8232] loop4: detected capacity change from 0 to 512 [ 148.487324][ T8232] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 148.746493][ T8215] bond3: entered promiscuous mode [ 148.751606][ T8215] bond3: entered allmulticast mode [ 148.796226][ T8227] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.823970][ T8215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.049589][ T8244] loop7: detected capacity change from 0 to 512 [ 149.170132][ T8248] loop8: detected capacity change from 0 to 8192 [ 149.373171][ T8271] loop8: detected capacity change from 0 to 1024 [ 149.383908][ T8269] loop7: detected capacity change from 0 to 1024 [ 149.392159][ T8267] Invalid option length (1265) for dns_resolver key [ 149.402369][ T8271] EXT4-fs: Ignoring removed orlov option [ 149.420775][ T8269] EXT4-fs: Ignoring removed orlov option [ 149.451563][ T8267] loop3: detected capacity change from 0 to 512 [ 149.469581][ T8269] EXT4-fs: Ignoring sb option on remount [ 149.475348][ T8269] EXT4-fs: Ignoring removed orlov option [ 149.481807][ T8271] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 149.509206][ T8269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.511940][ T8271] rdma_op ffff888106790180 conn xmit_rdma 0000000000000000 [ 149.550114][ T8269] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 149.580578][ T8281] Invalid option length (1265) for dns_resolver key [ 149.584984][ T8283] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1227: bg 0: block 88: padding at end of block bitmap is not set [ 149.601705][ T8269] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 149.626352][ T8281] loop4: detected capacity change from 0 to 512 [ 149.628873][ T8267] EXT4-fs (loop3): too many log groups per flexible block group [ 149.640409][ T8267] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 149.657467][ T8267] EXT4-fs (loop3): mount failed [ 149.685871][ T8281] EXT4-fs (loop4): too many log groups per flexible block group [ 149.693697][ T8281] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 149.761504][ T8281] EXT4-fs (loop4): mount failed [ 149.770811][ T8288] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1226: bg 0: block 88: padding at end of block bitmap is not set [ 149.905958][ T8292] loop3: detected capacity change from 0 to 512 [ 149.927535][ T8294] SELinux: policydb version 0 does not match my version range 15-35 [ 149.959150][ T8296] loop6: detected capacity change from 0 to 512 [ 149.972002][ T8294] SELinux: failed to load policy [ 150.025860][ T8296] EXT4-fs (loop6): too many log groups per flexible block group [ 150.033851][ T8296] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 150.082253][ T8296] EXT4-fs (loop6): mount failed [ 150.138123][ T8308] loop3: detected capacity change from 0 to 1024 [ 150.156678][ T8310] Driver unsupported XDP return value 0 on prog (id 632) dev N/A, expect packet loss! [ 150.215951][ T8317] loop6: detected capacity change from 0 to 1024 [ 150.238793][ T8318] loop3: detected capacity change from 0 to 1024 [ 150.270752][ T8320] hub 9-0:1.0: USB hub found [ 150.280707][ T8320] hub 9-0:1.0: 8 ports detected [ 150.307895][ T8317] __nla_validate_parse: 20 callbacks suppressed [ 150.307911][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1240'. [ 150.348937][ T8318] EXT4-fs: Ignoring removed orlov option [ 150.449618][ T8329] loop7: detected capacity change from 0 to 512 [ 150.536990][ T8329] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.611307][ T8336] loop4: detected capacity change from 0 to 512 [ 150.666002][ T8342] loop3: detected capacity change from 0 to 1024 [ 150.728984][ T8348] loop8: detected capacity change from 0 to 512 [ 150.823070][ T8348] EXT4-fs (loop8): too many log groups per flexible block group [ 150.830881][ T8348] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 150.845238][ T8348] EXT4-fs (loop8): mount failed [ 151.014700][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 151.014715][ T29] audit: type=1326 audit(1754205774.848:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.8.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f51b479eb69 code=0x7ffc0000 [ 151.044473][ T29] audit: type=1326 audit(1754205774.848:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.8.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b479eb69 code=0x7ffc0000 [ 151.067915][ T29] audit: type=1326 audit(1754205774.848:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.8.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b479eb69 code=0x7ffc0000 [ 151.125468][ T29] audit: type=1326 audit(1754205774.937:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.6.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d47bfeb69 code=0x7ffc0000 [ 151.149025][ T29] audit: type=1326 audit(1754205774.937:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8340 comm="syz.6.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d47bfeb69 code=0x7ffc0000 [ 151.223742][ T8359] loop8: detected capacity change from 0 to 512 [ 151.230058][ T29] audit: type=1326 audit(1754205775.056:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.8.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b479eb69 code=0x7ffc0000 [ 151.253531][ T29] audit: type=1326 audit(1754205775.056:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.8.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b479eb69 code=0x7ffc0000 [ 151.276937][ T29] audit: type=1326 audit(1754205775.056:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.8.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51b479eb69 code=0x7ffc0000 [ 151.300379][ T29] audit: type=1326 audit(1754205775.056:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.8.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b479eb69 code=0x7ffc0000 [ 151.323809][ T29] audit: type=1326 audit(1754205775.056:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8358 comm="syz.8.