last executing test programs: 3m30.217700635s ago: executing program 3 (id=82): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES8=r1, @ANYBLOB="0000000000000000b7048b352f226240d04866f79712d5d129000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000020000000000004000001800000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 3m28.805703563s ago: executing program 3 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000005700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c40)={0x18c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\xc7'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x33, 0x2, 'kfr!e\x00H\xd2\x04\xa9\xaaFNh\xc6e[\x98\x96\xb4\x0f\x18l\xe5\x02\xe6%\x19\b\xf6f\x19\xbc\xe2\x16\x00\x00%\x89\xbc\xd95\xb0\x02,\xa7M'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6ef8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xd76}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x3, 0xfff) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x1000000, 0x7fffffff, 0x105}) r13 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r13, r13, 0x0, 0x800000009) 3m27.885290551s ago: executing program 3 (id=100): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) (async) r8 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r9 = shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r9) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) (async) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) (async) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r14) (async) timer_settime(r14, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}}, &(0x7f0000000140)) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x20010814) 3m27.809586192s ago: executing program 3 (id=102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@dioread_lock}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000280), 0x8, 0x800000a0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m27.545250598s ago: executing program 3 (id=107): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) r3 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$eJzs3U1vW8UaAOD3nMbXuWnuTa50QXxIKAhEEVWdJrSquqIsEGwqIlVim0aJE4U4dYjt0kRdpCu2CIFAYgP/gQ0rEGt+AH8BJAQlLMrK6PgjTRO7MWkaV/HzSMd+Z845emfsaEbxWJ4ABtZE9pBGPBsRM0nEWKs+iYhcIxqKuNK8bvvu7fnsSKJev/Zb0rgmK8euezKnI2IrIp6JiB9yEWfT/XkrG5src6VScb1Vnqyurk1WNjbPLa/OLRWXijcuX7gwfeHSxcuXj66vr7373tOFi2+NfjuzOHtm6udvkrgSo61zu/txeCP7apqvSS57CR/w9qMne6Ik/W4AhzIUEadaz0/FWJxqRADASVbPR9QBgAGTmP8BYMC0Pwdor+0dzTpY7359MyKGO+Ufaq2ZDTfWIUe2kxjatciUhePH2VBOpK07EXF9fGL/31+yb832nzp/FA3ksfo+G3+udBp/0p3xJ9rjz677htvfnXhE3ce/+/lPdcifjX8zPeZ45/lauWv+OxHPDXXKn+zkT7rkv95j/u/uLfzV7Vz964hXOs4/yQO5un8/ZHJxuVQ833zsnGOidvv9h/V/pEv+rQP6v9Zj/0c/efHHrYfkf/Wlh7//nfJnc+LHPeb/KPfGZ93OZfkXuvT/oPf/qx7zX3rhg80eLwUAAAAAAAAAAAAAAAAAAAAAAAAAAIATIY2I0UjSwk6cpoVCcw/v/8dIWipXqmcXy7UbC9HYK3s8cmn7p5bHmuUkK0+1fo+/XZ5uxNs75dcj4n8R8Wn+341yYb5cWuh35wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5fSe/f//zDf3/wcATrjhfjcAADh25n8AGDzmfwAYPOZ/ABg8B8//fxxLOwCA4+P/fwAYPIeY//OPox0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIyZq1ezo7599/Z8Vl64uVFbKd88t1CsrBRWa/OF+fL6WmGpXF4qFQvz5dW99yd7yqVyeW16Omq3JqvFSnWysrE5u1qu3ajOLq/OLRVni7lj6xkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9G60cSRpISLSRpymhULEfyJiPHLJ4nKpeD4i/hsRP+Vz+aw81e9GAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMARq2xsrsyVSsX1/gYRE+OHvj19UnohEJyYoN8jEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy/+5t+97slAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP6S9JRGTHmbGXR/ee/VdyL994jogPv7z2+a25anV9Kqv/fae++kWrfrof7QcADtKep9vzOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0UtnYXJkrlYrrzeBevel+zREE/e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABH5+8AAAD///St0sU=") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r4}, 0x18) r5 = dup(0xffffffffffffffff) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x64}}, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) 3m27.261267023s ago: executing program 3 (id=109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES64=r1], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2000000000000039, &(0x7f0000000180)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4f20, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0xff, 0x7, 0x1, 'queue0\x00', 0x2}) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') 3m27.260999243s ago: executing program 32 (id=109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES64=r1], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2000000000000039, &(0x7f0000000180)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4f20, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0xff, 0x7, 0x1, 'queue0\x00', 0x2}) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') 8.707414869s ago: executing program 4 (id=2431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="008000050000000000000000000000dee6def7", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 8.004052743s ago: executing program 4 (id=2444): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 4.189631268s ago: executing program 0 (id=2491): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x811, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810dd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40c00, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) 4.09581395s ago: executing program 0 (id=2495): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) socket$inet_icmp(0x2, 0x2, 0x1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 4.063302301s ago: executing program 0 (id=2496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf584}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x100, 0x7, 0xa89}, {{0x2, 0x1}, {0x3, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014) 3.912045994s ago: executing program 0 (id=2500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000700)="2844fe4ab5", 0x0, 0x0, 0x0, 0x3, r0}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x800, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "19f4cac3800d446f", "5f311dfe9f340765616121aeaf9fbd2b", "e07fd7aa", "3a948cf896841434"}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 3.791070296s ago: executing program 0 (id=2505): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x400007}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}], 0x1}, 0xc001) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 3.725195957s ago: executing program 1 (id=2507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (fail_nth: 7) 3.705790998s ago: executing program 0 (id=2508): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000018000000bfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff0000000015040000000002000f040000000000003404ffc101ed0a0065040000170000801f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee633000000000000000000000000000000000000400000000000000003860000"], 0x0}, 0x94) 3.361678305s ago: executing program 1 (id=2509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002b80)="b2", 0x1}, {&(0x7f0000000000)="ab5e56266b74ed54ec3007bed9964f680fb9f2dd806df6d23703018d57a7e3c57d01510c0402b413a28f5c63fd613c70c5796083941716afc23b73f17625596bf5f29b9560ab45943f55888141fe4061e29c66ecb8fdbf762b88c461394021bd817edaa449f70267c4468161db7e043e71c74f23e50f38df2e711eecfa203c89ec0e4a13fa18191792b5c204f039c660e50b73e6430ae907752579dd893ca4", 0x9f}], 0x2}, 0x4040) close(r2) 3.361240595s ago: executing program 1 (id=2510): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 3.330890305s ago: executing program 1 (id=2511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf584}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x100, 0x7, 0xa89}, {{0x2, 0x1}, {0x3, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014) 3.239631047s ago: executing program 1 (id=2512): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) r3 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$eJzs3U1vW8UaAOD3nMbXuWnuTa50QXxIKAhEEVWdJrSquqIsEGwqIlVim0aJE4U4dYjt0kRdpCu2CIFAYgP/gQ0rEGt+AH8BJAQlLMrK6PgjTRO7MWkaV/HzSMd+Z845emfsaEbxWJ4ABtZE9pBGPBsRM0nEWKs+iYhcIxqKuNK8bvvu7fnsSKJev/Zb0rgmK8euezKnI2IrIp6JiB9yEWfT/XkrG5src6VScb1Vnqyurk1WNjbPLa/OLRWXijcuX7gwfeHSxcuXj66vr7373tOFi2+NfjuzOHtm6udvkrgSo61zu/txeCP7apqvSS57CR/w9qMne6Ik/W4AhzIUEadaz0/FWJxqRADASVbPR9QBgAGTmP8BYMC0Pwdor+0dzTpY7359MyKGO+Ufaq2ZDTfWIUe2kxjatciUhePH2VBOpK07EXF9fGL/31+yb832nzp/FA3ksfo+G3+udBp/0p3xJ9rjz677htvfnXhE3ce/+/lPdcifjX8zPeZ45/lauWv+OxHPDXXKn+zkT7rkv95j/u/uLfzV7Vz964hXOs4/yQO5un8/ZHJxuVQ833zsnGOidvv9h/V/pEv+rQP6v9Zj/0c/efHHrYfkf/Wlh7//nfJnc+LHPeb/KPfGZ93OZfkXuvT/oPf/qx7zX3rhg80eLwUAAAAAAAAAAAAAAAAAAAAAAAAAAIATIY2I0UjSwk6cpoVCcw/v/8dIWipXqmcXy7UbC9HYK3s8cmn7p5bHmuUkK0+1fo+/XZ5uxNs75dcj4n8R8Wn+341yYb5cWuh35wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5fSe/f//zDf3/wcATrjhfjcAADh25n8AGDzmfwAYPOZ/ABg8B8//fxxLOwCA4+P/fwAYPIeY//OPox0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIyZq1ezo7599/Z8Vl64uVFbKd88t1CsrBRWa/OF+fL6WmGpXF4qFQvz5dW99yd7yqVyeW16Omq3JqvFSnWysrE5u1qu3ajOLq/OLRVni7lj6xkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9G60cSRpISLSRpymhULEfyJiPHLJ4nKpeD4i/hsRP+Vz+aw81e9GAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMARq2xsrsyVSsX1/gYRE+OHvj19UnohEJyYoN8jEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy/+5t+97slAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP6S9JRGTHmbGXR/ee/VdyL994jogPv7z2+a25anV9Kqv/fae++kWrfrof7QcADtKep9vzOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0UtnYXJkrlYrrzeBevel+zREE/e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABH5+8AAAD///St0sU=") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRES8=r1, @ANYBLOB="0000000000000000b7048b352f226240d04866f79712d5d129000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r5}, 0x18) r6 = dup(0xffffffffffffffff) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3], 0x64}}, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) 2.233443227s ago: executing program 4 (id=2521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = perf_event_open(&(0x7f0000001180)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0xaea}, 0x10005, 0x32, 0xfffffbff, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="111d62242a3a2a20"], 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000009596f313216a0b46a56128ec52d10502dad2cdc29b847fb3c1589a7dac0f5f7ca4f69ba4b3645502faa3584658b9b975ce1420ab9fd425d2b5d2aa786f07c280bffc0c857939fd8553fa9e3e545a6b1c7bcfcd2ce62c4eb5272e88effea0aef72002fd4edf51952fdff230233c675f8453902aba96052b4aca89456bd1d5fbdb436a95596f92c36626a61b16107fbd511d2d785faeaa07d54441c5aa3b2fa1f01fd32ab42ef4acd0f1188e638c0fa3d55dde813fa13a45df1654b22e1c9d802bd9b2ada6031dd38b682345f45fd8ac11c673750f8982bb58950d511c35df0b6ad6a71b3f051fbf1b9e9c5929f6bb3eba5f7fca564b6a4f08667a8e995d46fd5c2af8522d9d06f61b02ef6d45d4cd594c467aa92ff45618d740c083ad8b0a8aa01512722989135e772a2f94d9add220a721742ba551f988f42af3e8bdce20d72744a2aa92db626cc8f2c31d3bf13e4d28f3fbe6f8d084e3613e1b9ae268c726b4ce1a8c50c7f2aedd158d3773b634a38ea39af9d28b058b72340000000000000000000000000000672b1975193f3a0f97caa8d9d33d21b5685ac5deff572f8fe5494002ebf350a4912333c65e651913397ca337aa73228918952d32820d0daeb0e985e3d39f2f9ece9cb2ebfb987bcab81df299f2562662c31f5cd1f360e32a113c8430f508fe57bfdfc1fd663d73308d4ee72410ea92d0173a538c21edecc587125b410e3f96985aa25e166bcf62b852971222cbece33800cf50b82ee500f87c2c18b40c81656d6909ab36281fe82a145de77d56"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) 1.699534277s ago: executing program 2 (id=2524): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000004c0)=[{{0x0, 0x1}, {0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3, 0x1}, {0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{}, {0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1}}, {{0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x50) statfs(&(0x7f0000001000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f0000000080)=[{0x8, 0x9, 0x3, 0x10001}, {0x1, 0x9, 0xf8, 0x45}, {0xb, 0x68, 0xdf, 0x7}, {0x2, 0xcf, 0x8, 0xfffff100}]}) 1.599170239s ago: executing program 5 (id=2525): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) socket$inet_icmp(0x2, 0x2, 0x1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.519163171s ago: executing program 2 (id=2526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r6, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r11, 0x2284, &(0x7f0000000080)) 1.170556328s ago: executing program 5 (id=2527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000005700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c40)={0x18c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\xc7'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x33, 0x2, 'kfr!e\x00H\xd2\x04\xa9\xaaFNh\xc6e[\x98\x96\xb4\x0f\x18l\xe5\x02\xe6%\x19\b\xf6f\x19\xbc\xe2\x16\x00\x00%\x89\xbc\xd95\xb0\x02,\xa7M'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6ef8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xd76}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x3, 0xfff) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x1000000, 0x7fffffff, 0x105}) r13 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r13, r13, 0x0, 0x800000009) 953.525192ms ago: executing program 2 (id=2528): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 905.383613ms ago: executing program 4 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2b, 0x801, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) bind$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x6, 0x3, 0x401, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r5, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000340)=0xb, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x106f) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300), 0x1, 0x4f2, &(0x7f0000000600)="$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") sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000002fc0)={0x11b8, r11, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1020, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1009, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "11a106b3c1e753486848374568868e83051e45f5a495c136"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7f5cc50fbc69532e8194f7164d036c3a03e12e707ce3795ddfdf725ed31010"}}, @TIPC_NLA_NODE_ID={0xae, 0x3, "193af33ae672252f3c789bda52a04dbf5466384120178ddb5699960852030d25f94c6e1bf9cac9618a5d10d1bb93f9262ece2b586e6590b694d87f2888e2573eadb90f64ee673e63a1562bb77012d5b35c12bb8886ae2125310e597540ae16c9f9859cfb47e42acef02b3be64b6e6ef82106467fdbc97aaaf402a4a78c603afc24af117aeec8dc270c7491ad04e9f1eb5999a5295434506eea5ce2b698274c3fa629a0ce7f2e1e61f248"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf49}]}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x8091}, 0x4000) 881.393883ms ago: executing program 2 (id=2530): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10120, 0x6, 0x8, 0x7, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='workqueue_activate_work\x00'}, 0x18) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x180002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='lock '], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000180)='coda\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 861.516704ms ago: executing program 1 (id=2531): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 750.793976ms ago: executing program 5 (id=2532): bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000000)=0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x40000000, 0x400803) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000380)={0x4, 0xf, 0x8, 0x101, 0x7a, 0xc, &(0x7f0000000300)="62649a683a65c893b614d33f14a50c5f788b816387703a1f71924e6f52c64245b816e90253295f9ac9387167d5dbcc0ed8b6b0f490a6edf67031a37c49eb57d08132cfd9870d17dcd860f73138773fddd8df695a2bc79d86aeea5080d3460dc07c55fae214b5b9d9ca47a21dce043c4443f22b86fbde04cde300"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r0, 0xa9ac}, &(0x7f0000000080)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x8) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) fcntl$setlease(r9, 0x400, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x4, 0x5, 0xf, 0x8, 0x7, 0x6, 0x3, 0x87, 0x9, 0xc, 0x2, 0x1}, 0xe) 351.694044ms ago: executing program 2 (id=2533): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 309.358554ms ago: executing program 2 (id=2534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = epoll_create(0xaf2) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x710, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x10000, 0x0, 0x1, 0x6, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) epoll_pwait2(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0xe000200f}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) arch_prctl$ARCH_GET_CPUID(0x1011) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r9}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x14, &(0x7f0000000a80)=ANY=[@ANYRES16, @ANYRES64=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRES16=r7], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pause() mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x70, 0x29, &(0x7f0000000200)="34e8a9305fd636267acdec1d15c555e360302ca30c4ab8b2fde6edb08b1cf7108cb327fbb0fc38a90351d1800472e563d4cec6c1c2bad7a1cbe9ca2c2076fb7e4398c5a0cd574b7c0db1dc302ea2082d3fa61809ccb2d8ca64d2276961fe86d49794279932328e63e9e77f5f2507cbd0", &(0x7f0000000340)=""/41, 0xe06, 0x0, 0x1000, 0xda, &(0x7f0000002080)="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", &(0x7f0000000bc0)="aa70343d0beb3093fae72dc22f576f701e6561e52753969c578b2b8570ca555b19149d03cb7c56f811f94860b263d5bba411542b12bbb18bced93219ffdfb37eb35370e437577b986c9f402551bcca2c2357c5e894cd285cd465baae4fed3c655b8723977ce5e3a1c0cc4a2d2e6fc35b7329709156e14331eba9ad7754264307c3825787b93d0657968d36aedca0736538438185002252a3e3a5e0e01e8142715569443c6d3fdb32a3d537d160ff3d9776c2343f31af22bb64431562cfd5ddacf12c0c1112cec587628dc1196346518819b3956b2068b63e1e98", 0x1, 0x0, 0x9}, 0x50) syz_open_procfs(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_read_part_table(0x60e, &(0x7f0000000000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 266.564145ms ago: executing program 5 (id=2535): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0xffffff24, 0x7, '\x00', 0x1000000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) read(r4, &(0x7f00000001c0)=""/143, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) truncate(&(0x7f0000000080)='./file0\x00', 0x8) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) quotactl_fd$Q_SYNC(r3, 0xffffffff80000102, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x32600) 254.676315ms ago: executing program 4 (id=2536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000005700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c40)={0x18c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\xc7'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x33, 0x2, 'kfr!e\x00H\xd2\x04\xa9\xaaFNh\xc6e[\x98\x96\xb4\x0f\x18l\xe5\x02\xe6%\x19\b\xf6f\x19\xbc\xe2\x16\x00\x00%\x89\xbc\xd95\xb0\x02,\xa7M'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6ef8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xd76}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x3, 0xfff) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x1000000, 0x7fffffff, 0x105}) r13 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r13, r13, 0x0, 0x800000009) 140.658098ms ago: executing program 5 (id=2537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2242, 0x0) fcntl$setlease(r2, 0x400, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 81.224749ms ago: executing program 5 (id=2538): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d9, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x10, 0xb7, 0x9, 0x6}, {0x8, 0xf2, 0x8, 0x8}]}) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d9, &(0x7f0000000a40)="$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") (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x10, 0xb7, 0x9, 0x6}, {0x8, 0xf2, 0x8, 0x8}]}) (async) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async) ftruncate(r0, 0x2007ffc) (async) sendfile(r0, r0, 0x0, 0x800000009) (async) 0s ago: executing program 4 (id=2539): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) lsm_set_self_attr(0x69, &(0x7f00000002c0)=ANY=[@ANYBLOB="6500000000000000060000000000b92a592da442d2e91fb4ca00002000000000000000000000000000ff00"], 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000040)) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000440)) close_range(r2, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x10f8, 0x30, 0x12f, 0x0, 0x0, {}, [{0x10e4, 0x1, [@m_police={0x10e0, 0x1, 0x0, 0x0, {{0xb}, {0x10b4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x16}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x5, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0xc}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x0, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x8001, 0x6, 0x9, 0x580, 0x8b1, 0xc, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0xfffffff7, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30002000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0xe, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x200, 0xa, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x6, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7ff, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0x200000de, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe7c1, 0x9, 0x2, 0x5e9, 0x2, 0x36d, 0x2, 0x1, 0x101, 0x5, 0x5, 0x7ff, 0x7, 0x1, 0x0, 0x3, 0xc0a9, 0x7, 0x0, 0x10000, 0x7f, 0x8000, 0xfffffffd, 0x8, 0x4b8, 0x81d9, 0x3, 0x401, 0x81, 0x30f, 0x765, 0x369, 0x2, 0x6, 0x1ff, 0xe, 0x2, 0x7, 0xf, 0x3, 0x6, 0x8, 0xd, 0x3ff, 0x1, 0x30000, 0x24, 0x9, 0x2, 0x5c2c, 0x8, 0x4, 0x10, 0x0, 0x5, 0x100, 0x10001, 0x2, 0x400, 0x4, 0x400, 0x6e0f1d14, 0x2, 0x5, 0x5, 0xd90d, 0x3, 0x3, 0x2, 0xa, 0x4, 0x2, 0x4, 0x4fbe, 0x1, 0x4, 0x5, 0x7, 0xffff, 0x7, 0xa, 0x2, 0xaf8, 0x1, 0x3ff, 0x9, 0x10001, 0x5529, 0x9, 0x80, 0x7, 0xd, 0x5, 0x2, 0xffffffff, 0x6, 0x81, 0xdbb, 0xa1b, 0x2, 0x2, 0x2, 0x3, 0x101, 0x10, 0x3, 0x800, 0x80000000, 0x3, 0x5055, 0x3, 0x8, 0x4a47, 0x0, 0x6, 0x80000000, 0x7, 0xe, 0x100, 0x8001, 0x4, 0x8, 0x2, 0x8, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x7fffffff, 0x1, 0xfffffff7, 0x8, 0x3ff, 0xffffffff, 0x1, 0x4, 0x9, 0xff, 0x7ff, 0xc, 0x6, 0xfffffbf2, 0x80000000, 0xa, 0x8, 0x400, 0x1, 0x2, 0x1, 0xe, 0x4, 0x0, 0x8, 0x6, 0x3, 0xe8, 0x58d, 0x5, 0x6, 0x63, 0xfffffffd, 0x6fe55df5, 0x3, 0x8001, 0xf, 0x2, 0x1, 0x40, 0x7ff, 0x6, 0x4, 0x9, 0x5, 0x5, 0x3, 0xffff0001, 0x1d, 0x8, 0x0, 0x7, 0x3, 0x2, 0xb, 0xaf, 0x27ff, 0x100, 0x5, 0x25, 0x8e7e, 0x7fff, 0x3, 0x6, 0x5, 0x80000001, 0xe, 0xeaaf, 0x7, 0xb, 0x1, 0x7f, 0x4, 0x5, 0x1, 0xffff, 0x1, 0x6, 0x8, 0x3, 0x4, 0x100000cb, 0x7ae3, 0x7, 0x5, 0x0, 0xad980, 0x9, 0x6, 0x3, 0x5, 0x3, 0x7, 0x8, 0x3ff, 0x5, 0x1, 0x4, 0x10001, 0x7, 0x4, 0x8, 0x3, 0x4, 0xc871, 0xff, 0x10000, 0x80, 0xffff, 0x401, 0xfffffffc, 0x1ff, 0x8, 0x7, 0xba, 0x8001, 0xd96f, 0x1, 0xa, 0x2, 0xfffffff8, 0x4, 0x9, 0x3, 0x8000, 0xb, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x10f8}}, 0xc0) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) kernel console output (not intermixed with test programs): _stack_lvl+0xe8/0x140 [ 181.730353][ T9740] dump_stack+0x15/0x1b [ 181.730373][ T9740] should_fail_ex+0x265/0x280 [ 181.730397][ T9740] should_failslab+0x8c/0xb0 [ 181.730421][ T9740] kmem_cache_alloc_node_noprof+0x57/0x320 [ 181.730482][ T9740] ? __alloc_skb+0x101/0x320 [ 181.730505][ T9740] __alloc_skb+0x101/0x320 [ 181.730526][ T9740] alloc_skb_with_frags+0x7d/0x470 [ 181.730553][ T9740] ? kernel_text_address+0x94/0xb0 [ 181.730651][ T9740] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.730689][ T9740] ? __kernel_text_address+0xd/0x40 [ 181.730719][ T9740] ? unwind_get_return_address+0x16/0x40 [ 181.730820][ T9740] ? arch_stack_walk+0xfc/0x150 [ 181.730851][ T9740] sock_alloc_send_pskb+0x43a/0x4f0 [ 181.730888][ T9740] ? stack_trace_save+0x5e/0x90 [ 181.730954][ T9740] ? __list_add_valid_or_report+0x38/0xe0 [ 181.730993][ T9740] __ip_append_data+0x18bd/0x2440 [ 181.731038][ T9740] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 181.731113][ T9740] ? __rcu_read_unlock+0x4f/0x70 [ 181.731139][ T9740] ? ipv4_mtu+0x217/0x240 [ 181.731176][ T9740] ip_append_data+0xd6/0x130 [ 181.731262][ T9740] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 181.731309][ T9740] udp_sendmsg+0x282/0x13c0 [ 181.731383][ T9740] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 181.731436][ T9740] udpv6_sendmsg+0x7e9/0x1590 [ 181.731542][ T9740] ? _raw_spin_unlock_bh+0x36/0x40 [ 181.731645][ T9740] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 181.731671][ T9740] inet6_sendmsg+0xac/0xd0 [ 181.731720][ T9740] __sock_sendmsg+0x8b/0x180 [ 181.731770][ T9740] __sys_sendto+0x268/0x330 [ 181.731813][ T9740] __x64_sys_sendto+0x76/0x90 [ 181.731846][ T9740] x64_sys_call+0x2d05/0x2ff0 [ 181.731874][ T9740] do_syscall_64+0xd2/0x200 [ 181.731935][ T9740] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.731968][ T9740] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.732009][ T9740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.732037][ T9740] RIP: 0033:0x7fe77697eec9 [ 181.732074][ T9740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.732097][ T9740] RSP: 002b:00007fe7753df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 181.732123][ T9740] RAX: ffffffffffffffda RBX: 00007fe776bd5fa0 RCX: 00007fe77697eec9 [ 181.732140][ T9740] RDX: 00000000000005c4 RSI: 0000000000000000 RDI: 0000000000000003 [ 181.732156][ T9740] RBP: 00007fe7753df090 R08: 0000200000000540 R09: 000000000000001c [ 181.732173][ T9740] R10: 000000000404c844 R11: 0000000000000246 R12: 0000000000000001 [ 181.732236][ T9740] R13: 00007fe776bd6038 R14: 00007fe776bd5fa0 R15: 00007ffcd9831818 [ 181.732262][ T9740] [ 181.774935][ T9742] loop5: detected capacity change from 0 to 1024 [ 182.060716][ T9742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.071647][ T9751] netlink: 'syz.2.1752': attribute type 21 has an invalid length. [ 182.081532][ T9742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.159620][ T9757] sd 0:0:1:0: device reset [ 182.209002][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.230000][ T9766] loop5: detected capacity change from 0 to 512 [ 182.238126][ T9766] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1759: corrupted in-inode xattr: invalid ea_ino [ 182.244539][ T9768] can0: slcan on ttyS3. [ 182.252045][ T9766] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1759: couldn't read orphan inode 15 (err -117) [ 182.270445][ T9766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.284218][ T9736] loop4: detected capacity change from 0 to 512 [ 182.306705][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.329070][ T9762] can0 (unregistered): slcan off ttyS3. [ 182.335248][ T9736] EXT4-fs (loop4): too many log groups per flexible block group [ 182.343888][ T9736] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 182.363707][ T9775] can0: slcan on ttyS3. [ 182.401143][ T9736] EXT4-fs (loop4): mount failed [ 182.402354][ T9764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.414887][ T9764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.430025][ T9775] can0 (unregistered): slcan off ttyS3. [ 182.457566][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1746'. [ 182.515109][ T9779] loop1: detected capacity change from 0 to 2048 [ 182.544107][ T9787] loop4: detected capacity change from 0 to 128 [ 182.551058][ T9779] loop1: p1 < > p4 [ 182.557400][ T9779] loop1: p4 size 8388608 extends beyond EOD, truncated [ 182.557732][ T9787] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.576612][ T9787] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.624049][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.644769][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1769'. [ 182.659770][ T9796] loop4: detected capacity change from 0 to 128 [ 182.661689][ T9796] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.678557][ T9796] ext4 filesystem being mounted at /356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.713867][ T9796] sd 0:0:1:0: device reset [ 182.731374][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.759935][ T9802] loop4: detected capacity change from 0 to 512 [ 182.769663][ T9802] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1770: corrupted in-inode xattr: invalid ea_ino [ 182.769829][ T9802] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1770: couldn't read orphan inode 15 (err -117) [ 182.770388][ T9802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.797836][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.919622][ T9808] netlink: 'syz.5.1773': attribute type 3 has an invalid length. [ 183.080310][ T9827] loop5: detected capacity change from 0 to 512 [ 183.089833][ T9829] sd 0:0:1:0: device reset [ 183.103061][ T9827] EXT4-fs (loop5): too many log groups per flexible block group [ 183.110967][ T9827] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 183.121267][ T9827] EXT4-fs (loop5): mount failed [ 183.130635][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1776'. [ 183.441694][ T9841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.451169][ T9841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.493532][ T9861] sd 0:0:1:0: device reset [ 183.803297][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1794'. [ 183.983377][ T9875] loop4: detected capacity change from 0 to 2048 [ 184.077765][ T9875] loop4: p1 < > p4 [ 184.082053][ T9875] loop4: p4 size 8388608 extends beyond EOD, truncated [ 185.058854][ T9910] loop1: detected capacity change from 0 to 512 [ 185.070402][ T9910] EXT4-fs (loop1): too many log groups per flexible block group [ 185.078209][ T9910] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 185.086003][ T9910] EXT4-fs (loop1): mount failed [ 185.201655][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1809'. [ 