last executing test programs: 3.17891178s ago: executing program 0 (id=3775): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x3, 0x2, {{0x11, 0x4, 0x2, 0x0, 0x44, 0x65, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@rr={0x7, 0x1b, 0xf0, [@loopback, @multicast2, @multicast2, @remote, @private=0xa010101, @private=0xa010100]}, @rr={0x7, 0x13, 0xbf, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101, @loopback]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010418000000000000002400000024000000030000000c00000001000004000000800600000004000000ffff0000010000000000000b03000000005f00"], &(0x7f00000003c0)=""/92, 0x3f, 0x5c, 0x0, 0x1000, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, &(0x7f0000000640), 0x0, 0x10, &(0x7f0000000680), &(0x7f00000005c0), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000800000000ee03ef83c10000000000000000181100000000000000000006d0c0ebc2c065a70eca39b6176c5441731f7848754e44923b433365d1ebe3955600670958905d97493795427996", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x27d}]}, &(0x7f0000000100)='syzkaller\x00', 0xa, 0xad, &(0x7f0000000140)=""/173, 0x41100, 0x0, '\x00', r2, @fallback=0xb, r3, 0x8, &(0x7f0000000480)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0x870, 0x5}, 0x10, r5, r1, 0x1, &(0x7f0000000640)=[r6, r7, 0x1], &(0x7f0000000680)=[{0x3, 0x4, 0xa, 0x2}], 0x10, 0x7fffffff}, 0x94) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 3.165281881s ago: executing program 0 (id=3776): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540000000000800024000000024080001"], 0xc8}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002dc0), r0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x21, 0xfd, 0x9, 0x0, 0x0, 0xb, 0x11500, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x350, 0x140}, 0x100b28, 0x3, 0x4, 0x7, 0x6, 0xffff3fff, 0xf, 0x0, 0xfffffffc, 0x0, 0x2020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000600)={0xffff, 0x6, 0xb2, {0x10001, 0x7fffffff}, 0xffffff39, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x1, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, 0x0, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000000)="aa", 0x1, 0x4840, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x84, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.081315034s ago: executing program 1 (id=3778): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x9}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x10000004}) 3.023241697s ago: executing program 1 (id=3779): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sigaltstack(&(0x7f0000000000)={&(0x7f00000004c0)=""/4126, 0x0, 0xfffffffffffffe53}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sigaltstack(&(0x7f0000000180)={0x0, 0x1}, &(0x7f00000002c0)={0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r4}, 0x18) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) r7 = syz_io_uring_setup(0x656f, &(0x7f0000000140)={0x0, 0xbbda, 0x13500, 0x0, 0x2b5}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0xe, 0x0, 0x9, 0x40000, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000200)=0x9) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 2.194124534s ago: executing program 1 (id=3785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000780)='generic_add_lease\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) 2.153317975s ago: executing program 1 (id=3786): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x4) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000003040)="162dd3cad75f87b473622140aca9f6be4377caaba76f08daaad767f134c2ffc2ba9c92a5971b01b71a225dababc99832633ea975d465532309695b29d56eb9befec5159067bffa2d17b24093b372ebaf5589d18a8905982d01ee2870aa096647d6afabca77e0f36a01481b10ed8f0a585ceb41bf50f0515c259bbbbee74db0e045a9fde3614d35c6f2dfa1e71dace811a410bdfb395dd7c54fa733c6f8111f24df309ad928c6462d0a53a3824f9af07b11cb0c05724c33acfad1f5f16bffaf6c58ab2b8c4626bd9d4d1cc4ab67c9838b1fc53fb4ce46d304a12fffc2110043381d08160f056e8d3908497a402dcc156ff69bbf5cb5e5443c06bc4e3c6e4f231aab0eb6fdd2bb0740ae88095360d8b247daa6628fc10edbf048d800625134022e1d5d0bcb5c50e567f50c1990b1a434caa57d210b6084c9424d37c7a71479613b69b67670baab82f13b0923a73786655cfceb0c70d511b94f992391cad9ce57c5c76675cae6a2712cb9ce6dc07bdd0118001f062a22943ca72742a0fe97c48b9b895515fc71145fac9dfd27118a70b71dd564f27e31e1112292864a7be45459524ad8fb03c1f4388bdba3d9e3882a9be894133b0deea92885d0276f268bad0396635036192da1a9788e7525b08de07b0f351147e0f2aaa239e197924a5fc6961dbfcc96ad4cae4cf59f7a812d0c7f8506216dfb7658f8f8545477f4b6c1a606554ee19621d85438014d5e569b0c467e67cf0bb046284f4145ee9f9601b950b0217d183d0266da78f83ed2cf8a83f1374295853d52cdd561a756f247598126cddc98416c42c47a5ad4fda1c419b6ce04f4b57efd2cecf7bfe1589aab05c33e397c8acfb5e4d05cc62db2ba633e74d08c9a3c92111d39ef7d1c0321bfa1827b9fbbb592c49d46244b57c985ee4cc830f7eeda32cae961c4386916f927fc7f442eb6e2eaf45a3d2b0f28d4d319fdedd003aedc1c6384085921397a041384edee7172973fddb3eee2132acdec385cb596055f82a41087097ffece144a340cfe3ec0c0b833f4a92d28709419827eb0f747d73a2e7cc7d00a24749b9dd340793e2ca36536bc47233c9e2602a7f7f94450b22117215be6086d0c0132d24350c19abcb3d713fa97f76ce6ec8f61b24bfecb3ddcd0e7bccd0c4839de19283e95e08bc629554aac9543c15b0f69f1d03374269796c477579d212708b760914bde3269d9e9b0036c7cd0e8f3376d6a62ed0cde76861