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f51b479eb69 code=0x7ffc0000 [ 151.383248][ T8359] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1255: bg 0: block 321: padding at end of block bitmap is not set [ 151.413350][ T8341] loop6: detected capacity change from 0 to 512 [ 151.436650][ T8341] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 151.464397][ T8341] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 151.504676][ T8341] EXT4-fs (loop6): 1 truncate cleaned up [ 151.522403][ T8368] loop8: detected capacity change from 0 to 512 [ 151.564653][ T8372] loop3: detected capacity change from 0 to 1024 [ 151.595324][ T8368] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1257: bg 0: block 321: padding at end of block bitmap is not set [ 151.619327][ T8372] EXT4-fs: Ignoring removed orlov option [ 151.726827][ T8383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8383 comm=syz.4.1261 [ 151.792375][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 151.837545][ T8388] netlink: 'syz.8.1262': attribute type 10 has an invalid length. [ 151.850586][ T8388] team0: Port device dummy0 added [ 151.858993][ T8389] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 151.861020][ T8388] netlink: 'syz.8.1262': attribute type 10 has an invalid length. [ 151.900787][ T8389] SELinux: failed to load policy [ 151.909971][ T8388] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 151.932034][ T8388] team0: Failed to send options change via netlink (err -105) [ 151.939985][ T8388] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 151.961262][ T8388] team0: Port device dummy0 removed [ 151.990008][ T8388] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 152.001363][ T8329] lo speed is unknown, defaulting to 1000 [ 152.130082][ T8404] loop4: detected capacity change from 0 to 512 [ 152.161251][ T8404] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1268: bg 0: block 321: padding at end of block bitmap is not set [ 152.240201][ T8411] loop8: detected capacity change from 0 to 512 [ 152.285389][ T8411] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.416346][ T8418] loop4: detected capacity change from 0 to 512 [ 152.436781][ T8418] EXT4-fs (loop4): too many log groups per flexible block group [ 152.444605][ T8418] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 152.470656][ T8418] EXT4-fs (loop4): mount failed [ 152.603904][ T8434] loop4: detected capacity change from 0 to 512 [ 152.623433][ T8434] EXT4-fs (loop4): too many log groups per flexible block group [ 152.631242][ T8434] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 152.644871][ T8434] EXT4-fs (loop4): mount failed [ 152.702547][ T8442] Invalid option length (1265) for dns_resolver key [ 152.713149][ T8447] loop4: detected capacity change from 0 to 1024 [ 152.733816][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1280'. [ 152.744574][ T8442] loop7: detected capacity change from 0 to 512 [ 152.780710][ T8451] loop6: detected capacity change from 0 to 512 [ 152.796874][ T8442] EXT4-fs (loop7): too many log groups per flexible block group [ 152.804680][ T8442] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 152.826792][ T8442] EXT4-fs (loop7): mount failed [ 152.845491][ T8451] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.887725][ T8458] hub 9-0:1.0: USB hub found [ 152.898809][ T8458] hub 9-0:1.0: 8 ports detected [ 152.953068][ T8462] netlink: 'syz.7.1284': attribute type 1 has an invalid length. [ 152.960935][ T8462] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1284'. [ 152.979808][ T8465] loop4: detected capacity change from 0 to 512 [ 153.015606][ T8465] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1286: corrupted inode contents [ 153.038546][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1284'. [ 153.047485][ T8465] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1286: mark_inode_dirty error [ 153.047646][ T8462] netlink: 'syz.7.1284': attribute type 1 has an invalid length. [ 153.140609][ T8465] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1286: corrupted inode contents [ 153.206449][ T8465] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1286: mark_inode_dirty error [ 153.235168][ T8465] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1286: corrupted inode contents [ 153.247606][ T8465] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 153.256919][ T8465] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1286: corrupted inode contents [ 153.271052][ T8465] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1286: mark_inode_dirty error [ 153.282659][ T8465] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 153.298935][ T8472] lo speed is unknown, defaulting to 1000 [ 153.335275][ T8481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8481 comm=syz.8.1291 [ 153.399785][ T8465] EXT4-fs (loop4): 1 truncate cleaned up [ 153.406085][ T8465] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.428095][ T5708] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 1 [ 153.450578][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1291'. [ 153.472841][ T8465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1286'. [ 153.516616][ T8465] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm ,&#^%: iget: bad i_size value: 360287970189639690 [ 153.945854][ T8495] loop4: detected capacity change from 0 to 2048 [ 153.978695][ T8495] netlink: 'syz.4.1294': attribute type 27 has an invalid length. [ 154.108238][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.122247][ T8504] loop7: detected capacity change from 0 to 4096 [ 154.132288][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.161628][ T8495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.179321][ T8451] lo speed is unknown, defaulting to 1000 [ 