185.318693][ T9929] loop4: detected capacity change from 0 to 764 [ 185.342687][ T9933] FAULT_INJECTION: forcing a failure. [ 185.342687][ T9933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.342739][ T9933] CPU: 1 UID: 0 PID: 9933 Comm: syz.1.1821 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.342770][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.342817][ T9933] Call Trace: [ 185.342901][ T9933] [ 185.342908][ T9933] __dump_stack+0x1d/0x30 [ 185.342931][ T9933] dump_stack_lvl+0xe8/0x140 [ 185.342958][ T9933] dump_stack+0x15/0x1b [ 185.342981][ T9933] should_fail_ex+0x265/0x280 [ 185.343015][ T9933] should_fail+0xb/0x20 [ 185.343073][ T9933] should_fail_usercopy+0x1a/0x20 [ 185.343108][ T9933] _copy_to_user+0x20/0xa0 [ 185.343208][ T9933] simple_read_from_buffer+0xb5/0x130 [ 185.343239][ T9933] proc_fail_nth_read+0x10e/0x150 [ 185.343275][ T9933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.343349][ T9933] vfs_read+0x1a5/0x770 [ 185.343375][ T9933] ? __fput+0x555/0x650 [ 185.343410][ T9933] ? __rcu_read_unlock+0x4f/0x70 [ 185.343445][ T9933] ? __fget_files+0x184/0x1c0 [ 185.343500][ T9933] ksys_read+0xda/0x1a0 [ 185.343531][ T9933] __x64_sys_read+0x40/0x50 [ 185.343559][ T9933] x64_sys_call+0x27bc/0x2ff0 [ 185.343585][ T9933] do_syscall_64+0xd2/0x200 [ 185.343691][ T9933] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.343752][ T9933] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.343909][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.343937][ T9933] RIP: 0033:0x7fea70f6d8dc [ 185.343955][ T9933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.344002][ T9933] RSP: 002b:00007fea6f9d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.344026][ T9933] RAX: ffffffffffffffda RBX: 00007fea711c5fa0 RCX: 00007fea70f6d8dc [ 185.344042][ T9933] RDX: 000000000000000f RSI: 00007fea6f9d70a0 RDI: 0000000000000008 [ 185.344057][ T9933] RBP: 00007fea6f9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.344072][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.344086][ T9933] R13: 00007fea711c6038 R14: 00007fea711c5fa0 R15: 00007fff4fb4dbe8 [ 185.344110][ T9933] [ 185.356972][ T9929] iso9660: Unknown parameter 'Uf"f6h O:~F& HID v0.00 Device [syz1] on syz0 [ 186.629120][ T9964] loop4: detected capacity change from 0 to 1024 [ 186.651715][ T9964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.693760][ T9964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.758084][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 186.758101][ T29] audit: type=1326 audit(1758597849.805:14204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 186.888812][ T29] audit: type=1326 audit(1758597849.845:14205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 186.912503][ T29] audit: type=1326 audit(1758597849.845:14206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 186.936052][ T29] audit: type=1326 audit(1758597849.845:14207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 186.959693][ T29] audit: type=1326 audit(1758597849.845:14208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 186.983194][ T29] audit: type=1326 audit(1758597849.855:14209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 187.006841][ T29] audit: type=1326 audit(1758597849.855:14210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 187.030486][ T29] audit: type=1326 audit(1758597849.855:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 187.053973][ T29] audit: type=1326 audit(1758597849.855:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 187.077528][ T29] audit: type=1326 audit(1758597849.915:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9969 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 187.107727][ T3390] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 187.185890][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.216613][ T3390] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz0 [ 187.228089][ T9962] siw: device registration error -23 [ 187.443037][ T9987] netlink: 'syz.2.1837': attribute type 3 has an invalid length. [ 187.462487][ T9970] siw: device registration error -23 [ 187.894231][T10001] can0: slcan on ttyS3. [ 188.009132][T10001] can0 (unregistered): slcan off ttyS3. [ 188.073967][T10004] FAULT_INJECTION: forcing a failure. [ 188.073967][T10004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.073993][T10004] CPU: 1 UID: 0 PID: 10004 Comm: syz.4.1843 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.074020][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.074034][T10004] Call Trace: [ 188.074041][T10004] [ 188.074048][T10004] __dump_stack+0x1d/0x30 [ 188.074185][T10004] dump_stack_lvl+0xe8/0x140 [ 188.074205][T10004] dump_stack+0x15/0x1b [ 188.074220][T10004] should_fail_ex+0x265/0x280 [ 188.074265][T10004] should_fail+0xb/0x20 [ 188.074287][T10004] should_fail_usercopy+0x1a/0x20 [ 188.074367][T10004] _copy_from_user+0x1c/0xb0 [ 188.074394][T10004] sctp_getsockopt_connectx3+0xda/0x300 [ 188.074426][T10004] sctp_getsockopt+0x910/0xaa0 [ 188.074449][T10004] sock_common_getsockopt+0x60/0x70 [ 188.074486][T10004] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 188.074519][T10004] do_sock_getsockopt+0x1fd/0x240 [ 188.074551][T10004] __x64_sys_getsockopt+0x11e/0x1a0 [ 188.074580][T10004] x64_sys_call+0x2bc6/0x2ff0 [ 188.074653][T10004] do_syscall_64+0xd2/0x200 [ 188.074696][T10004] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 188.074718][T10004] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 188.074803][T10004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.074822][T10004] RIP: 0033:0x7f40673ceec9 [ 188.074836][T10004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.074857][T10004] RSP: 002b:00007f4065e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 188.074878][T10004] RAX: ffffffffffffffda RBX: 00007f4067625fa0 RCX: 00007f40673ceec9 [ 188.074893][T10004] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 188.074931][T10004] RBP: 00007f4065e37090 R08: 0000200000000100 R09: 0000000000000000 [ 188.074946][T10004] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 188.074960][T10004] R13: 00007f4067626038 R14: 00007f4067625fa0 R15: 00007ffde9505b98 [ 188.074979][T10004] [ 188.156897][T10006] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1844'. [ 188.352882][T10012] loop4: detected capacity change from 0 to 128 [ 188.375633][T10012] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.377226][T10012] ext4 filesystem being mounted at /368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.382003][T10012] sd 0:0:1:0: device reset [ 188.418997][T10015] can0: slcan on ttyS3. [ 188.436074][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.528464][T10022] bond0: (slave dummy0): Releasing backup interface [ 188.557491][T10022] bridge_slave_0: left allmulticast mode [ 188.563264][T10022] bridge_slave_0: left promiscuous mode [ 188.569010][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.584704][T10022] bridge_slave_1: left allmulticast mode [ 188.590428][T10022] bridge_slave_1: left promiscuous mode [ 188.596181][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.611611][T10022] bond0: (slave bond_slave_0): Releasing backup interface [ 188.637974][T10022] bond0: (slave bond_slave_1): Releasing backup interface [ 188.677412][T10022] team0: Port device C removed [ 188.702004][T10022] team0: Port device team_slave_1 removed [ 188.739495][T10028] team0: Mode changed to "random" [ 188.744976][T10032] vlan0: entered promiscuous mode [ 188.769930][T10015] can0 (unregistered): slcan off ttyS3. [ 188.775346][T10032] team0: Port device vlan0 added [ 188.900009][T10046] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1859'. [ 188.973583][T10050] loop1: detected capacity change from 0 to 2048 [ 189.029435][T10050] loop1: p1 < > p4 [ 189.034350][T10050] loop1: p4 size 8388608 extends beyond EOD, truncated [ 189.182001][T10053] loop4: detected capacity change from 0 to 2048 [ 189.235565][T10053] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.1859: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 189.290936][T10053] EXT4-fs (loop4): get root inode failed [ 189.296851][T10053] EXT4-fs (loop4): mount failed [ 189.320703][T10059] tipc: Started in network mode [ 189.325673][T10059] tipc: Node identity a63e83107477, cluster identity 4711 [ 189.332860][T10059] tipc: Enabled bearer , priority 0 [ 189.391398][T10062] syzkaller0: entered promiscuous mode [ 189.397066][T10062] syzkaller0: entered allmulticast mode [ 189.429963][T10059] tipc: Resetting bearer [ 189.448465][T10059] tipc: Disabling bearer [ 189.716055][T10073] loop1: detected capacity change from 0 to 512 [ 189.752980][T10075] sd 0:0:1:0: device reset [ 189.864182][T10073] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1867: corrupted in-inode xattr: invalid ea_ino [ 189.891551][T10073] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1867: couldn't read orphan inode 15 (err -117) [ 189.929951][T10073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.013094][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.088157][T10082] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1868'. [ 190.095194][T10084] loop4: detected capacity change from 0 to 128 [ 190.128657][T10084] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.151240][T10084] ext4 filesystem being mounted at /376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.210316][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.295378][T10096] loop4: detected capacity change from 0 to 512 [ 190.324466][T10096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.359837][T10096] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1874: invalid block [ 190.389276][T10096] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1874: invalid indirect mapped block 4294967295 (level 1) [ 190.392661][T10101] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1875'. [ 190.418630][T10096] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1874: invalid indirect mapped block 4294967295 (level 1) [ 190.441125][T10096] EXT4-fs (loop4): 2 truncates cleaned up [ 190.447632][T10096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.502822][T10096] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1874: bg 0: block 5: invalid block bitmap [ 190.521651][T10107] can0: slcan on ttyS3. [ 190.568769][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1877'. [ 190.660865][T10109] can0 (unregistered): slcan off ttyS3. [ 190.717579][T10099] loop1: detected capacity change from 0 to 2048 [ 190.843916][T10118] sd 0:0:1:0: device reset [ 191.082089][T10099] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.1875: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 191.148880][T10099] EXT4-fs (loop1): get root inode failed [ 191.154712][T10099] EXT4-fs (loop1): mount failed [ 191.317204][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.410374][T10122] netlink: 'syz.4.1883': attribute type 3 has an invalid length. [ 191.603635][T10127] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1885'. [ 191.674485][T10129] loop4: detected capacity change from 0 to 128 [ 191.700081][T10129] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.738432][T10129] ext4 filesystem being mounted at /380/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.788150][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.819816][T10138] can0: slcan on ttyS3. [ 191.860037][ T3377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 191.881426][ T3377] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.929027][T10138] can0 (unregistered): slcan off ttyS3. [ 191.971771][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.993543][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.294747][T10152] lo speed is unknown, defaulting to 1000 [ 193.127219][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 193.127240][ T29] audit: type=1400 audit(1758597855.835:14474): avc: denied { unmount } for pid=10146 comm="syz.0.1895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 193.612036][T10155] can0: slcan on ttyS3. [ 193.866127][T10162] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1896'. [ 193.900684][T10164] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1898'. [ 194.062541][ T29] audit: type=1326 audit(1758597857.115:14475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40673c5d67 code=0x7ffc0000 [ 194.165189][ T29] audit: type=1326 audit(1758597857.135:14476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f406736af79 code=0x7ffc0000 [ 194.188884][ T29] audit: type=1326 audit(1758597857.135:14477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 194.212640][ T29] audit: type=1326 audit(1758597857.145:14478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40673c5d67 code=0x7ffc0000 [ 194.236180][ T29] audit: type=1326 audit(1758597857.145:14479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f406736af79 code=0x7ffc0000 [ 194.259725][ T29] audit: type=1326 audit(1758597857.145:14480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 194.283235][ T29] audit: type=1326 audit(1758597857.145:14481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40673c5d67 code=0x7ffc0000 [ 194.306759][ T29] audit: type=1326 audit(1758597857.145:14482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f406736af79 code=0x7ffc0000 [ 194.330300][ T29] audit: type=1326 audit(1758597857.145:14483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 194.470562][T10191] loop5: detected capacity change from 0 to 4096 [ 194.539829][T10191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.889609][T10195] can0 (unregistered): slcan off ttyS3. [ 195.672156][T10220] loop1: detected capacity change from 0 to 128 [ 195.694711][T10220] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.709316][T10220] ext4 filesystem being mounted at /386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.780200][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.419861][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'. [ 196.860595][T10298] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1920'. [ 197.243613][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.441387][T10348] loop4: detected capacity change from 0 to 2048 [ 197.479733][T10348] loop4: p1 < > p4 [ 197.493978][T10348] loop4: p4 size 8388608 extends beyond EOD, truncated [ 197.522810][T10360] loop5: detected capacity change from 0 to 128 [ 197.532756][T10360] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.559492][T10360] ext4 filesystem being mounted at /327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.630656][ T3935] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.069325][T10374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1930'. [ 198.585397][T10411] netlink: 'syz.5.1935': attribute type 3 has an invalid length. [ 198.738448][T10427] loop5: detected capacity change from 0 to 128 [ 198.761100][T10427] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.806043][T10427] ext4 filesystem being mounted at /332/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.944366][ T3935] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.995020][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 198.995034][ T29] audit: type=1326 audit(1758597862.045:14734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.048366][ T29] audit: type=1326 audit(1758597862.085:14735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.072104][ T29] audit: type=1326 audit(1758597862.085:14736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.103111][ T29] audit: type=1326 audit(1758597862.155:14737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.103561][T10456] loop4: detected capacity change from 0 to 2048 [ 199.126851][ T29] audit: type=1326 audit(1758597862.155:14738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.156847][ T29] audit: type=1326 audit(1758597862.155:14739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.180512][ T29] audit: type=1326 audit(1758597862.155:14740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.204187][ T29] audit: type=1326 audit(1758597862.155:14741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.227886][ T29] audit: type=1326 audit(1758597862.155:14742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.251612][ T29] audit: type=1326 audit(1758597862.155:14743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10450 comm="syz.5.