423ec5f76f2ab4d0f05b21db57277feaaf8475e6e6d1e5672281db17046b7464439d69e25210f67998e912d02c5296c60a450a38495e3b6737339a05f83e5a02aa1ee5bca6bf67ba84c659ef3cc4495cb1551e749277a86db07e7c48f61ee0672919d6a00472a893b6c6eead02140318fb497a1819b692b9bcb3b5cbe7cb55b9524abb1268b3f4a031a64fe6305519a2212298089c443b0503e77b7c8a3da14387872ca35cd6524f629161d85f253498568587513aa16848fa8f8f3dea115cbe8e85bdb8aa20f20ce26f3fcaac4615a9b9d7d6919ba952f7e93a96ba26010cc4bc24622ed3bb9b063e0e686f41b2cece5a50d787676600a04bfe7e6eb78e740b8bcb4b3a51f2a39250d0163a75d8f97032c60efc5516ba48ce2d53da0a7aab99330369a2c44cfc6ac65707733971493de86a519629f7be4643a52abe3d0ca1e22dfa27d8f7c54c50e0e1f3f639dbc622afa56d22b2732232d62b0a312c359dfd25e266f2138a49689fcc789470b01aabc05563ab025938153c15abbb300192e0bc27f810246d4d24295f337db02aa6b3e801905ee519a681fd73462eb330800763f75ae88e3e57c2a5552fba4b6154cab775625b817e18ff1e26273d21bf8b3cb2a79df7e92a8e498dadc04f11c62d6841bdd0408b212a43951a4a4f4f29c9b8918644e743e2f30cc52d422a9ce03750307096a5f8b61bb585ada2ad7a63d440e418c16e6827792dd470fa980a72cbe53b354ab208b0cb99ad858ff2ee4395f7fbff96c38fe2f84ccca78b6c867d1ff0440c5795b875339b87d98e59dca2dd80b3624c7406b56dc76b0198514bdb97b228e5b726683b3c12f71fb2b1dda24d085175acdc5d7744129df8065168ac103d819bc95dd408e17bfa7ae37d0ff5145e393a37b5cc08c2c10e5ef5d80dd6c79d35c650417e6fc47467c3552bbc1a3d50d2cdce471e5cd43b48475272e30c9d415c826bed60369c1841219e15d93bd87de49e2566de3a01dfc60cd3295134c876863cbfb7be8be44b0d4369b81a778f8fb2fcd039048fd16bf9d4f08a9458dbeadb298ee12b7ee7f6f43099dc684e33bee75d23f37c5b058e56f785f1c2af0c2ad66b69fc1fc06073bd53bed4a967314a6af8ede4d2facdae08ed503c4903fd5fdfd291327cd2ead1876361a16d9341cc24a63b2b51538b7199e048c00cab7127d19ae9a3ea0755b9b5d9604fefcfe7237d641019291bcd9ce30d5a388ad7127fde6061f1e307c0024ff1c200dc04354340eb4e8daac073b7c2f1fe1cee49330cc89ac061bd8a5f1676391d22d4afc8e5875daf4806bac0b5565bb99f07723cdd063ff070ba409fba6642888ea88109b333c3748f77b99f3bd4b9b61ec5e3d798d3584937c0165f4df571b8132ae425849e7e5ce414fbb00d9a30c129e2c13b6791435bb552bb01cedf3003b3bb24503fe226121d1f83419d5c23fad54dbd08fb3449b8a561954a23b47e34b7b14ddbcec2745353269e19fe218da2d0aad6df73083b3979160d4e52c8532c9f6602bc8ee624b9d5157fefbffec98e0e91a4f3824ccb4c33e17d19011f4c8db333d0fc5530930951cb63353a3aa0617ab2aba52268b81628d9f4a56b227300488c10df1e7f7533e1e4db449cb9cb6e588debf4795f98810702de5bfb81414bdacfcbd9e66f051ec7272b41ba281e8a68fe7c61e1cb4e74077342ddb7c5191d9731448a9e42a30c4df80e533db26ca3e12ab8ce8b5f0d114888692589b6c836c603ea4210c31b0e053092d75d9ceb49c5e9e2815b5aeebfcb53e97017d0ff6c7d3410120e355f9a6a1226e64a1621a2e6c04865acb25e137243ab9b82beea39c411163afd8969b086df73751020879785ec79c451fb822c11df1ae927318b35bd583a56827fd8744df8e7693837b8ddb0e831fd97b87505d5540d76d3e09895e64cc563dadf60bec88ee70b6008a53e50523ffbd2c0aa9f19123bd6f28de9851ae1f3f6101b46acf9139792be4872bf494c8970aee100a7a0c4dfbccbf01b6ccbebdfa8291f8ab3e25a9e4ff5dbda11488630e3bb8158b8f8de8cd4f793885e7a28e5afdf45eb57ad1330dfc0c51f51986e53c458feb4a4ef55b810a32f847d7ff5500c0f769d9abc090c10f87ba4e5250f36e70abb838ccb8f9fa95d96ba1e2e75a2d808a8fa26b686149ed6738a8e63ef70ed284e25d044aaa1e14c8caea04b77c9fba96036dd8b3be2e7704c65090fa7e8bf0e45c291709d3eb16a81e8aac27a120e52c05866310d8f288367f2b5187e83a1f7d5cb9dc6f8faa648683b7c88d54871dfcdca822568959ac2f7eb7dd3a345b0a8149806105dc90abfee3d5cefae3dfece4723fdc5a73c3a087020ca2fe1b166fe5b54cfb2f661fa5b017502155bf91856c3aae5cd20a48fbb958e1a0e70df51e4e46bbea56f639f6f32698d45297296244e8aaa845c13b70fa7f4f31115de0808975c143191c89c0233c557ddb93d6233ce22a699ca9a54ca6e8ddcfb5bf9d95b9807a49d9a64f7a239c77fa4e0d92d561fca5aa3e6c149c16c11131c9ad78493572cf1a9f953cc63ef8121cfa86a0f3fdb5a73c8530ddf93a9308fcaf436455aa6817f65e4616c9e38733b1cf9fa09822953d7d203748c5e45cbbe84a4fb7d59318013ba2a7da6f972c47ff9289091d7476035affddf44cc7a0b223cd14af5243dd14cd5d0f42849bd31af8ef9de434a01c52ee583c2d93b4785c34969629ffa406335ccd090637b83a5ee126a4833e6d6cf92b8aa6f9a2213df25fa575980c0cbd98039ca978860442b7466c3d4aa215593243d9c7ad3980470c9ef85154566ceed93ccb0330634f92d1fe5050bfe135f345527c93476e474f31ea45729ec534475d36b69876644e5db59c8cb0412f8d65be9ff2bea5ac37c5b1ff5d5d484aebed8b33920bbc8ed59ba9b3bf24ab6da8ebeda14dad9148183411980136cc2fde47049c98063b0ff1816a0852af035cbe8313d88620559e8331d983a43e0f4b515a61f5761bcd2130853ea24377d042643684699ceb9441a73f1285f6a15c8e00d17b4e051df2bd16b1a5699f6dce4556b0b6c88b8b86464beb6415777a8ec890c9335cc14452d6b23e2483d5b77b56042a694435bf913cb6e48ce6ca60c3009b274869bb350a8026d80680b32c9394e9b5dfee8df555a705bb1ff17ac848ccec95bb37206a72ab1d56160682d83e38c8acca34b08fa3b8665b35d01967c0a49681ef74b89b39f785977187a9d6f70affe2a32f41fe942fbd30fd9da981cf8f75485015962cb598d3d09a039787bf8d339695d0f5cd7cb60d25cdba119fa435e3692e06bdd76db5856eb2ed2cd85a081209b0a1453d52e1f8cf5120c7f044bddc38cded7ed59a793bfb2b289137137147f704a0628bb8e3e342b6084fbcc105b5345023fed9b2d339b95b0d0c97945943a70e007fe2172c501fae54ad04c279ae6da7150ea25469ce7e9c33b51713b05dcd4753930a0a37326d276fd28c8c0f6e06660beb102e2868fee31f70d37d38769e824846b081d120d8fcd394627fd672fe823cfdcf7af07b20b40e8e5efce8e93e8414744efd2723798aad9dabd8e23efc08983db6c65cf3c43d5b759ca52d118fad7a1bb23e5b3578f616fc42e304c797e640d8b985987274766adbf424e4e9a78c29dc436636e0df6e9255ebdd2c7c0cd261d42631cc49df231d0bd080da2928