154.213776][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 154.222774][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 154.247159][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1297'. [ 154.604259][ T8531] loop4: detected capacity change from 0 to 2048 [ 154.829797][ T8531] netlink: 'syz.4.1305': attribute type 27 has an invalid length. [ 154.917068][ T8545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.047621][ T8555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8555 comm=syz.3.1309 [ 155.083422][ T8557] loop4: detected capacity change from 0 to 1024 [ 155.093000][ T8557] EXT4-fs: Ignoring removed orlov option [ 155.128975][ T8557] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 155.277451][ T8563] lo speed is unknown, defaulting to 1000 [ 155.289063][ T8569] loop4: detected capacity change from 0 to 512 [ 155.323019][ T8569] EXT4-fs (loop4): too many log groups per flexible block group [ 155.330968][ T8569] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 155.338170][ T8569] EXT4-fs (loop4): mount failed [ 155.456522][ T8589] __nla_validate_parse: 12 callbacks suppressed [ 155.456540][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 155.575987][ T8595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8595 comm=syz.6.1322 [ 155.623352][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1322'. [ 155.797476][ T8604] loop7: detected capacity change from 0 to 1024 [ 155.804969][ T8604] EXT4-fs: Ignoring removed orlov option [ 155.847075][ T8604] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 155.944815][ T8612] loop7: detected capacity change from 0 to 512 [ 155.996545][ T8614] Invalid option length (1265) for dns_resolver key [ 156.022027][ T8612] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1327: bg 0: block 321: padding at end of block bitmap is not set [ 156.036993][ T8614] loop3: detected capacity change from 0 to 512 [ 156.043545][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 156.043559][ T29] audit: type=1326 audit(1754205779.851:6989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f549a92d4d0 code=0x7ffc0000 [ 156.073401][ T29] audit: type=1326 audit(1754205779.851:6990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f549a92e76b code=0x7ffc0000 [ 156.107869][ T29] audit: type=1326 audit(1754205779.861:6991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.7.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 156.131387][ T29] audit: type=1326 audit(1754205779.861:6992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.7.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 156.154975][ T29] audit: type=1326 audit(1754205779.861:6993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f549a92d7ca code=0x7ffc0000 [ 156.178325][ T29] audit: type=1326 audit(1754205779.861:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f549a92d7ca code=0x7ffc0000 [ 156.201597][ T29] audit: type=1326 audit(1754205779.861:6995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f549a92d3d7 code=0x7ffc0000 [ 156.225155][ T29] audit: type=1326 audit(1754205779.861:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f549a93030a code=0x7ffc0000 [ 156.233727][ T8614] EXT4-fs (loop3): too many log groups per flexible block group [ 156.248597][ T29] audit: type=1326 audit(1754205779.920:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.7.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 156.248636][ T29] audit: type=1326 audit(1754205779.920:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.7.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 156.256549][ T8614] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 156.310526][ T8614] EXT4-fs (loop3): mount failed [ 156.444986][ T8627] FAULT_INJECTION: forcing a failure. [ 156.444986][ T8627] name failslab, interval 1, probability 0, space 0, times 0 [ 156.457812][ T8627] CPU: 1 UID: 0 PID: 8627 Comm: syz.7.1332 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 156.457908][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.457964][ T8627] Call Trace: [ 156.457972][ T8627] [ 156.457981][ T8627] __dump_stack+0x1d/0x30 [ 156.458002][ T8627] dump_stack_lvl+0xe8/0x140 [ 156.458021][ T8627] dump_stack+0x15/0x1b [ 156.458087][ T8627] should_fail_ex+0x265/0x280 [ 156.458120][ T8627] should_failslab+0x8c/0xb0 [ 156.458147][ T8627] kmem_cache_alloc_node_noprof+0x57/0x320 [ 156.458179][ T8627] ? perf_event_alloc+0x14c/0x1740 [ 156.458244][ T8627] perf_event_alloc+0x14c/0x1740 [ 156.458279][ T8627] __se_sys_perf_event_open+0x615/0x11c0 [ 156.458312][ T8627] ? __rcu_read_unlock+0x4f/0x70 [ 156.458342][ T8627] __x64_sys_perf_event_open+0x67/0x80 [ 156.458373][ T8627] x64_sys_call+0x7bd/0x2ff0 [ 156.458397][ T8627] do_syscall_64+0xd2/0x200 [ 156.458421][ T8627] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.458483][ T8627] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.458504][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.458525][ T8627] RIP: 0033:0x7f49d392eb69 [ 156.458560][ T8627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.458577][ T8627] RSP: 002b:00007f49d1f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 156.458622][ T8627] RAX: ffffffffffffffda RBX: 00007f49d3b55fa0 RCX: 00007f49d392eb69 [ 156.458636][ T8627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 156.458736][ T8627] RBP: 00007f49d1f97090 R08: 0000000000000000 R09: 0000000000000000 [ 156.458749][ T8627] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 156.458763][ T8627] R13: 0000000000000000 R14: 00007f49d3b55fa0 R15: 00007ffd9cdac1c8 [ 156.458782][ T8627] [ 156.666699][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1333'. [ 156.690181][ T8632] netlink: 'syz.7.1335': attribute type 1 has an invalid length. [ 156.776715][ T8632] bond4: entered promiscuous mode [ 156.781939][ T8632] bond4: entered allmulticast mode [ 156.830881][ T8644] netlink: 7 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 156.841082][ T1068] hid (null): invalid report_size -1413666444 [ 156.847384][ T1068] hid (null): unknown global tag 0xd [ 156.852845][ T1068] hid (null): report_id 2222385494 is invalid [ 156.859018][ T1068] hid (null): global environment stack underflow [ 156.865384][ T1068] hid (null): unknown global tag 0xf4 [ 156.870860][ T1068] hid (null): unknown global tag 0x1c [ 156.876352][ T1068] hid (null): unknown global tag 0xe [ 156.881675][ T1068] hid (null): unknown global tag 0xc [ 156.887051][ T1068] hid (null): unknown global tag 0xd [ 156.892492][ T1068] hid (null): unknown global tag 0xe [ 156.897950][ T1068] hid (null): unknown global tag 0x9f [ 156.903421][ T1068] hid (null): unknown global tag 0xe [ 156.908801][ T1068] hid (null): unknown global tag 0xe [ 156.914099][ T1068] hid (null): unknown global tag 0xe [ 156.919430][ T1068] hid (null): unknown global tag 0xc [ 156.924861][ T1068] hid (null): unknown global tag 0xe [ 156.930258][ T1068] hid (null): bogus close delimiter [ 156.935462][ T1068] hid (null): unknown global tag 0xc [ 156.944762][ T1068] hid (null): invalid report_count 32141 [ 156.950698][ T1068] hid (null): unknown global tag 0xd [ 156.956010][ T1068] hid (null): unknown global tag 0xe [ 156.957896][ T8632] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.961552][ T1068] hid (null): unknown global tag 0xc [ 156.968737][ T8645] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1333'. [ 156.978367][ T1068] hid (null): unknown global tag 0xc [ 156.987594][ T1068] hid (null): unknown global tag 0xe [ 156.992977][ T1068] hid (null): unknown global tag 0xc [ 156.998416][ T1068] hid (null): unknown global tag 0xc [ 157.003309][ T8647] loop6: detected capacity change from 0 to 512 [ 157.003777][ T1068] hid (null): unknown global tag 0xc [ 157.013795][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1333'. [ 157.019479][ T1068] hid (null): unknown global tag 0xd [ 157.024242][ T8629] lo speed is unknown, defaulting to 1000 [ 157.029442][ T1068] hid (null): unknown global tag 0x3d [ 157.040539][ T1068] hid (null): unknown global tag 0xe [ 157.045854][ T1068] hid (null): invalid report_count 52049 [ 157.050050][ T8644] netlink: 7 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 157.051696][ T1068] hid (null): unknown global tag 0xc [ 157.077088][ T8647] EXT4-fs mount: 66 callbacks suppressed [ 157.077105][ T8647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.097075][ T1068] hid-generic 0006:0098:0009.002D: collection stack underflow [ 157.104679][ T1068] hid-generic 0006:0098:0009.002D: item 0 0 0 12 parsing failed [ 157.115601][ T1068] hid-generic 0006:0098:0009.002D: probe with driver hid-generic failed with error -22 [ 157.160538][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1341'. [ 157.171410][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 157.217660][ T8641] loop3: detected capacity change from 0 to 128 [ 157.235511][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.277505][ T8641] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.308462][ T8641] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.339369][ T8665] hub 9-0:1.0: USB hub found [ 157.362875][ T8665] hub 9-0:1.0: 8 ports detected [ 157.374538][ T8655] lo speed is unknown, defaulting to 1000 [ 157.510997][ T8677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8677 comm=syz.6.1347 [ 157.537625][ T8676] loop8: detected capacity change from 0 to 1024 [ 157.553069][ T8676] EXT4-fs: Ignoring removed nobh option [ 157.558713][ T8676] EXT4-fs: Ignoring removed bh option [ 157.587004][ T8676] ext4: Bad value for 'resuid' [ 157.591876][ T8676] ext4: Bad value for 'resuid' [ 157.711941][ T8687] loop4: detected capacity change from 0 to 512 [ 157.776532][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1347'. [ 157.837872][ T8696] loop7: detected capacity change from 0 to 512 [ 157.888276][ T8696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.901609][ T8687] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1351: corrupted inode contents [ 157.922103][ T8687] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1351: mark_inode_dirty error [ 157.936575][ T8687] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1351: corrupted inode contents [ 157.955755][ T8687] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1351: mark_inode_dirty error [ 157.987300][ T8687] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1351: corrupted inode contents [ 157.988091][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.019284][ T8687] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 158.032124][ T8687] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1351: corrupted inode contents [ 158.058930][ T8687] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1351: mark_inode_dirty error [ 158.068000][ T8708] loop7: detected capacity change from 0 to 1024 [ 158.076852][ T8708] ext4: Unknown parameter 'uid>00000000000000000000' [ 158.095162][ T8687] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 158.106078][ T8687] EXT4-fs (loop4): 1 truncate cleaned up [ 158.113116][ T8687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.125960][ T8687] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.136783][ T5708] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 1 [ 158.164343][ T8687] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm ,&#^%: iget: bad i_size value: 360287970189639690 [ 158.187676][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.220726][ T8712] loop4: detected capacity change from 0 to 1024 [ 158.244866][ T8712] EXT4-fs: Ignoring removed orlov option [ 158.266171][ T8712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.284154][ T8712] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 158.308709][ T8712] rdma_op