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 199.289642][T10456] loop4: p1 < > p4 [ 199.294332][T10460] loop5: detected capacity change from 0 to 2048 [ 199.301964][T10456] loop4: p4 size 8388608 extends beyond EOD, truncated [ 199.349474][T10460] loop5: p1 < > p4 [ 199.354271][T10460] loop5: p4 size 8388608 extends beyond EOD, truncated [ 199.640190][T10490] sd 0:0:1:0: device reset [ 199.886217][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.912128][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.102008][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.115416][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.267492][T10559] loop5: detected capacity change from 0 to 4096 [ 200.288384][T10559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.599602][T10615] sd 0:0:1:0: device reset [ 200.657812][T10628] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1954'. [ 200.810664][T10640] loop4: detected capacity change from 0 to 2048 [ 200.985540][T10640] loop4: p1 < > p4 [ 200.999356][T10640] loop4: p4 size 8388608 extends beyond EOD, truncated [ 201.954358][T10674] loop4: detected capacity change from 0 to 4096 [ 201.976921][T10674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.536670][T10718] loop1: detected capacity change from 0 to 128 [ 202.545979][T10718] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.558490][T10718] ext4 filesystem being mounted at /388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.605509][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.775731][T10734] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1968'. [ 202.824641][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.844922][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.849581][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.863394][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.983979][T10766] can0: slcan on ttyS3. [ 203.067127][T10788] loop4: detected capacity change from 0 to 512 [ 203.074521][T10766] can0 (unregistered): slcan off ttyS3. [ 203.091038][T10788] EXT4-fs (loop4): too many log groups per flexible block group [ 203.099047][T10788] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 203.112317][T10788] EXT4-fs (loop4): mount failed [ 203.149412][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1971'. [ 203.283079][T10804] loop4: detected capacity change from 0 to 1024 [ 203.313131][T10804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.362156][T10804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.489101][T10818] can0: slcan on ttyS3. [ 204.645259][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.812432][T10881] loop5: detected capacity change from 0 to 128 [ 204.835543][T10881] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.999099][T10881] ext4 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.073592][ T3935] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.099935][T10884] netlink: 'syz.2.1979': attribute type 3 has an invalid length. [ 205.199361][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 205.199379][ T29] audit: type=1326 audit(1758597868.245:14791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.229397][ T29] audit: type=1326 audit(1758597868.245:14792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.253020][ T29] audit: type=1326 audit(1758597868.245:14793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.276554][ T29] audit: type=1326 audit(1758597868.245:14794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.300302][ T29] audit: type=1326 audit(1758597868.245:14795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.323911][ T29] audit: type=1326 audit(1758597868.245:14796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.347587][ T29] audit: type=1326 audit(1758597868.245:14797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.347957][T10899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1987'. [ 205.371294][ T29] audit: type=1326 audit(1758597868.245:14798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.390916][T10901] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1980'. [ 205.403882][ T29] audit: type=1326 audit(1758597868.245:14799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.436560][ T29] audit: type=1326 audit(1758597868.245:14800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.0.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 205.740190][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.748894][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.999922][T10903] loop1: detected capacity change from 0 to 512 [ 206.033205][T10903] EXT4-fs (loop1): too many log groups per flexible block group [ 206.042855][T10903] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 206.056459][T10903] EXT4-fs (loop1): mount failed [ 206.094830][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1986'. [ 206.189409][T10910] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1989'. [ 206.259448][T10912] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1988'. [ 206.296774][T10914] 9pnet_fd: Insufficient options for proto=fd [ 206.381047][T10920] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1992'. [ 206.516341][T10926] netlink: 'syz.2.1994': attribute type 3 has an invalid length. [ 206.553061][T10892] loop5: detected capacity change from 0 to 2048 [ 206.636844][T10892] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.1980: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 206.654622][T10922] loop1: detected capacity change from 0 to 2048 [ 206.688519][T10892] EXT4-fs (loop5): get root inode failed [ 206.694278][T10892] EXT4-fs (loop5): mount failed [ 206.704487][T10922] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.1992: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 206.727773][T10922] EXT4-fs (loop1): get root inode failed [ 206.733601][T10922] EXT4-fs (loop1): mount failed [ 207.443197][T11010] loop1: detected capacity change from 0 to 1024 [ 207.479652][T11010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.595623][T11010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.789019][T11024] can0 (unregistered): slcan off ttyS3. [ 208.238360][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.645013][T11033] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2002'. [ 208.740109][T11028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.754163][T11028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.770721][T11039] 9pnet_fd: Insufficient options for proto=fd [ 208.944493][T11068] 9p: Unknown access argument : -22 [ 209.488611][T11108] loop1: detected capacity change from 0 to 2048 [ 209.609796][T11108] loop1: p1 < > p4 [ 209.619749][T11108] loop1: p4 size 8388608 extends beyond EOD, truncated [ 209.702842][T11104] loop5: detected capacity change from 0 to 512 [ 209.747448][T11104] EXT4-fs (loop5): too many log groups per flexible block group [ 209.757425][T11104] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 209.819565][T11104] EXT4-fs (loop5): mount failed [ 209.886583][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2012'. [ 210.038443][T11114] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2014'. [ 210.259807][T11123] loop5: detected capacity change from 0 to 2048 [ 210.267602][T11129] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2021'. [ 210.290307][T11123] loop5: p1 < > p4 [ 210.299854][T11123] loop5: p4 size 8388608 extends beyond EOD, truncated [ 210.567256][T11134] netlink: 'syz.4.2022': attribute type 5 has an invalid length. [ 210.575154][T11134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2022'. [ 210.999194][T11143] sd 0:0:1:0: device reset [ 211.054391][T11146] netlink: 'syz.5.2027': attribute type 3 has an invalid length. [ 211.684062][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 211.684085][ T29] audit: type=1326 audit(1758597874.735:14875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 211.862470][T11132] loop1: detected capacity change from 0 to 2048 [ 211.873922][ T29] audit: type=1326 audit(1758597874.765:14876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 211.897571][ T29] audit: type=1326 audit(1758597874.775:14877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 211.921200][ T29] audit: type=1326 audit(1758597874.775:14878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 211.944852][ T29] audit: type=1326 audit(1758597874.775:14879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 211.968524][ T29] audit: type=1326 audit(1758597874.785:14880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 211.992127][ T29] audit: type=1326 audit(1758597874.785:14881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 212.015820][ T29] audit: type=1326 audit(1758597874.785:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 212.039439][ T29] audit: type=1326 audit(1758597874.785:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 212.063210][ T29] audit: type=1326 audit(1758597874.785:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11164 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 212.382246][T11132] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.2021: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 212.453315][T11172] FAULT_INJECTION: forcing a failure. [ 212.453315][T11172] name failslab, interval 1, probability 0, space 0, times 0 [ 212.466067][T11172] CPU: 1 UID: 0 PID: 11172 Comm: syz.5.2034 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.466097][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.466109][T11172] Call Trace: [ 212.466115][T11172] [ 212.466122][T11172] __dump_stack+0x1d/0x30 [ 212.466143][T11172] dump_stack_lvl+0xe8/0x140 [ 212.466167][T11172] dump_stack+0x15/0x1b [ 212.466184][T11172] should_fail_ex+0x265/0x280 [ 212.466210][T11172] should_failslab+0x8c/0xb0 [ 212.466296][T11172] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 212.466328][T11172] ? __d_alloc+0x3d/0x340 [ 212.466363][T11172] __d_alloc+0x3d/0x340 [ 212.466418][T11172] ? mpol_shared_policy_init+0xbd/0x4c0 [ 212.466441][T11172] d_alloc_pseudo+0x1e/0x80 [ 212.466475][T11172] alloc_file_pseudo+0x71/0x160 [ 212.466542][T11172] __shmem_file_setup+0x1de/0x210 [ 212.466587][T11172] shmem_file_setup+0x3b/0x50 [ 212.466607][T11172] __se_sys_memfd_create+0x2c3/0x590 [ 212.466644][T11172] __x64_sys_memfd_create+0x31/0x40 [ 212.466683][T11172] x64_sys_call+0x2abe/0x2ff0 [ 212.466707][T11172] do_syscall_64+0xd2/0x200 [ 212.466739][T11172] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.466832][T11172] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.466906][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.466930][T11172] RIP: 0033:0x7fe77697eec9 [ 212.466947][T11172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.467103][T11172] RSP: 002b:00007fe7753dee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 212.467121][T11172] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007fe77697eec9 [ 212.467133][T11172] RDX: 00007fe7753deef0 RSI: 0000000000000000 RDI: 00007fe776a02960 [ 212.467145][T11172] RBP: 0000200000000600 R08: 00007fe7753debb7 R09: 00007fe7753dee40 [ 212.467159][T11172] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 212.467258][T11172] R13: 00007fe7753deef0 R14: 00007fe7753deeb0 R15: 0000200000000300 [ 212.467276][T11172] [ 212.479053][T11132] EXT4-fs (loop1): get root inode failed [ 212.675772][T11132] EXT4-fs (loop1): mount failed [ 212.676901][T11176] loop5: detected capacity change from 0 to 2048 [ 212.739319][T11176] loop5: p1 < > p4 [ 212.759284][T11176] loop5: p4 size 8388608 extends beyond EOD, truncated [ 213.594905][T11187] netlink: 'syz.0.2040': attribute type 3 has an invalid length. [ 213.842660][ T3306] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 213.853619][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.853649][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.853660][ T3306] Call Trace: [ 213.853666][ T3306] [ 213.853672][ T3306] __dump_stack+0x1d/0x30 [ 213.853762][ T3306] dump_stack_lvl+0xe8/0x140 [ 213.853781][ T3306] dump_stack+0x15/0x1b [ 213.853798][ T3306] dump_header+0x81/0x220 [ 213.853892][ T3306] oom_kill_process+0x342/0x400 [ 213.853935][ T3306] out_of_memory+0x979/0xb80 [ 213.853973][ T3306] try_charge_memcg+0x5e6/0x9e0 [ 213.854069][ T3306] charge_memcg+0x51/0xc0 [ 213.854087][ T3306] __mem_cgroup_charge+0x28/0xb0 [ 213.854106][ T3306] filemap_add_folio+0x4e/0x1b0 [ 213.854146][ T3306] __filemap_get_folio+0x31e/0x6b0 [ 213.854222][ T3306] filemap_fault+0x41f/0xb40 [ 213.854253][ T3306] ? css_rstat_updated+0xb7/0x240 [ 213.854372][ T3306] __do_fault+0xbc/0x200 [ 213.854402][ T3306] handle_mm_fault+0xf78/0x2c20 [ 213.854436][ T3306] do_user_addr_fault+0x636/0x1090 [ 213.854474][ T3306] exc_page_fault+0x62/0xa0 [ 213.854525][ T3306] asm_exc_page_fault+0x26/0x30 [ 213.854590][ T3306] RIP: 0033:0x7fea70e45db4 [ 213.854668][ T3306] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 [ 213.854739][ T3306] RSP: 002b:00007fff4fb4df70 EFLAGS: 00010202 [ 213.854769][ T3306] RAX: 0000001b32d24000 RBX: 000000000000042f RCX: 0000000000034008 [ 213.854785][ T3306] RDX: 000000000103d8c3 RSI: 00007fff4fb4e000 RDI: 0000000000000001 [ 213.854801][ T3306] RBP: 00007fff4fb4dfac R08: 0000000003df3c93 R09: 7fffffffffffffff [ 213.854816][ T3306] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 213.854828][ T3306] R13: 00000000000927c0 R14: 0000000000033ef4 R15: 00007fff4fb4e000 [ 213.854913][ T3306] [ 213.854919][ T3306] memory: usage 307200kB, limit 307200kB, failcnt 4102 [ 214.045699][ T3306] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 214.053634][ T3306] kmem: usage 303300kB, limit 9007199254740988kB, failcnt 0 [ 214.060971][ T3306] Memory cgroup stats for /syz1: [ 214.129327][ T3306] cache 0 [ 214.137287][ T3306] rss 3993600 [ 214.140688][ T3306] shmem 0 [ 214.143632][ T3306] mapped_file 0 [ 214.147099][ T3306] dirty 0 [ 214.150107][ T3306] writeback 0 [ 214.153439][ T3306] workingset_refault_anon 985 [ 214.158201][ T3306] workingset_refault_file 8101 [ 214.163058][ T3306] swap 385024 [ 214.166383][ T3306] swapcached 0 [ 214.169815][ T3306] pgpgin 201664 [ 214.173282][ T3306] pgpgout 200689 [ 214.176839][ T3306] pgfault 235111 [ 214.180409][ T3306] pgmajfault 700 [ 214.184019][ T3306] inactive_anon 0 [ 214.187749][ T3306] active_anon 0 [ 214.191235][ T3306] inactive_file 3993600 [ 214.195464][ T3306] active_file 0 [ 214.198943][ T3306] unevictable 0 [ 214.202401][ T3306] hierarchical_memory_limit 314572800 [ 214.207803][ T3306] hierarchical_memsw_limit 9223372036854771712 [ 214.213989][ T3306] total_cache 0 [ 214.217456][ T3306] total_rss 3993600 [ 214.221304][ T3306] total_shmem 0 [ 214.224769][ T3306] total_mapped_file 0 [ 214.228747][ T3306] total_dirty 0 [ 214.232232][ T3306] total_writeback 0 [ 214.236045][ T3306] total_workingset_refault_anon 985 [ 214.241271][ T3306] total_workingset_refault_file 8101 [ 214.246553][ T3306] total_swap 385024 [ 214.250437][ T3306] total_swapcached 0 [ 214.254352][ T3306] total_pgpgin 201664 [ 214.258367][ T3306] total_pgpgout 200689 [ 214.262532][ T3306] total_pgfault 235111 [ 214.266611][ T3306] total_pgmajfault 700 [ 214.270779][ T3306] total_inactive_anon 0 [ 214.274933][ T3306] total_active_anon 0 [ 214.278942][ T3306] total_inactive_file 3993600 [ 214.283626][ T3306] total_active_file 0 [ 214.287611][ T3306] total_unevictable 0 [ 214.291628][ T3306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2021,pid=11128,uid=0 [ 214.306684][ T3306] Memory cgroup out of memory: Killed process 11128 (syz.1.2021) total-vm:96136kB, anon-rss:5104kB, file-rss:22600kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 214.799123][T11201] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2043'. [ 214.825255][T11202] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2042'. [ 215.134977][T11202] loop5: detected capacity change from 0 to 2048 [ 215.180893][T11202] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2042: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 215.207680][T11202] EXT4-fs (loop5): get root inode failed [ 215.213489][T11202] EXT4-fs (loop5): mount failed [ 215.354958][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2044'. [ 215.453234][T11211] sd 0:0:1:0: device reset [ 215.941627][T11241] loop4: detected capacity change from 0 to 128 [ 216.048290][T11241] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.184855][T11233] loop1: detected capacity change from 0 to 4096 [ 216.193729][T11241] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 216.298124][T11233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.533517][T11241] sd 0:0:1:0: device reset [ 216.611042][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.764408][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 216.789145][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 217.001690][T11285] can0: slcan on ttyS3. [ 217.069144][T11300] can0 (unregistered): slcan off ttyS3. [ 217.116671][T11316] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2068'. [ 217.430178][T11351] netlink: 'syz.4.2073': attribute type 7 has an invalid length. [ 217.500699][T11351] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.508313][T11351] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 217.519318][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 217.519333][ T29] audit: type=1400 audit(1758597880.575:14921): avc: denied { write } for pid=11350 comm="+}[@" path="socket:[24469]" dev="sockfs" ino=24469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.673799][T11372] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2075'. [ 217.923164][ T29] audit: type=1326 audit(1758597880.975:14922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 217.983584][ T29] audit: type=1326 audit(1758597880.975:14923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 218.052644][T11365] loop4: detected capacity change from 0 to 2048 [ 218.070632][ T29] audit: type=1326 audit(1758597881.125:14924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 218.073585][T11391] loop5: detected capacity change from 0 to 512 [ 218.094309][ T29] audit: type=1326 audit(1758597881.125:14925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 218.094350][ T29] audit: type=1326 audit(1758597881.125:14926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 218.147965][ T29] audit: type=1326 audit(1758597881.125:14927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 218.171635][ T29] audit: type=1326 audit(1758597881.125:14928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 218.195364][ T29] audit: type=1326 audit(1758597881.125:14929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 218.219104][ T29] audit: type=1326 audit(1758597881.125:14930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.5.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe77697eec9 code=0x7ffc0000 [ 218.269380][T11365] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.2075: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 218.303834][T11391] EXT4-fs (loop5): too many log groups per flexible block group [ 218.311834][T11391] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 218.318907][T11365] EXT4-fs (loop4): get root inode failed [ 218.319383][T11391] EXT4-fs (loop5): mount failed [ 218.324659][T11365] EXT4-fs (loop4): mount failed [ 218.664630][T11436] loop5: detected capacity change from 0 to 128 [ 218.700089][T11436] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.729327][T11436] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.802300][T11436] sd 0:0:1:0: device reset [ 218.831775][ T3935] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.984604][T11451] loop5: detected capacity change from 0 to 4096 [ 219.013979][T11451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.073836][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.373338][T11492] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2089'. [ 219.845061][T11546] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2094'. [ 219.863176][T11477] loop1: detected capacity change from 0 to 2048 [ 219.936466][T11477] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.2089: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 220.037708][T11477] EXT4-fs (loop1): get root inode failed [ 220.043453][T11477] EXT4-fs (loop1): mount failed [ 220.104322][T11566] loop4: detected capacity change from 0 to 2048 [ 220.164913][T11566] loop4: p1 < > p4 [ 220.169662][T11566] loop4: p4 size 8388608 extends beyond EOD, truncated [ 220.879367][T11611] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2097'. [ 220.969509][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.020392][T11617] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2101'. [ 221.061403][T11619] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 221.115214][T11628] can0: slcan on ttyS3. [ 221.200746][T11628] can0 (unregistered): slcan off ttyS3. [ 221.224145][T11636] loop1: detected capacity change from 0 to 128 [ 221.260029][T11636] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.280352][T11636] ext4 filesystem being mounted at /414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.369678][T11642] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2109'. [ 221.427357][T11636] sd 0:0:1:0: device reset [ 221.520146][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.627888][T11630] loop5: detected capacity change from 0 to 512 [ 221.723615][T11630] EXT4-fs (loop5): too many log groups per flexible block group [ 221.732991][T11630] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 221.750560][T11646] loop1: detected capacity change from 0 to 2048 [ 221.776603][T11630] EXT4-fs (loop5): mount failed [ 221.799437][T11646] loop1: p1 < > p4 [ 221.803928][T11646] loop1: p4 size 8388608 extends beyond EOD, truncated [ 221.854935][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2105'. [ 221.895432][T11650] lo speed is unknown, defaulting to 1000 [ 222.109360][T11658] FAULT_INJECTION: forcing a failure. [ 222.109360][T11658] name failslab, interval 1, probability 0, space 0, times 0 [ 222.122114][T11658] CPU: 1 UID: 0 PID: 11658 Comm: syz.5.2113 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.122144][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.122156][T11658] Call Trace: [ 222.122163][T11658] [ 222.122224][T11658] __dump_stack+0x1d/0x30 [ 222.122249][T11658] dump_stack_lvl+0xe8/0x140 [ 222.122272][T11658] dump_stack+0x15/0x1b [ 222.122287][T11658] should_fail_ex+0x265/0x280 [ 222.122322][T11658] should_failslab+0x8c/0xb0 [ 222.122355][T11658] __kvmalloc_node_noprof+0x123/0x4e0 [ 222.122389][T11658] ? vmemdup_user+0x26/0xd0 [ 222.122414][T11658] ? should_fail_usercopy+0x1a/0x20 [ 222.122489][T11658] vmemdup_user+0x26/0xd0 [ 222.122516][T11658] path_setxattrat+0x1b6/0x310 [ 222.122601][T11658] __x64_sys_fsetxattr+0x6b/0x80 [ 222.122631][T11658] x64_sys_call+0x1ced/0x2ff0 [ 222.122658][T11658] do_syscall_64+0xd2/0x200 [ 222.122745][T11658] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 222.122787][T11658] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 222.122880][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.122901][T11658] RIP: 0033:0x7fe77697eec9 [ 222.122915][T11658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.123014][T11658] RSP: 002b:00007fe7753df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 222.123038][T11658] RAX: ffffffffffffffda RBX: 00007fe776bd5fa0 RCX: 00007fe77697eec9 [ 222.123105][T11658] RDX: 0000200000000240 RSI: 00002000000002c0 RDI: 0000000000000003 [ 222.123121][T11658] RBP: 00007fe7753df090 R08: 0000000000000000 R09: 0000000000000000 [ 222.123136][T11658] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000000001 [ 222.123151][T11658] R13: 00007fe776bd6038 R14: 00007fe776bd5fa0 R15: 00007ffcd9831818 [ 222.123172][T11658] [ 222.352906][T11663] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2115'. [ 222.375644][T11666] loop4: detected capacity change from 0 to 1024 [ 222.382799][T11666] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.410635][T11666] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.2117: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.484336][T11666] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2117: Failed to acquire dquot type 0 [ 222.500418][T11670] loop5: detected capacity change from 0 to 256 [ 222.508614][T11675] sd 0:0:1:0: device reset [ 222.552097][T11670] vfat: Bad value for 'uid' [ 222.556656][T11670] vfat: Bad value for 'uid' [ 222.571818][T11666] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2117: Freeing blocks not in datazone - block = 0, count = 4096 [ 222.598207][T11679] loop1: detected capacity change from 0 to 512 [ 222.605190][T11679] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.626270][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 222.626286][ T29] audit: type=1326 audit(1758597885.675:15039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.649976][ T3390] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 222.663737][T11679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.679754][ T3390] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.692730][T11679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.701248][T11679] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.701552][T11666] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2117: Invalid inode bitmap blk 0 in block_group 0 [ 222.728961][ T29] audit: type=1326 audit(1758597885.675:15040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.752875][ T29] audit: type=1326 audit(1758597885.675:15041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.770597][T11679] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2119: Allocating blocks 41-42 which overlap fs metadata [ 222.776569][ T29] audit: type=1326 audit(1758597885.675:15042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.813708][ T29] audit: type=1326 audit(1758597885.675:15043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.837394][ T29] audit: type=1326 audit(1758597885.675:15044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.861031][ T29] audit: type=1326 audit(1758597885.675:15045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.884714][ T29] audit: type=1326 audit(1758597885.675:15046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.908383][ T29] audit: type=1326 audit(1758597885.675:15047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.932063][ T29] audit: type=1326 audit(1758597885.675:15048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11682 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 222.939025][ T8608] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.972340][T11679] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2119: Allocating blocks 41-42 which overlap fs metadata [ 222.986304][T11666] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 222.995303][T11679] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2119: Failed to acquire dquot type 1 [ 223.006838][ T8608] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 223.048857][T11679] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 223.064083][T11679] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.2119: corrupted inode contents [ 223.106597][T11666] EXT4-fs (loop4): 1 orphan inode deleted [ 223.112672][T11679] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #12: comm syz.1.2119: mark_inode_dirty error [ 223.139174][T11679] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.2119: corrupted inode contents [ 223.163466][T11666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.176995][T11679] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2119: mark_inode_dirty error [ 223.194419][T11679] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.2119: corrupted inode contents [ 223.197305][T11666] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.216843][T11679] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 223.226142][T11679] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #12: comm syz.1.2119: corrupted inode contents [ 223.238437][T11679] EXT4-fs error (device loop1): ext4_truncate:4666: inode #12: comm syz.1.2119: mark_inode_dirty error [ 223.295310][T11684] siw: device registration error -23 [ 223.310802][T11679] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 223.326973][T11695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.345766][T11695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.659521][T11679] EXT4-fs (loop1): 1 truncate