bcab9a0546b404b658f75fca9d8e506f3f6639bca2a13eae6bded0081fd2239bd8c0ab2382d23eecfb8985da82fe5ed32a96ac1e198d7f8cf5752cfb296af0a2d59ed19022cb084b525d44d8c773a14743a706baf209aebb270104b16181fdc2462d356341d89ba8024171c462640abfc3bd6f602c3bbd710f6ae6a2cef146f27002f78051d6687b83dac0cc627e0af1ed8765396d9783c6429b4063a8d58728c60ec88416c5dbdf362b891d278db21c9a4558c724b06547fc5f641801dd0da8403e57cff37d407fab07bb389c40555af869af263265333bf8aa4290d7cdb9a78573362d608a549165f13323c0107aa4dfac934fef838cf6e5f06b9324a5d8474183f077de97287eaf3c85cb74165b189d7547d3fccc4c763d02ce57d59c70f39e8065cdeb5fd13c4c14609f98941b73b16fed60bc55a2d8ef92104568b595f4a31f6428d527b34c470715d1300cd41ea992763f46a739ba387f359ee1d97c51e889e5599cebd800dbeef1496e3dbacaafc403d0dc7cd3c7d193788536aa5b0f5f25482744107d74795f27a8a8832596166fdcaa548b90c48890715526a52518f16d697d65beb6321befa003dc56432e3dd4b01cede5447813eb429dce845bf9702e5063fe571d8cb6cfecf12870e373b42c4f86f75b7b249f1bdb397113dfd7a23f1930f8533e300e8d0dc1674acb3ce38342b01edcaa09a0f4502f0ba94efeb853fa917612fc16a3829b437663a1e1", 0xfc1}, {&(0x7f0000000b00)="376864c1", 0x4}], 0x7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdebd1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.152521725s ago: executing program 0 (id=3788): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000041000f4dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000200), &(0x7f00000004c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000318f409bbc28cfa2fa8358d7c2ad5b191758b32bebf433bb049a79f1b501e2a697e06e2a7a2b674f88e9c2fe27402235b821f2c5a94a3fd5b6becfb72baa5d49d58ff6b6f1da02b3e66a6e3735c40bca6e9a6eb3054bb2dfe3ca4940a6e25114b937342d40d746c46c1adc394613ec"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe2d}, 0x94) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) r9 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r8}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000040000000000000000008d70", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r10) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xe, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.906609186s ago: executing program 0 (id=3793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002780)=@newqdisc={0xe8, 0x24, 0xf0b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xc, 0x6, 0x8, 0x1, 0x5, 0x7fff, 0x2}}, {0x8, 0x2, [0x7, 0x2]}}, {{0x1c, 0x1, {0x1, 0x4, 0x400, 0x9, 0x2, 0x8, 0x8, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x4}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0x66b, 0xffffff64, 0x1, 0x1, 0x3ff, 0x7}}, {0x12, 0x2, [0x7, 0x1, 0xfffe, 0x9, 0x0, 0x2, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0xe8}}, 0x4000) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r4 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = accept4$x25(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000640)=0x12, 0x800) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000680)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r6 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r7], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)="497244872847a610bf39e4dbfb27e977e4d7336fa9db3cefed237ccb4a28219c4440838f", 0x24}, {&(0x7f0000000300)="f0e3d779e4a8c9363cf023a9c7d78f305c63975e133a6ad53d44903a210657cb472952cdb23821e96d1c6d46a3a3d878ce4e0824c7cab1e79a592811ce6e6a6bc616b5acd63ca15689bd9679649bfddc9ba5ee648343ccdc13", 0x59}, {&(0x7f0000000400)="c6667754ecf3a956a6cf387958b8647b168310a43c7e7ee08007f69aada2872188724da20767f751d5", 0x29}, {&(0x7f00000004c0)="3d5385ca810be27a8ef44bba83a8c7d0cf8109fbb75b4c674a31430adbcd12fd5316935a1f9a9c74a8c68b091f2345cf62ecc9acaff06c401aebc1cfecb430711148e8ed5ceb21c1dc9b0af89b9d94fc8564b7", 0x53}, {&(0x7f0000000780)="c0975cb5a1b3a7117c2a09ad5b3f41feeb0b2b96f679ca3304b03d3e73f40e2fc1e4e4686068ed600f5b133812e6c76ab8daa4c525fa93f1db5125a54d6224ebde555276ef2b003d7ed13a3b191572d5189eb2e11c2a1bfee4fc1ea67a7386325a652f50cbc1003ee50f92c6db928256f642dbe2a056466925c24c3e75e9ad3565e212959938e09b961e371a4e8ddb5ec47cd596a7c1cfcb56061acf9f676190293b380c", 0xa4}, {&(0x7f0000000580)="0436754000489efa6143bfaf70a3e369288880162015f6238974ed5d58a4ce98a6e762f3451005b6f8f7318ecf", 0x2d}, {&(0x7f0000000840)="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", 0xfa}, {&(0x7f0000000d80)="bd28116582fa45876ed66c2d4de3243826ac7f332d32081aa152e2993b9657e8c07081c14fcd3bf971caa2c8b1b28520c608d1a5125f9e853ee2191fc494772b858f32d141201609d9091d", 0x4b}], 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x560}}, {{&(0x7f00000016c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001740)="d77d262a4387c3be33bdb46a922104ea8658f2b640df67ca73ab8735b7dce9ec1f80c2e6ab1fa238757857e4cbf30c4e4297ada6b5172199a3c9698b0dab058238e2d2540264717e2b9d484ca65da4f1a2f52efb246899967d1f8523f1b6c9f5e1fe83f6811a9cd549aaa0a115d98d0f797d924deb5a9f9dd07c04f36c99891fc097516275a0426d47dc3aa32c6280abf2c1c3ee4279a273b2caab4e7785ce3ce265376fe7ea5d3da5125592c801e3d7040cb6f2eeb830a5807c0e1ededcb8a96b37417be731f2ba3cae2255085a8568", 0xd0}, {&(0x7f0000001840)="ebf611cd38cf355b49379008cbcd7f3202b41d3d03fe78b5e4f0ff559a2ab2d9f154705edfd2d27461fc6cd3f19574cc9242e46df84f9c896c23bf41ce7299df55a641b5c68569fbdafbd71f2cb9c473fdcac7975ace36907ef48747c6910ab0031999153549f016e9", 