ffff88812bbd7180 conn xmit_rdma 0000000000000000 [ 158.465399][ T8712] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1360: bg 0: block 88: padding at end of block bitmap is not set [ 158.546663][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.656006][ T8730] loop3: detected capacity change from 0 to 512 [ 158.670351][ T8730] EXT4-fs (loop3): too many log groups per flexible block group [ 158.678250][ T8730] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 158.685551][ T8730] EXT4-fs (loop3): mount failed [ 158.761433][ T8741] loop3: detected capacity change from 0 to 512 [ 158.775530][ T8739] loop4: detected capacity change from 0 to 1024 [ 158.785682][ T8739] ext4: Unknown parameter 'uid>00000000000000000000' [ 158.800583][ T8741] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1370: corrupted inode contents [ 158.812793][ T8741] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1370: mark_inode_dirty error [ 158.829921][ T8741] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1370: corrupted inode contents [ 158.842830][ T8741] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1370: mark_inode_dirty error [ 158.856463][ T8741] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1370: corrupted inode contents [ 158.868775][ T8741] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 158.878790][ T8741] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1370: corrupted inode contents [ 158.880791][ T8748] loop4: detected capacity change from 0 to 2048 [ 158.890888][ T8741] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1370: mark_inode_dirty error [ 158.909658][ T8741] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 158.925840][ T8741] EXT4-fs (loop3): 1 truncate cleaned up [ 158.932412][ T8741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.945263][ T5704] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 158.945285][ T8741] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.972585][ T8748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.010104][ T8748] netlink: 'syz.4.1372': attribute type 27 has an invalid length. [ 159.020243][ T8754] hub 9-0:1.0: USB hub found [ 159.024946][ T8754] hub 9-0:1.0: 8 ports detected [ 159.041364][ T8741] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm ,&#^%: iget: bad i_size value: 360287970189639690 [ 159.074556][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.089946][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.091572][ T8761] loop6: detected capacity change from 0 to 1024 [ 159.105021][ T8761] EXT4-fs: Ignoring removed orlov option [ 159.115042][ T8748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.134517][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.139398][ T8761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.232674][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.247216][ T8772] 9pnet_virtio: no channels available for device [ 159.259847][ T8769] loop8: detected capacity change from 0 to 512 [ 159.294552][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.329137][ T8769] EXT4-fs (loop8): too many log groups per flexible block group [ 159.337171][ T8769] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 159.382368][ T8769] EXT4-fs (loop8): mount failed [ 159.409604][ T8791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8791 comm=syz.3.1384 [ 159.418752][ T8792] loop4: detected capacity change from 0 to 2048 [ 159.426121][ T8789] loop7: detected capacity change from 0 to 512 [ 159.455049][ T8796] loop8: detected capacity change from 0 to 512 [ 159.469286][ T8789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.571149][ T8792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.586358][ T8796] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1389: corrupted inode contents [ 159.602315][ T8796] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.1389: mark_inode_dirty error [ 159.606136][ T8792] netlink: 'syz.4.1383': attribute type 27 has an invalid length. [ 159.626186][ T8796] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1389: corrupted inode contents [ 159.642909][ T8796] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.1389: mark_inode_dirty error [ 159.658530][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.659531][ T8796] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1389: corrupted inode contents [ 159.684530][ T8796] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 159.695818][ T8796] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1389: corrupted inode contents [ 159.714513][ T8814] loop7: detected capacity change from 0 to 1024 [ 159.721443][ T8814] EXT4-fs: Ignoring removed orlov option [ 159.727461][ T8796] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.1389: mark_inode_dirty error [ 159.739368][ T8796] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 159.749536][ T8796] EXT4-fs (loop8): 1 truncate cleaned up [ 159.757671][ T8814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.770491][ T5708] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 1 [ 159.770675][ T8796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.794849][ T8796] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.798069][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.852949][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.863955][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.881186][ T8796] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm ,&#^%: iget: bad i_size value: 360287970189639690 [ 159.903599][ T8812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.918129][ T8819] loop7: detected capacity change from 0 to 2048 [ 159.971497][ T8821] hub 9-0:1.0: USB hub found [ 159.974110][ T6196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.984927][ T8819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.988369][ T8821] hub 