cleaned up [ 223.666580][T11679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.886535][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.908403][T11715] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2131'. [ 224.197755][T11728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11728 comm=syz.0.2133 [ 224.212400][ T3419] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 224.223216][ T3419] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.497164][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 224.515665][T11720] loop1: detected capacity change from 0 to 512 [ 224.529383][T11731] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 224.564498][T11720] EXT4-fs (loop1): too many log groups per flexible block group [ 224.573597][T11720] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 224.581264][T11720] EXT4-fs (loop1): mount failed [ 224.595414][T11727] siw: device registration error -23 [ 224.649702][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2132'. [ 224.802323][T11749] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2142'. [ 224.881325][T11755] 9pnet_fd: Insufficient options for proto=fd [ 225.059668][T11780] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2156'. [ 225.098131][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.116217][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.116911][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.130982][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.182553][T11788] 9pnet_fd: Insufficient options for proto=fd [ 225.232639][T11769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2151'. [ 225.302367][T11797] lo speed is unknown, defaulting to 1000 [ 225.847283][T11815] netlink: 'syz.1.2169': attribute type 3 has an invalid length. [ 225.934575][T11819] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2170'. [ 225.960825][T11821] 9pnet_fd: Insufficient options for proto=fd [ 226.540672][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2176'. [ 226.844306][T11850] loop5: detected capacity change from 0 to 128 [ 226.857736][T11850] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.880009][T11850] ext4 filesystem being mounted at /386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.051166][T11850] sd 0:0:1:0: device reset [ 227.089840][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.112172][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.180255][ T3935] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.710552][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 227.710567][ T29] audit: type=1400 audit(1758597890.765:15432): avc: denied { create } for pid=11857 comm="syz.2.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.736693][ T29] audit: type=1400 audit(1758597890.765:15433): avc: denied { connect } for pid=11857 comm="syz.2.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.793283][T11860] 9pnet_fd: Insufficient options for proto=fd [ 227.806828][ T29] audit: type=1400 audit(1758597890.815:15434): avc: denied { ioctl } for pid=11857 comm="syz.2.2187" path="socket:[26106]" dev="sockfs" ino=26106 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.856412][T11838] loop1: detected capacity change from 0 to 2048 [ 227.914810][T11865] lo speed is unknown, defaulting to 1000 [ 227.931552][T11838] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.2179: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 227.962336][ T29] audit: type=1400 audit(1758597891.015:15435): avc: denied { create } for pid=11863 comm="syz.0.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.982131][ T29] audit: type=1400 audit(1758597891.015:15436): avc: denied { ioctl } for pid=11863 comm="syz.0.2188" path="socket:[27072]" dev="sockfs" ino=27072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.006967][ T29] audit: type=1400 audit(1758597891.015:15437): avc: denied { module_request } for pid=11863 comm="syz.0.2188" kmod="netdev-vxcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 228.039082][T11838] EXT4-fs (loop1): get root inode failed [ 228.042053][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2188'. [ 228.044775][T11838] EXT4-fs (loop1): mount failed [ 228.057539][ T29] audit: type=1400 audit(1758597891.085:15438): avc: denied { sys_module } for pid=11863 comm="syz.0.2188" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 228.079865][ T29] audit: type=1400 audit(1758597891.085:15439): avc: denied { bind } for pid=11863 comm="syz.0.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.099447][ T29] audit: type=1400 audit(1758597891.085:15440): avc: denied { setopt } for pid=11863 comm="syz.0.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.132681][T11866] can0: slcan on ttyS3. [ 228.229875][T11866] can0 (unregistered): slcan off ttyS3. [ 228.282873][ T29] audit: type=1326 audit(1758597891.245:15441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11870 comm="syz.2.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 228.534204][T11888] can0: slcan on ttyS3. [ 228.669059][T11888] can0 (unregistered): slcan off ttyS3. [ 229.037143][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2191'. [ 229.598266][T11905] 9pnet_fd: Insufficient options for proto=fd [ 229.654911][T11899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.665731][T11901] can0: slcan on ttyS3. [ 229.674182][T11899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.719155][T11901] can0 (unregistered): slcan off ttyS3. [ 229.854694][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 229.867185][T11920] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 229.867289][T11916] IPVS: stopping master sync thread 11920 ... [ 229.915973][T11921] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2202'. [ 229.995924][T11923] lo speed is unknown, defaulting to 1000 [ 230.035751][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 230.881300][T11931] loop5: detected capacity change from 0 to 2048 [ 230.901816][T11931] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2209: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 230.919942][T11931] EXT4-fs (loop5): get root inode failed [ 230.925692][T11931] EXT4-fs (loop5): mount failed [ 231.208488][T11914] loop1: detected capacity change from 0 to 2048 [ 231.464766][T11966] lo speed is unknown, defaulting to 1000 [ 231.543759][T11971] netlink: 'syz.2.2220': attribute type 3 has an invalid length. [ 231.616874][T11975] netlink: 'syz.2.2222': attribute type 3 has an invalid length. [ 231.980792][ T3419] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 231.999774][ T3419] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.059902][T11996] loop5: detected capacity change from 0 to 2048 [ 232.116558][T11996] loop5: p1 < > p4 [ 232.129126][T11996] loop5: p4 size 8388608 extends beyond EOD, truncated [ 232.360325][T11994] siw: device registration error -23 [ 232.446961][T12011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12011 comm=syz.2.2232 [ 232.520342][T12019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.548881][T12021] FAULT_INJECTION: forcing a failure. [ 232.548881][T12021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.562466][T12021] CPU: 1 UID: 0 PID: 12021 Comm: syz.1.2237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.562514][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.562532][T12021] Call Trace: [ 232.562539][T12021] [ 232.562547][T12021] __dump_stack+0x1d/0x30 [ 232.562571][T12021] dump_stack_lvl+0xe8/0x140 [ 232.562611][T12021] dump_stack+0x15/0x1b [ 232.562754][T12021] should_fail_ex+0x265/0x280 [ 232.562860][T12021] should_fail+0xb/0x20 [ 232.562884][T12021] should_fail_usercopy+0x1a/0x20 [ 232.562910][T12021] _copy_from_user+0x1c/0xb0 [ 232.562937][T12021] ___sys_recvmsg+0xaa/0x370 [ 232.563036][T12021] ? _parse_integer+0x27/0x40 [ 232.563091][T12021] do_recvmmsg+0x1ef/0x540 [ 232.563130][T12021] ? get_timespec64+0xc9/0x100 [ 232.563152][T12021] __x64_sys_recvmmsg+0xfb/0x170 [ 232.563224][T12021] x64_sys_call+0x27a6/0x2ff0 [ 232.563315][T12021] do_syscall_64+0xd2/0x200 [ 232.563344][T12021] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 232.563439][T12021] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.563474][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.563561][T12021] RIP: 0033:0x7fea70f6eec9 [ 232.563574][T12021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.563676][T12021] RSP: 002b:00007fea6f9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 232.563693][T12021] RAX: ffffffffffffffda RBX: 00007fea711c5fa0 RCX: 00007fea70f6eec9 [ 232.563704][T12021] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 232.563715][T12021] RBP: 00007fea6f9d7090 R08: 0000200000003700 R09: 0000000000000000 [ 232.563729][T12021] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 232.563802][T12021] R13: 00007fea711c6038 R14: 00007fea711c5fa0 R15: 00007fff4fb4dbe8 [ 232.563897][T12021] [ 232.790819][T12022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.912538][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'. [ 232.929290][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 232.929305][ T29] audit: type=1326 audit(1758597895.955:15563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 232.959292][ T29] audit: type=1326 audit(1758597895.955:15564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 232.983006][ T29] audit: type=1326 audit(1758597895.955:15565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 233.006665][ T29] audit: type=1326 audit(1758597895.955:15566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 233.030435][ T29] audit: type=1326 audit(1758597895.955:15567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 233.054067][ T29] audit: type=1326 audit(1758597895.955:15568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 233.077703][ T29] audit: type=1326 audit(1758597895.955:15569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 233.101267][ T29] audit: type=1326 audit(1758597895.955:15570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa822b4eec9 code=0x7ffc0000 [ 233.124860][ T29] audit: type=1326 audit(1758597895.955:15571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa822b50d5c code=0x7ffc0000 [ 233.148554][ T29] audit: type=1326 audit(1758597895.955:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa822b50c94 code=0x7ffc0000 [ 233.249065][T12048] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 233.269090][T12047] IPVS: stopping master sync thread 12048 ... [ 233.322331][T12054] loop1: detected capacity change from 0 to 2364 [ 233.331331][T12054] iso9660: Bad value for 'sbsector' [ 233.347166][T12057] 9pnet_fd: Insufficient options for proto=fd [ 233.350066][T12054] FAULT_INJECTION: forcing a failure. [ 233.350066][T12054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.366365][T12054] CPU: 0 UID: 0 PID: 12054 Comm: syz.1.2250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.366390][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.366471][T12054] Call Trace: [ 233.366477][T12054] [ 233.366549][T12054] __dump_stack+0x1d/0x30 [ 233.366569][T12054] dump_stack_lvl+0xe8/0x140 [ 233.366586][T12054] dump_stack+0x15/0x1b [ 233.366632][T12054] should_fail_ex+0x265/0x280 [ 233.366721][T12054] should_fail+0xb/0x20 [ 233.366743][T12054] should_fail_usercopy+0x1a/0x20 [ 233.366765][T12054] _copy_from_iter+0xd2/0xe80 [ 233.366796][T12054] ? mntput_no_expire+0x6f/0x460 [ 233.366859][T12054] ? mntput+0x4b/0x80 [ 233.366889][T12054] tun_get_user+0x14d/0x2680 [ 233.366912][T12054] ? path_openat+0x1bf8/0x2170 [ 233.367008][T12054] ? _parse_integer_limit+0x170/0x190 [ 233.367038][T12054] ? ref_tracker_alloc+0x1f2/0x2f0 [ 233.367069][T12054] ? selinux_file_permission+0x1e4/0x320 [ 233.367097][T12054] tun_chr_write_iter+0x15e/0x210 [ 233.367115][T12054] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 233.367139][T12054] vfs_write+0x527/0x960 [ 233.367233][T12054] ksys_write+0xda/0x1a0 [ 233.367256][T12054] __x64_sys_write+0x40/0x50 [ 233.367279][T12054] x64_sys_call+0x27fe/0x2ff0 [ 233.367395][T12054] do_syscall_64+0xd2/0x200 [ 233.367431][T12054] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.367454][T12054] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.367517][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.367540][T12054] RIP: 0033:0x7fea70f6eec9 [ 233.367585][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.367606][T12054] RSP: 002b:00007fea6f9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.367627][T12054] RAX: ffffffffffffffda RBX: 00007fea711c5fa0 RCX: 00007fea70f6eec9 [ 233.367642][T12054] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 233.367654][T12054] RBP: 00007fea6f9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.367689][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.367707][T12054] R13: 00007fea711c6038 R14: 00007fea711c5fa0 R15: 00007fff4fb4dbe8 [ 233.367725][T12054] [ 233.611591][T12064] FAULT_INJECTION: forcing a failure. [ 233.611591][T12064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.624794][T12064] CPU: 1 UID: 0 PID: 12064 Comm: syz.5.2255 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.624838][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.624848][T12064] Call Trace: [ 233.624854][T12064] [ 233.624860][T12064] __dump_stack+0x1d/0x30 [ 233.624882][T12064] dump_stack_lvl+0xe8/0x140 [ 233.624905][T12064] dump_stack+0x15/0x1b [ 233.624962][T12064] should_fail_ex+0x265/0x280 [ 233.624990][T12064] should_fail+0xb/0x20 [ 233.625013][T12064] should_fail_usercopy+0x1a/0x20 [ 233.625039][T12064] _copy_from_user+0x1c/0xb0 [ 233.625088][T12064] ___sys_sendmsg+0xc1/0x1d0 [ 233.625130][T12064] __sys_sendmmsg+0x178/0x300 [ 233.625170][T12064] __x64_sys_sendmmsg+0x57/0x70 [ 233.625194][T12064] x64_sys_call+0x1c4a/0x2ff0 [ 233.625216][T12064] do_syscall_64+0xd2/0x200 [ 233.625248][T12064] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.625396][T12064] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.625436][T12064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.625456][T12064] RIP: 0033:0x7fe77697eec9 [ 233.625472][T12064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.625492][T12064] RSP: 002b:00007fe7753df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.625511][T12064] RAX: ffffffffffffffda RBX: 00007fe776bd5fa0 RCX: 00007fe77697eec9 [ 233.625522][T12064] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 233.625532][T12064] RBP: 00007fe7753df090 R08: 0000000000000000 R09: 0000000000000000 [ 233.625619][T12064] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 233.625630][T12064] R13: 00007fe776bd6038 R14: 00007fe776bd5fa0 R15: 00007ffcd9831818 [ 233.625647][T12064] [ 233.960044][T12083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2262'. [ 234.008008][T12085] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2263'. [ 234.068787][T12091] loop1: detected capacity change from 0 to 128 [ 234.082587][T12091] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.095667][T12091] ext4 