0x69}, {&(0x7f00000006c0)="5ca1a3074d528808466030dad4ae29cd7c89126a7cf50fa3bd29eeb9c772bc60575ced2e91a7da6fe53dae5018c910e402ad12a23070adbef4fa820d203b36b09c490dbc8862aafd95873ccc4155599eb1a8fd946f67e3ae952f5fca5bd556df7827ac91f95561d21337ce3ca288f941accc73346a88957761ada567caa598245f50496cea6c3e2f45671190f54d4abf219367cc5b4becad13affc4f29abb87ba4ff88863168fc21978b8580503da02f1c81", 0xb2}, {&(0x7f0000001980)="73b14f7f0d8b612e45beeb61e09b554225b959df5011946dd1be700612462d", 0x1f}, {&(0x7f00000019c0)="8fce5d92e9f08b44a5d7aa31f9dee525daea6cf8a1c003b8e14d100974d749ef0255c21f87afc9651cfaa4faaf3cad03b8ced77bde584be976a7e6b04ea46f700fa5e290c4e407f4b3fd048270f94e5013e5", 0x52}], 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"/1416], 0x588}}, {{&(0x7f0000002080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0xd}}, 0x0, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002100)="7e340e131c000933c06ae3f6ea334cc65f923ad6e41b261c208563db857ca19dd277f47747e8c53a8bc9188dd65209c61e5e3194c77f3b9fe1d49bed5fbfe7f5f402813d1f727a8e68780caa1106e10ce0d083ee92fe03b02f97219fc14d0973670ff29068a2e231eac1d5900a05104cec21feed0c285828ebebd1a516fb0ccdb760249dd05b982ab245851ae8ff9aaf270fe1fbe4d207c9a2382cf9e88c28193aab09d29c04472ab7d5b3ab67be24f7509ced57090b46e61473ac3940ff5692319eea65217685e242945224b7632645b972e87a07fa7767def4593fdbb2c9d0566abeeb6c24", 0xe6}, {&(0x7f0000002200)="2fda12e296beef9c9e12fc95e5961e3b6f1cb90bee8f97b446544f23c492cd37cb562f1dab6b53ad0e0c4c444872c3724a18ffd5f12a504a6cb3bc864300b0c43e5d75a83b8b9c019a02d1e65185823cdf17cbf2a7b0afeb15ce8c4f1c2d50edca87fb57efac13d5764b47032749ae51a1f9fb3f6445042810258d66db7d9295238f41bcbc98cdd6d96310c280d91f77f92c8befb61ad4ca0220eea08995d192a017e7e7cb6ccaef2ad6c9912209f62f738c39f2729de6fbdf2945f6a22350a2d29a9bc42d8c32588228f67ab4729ba9bb48caa32f94bb559c", 0xd9}, {&(0x7f0000002300)="f0d7daa2f9c94b9344a277c63e167a2b11d7bff65b00e20decc1643a404e152b7939866c10814768c02240d082445a48b48e8277a85c9183a4a6e88533c253d9bd04d0192e8b3b9c89cdd8c0a4dbfe67269b9bcad6474b86173aa371b48ca92a7aeb4522ec092b856c23199c34", 0x6d}, {&(0x7f0000002480)="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", 0xfd}, {&(0x7f0000002580)="a2e2c9397c2be4de4f3c7a835b1f3283e974795b38dd2388179e7afff4ce162f2c6f75e05f48d09ccb3c788ed63e5f8e432db9daf111343f9b098239542fceb0bad0cd5430336ed659dc75104a1f6c4daa3ebcdd756fa75049fa5b05479b37fc7e0bf644015b78ab8ea8674f0088e6049a2d17412c29e46652e296d718b86b1d85ba021468385d0384d7a78fdc0c3497c18ce87677052e18819b76cda55bd610727c5d", 0xa3}], 0x5}}], 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) socket$netlink(0x10, 0x3, 0x0) 1.772432762s ago: executing program 3 (id=3795): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sigaltstack(&(0x7f0000000000)={&(0x7f00000004c0)=""/4126, 0x0, 0xfffffffffffffe53}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sigaltstack(&(0x7f0000000180)={0x0, 0x1}, &(0x7f00000002c0)={0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r4}, 0x18) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) r7 = syz_io_uring_setup(0x656f, &(0x7f0000000140)={0x0, 0xbbda, 0x13500, 0x0, 0x2b5}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0xe, 0x0, 0x9, 0x40000, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000200)=0x9) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 1.707111975s ago: executing program 4 (id=3796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@private=0xa010100, 0x0, 0x0, 0x4621, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x7, 0xfffffffffffffffd, 0x4}, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in6=@mcast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)={0x8c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_NAT_SRC={0x4}]}, 0x8c}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x80000001, 0x0, r5, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) sendmsg$inet(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="000101000040000000", 0x9}], 0x1}, 0x4000) readv(r9, &(0x7f0000000200)=[{&(0x7f0000000240)=""/10, 0xa}], 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62617461647600d0000380"], 0xfc}}, 0x804) 1.463450976s ago: executing program 4 (id=3797): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x14c, 0x24, 0xbad689febb22c699, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xb, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x9, 0x7, 0x19, 0x15}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (fail_nth: 5) 1.462983776s ago: executing program 0 (id=3798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540000000000800024000000024080001"], 0xc8}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002dc0), r0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x21, 0xfd, 0x9, 0x0, 0x0, 0xb, 0x11500, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x350, 0x140}, 0x100b28, 0x3, 0x4, 0x7, 0x6, 0xffff3fff, 0xf, 0x0, 0xfffffffc, 0x0, 0x2020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000600)={0xffff, 0x6, 0xb2, {0x10001, 0x7fffffff}, 0xffffff39, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x1, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, 0x0, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000000)="aa", 0x1, 0x4840, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x84, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.241035736s