9-0:1.0: 8 ports detected [ 160.005116][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.008075][ T8819] netlink: 'syz.7.1394': attribute type 27 has an invalid length. [ 160.080270][ T8819] bond3: left promiscuous mode [ 160.085188][ T8819] bond3: left allmulticast mode [ 160.090970][ T8819] bond4: left promiscuous mode [ 160.095974][ T8819] bond4: left allmulticast mode [ 160.114269][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.122554][ T8829] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.132323][ T8829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.188971][ T8842] loop8: detected capacity change from 0 to 512 [ 160.193476][ T8837] loop4: detected capacity change from 0 to 512 [ 160.198037][ T8843] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 160.218956][ T8842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.238840][ T8837] EXT4-fs (loop4): too many log groups per flexible block group [ 160.246628][ T8837] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 160.255944][ T8851] loop3: detected capacity change from 0 to 1024 [ 160.257730][ T8837] EXT4-fs (loop4): mount failed [ 160.266004][ T8851] EXT4-fs: Ignoring removed orlov option [ 160.285553][ T8851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.304933][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.320523][ T6196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.353334][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.361344][ T8854] loop4: detected capacity change from 0 to 512 [ 160.393235][ T8856] loop6: detected capacity change from 0 to 512 [ 160.407623][ T8861] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 160.414493][ T8854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.449407][ T8864] loop8: detected capacity change from 0 to 512 [ 160.457009][ T8854] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1405: bg 0: block 321: padding at end of block bitmap is not set [ 160.473602][ T8861] bond5: entered promiscuous mode [ 160.478868][ T8861] bond5: entered allmulticast mode [ 160.492593][ T8861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.512853][ T8856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.519747][ T8861] __nla_validate_parse: 26 callbacks suppressed [ 160.519763][ T8861] netlink: 7 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 160.537156][ T8866] hub 9-0:1.0: USB hub found [ 160.544545][ T8861] netlink: 7 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 160.545599][ T8864] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1406: corrupted inode contents [ 160.553459][ T8866] hub 9-0:1.0: 8 ports detected [ 160.572875][ T8864] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.1406: mark_inode_dirty error [ 160.598883][ T8864] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1406: corrupted inode contents [ 160.612332][ T8864] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.1406: mark_inode_dirty error [ 160.623814][ T8864] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1406: corrupted inode contents [ 160.651428][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.663265][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.672823][ T8864] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 160.688994][ T8876] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1414'. [ 160.710104][ T8864] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.1406: corrupted inode contents [ 160.738012][ T8880] loop3: detected capacity change from 0 to 2048 [ 160.757239][ T8864] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.1406: mark_inode_dirty error [ 160.774812][ T8864] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 160.786133][ T8864] EXT4-fs (loop8): 1 truncate cleaned up [ 160.798380][ T8880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.812993][ T5753] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:54: Failed to release dquot type 1 [ 160.827390][ T8880] netlink: 'syz.3.1415': attribute type 27 has an invalid length. [ 160.853613][ T8864] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.874869][ T8864] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.893070][ T8864] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1406'. [ 160.928549][ T8864] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm ,&#^%: iget: bad i_size value: 360287970189639690 [ 160.944946][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 160.954139][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 160.971640][ T8894] loop7: detected capacity change from 0 to 1024 [ 160.981476][ T8894] ext4: Unknown parameter 'uid>00000000000000000000' [ 161.037217][ T8880] bond5: left promiscuous mode [ 161.042066][ T8880] bond5: left allmulticast mode [ 161.060676][ T6196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.099401][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 161.110094][ T8899] 9pnet_virtio: no channels available for device [ 161.125083][ T8882] lo speed is unknown, defaulting to 1000 [ 161.180054][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 161.189178][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 161.209620][ T8902] hub 9-0:1.0: USB hub found [ 161.215092][ T8902] hub 9-0:1.0: 8 ports detected [ 161.233350][ T8893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.254185][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 161.294239][ T8893] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.304499][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 161.304515][ T29] audit: type=1326 audit(1754205785.085:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 161.337754][ T8904] loop7: detected capacity change from 0 to 512 [ 161.354492][ T8893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.401540][ T8904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.439892][ T29] audit: type=1326 