filesystem being mounted at /439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.097215][T12095] can0: slcan on ttyS3. [ 234.130975][T12091] sd 0:0:1:0: device reset [ 234.189723][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.225831][T12106] loop9: detected capacity change from 0 to 7 [ 234.245230][T12095] can0 (unregistered): slcan off ttyS3. [ 234.250069][T12106] Buffer I/O error on dev loop9, logical block 0, async page read [ 234.259572][T12111] FAULT_INJECTION: forcing a failure. [ 234.259572][T12111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.272718][T12111] CPU: 1 UID: 0 PID: 12111 Comm: syz.5.2270 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.272752][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.272769][T12111] Call Trace: [ 234.272777][T12111] [ 234.272862][T12111] __dump_stack+0x1d/0x30 [ 234.272889][T12111] dump_stack_lvl+0xe8/0x140 [ 234.272971][T12111] dump_stack+0x15/0x1b [ 234.272991][T12111] should_fail_ex+0x265/0x280 [ 234.273015][T12111] should_fail+0xb/0x20 [ 234.273042][T12111] should_fail_usercopy+0x1a/0x20 [ 234.273071][T12111] _copy_to_user+0x20/0xa0 [ 234.273103][T12111] simple_read_from_buffer+0xb5/0x130 [ 234.273126][T12111] proc_fail_nth_read+0x10e/0x150 [ 234.273163][T12111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.273195][T12111] vfs_read+0x1a5/0x770 [ 234.273225][T12111] ? __rcu_read_unlock+0x4f/0x70 [ 234.273251][T12111] ? __fget_files+0x184/0x1c0 [ 234.273288][T12106] Buffer I/O error on dev loop9, logical block 0, async page read [ 234.273303][T12111] ksys_read+0xda/0x1a0 [ 234.273330][T12111] __x64_sys_read+0x40/0x50 [ 234.273355][T12111] x64_sys_call+0x27bc/0x2ff0 [ 234.273426][T12111] do_syscall_64+0xd2/0x200 [ 234.273472][T12111] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.273506][T12111] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.273594][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.273629][T12111] RIP: 0033:0x7fe77697d8dc [ 234.273649][T12111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 234.273669][T12111] RSP: 002b:00007fe7753be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.273692][T12111] RAX: ffffffffffffffda RBX: 00007fe776bd6090 RCX: 00007fe77697d8dc [ 234.273707][T12111] RDX: 000000000000000f RSI: 00007fe7753be0a0 RDI: 0000000000000005 [ 234.273750][T12111] RBP: 00007fe7753be090 R08: 0000000000000000 R09: 0000000000000000 [ 234.273765][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.273779][T12111] R13: 00007fe776bd6128 R14: 00007fe776bd6090 R15: 00007ffcd9831818 [ 234.273802][T12111] [ 234.276791][T12101] can0: slcan on ttyS3. [ 234.283324][T12106] loop9: unable to read partition table [ 234.329276][T12097] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 234.331985][T12106] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 234.331985][T12106] ) failed (rc=-5) [ 234.580003][T12115] can0 (unregistered): slcan off ttyS3. [ 234.602216][T12115] loop9: detected capacity change from 0 to 7 [ 234.651425][T12115] Buffer I/O error on dev loop9, logical block 0, async page read [ 234.666128][T12124] loop4: detected capacity change from 0 to 512 [ 234.679122][T12115] Buffer I/O error on dev loop9, logical block 0, async page read [ 234.686971][T12115] loop9: unable to read partition table [ 234.716040][T12115] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 234.716040][T12115] ) failed (rc=-5) [ 234.719746][T12126] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2274'. [ 234.759708][T12124] EXT4-fs (loop4): too many log groups per flexible block group [ 234.767558][T12124] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 234.774588][T12124] EXT4-fs (loop4): mount failed [ 234.793611][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2275'. [ 235.162172][T12147] loop4: detected capacity change from 0 to 2048 [ 235.192788][T12147] loop4: p1 < > p4 [ 235.202926][T12147] loop4: p4 size 8388608 extends beyond EOD, truncated [ 235.252667][T12151] netlink: 'syz.0.2287': attribute type 3 has an invalid length. [ 235.784950][T12166] loop4: detected capacity change from 0 to 512 [ 235.820152][T12166] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 235.838385][T12166] EXT4-fs (loop4): too many log groups per flexible block group [ 235.846324][T12166] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 235.853299][T12166] EXT4-fs (loop4): mount failed [ 235.927488][T12172] loop4: detected capacity change from 0 to 1024 [ 235.936465][T12172] EXT4-fs: Ignoring removed orlov option [ 235.954825][T12172] EXT4-fs: Mount option(s) incompatible with ext3 [ 235.987075][T12177] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 235.998945][T12176] IPVS: stopping master sync thread 12177 ... [ 236.044134][T12182] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 236.055336][T12181] IPVS: stopping master sync thread 12182 ... [ 236.083603][T12186] loop4: detected capacity change from 0 to 128 [ 236.099703][T12186] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.116775][T12186] ext4 filesystem being mounted at /450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.155728][T12186] sd 0:0:1:0: device reset [ 236.174742][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.308717][T12202] loop4: detected capacity change from 0 to 2048 [ 236.360313][T12202] loop4: p1 < > p4 [ 236.370575][T12202] loop4: p4 size 8388608 extends beyond EOD, truncated [ 236.453843][T12210] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2307'. [ 236.571656][T12232] sd 0:0:1:0: device reset [ 237.055527][T12279] loop4: detected capacity change from 0 to 128 [ 237.083202][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2313'. [ 237.120786][T12279] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.133453][T12279] ext4 filesystem being mounted at /452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.179356][T12279] sd 0:0:1:0: device reset [ 237.200284][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.223889][T12292] 9pnet_fd: Insufficient options for proto=fd [ 237.388879][T12313] loop4: detected capacity change from 0 to 128 [ 237.434507][T12313] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.474563][ T3419] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x4 [ 237.482429][ T3419] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x2 [ 237.490638][ T3419] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x3 [ 237.499066][ T3419] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 237.507669][T12313] ext4 filesystem being mounted at /458/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.512373][T12322] netlink: 'syz.2.2324': attribute type 4 has an invalid length. [ 237.632482][T12313] sd 0:0:1:0: device reset [ 237.671525][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.911109][T12360] 9pnet_fd: Insufficient options for proto=fd [ 238.005101][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 238.005116][ T29] audit: type=1326 audit(1758597901.055:15734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 238.091266][ T29] audit: type=1326 audit(1758597901.055:15735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 238.115260][ T29] audit: type=1326 audit(1758597901.055:15736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 238.139000][ T29] audit: type=1326 audit(1758597901.055:15737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 238.162729][ T29] audit: type=1326 audit(1758597901.055:15738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 238.186346][ T29] audit: type=1326 audit(1758597901.065:15739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 238.209880][ T29] audit: type=1326 audit(1758597901.065:15740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14fb1feec9 code=0x7ffc0000 [ 238.233634][ T29] audit: type=1326 audit(1758597901.065:15741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f14fb200d5c code=0x7ffc0000 [ 238.257168][ T29] audit: type=1326 audit(1758597901.065:15742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f14fb200c94 code=0x7ffc0000 [ 238.280692][ T29] audit: type=1326 audit(1758597901.065:15743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12354 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f14fb200c94 code=0x7ffc0000 [ 238.757039][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2329'. [ 239.245845][T12425] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 239.246065][T12424] IPVS: stopping master sync thread 12425 ... [ 239.323739][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2343'. [ 239.858173][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 239.889402][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2355'. [ 239.898418][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2355'. [ 239.907446][T12455] netlink: 'syz.1.2355': attribute type 4 has an invalid length. [ 239.991161][T12455] lo speed is unknown, defaulting to 1000 [ 240.154701][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2348'. [ 240.166559][T12487] loop4: detected capacity change from 0 to 128 [ 240.180082][T12487] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.192682][T12487] ext4 filesystem being mounted at /467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.232447][T12487] sd 0:0:1:0: device reset [ 240.262094][T12482] loop5: detected capacity change from 0 to 4096 [ 240.274854][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.301251][T12482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.537565][T12455] netlink: 'syz.1.2355': attribute type 13 has an invalid length. [ 240.565079][T12455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 240.695904][T12547] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2372'. [ 241.132362][T12596] can0: slcan on ttyS3. [ 241.282956][T12603] can0 (unregistered): slcan off ttyS3. [ 241.503883][T12638] syzkaller0: entered promiscuous mode [ 241.509573][T12638] syzkaller0: entered allmulticast mode [ 241.714163][T12669] 9pnet_fd: Insufficient options for proto=fd [ 241.854615][T12689] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2397'. [ 242.088973][T12714] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 242.109670][T12714] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 242.350311][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2407'. [ 242.384476][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.476875][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2404'. [ 242.661907][T12731] can0: slcan on ttyS3. [ 242.726523][T12717] loop4: detected capacity change from 0 to 2048 [ 242.769701][T12731] can0 (unregistered): slcan off ttyS3. [ 242.936947][T12730] loop5: detected capacity change from 0 to 512 [ 243.030880][T12730] EXT4-fs: Ignoring removed nobh option [ 243.071876][T12717] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.2406: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 243.108745][T12730] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.235870][T12730] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2411: corrupted inode contents [ 243.449538][T12717] EXT4-fs (loop4): get root inode failed [ 243.455254][T12717] EXT4-fs (loop4): mount failed [ 243.475682][T12730] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.2411: mark_inode_dirty error [ 243.510879][T12730] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.2411: corrupted inode contents [ 243.558126][T12730] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.2411: mark_inode_dirty error [ 243.609341][T12730] __quota_error: 175 callbacks suppressed [ 243.609371][T12730] Quota error (device loop5): write_blk: dquota write failed [ 243.651205][T12730] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 243.677025][T12730] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2411: Failed to acquire dquot type 0 [ 243.736980][T12730] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2411: corrupted inode contents [ 243.755730][T12730] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2411: mark_inode_dirty error [ 243.774328][T12730] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2411: corrupted inode contents [ 243.807926][T12730] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2411: mark_inode_dirty error [ 243.824145][T12730] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2411: corrupted inode contents [ 243.840207][T12730] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 243.854791][T12730] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2411: corrupted inode contents [ 243.882322][T12730] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2411: mark_inode_dirty error [ 243.897208][T12730] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 243.923792][T12730] EXT4-fs (loop5): 1 truncate cleaned up [ 243.946331][T12730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.962511][T12730] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.998744][ T29] audit: type=1326 audit(1758597907.045:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 244.043348][ T29] audit: type=1326 audit(1758597907.085:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 244.067053][ T29] audit: type=1326 audit(1758597907.085:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 244.090726][ T29] audit: type=1326 audit(1758597907.085:15922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 244.114471][ T29] audit: type=1326 audit(1758597907.085:15923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 244.138170][ T29] audit: type=1326 audit(1758597907.085:15924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 244.161991][ T29] audit: type=1326 audit(1758597907.085:15925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 244.185645][ T29] audit: type=1326 audit(1758597907.085:15926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 244.210413][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.251746][T12777] 9pnet_fd: Insufficient options for proto=fd [ 244.279124][T12780] __nla_validate_parse: 1 callbacks suppressed [ 244.279157][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2421'. [ 244.402501][T12797] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 244.417822][T12797] loop5: detected capacity change from 0 to 764 [ 244.426856][T12797] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 244.605052][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 244.761029][T12849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2433'. [ 244.941730][T12884] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.957400][T12884] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 245.103396][T12906] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 245.535779][T12952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2445'. [ 245.785409][T12964] FAULT_INJECTION: forcing a failure. [ 245.785409][T12964] name failslab, interval 1, probability 0, space 0, times 0 [ 245.798252][T12964] CPU: 0 UID: 0 PID: 12964 Comm: syz.2.2450 Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.798278][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.798294][T12964] Call