ago: executing program 4 (id=3799): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000006d890000000001000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001100)={0x0, 0xffffffffffffffff, 0x3ff, 0xee, 0x3, 0x9}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000340)=""/162, 0x200000, 0x800, 0x8, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r5, 0x0, 0x4ab}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x7f00, {0x0, 0x0, 0x2000, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x80, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x100000, 0xff, 0x180000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.202385497s ago: executing program 2 (id=3800): r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x5a, &(0x7f00000003c0)=""/90}, &(0x7f0000000000)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd04) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 983.889387ms ago: executing program 4 (id=3801): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0xc8, 0x30, 0x53b, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x22, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x58, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x8, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc8}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000008c0)={r3, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={r3, 0x68, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x6, @loopback, 0x80000000}, @in6={0xa, 0x4e22, 0xfffffffc, @loopback, 0x3}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000400)=0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) setuid(0xee01) semop(0x0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x150, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) semctl$GETNCNT(0x0, 0x4, 0xe, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 782.036476ms ago: executing program 3 (id=3802): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9b0fbba3637d1823, &(0x7f0000000880)={@local, 0x0}, &(0x7f00000008c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @initdev, @loopback}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x9, 0x1, {{0x22, 0x4, 0x2, 0x2, 0x88, 0x68, 0x0, 0xe5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x17, 0xd4, [@remote, @remote, @multicast2, @private=0xa010100, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x58, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @generic={0x89, 0x11, "87d7ebec2764f15d9f49bf59a43f73"}, @timestamp={0x44, 0x14, 0xd8, 0x0, 0xb, [0x7ff, 0x400, 0x6, 0x1]}, @cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x14, 0x3e, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x47a}, {@multicast2, 0x677e}]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0xb, [{@multicast1, 0x7f95}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000001080)=ANY=[@ANYBLOB="780000003f1090936e30879eed305e66fa1b1c12a5e21eb153d7fa36dd2e76e7dd2e405f5af845a8fb00459c3dd51a112659f2e03e7c56e57ec3b307134bef367c22b888850ac7de899d0f1b67bc7a2e4fca7d6ca9c80886cd7b36431979b2aa5c19c95c60b8624c8e264d439e0e868c26b048", @ANYRES64=r3, @ANYBLOB="08ca0025bd00000100df250300edff6400018008a732d1329c84258f9e1f330a9c5557d654823959579319742e899e71e022a67bceae8c0747de4e865e6966d9827527c4ea31cdf34d7e85efcf7896cf271dbdd4bc292ff16981a789f46b5fd8afd4", @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="1400020076657468305f746f5f6272696467", @ANYRES32=r4, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="1400020076657468315f766c616e000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) socket$packet(0x11, 0x3, 0x300) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000e00)={0x17c04, r7, 0x6, 0x24000003, 0x400000006, 0x3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040), &(0x7f00000000c0)) 511.240598ms ago: executing program 1 (id=3804): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr") chdir(&(0x7f0000000140)='./file0\x00') r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9b0fbba3637d1823, &(0x7f0000000880)={@local, 0x0}, &(0x7f00000008c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @initdev, @loopback}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x9, 0x1, {{0x22, 0x4, 0x2, 0x2, 0x88, 0x68, 0x0, 0xe5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x17, 0xd4, [@remote, @remote, @multicast2, @private=0xa010100, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x58, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @generic={0x89, 0x11, "87d7ebec2764f15d9f49bf59a43f73"}, @timestamp={0x44, 0x14, 0xd8, 0x0, 0xb, [0x7ff, 0x400, 0x6, 0x1]}, @cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x14, 0x3e, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x47a}, {@multicast2, 0x677e}]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0xb, [{@multicast1, 0x7f95}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000001080)=ANY=[@ANYBLOB="780000003f1090936e30879eed305e66fa1b1c12a5e21eb153d7fa36dd2e76e7dd2e405f5af845a8fb00459c3dd51a112659f2e03e7c56e57ec3b307134bef367c22b888850ac7de899d0f1b67bc7a2e4fca7d6ca9c80886cd7b36431979b2aa5c19c95c60b8624c8e264d439e0e868c26b048", @ANYRES64=r3, @ANYBLOB="08ca0025bd00000100df250300edff6400018008a732d1329c84258f9e1f330a9c5557d654823959579319742e899e71e022a67bceae8c0747de4e865e6966d9827527c4ea31cdf34d7e85efcf7896cf271dbdd4bc292ff16981a789f46b5fd8afd4", @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="1400020076657468305f746f5f6272696467", @ANYRES32=r4, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="1400020076657468315f766c616e000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) socket$packet(0x11, 