audit(1754205785.124:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 161.463469][ T29] audit: type=1326 audit(1754205785.124:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 161.486972][ T29] audit: type=1326 audit(1754205785.124:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49d392eb69 code=0x7ffc0000 [ 161.510466][ T29] audit: type=1326 audit(1754205785.124:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49d392eba3 code=0x7ffc0000 [ 161.533747][ T29] audit: type=1326 audit(1754205785.124:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49d392d61f code=0x7ffc0000 [ 161.556989][ T29] audit: type=1326 audit(1754205785.124:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f49d392ebf7 code=0x7ffc0000 [ 161.580342][ T29] audit: type=1326 audit(1754205785.124:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49d392d4d0 code=0x7ffc0000 [ 161.585539][ T8904] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1422: bg 0: block 321: padding at end of block bitmap is not set [ 161.603802][ T29] audit: type=1326 audit(1754205785.124:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49d392e76b code=0x7ffc0000 [ 161.603838][ T29] audit: type=1326 audit(1754205785.174:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.7.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f49d392d7ca code=0x7ffc0000 [ 161.715033][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.737237][ T8915] netlink: 'syz.4.1423': attribute type 1 has an invalid length. [ 161.833049][ T6052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.902347][ T8928] loop6: detected capacity change from 0 to 1024 [ 161.914662][ T8931] Invalid option length (1265) for dns_resolver key [ 161.936319][ T8934] hub 9-0:1.0: USB hub found [ 161.941898][ T8934] hub 9-0:1.0: 8 ports detected [ 161.944558][ T8928] ext4: Unknown parameter 'uid>00000000000000000000' [ 161.986218][ T8931] loop7: detected capacity change from 0 to 512 [ 162.046019][ T8931] EXT4-fs (loop7): too many log groups per flexible block group [ 162.053816][ T8931] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 162.097180][ T8931] EXT4-fs (loop7): mount failed [ 162.107234][ T8942] loop6: detected capacity change from 0 to 2048 [ 162.107289][ T8936] lo speed is unknown, defaulting to 1000 [ 162.113964][ T8943] loop4: detected capacity change from 0 to 512 [ 162.167543][ T8943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.211647][ T8942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.298499][ T8942] netlink: 'syz.6.1434': attribute type 27 has an invalid length. [ 162.342385][ T8947] lo speed is unknown, defaulting to 1000 [ 162.399416][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.423720][ T8954] loop8: detected capacity change from 0 to 512 [ 162.435896][ T8942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.466055][ T8954] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 162.492934][ T8942] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.520184][ T8942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.667555][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.769056][ T8960] loop7: detected capacity change from 0 to 8192 [ 163.120267][ T8976] loop4: detected capacity change from 0 to 2048 [ 163.148071][ T8979] hub 9-0:1.0: USB hub found [ 163.159757][ T8976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.179239][ T8979] hub 9-0:1.0: 8 ports detected [ 163.306372][ T8984] loop3: detected capacity change from 0 to 2048 [ 163.323654][ T8986] loop6: detected capacity change from 0 to 2048 [ 163.366906][ T8986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.396531][ T8984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.442926][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.483197][ T8986] netlink: 'syz.6.1446': attribute type 27 has an invalid length. [ 163.529009][ T8984] netlink: 'syz.3.1445': attribute type 27 has an invalid length. [ 163.543593][ T8995] Invalid option length (1265) for dns_resolver key [ 163.603750][ T8996] loop7: detected capacity change from 0 to 512 [ 163.615659][ T9002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.638491][ T9003] loop4: detected capacity change from 0 to 512 [ 163.683819][ T9003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.713000][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.733110][ T9000] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.767638][ T8996] EXT4-fs (loop7): too many log groups per flexible block group [ 163.775491][ T8996] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 163.782883][ T8996] EXT4-fs (loop7): mount failed [ 163.803406][ T9000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.850000][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.860926][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.892635][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.903386][ T9009] loop8: detected capacity change from 0 to 8192 [ 163.941909][ T3358] hid (null): invalid report_size -1413666444 [ 163.948047][ T3358] hid (null): unknown global tag 0xd [ 163.953609][ T3358] hid (null): report_id 2222385494 is invalid [ 163.959799][ T3358] hid (null): global environment stack underflow [ 163.966265][ T3358] hid (null): unknown global tag 0xf4 [ 163.971775][ T3358] hid (null): unknown global tag 0x1c [ 163.972306][ T9019] loop3: detected capacity change from 0 to 512 [ 163.977218][ T3358] hid (null): unknown global tag 0xe [ 163.988782][ T3358] hid (null): unknown global tag 0xc [ 163.994173][ T3358] hid (null): unknown global tag 0xd [ 163.999501][ T3358] hid (null): unknown global tag 0xe [ 164.004934][ T3358] hid (null): unknown global tag 0x9f [ 164.010395][ T3358] hid (null): unknown global tag 0xe [ 164.015768][ T3358] hid (null): unknown global tag 0xe [ 164.021115][ T3358] hid (null): unknown global tag 0xe [ 164.026554][ T3358] hid (null): unknown global tag 0xc [ 164.032000][ T3358] hid (null): unknown global tag 0xe [ 164.037348][ T3358] hid (null): bogus close delimiter [ 164.042585][ T3358] hid (null): unknown global tag 0xc [ 164.051979][ T3358] hid (null): invalid report_count 32141 [ 164.057750][ T3358] hid (null): unknown global tag 0xd [ 164.063096][ T3358] hid (null): unknown global tag 0xe [ 164.068467][ T3358] hid (null): unknown global tag 0xc [ 164.078130][ T3358] hid (null): unknown global tag 0xc [ 164.083566][ T3358] hid (null): unknown global tag 0xe [ 164.088880][ T3358] hid (null): unknown global tag 0xc [ 164.094253][ T3358] hid (null): unknown global tag 0xc [ 164.099580][ T3358] hid (null): unknown global tag 0xc [ 164.109440][ T3358] hid (null): unknown global tag 0xd [ 164.114854][ T3358] hid (null): unknown global tag 0x3d [ 164.120316][ T3358] hid (null): unknown global tag 0xe [ 164.125666][ T3358] hid (null): invalid report_count 52049 [ 164.131341][ T3358] hid (null): unknown global tag 0xc [ 164.149111][ T9022] loop6: detected capacity change from 0 to 512 [ 164.166823][ T9019] EXT4-fs (loop3): too many log groups per flexible block group [ 164.173216][ T9022] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 164.174649][ T9019] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 164.265660][ T9019] EXT4-fs (loop3): mount failed [ 164.324840][ T9028] loop7: detected capacity change from 0 to 128 [ 164.371295][ T9031] loop3: detected capacity change from 0 to 512 [ 164.398395][ T9035] netlink: 'syz.4.1460': attribute type 1 has an invalid length. [ 164.406859][ T9028] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.474020][ T9031] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1461: corrupted inode contents [ 164.494643][ T3358] hid-generic 0006:0098:0009.002E: collection stack underflow [ 164.495799][ T9031] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1461: mark_inode_dirty error [ 164.502172][ T3358] hid-generic 0006:0098:0009.002E: item 0 0 0 12 parsing failed [ 164.561952][ T3358] hid-generic 0006:0098:0009.002E: probe with driver hid-generic failed with error -22 [ 164.579235][ T9040] loop4: detected capacity change from 0 to 512 [ 164.581164][ T9031] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1461: corrupted inode contents [ 164.616527][ T9040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.622798][ T9028] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.652325][ T9031] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1461: mark_inode_dirty error [ 164.804028][ T9031] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1461: corrupted inode contents [ 164.804748][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.828217][ T9031] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 164.838238][ T3304] ================================================================== [ 164.846346][ T3304] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 164.853909][ T3304] [ 164.856238][ T3304] read-write to 0xffff888237c25ea8 of 1 bytes by task 8997 on cpu 0: [ 164.864303][ T3304] folio_add_lru+0xa5/0x1f0 [ 164.868844][ T3304] shmem_get_folio_gfp+0x7ab/0xd60 [ 164.873986][ T3304] shmem_write_begin+0xa8/0x190 [ 164.878849][ T3304] generic_perform_write+0x181/0x490 [ 164.884160][ T3304] shmem_file_write_iter+0xc5/0xf0 [ 164.889288][ T3304] __kernel_write_iter+0x256/0x4c0 [ 164.894409][ T3304] dump_user_range+0x61e/0x8f0 [ 164.899194][ T3304] elf_core_dump+0x1e00/0x1f90 [ 164.903978][ T3304] coredump_write+0xb0a/0xe30 [ 164.908668][ T3304] vfs_coredump+0x142f/0x20c0 [ 164.913369][ T3304] get_signal+0xd85/0xf70 [ 164.917727][ T3304] arch_do_signal_or_restart+0x96/0x480 [ 164.923297][ T3304] irqentry_exit_to_user_mode+0x5e/0xa0 [ 164.928860][ T3304] irqentry_exit+0x12/0x50 [ 164.933279][ T3304] exc_general_protection+0x15b/0x1f0 [ 164.938673][ T3304] asm_exc_general_protection+0x26/0x30 [ 164.944225][ T3304] [ 164.946544][ T3304] read to 0xffff888237c25ea8 of 1 bytes by task 3304 on cpu 1: [ 164.954083][ T3304] __lru_add_drain_all+0x12b/0x3f0 [ 164.959198][ T3304] lru_add_drain_all+0x10/0x20 [ 164.963971][ T3304] invalidate_bdev+0x47/0x70 [ 164.968568][ T3304] ext4_put_super+0x624/0x7d0 [ 164.973264][ T3304] generic_shutdown_super+0xe3/0x210 [ 164.978600][ T3304] kill_block_super+0x2a/0x70 [ 164.983304][ T3304] ext4_kill_sb+0x42/0x80 [ 164.987666][ T3304] deactivate_locked_super+0x72/0x1c0 [ 164.993067][ T3304] deactivate_super+0x97/0xa0 [ 164.997750][ T3304] cleanup_mnt+0x269/0x2e0 [ 165.002168][ T3304] __cleanup_mnt+0x19/0x20 [ 165.006581][ T3304] task_work_run+0x12e/0x1a0 [ 165.011202][ T3304] exit_to_user_mode_loop+0xe4/0x100 [ 165.016484][ T3304] do_syscall_64+0x1d6/0x200 [ 165.021072][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.026966][ T3304] [ 165.029281][ T3304] value changed: 0x11 -> 0x12 [ 165.033946][ T3304] [ 165.036264][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 165.042411][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 165.054652][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.064700][ T3304] ================================================================== [ 165.104978][ T9031] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1461: corrupted inode contents [ 165.126848][ T9031] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1461: mark_inode_dirty error [ 165.139333][ T9031] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 165.156442][ T9031] EXT4-fs (loop3): 1 truncate cleaned up [ 165.162826][ T9031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.175766][ T5753] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:54: Failed to release dquot type 1 [ 165.185740][ T9031] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.233334][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.576729][ T9014] lo speed is unknown, defaulting to 1000