Trace: [ 245.798299][T12964] [ 245.798306][T12964] __dump_stack+0x1d/0x30 [ 245.798339][T12964] dump_stack_lvl+0xe8/0x140 [ 245.798391][T12964] dump_stack+0x15/0x1b [ 245.798406][T12964] should_fail_ex+0x265/0x280 [ 245.798456][T12964] should_failslab+0x8c/0xb0 [ 245.798556][T12964] __kmalloc_noprof+0xa5/0x3e0 [ 245.798591][T12964] ? do_sys_poll+0x19b/0xbd0 [ 245.798623][T12964] do_sys_poll+0x19b/0xbd0 [ 245.798658][T12964] ? selinux_file_open+0x2df/0x330 [ 245.798796][T12964] __se_sys_poll+0xdd/0x200 [ 245.798819][T12964] __x64_sys_poll+0x43/0x50 [ 245.798863][T12964] x64_sys_call+0x27d2/0x2ff0 [ 245.798942][T12964] do_syscall_64+0xd2/0x200 [ 245.798983][T12964] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.799157][T12964] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 245.799188][T12964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.799258][T12964] RIP: 0033:0x7f14fb1feec9 [ 245.799278][T12964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.799301][T12964] RSP: 002b:00007f14f9c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 245.799332][T12964] RAX: ffffffffffffffda RBX: 00007f14fb455fa0 RCX: 00007f14fb1feec9 [ 245.799346][T12964] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 245.799358][T12964] RBP: 00007f14f9c67090 R08: 0000000000000000 R09: 0000000000000000 [ 245.799369][T12964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.799427][T12964] R13: 00007f14fb456038 R14: 00007f14fb455fa0 R15: 00007ffcb9745838 [ 245.799452][T12964] [ 245.993263][T12962] lo speed is unknown, defaulting to 1000 [ 246.252352][ T3419] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 246.260712][ T3419] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.425396][T12976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.449314][T12976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.580128][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2459'. [ 247.057488][T12994] 9pnet_fd: Insufficient options for proto=fd [ 247.089280][T12977] siw: device registration error -23 [ 247.096369][T12995] loop5: detected capacity change from 0 to 128 [ 247.187893][T12995] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 247.253722][T12995] ext4 filesystem being mounted at /446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.390083][T12995] sd 0:0:1:0: device reset [ 247.453639][ T3935] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.634276][T13017] loop5: detected capacity change from 0 to 512 [ 247.646385][T13018] SELinux: security_context_str_to_sid () failed with errno=-22 [ 247.657519][T13017] EXT4-fs (loop5): too many log groups per flexible block group [ 247.665345][T13017] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 247.691379][T13017] EXT4-fs (loop5): mount failed [ 247.704629][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2467'. [ 247.735247][T13027] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2473'. [ 247.782924][T13033] sd 0:0:1:0: device reset [ 247.798151][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2476'. [ 247.858115][T13020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.866782][T13020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.597268][T13060] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2488'. [ 248.763502][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 248.763519][ T29] audit: type=1326 audit(1758597911.815:16155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 248.830915][T13064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2489'. [ 248.901326][ T29] audit: type=1326 audit(1758597911.845:16156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 248.925044][ T29] audit: type=1326 audit(1758597911.845:16157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 248.948595][ T29] audit: type=1326 audit(1758597911.845:16158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 248.972252][ T29] audit: type=1326 audit(1758597911.845:16159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 248.995823][ T29] audit: type=1326 audit(1758597911.855:16160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 249.019362][ T29] audit: type=1326 audit(1758597911.855:16161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70f6eec9 code=0x7ffc0000 [ 249.043072][ T29] audit: type=1326 audit(1758597911.855:16162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fea70f70d5c code=0x7ffc0000 [ 249.066543][ T29] audit: type=1326 audit(1758597911.855:16163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fea70f70c94 code=0x7ffc0000 [ 249.090161][ T29] audit: type=1326 audit(1758597911.855:16164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fea70f70c94 code=0x7ffc0000 [ 249.195921][T13070] loop5: detected capacity change from 0 to 764 [ 249.243376][T13070] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 249.331514][T13077] __nla_validate_parse: 1 callbacks suppressed [ 249.331532][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2494'. [ 249.420970][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2493'. [ 249.573197][T13102] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2505'. [ 249.621068][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.641935][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.732194][T13112] FAULT_INJECTION: forcing a failure. [ 249.732194][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 249.744985][T13112] CPU: 0 UID: 0 PID: 13112 Comm: syz.1.2507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.745016][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.745031][T13112] Call Trace: [ 249.745037][T13112] [ 249.745045][T13112] __dump_stack+0x1d/0x30 [ 249.745089][T13112] dump_stack_lvl+0xe8/0x140 [ 249.745106][T13112] dump_stack+0x15/0x1b [ 249.745155][T13112] should_fail_ex+0x265/0x280 [ 249.745185][T13112] should_failslab+0x8c/0xb0 [ 249.745215][T13112] kmem_cache_alloc_noprof+0x50/0x310 [ 249.745247][T13112] ? mm_alloc+0x2b/0xa0 [ 249.745379][T13112] mm_alloc+0x2b/0xa0 [ 249.745405][T13112] alloc_bprm+0x20e/0x350 [ 249.745425][T13112] do_execveat_common+0x12e/0x750 [ 249.745512][T13112] ? getname_flags+0x154/0x3b0 [ 249.745546][T13112] __x64_sys_execveat+0x73/0x90 [ 249.745626][T13112] x64_sys_call+0x1fec/0x2ff0 [ 249.745647][T13112] do_syscall_64+0xd2/0x200 [ 249.745684][T13112] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 249.745764][T13112] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 249.745794][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.745812][T13112] RIP: 0033:0x7fea70f6eec9 [ 249.745825][T13112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.745909][T13112] RSP: 002b:00007fea6f9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 249.745926][T13112] RAX: ffffffffffffffda RBX: 00007fea711c5fa0 RCX: 00007fea70f6eec9 [ 249.745937][T13112] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 249.745984][T13112] RBP: 00007fea6f9d7090 R08: 0000000000001000 R09: 0000000000000000 [ 249.746016][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.746030][T13112] R13: 00007fea711c6038 R14: 00007fea711c5fa0 R15: 00007fff4fb4dbe8 [ 249.746054][T13112] [ 250.230743][T13122] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2512'. [ 250.485994][T13128] FAULT_INJECTION: forcing a failure. [ 250.485994][T13128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.499216][T13128] CPU: 1 UID: 0 PID: 13128 Comm: syz.2.2515 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.499249][T13128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.499266][T13128] Call Trace: [ 250.499297][T13128] [ 250.499307][T13128] __dump_stack+0x1d/0x30 [ 250.499330][T13128] dump_stack_lvl+0xe8/0x140 [ 250.499348][T13128] dump_stack+0x15/0x1b [ 250.499369][T13128] should_fail_ex+0x265/0x280 [ 250.499425][T13128] should_fail+0xb/0x20 [ 250.499447][T13128] should_fail_usercopy+0x1a/0x20 [ 250.499495][T13128] _copy_from_user+0x1c/0xb0 [ 250.499532][T13128] __sys_sendto+0x19e/0x330 [ 250.499567][T13128] __x64_sys_sendto+0x76/0x90 [ 250.499659][T13128] x64_sys_call+0x2d05/0x2ff0 [ 250.499714][T13128] do_syscall_64+0xd2/0x200 [ 250.499894][T13128] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 250.499924][T13128] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 250.499964][T13128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.500003][T13128] RIP: 0033:0x7f14fb1feec9 [ 250.500077][T13128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.500098][T13128] RSP: 002b:00007f14f9c67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 250.500115][T13128] RAX: ffffffffffffffda RBX: 00007f14fb455fa0 RCX: 00007f14fb1feec9 [ 250.500125][T13128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 250.500160][T13128] RBP: 00007f14f9c67090 R08: 0000200000000100 R09: 0000000000000010 [ 250.500175][T13128] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 250.500189][T13128] R13: 00007f14fb456038 R14: 00007f14fb455fa0 R15: 00007ffcb9745838 [ 250.500212][T13128] [ 250.810030][T13135] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2518'. [ 250.963732][T13141] loop5: detected capacity change from 0 to 8192 [ 252.310578][T13161] sd 0:0:1:0: device reset [ 252.350760][T13164] loop5: detected capacity change from 0 to 128 [ 252.454790][T13164] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.493171][T13164] ext4 filesystem being mounted at /464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 252.538300][T13164] sd 0:0:1:0: device reset [ 252.553067][T13172] lo speed is unknown, defaulting to 1000 [ 252.558867][T13172] lo speed is unknown, defaulting to 1000 [ 252.567973][T13172] lo speed is unknown, defaulting to 1000 [ 252.578388][T13172] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 252.585703][T13173] loop4: detected capacity change from 0 to 512 [ 252.619643][ T3935] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.643949][T13173] EXT4-fs (loop4): too many log groups per flexible block group [ 252.651949][T13173] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 252.658846][T13173] EXT4-fs (loop4): mount failed [ 252.666861][T13172] lo speed is unknown, defaulting to 1000 [ 252.879702][T13172] lo speed is unknown, defaulting to 1000 [ 252.886410][T13172] lo speed is unknown, defaulting to 1000 [ 252.893048][T13172] lo speed is unknown, defaulting to 1000 [ 252.919695][T13172] lo speed is unknown, defaulting to 1000 [ 252.964492][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2529'. [ 253.091908][T13191] loop5: detected capacity change from 0 to 164 [ 253.099753][T13191] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 253.110093][T13191] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 253.122498][T13191] rock: directory entry would overflow storage [ 253.128851][T13191] rock: sig=0x4f50, size=4, remaining=3 [ 253.134502][T13191] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 253.156211][T13191] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 253.156537][T13195] loop4: detected capacity change from 0 to 128 [ 253.164950][T13191] rock: directory entry would overflow storage [ 253.177074][T13191] rock: sig=0x4f50, size=4, remaining=3 [ 253.182715][T13191] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 253.192013][T13195] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.229362][T13195] ext4 filesystem being mounted at /492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.281912][T13201] loop5: detected capacity change from 0 to 512 [ 253.312309][T13201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.325485][T13195] sd 0:0:1:0: device reset [ 253.355481][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.421804][T13206] ================================================================== [ 253.429944][T13206] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 253.436669][T13206] [ 253.439003][T13206] write to 0xffff888103ef1308 of 8 bytes by task 13200 on cpu 0: [ 253.446733][T13206] call_rcu+0x51/0x3f0 [ 253.449731][ T3371] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 253.450816][T13206] mas_wmb_replace+0xf7a/0x14a0 [ 253.463063][T13206] mas_wr_store_entry+0x1773/0x2b50 [ 253.468283][T13206] mas_store_prealloc+0x74d/0x9e0 [ 253.473322][T13206] vma_iter_store_new+0x1c5/0x200 [ 253.478355][T13206] vma_complete+0x125/0x580 [ 253.482865][T13206] __split_vma+0x5d9/0x650 [ 253.487288][T13206] vma_modify+0x3f2/0xc80 [ 253.491639][T13206] vma_modify_flags+0x101/0x130 [ 253.496507][T13206] mprotect_fixup+0x2cc/0x570 [ 253.501199][T13206] do_mprotect_pkey+0x6d6/0x980 [ 253.506072][T13206] __x64_sys_mprotect+0x48/0x60 [ 253.510937][T13206] x64_sys_call+0x274e/0x2ff0 [ 253.515646][T13206] do_syscall_64+0xd2/0x200 [ 253.520346][T13206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.526251][T13206] [ 253.528580][T13206] read to 0xffff888103ef1308 of 8 bytes by task 13206 on cpu 1: [ 253.536208][T13206] mas_state_walk+0x28f/0x650 [ 253.540903][T13206] mas_walk+0x60/0x150 [ 253.544983][T13206] lock_vma_under_rcu+0x8d/0x160 [ 253.549936][T13206] do_user_addr_fault+0x233/0x1090 [ 253.555069][T13206] exc_page_fault+0x62/0xa0 [ 253.559582][T13206] asm_exc_page_fault+0x26/0x30 [ 253.564442][T13206] [ 253.566770][T13206] value changed: 0x00007fe7753befff -> 0x0000000000000000 [ 253.573875][T13206] [ 253.576195][T13206] Reported by Kernel Concurrency Sanitizer on: [ 253.582352][T13206] CPU: 1 UID: 0 PID: 13206 Comm: syz.5.2538 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.592163][T13206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.602222][T13206] ================================================================== [ 253.619423][ T3371] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.670039][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.830092][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 253.830150][ T29] audit: type=1326 audit(1758597916.885:16445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 253.878932][ T29] audit: type=1326 audit(1758597916.925:16446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 253.945071][ T29] audit: type=1326 audit(1758597916.995:16447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 253.989032][ T29] audit: type=1326 audit(1758597917.025:16448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 254.012776][ T29] audit: type=1326 audit(1758597917.025:16449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 254.036465][ T29] audit: type=1326 audit(1758597917.025:16450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 254.060228][ T29] audit: type=1326 audit(1758597917.025:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 254.083907][ T29] audit: type=1326 audit(1758597917.035:16452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 254.107684][ T29] audit: type=1326 audit(1758597917.035:16453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000 [ 254.131283][ T29] audit: type=1326 audit(1758597917.035:16454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f40673ceec9 code=0x7ffc0000