0x3, 0x300) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000e00)={0x17c04, r7, 0x6, 0x24000003, 0x400000006, 0x3}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040), &(0x7f00000000c0)) 501.171648ms ago: executing program 0 (id=3805): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53f, &(0x7f0000000480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32], 0x48) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_destroy(0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r5 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x8001}}, './file0\x00'}) sync() sync() sync() 328.841106ms ago: executing program 3 (id=3806): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xffd, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) write$P9_RLERROR(r2, &(0x7f0000001540)=ANY=[@ANYBLOB="0800640040ff19370bc3ec8f70d4"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") utime(&(0x7f0000000180)='./file1\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, 0x0, 0x0, 0x60010002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7, 0x0, 0xfffffff1}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {0xf}, {0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x717}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2, 0x0, 0xfffffffc}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 235.15871ms ago: executing program 1 (id=3807): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000041000f4dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000200), &(0x7f00000004c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000318f409bbc28cfa2fa8358d7c2ad5b191758b32bebf433bb049a79f1b501e2a697e06e2a7a2b674f88e9c2fe27402235b821f2c5a94a3fd5b6becfb72baa5d49d58ff6b6f1da02b3e66a6e3735c40bca6e9a6eb3054bb2dfe3ca4940a6e251"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0xc, 0x8, 0x0, 0x1f, 0x4204, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x6, 0x9}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) r9 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r8}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000040000000000000000008d70", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r10) openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xe, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 234.85275ms ago: executing program 2 (id=3808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x644300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_macvtap\x00', 0x5}) 225.30686ms ago: executing program 3 (id=3809): socket$kcm(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000100)) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x0, 0x10a) syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r0}, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000003001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 171.352113ms ago: executing program 2 (id=3810): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 170.581263ms ago: executing program 3 (id=3811): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000006d890000000001000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001100)={0x0, 0xffffffffffffffff, 0x3ff, 0xee, 0x3, 0x9}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000340)=""/162, 0x200000, 0x800, 0x8, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r5, 0x0, 0x4ab}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x7f00, {0x0, 0x0, 0x2000, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x80, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x100000, 0xff, 0x180000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 152.505293ms ago: executing program 2 (id=3812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x89d9, 0x100000001, 0x20000000002, 0x2}) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}, 0x3}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="8a44be0e9f51b67e5fdf983ca442653ec87906fdf5035c3d577eda7037abeddec8a9f672eba8abecb8d69c48d2188d2e32da130ff2c87653b04bb1cfca147360b71c2a551b854294a2f3b41f281849a10d2cdd3c2b16fcd367d6999c9eba0d8d60bc811a9a4cc959db9875735091f805c192146827742aa830db3cf2dada0c4ecf7ebfde32d7a08f8b24a857affb1f757b26254d5c41d395e4c107e5233bc78eccd623", 0xa3}, {&(0x7f00000004c0)="182d34dfd441d2053a7e5c2b551ef0b585959dc03752ddd09af37746665e36ab880bdbc367e81c4c201eac52d4a9bb572676d734abb6b4885890ab2e6140912cf1396b2faf4668e17d5957eb0bc99f8a94528e20a08630393d4dc92ae33d4a76a3a7717232d42c26ea4db92687480f7ad5afbc825f440af3927c84df823fe598d05282865ccc42f567fd30273f5db45b9c1d1079a286ccee", 0x98}], 0x2}, 0x801) r5 = open(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r6, 0x6000000) copy_file_range(r6, 0x0, r6, &(0x7f00000004c0)=0x100, 0x9, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r9 = dup(r8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00'}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x3}, 0x18) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r12, 0x25, &(0x7f0000000140)={0x2, 0x2, 0x5, 0x80000000}) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 110.115626ms ago: executing program 2 (id=3813): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000780)='generic_add_lease\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) 90.929536ms ago: executing program 4 (id=3814): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) sendfile(r2, r0, 0x0, 0x8000fffffffc) (fail_nth: 3) 583.75µs ago: executing program 4 (id=3815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540000000000800024000000024080001"], 0xc8}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002dc0), r0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x21, 0xfd, 0x9, 0x0, 0x0, 0xb, 0x11500, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x350, 0x140}, 0x100b28, 0x3, 0x4, 0x7, 0x6, 0xffff3fff, 0xf, 0x0, 0xfffffffc, 0x0, 0x2020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000600)={0xffff, 0x6, 0xb2, {0x10001, 0x7fffffff}, 0xffffff39, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x1, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, 0x0, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000000)="aa", 0x1, 0x4840, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x84, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=3816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000408000005c0012800c0001006d6163766c616e00a9be61c72fe75471f56f0debe24c0002800800070001000000080001000a000000080001001000000008000300000a000400aaaaaa95aa2c0000080001000300000008000700530e0000"], 0x7c}, 0x1, 0x2000000000000000}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/118, 0x76}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000900)=""/17, 0x11}], 0x5, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000008000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xa}], 0x18, 0x40845}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x8}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x228000, 0x1000, 0x0, 0x4}, 0x20) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r8 = socket(0xa, 0x80004, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getqdisc={0x40, 0x26, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff0}, {0xffe0}, {0xb, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) kernel console output (not intermixed with test programs): 25317][T13196] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3206: bg 0: block 248: padding at end of block bitmap is not set [ 284.841303][T13169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.848286][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.874211][T13169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.885401][T13196] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3206: Failed to acquire dquot type 1 [ 284.928318][T13169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.935444][T13169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.961401][T13169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.974158][T13196] EXT4-fs (loop3): 1 truncate cleaned up [ 284.980495][T13196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 285.001775][T13169] hsr_slave_0: entered promiscuous mode [ 285.007883][T13169] hsr_slave_1: entered promiscuous mode [ 285.014034][T13169] debugfs: 'hsr0' already exists in 'hsr' [ 285.019758][T13169] Cannot create hsr debugfs directory [ 285.073672][T13212] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 285.093672][T13212] vhci_hcd vhci_hcd.2: invalid port number 96 [ 285.099763][T13212] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 285.109053][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 285.141865][T13214] FAULT_INJECTION: forcing a failure. [ 285.141865][T13214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.155005][T13214] CPU: 1 UID: 0 PID: 13214 Comm: syz.2.3212 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 285.155035][T13214] Tainted: [W]=WARN [ 285.155043][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.155056][T13214] Call Trace: [ 285.155062][T13214] [ 285.155069][T13214] __dump_stack+0x1d/0x30 [ 285.155091][T13214] dump_stack_lvl+0xe8/0x140 [ 285.155124][T13214] dump_stack+0x15/0x1b [ 285.155142][T13214] should_fail_ex+0x265/0x280 [ 285.155166][T13214] should_fail+0xb/0x20 [ 285.155186][T13214] should_fail_usercopy+0x1a/0x20 [ 285.155225][T13214] _copy_to_user+0x20/0xa0 [ 285.155248][T13214] simple_read_from_buffer+0xb5/0x130 [ 285.155267][T13214] proc_fail_nth_read+0x10e/0x150 [ 285.155301][T13214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.155351][T13214] vfs_read+0x1a8/0x770 [ 285.155368][T13214] ? __rcu_read_unlock+0x4f/0x70 [ 285.155386][T13214] ? __fget_files+0x184/0x1c0 [ 285.155408][T13214] ? mutex_lock+0x58/0x90 [ 285.155429][T13214] ksys_read+0xda/0x1a0 [ 285.155452][T13214] __x64_sys_read+0x40/0x50 [ 285.155469][T13214] x64_sys_call+0x2889/0x3000 [ 285.155596][T13214] do_syscall_64+0xd8/0x2a0 [ 285.155630][T13214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.155652][T13214] RIP: 0033:0x7fa6e72ae15c [ 285.155701][T13214] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 285.155720][T13214] RSP: 002b:00007fa6e5cf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.155737][T13214] RAX: ffffffffffffffda RBX: 00007fa6e7506090 RCX: 00007fa6e72ae15c [ 285.155749][T13214] RDX: 000000000000000f RSI: 00007fa6e5cf60a0 RDI: 0000000000000004 [ 285.155823][T13214] RBP: 00007fa6e5cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 285.155834][T13214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.155845][T13214] R13: 00007fa6e7506128 R14: 00007fa6e7506090 R15: 00007ffec4fa94f8 [ 285.155862][T13214] [ 285.416317][T13221] serio: Serial port ttyS3 [ 285.439232][T13216] loop3: detected capacity change from 0 to 512 [ 285.489445][T13216] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.3.3213: corrupted xattr block 95: invalid header [ 285.504517][T13216] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3213: bg 0: block 7: invalid block bitmap [ 285.519246][T13216] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 285.528166][T13216] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #11: comm syz.3.3213: corrupted xattr block 95: invalid header [ 285.542271][T13216] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 285.557368][T13216] EXT4-fs (loop3): 1 orphan inode deleted [ 285.595236][T13216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.634063][T13231] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 285.654670][T13169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.670419][T13216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.683381][T13169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.702099][T13169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.723821][T13169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.886792][T13169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.905778][T13169] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.919561][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.926720][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.955777][T13252] siw: device registration error -23 [ 285.966451][T13250] tipc: Started in network mode [ 285.971362][T13250] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 285.986005][T13250] tipc: Enabled bearer , priority 10 [ 285.996929][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.004049][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.033754][T13169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.044442][T13169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.157700][T13169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.171597][T13258] loop3: detected capacity change from 0 to 512 [ 286.193104][T13258] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.3.3227: corrupted xattr block 95: invalid header [ 286.217507][T13258] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3227: bg 0: block 7: invalid block bitmap [ 286.233642][T13258] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 286.421162][T13258] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #11: comm syz.3.3227: corrupted xattr block 95: invalid header [ 286.477079][T13258] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 286.507657][T13258] EXT4-fs (loop3): 1 orphan inode deleted [ 286.532933][T13258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.598417][T13258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.612087][T13278] siw: device registration error -23 [ 286.683441][T13169] veth0_vlan: entered promiscuous mode [ 286.696436][T13169] veth1_vlan: entered promiscuous mode [ 286.754686][T13169] veth0_macvtap: entered promiscuous mode [ 286.775329][T13169] veth1_macvtap: entered promiscuous mode [ 286.832493][T13290] FAULT_INJECTION: forcing a failure. [ 286.832493][T13290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.845660][T13290] CPU: 0 UID: 0 PID: 13290 Comm: syz.3.3232 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 286.845766][T13290] Tainted: [W]=WARN [ 286.845810][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.845892][T13290] Call Trace: [ 286.845900][T13290] [ 286.845913][T13290] __dump_stack+0x1d/0x30 [ 286.845939][T13290] dump_stack_lvl+0xe8/0x140 [ 286.845989][T13290] dump_stack+0x15/0x1b [ 286.846041][T13290] should_fail_ex+0x265/0x280 [ 286.846065][T13290] should_fail+0xb/0x20 [ 286.846086][T13290] should_fail_usercopy+0x1a/0x20 [ 286.846112][T13290] _copy_from_user+0x1c/0xb0 [ 286.846139][T13290] blk_trace_ioctl+0xe5/0x520 [ 286.846191][T13290] ? __pfx_blkdev_ioctl+0x10/0x10 [ 286.846213][T13290] blkdev_ioctl+0x2a2/0x460 [ 286.846234][T13290] ? __pfx_blkdev_ioctl+0x10/0x10 [ 286.846314][T13290] __se_sys_ioctl+0xce/0x140 [ 286.846344][T13290] __x64_sys_ioctl+0x43/0x50 [ 286.846424][T13290] x64_sys_call+0x14b0/0x3000 [ 286.846449][T13290] do_syscall_64+0xd8/0x2a0 [ 286.846480][T13290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.846570][T13290] RIP: 0033:0x7f8bf9ddf749 [ 286.846587][T13290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.846605][T13290] RSP: 002b:00007f8bf8847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.846626][T13290] RAX: ffffffffffffffda RBX: 00007f8bfa035fa0 RCX: 00007f8bf9ddf749 [ 286.846640][T13290] RDX: 0000000000000000 RSI: 00000000c0c0128e RDI: 0000000000000003 [ 286.846654][T13290] RBP: 00007f8bf8847090 R08: 0000000000000000 R09: 0000000000000000 [ 286.846681][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.846730][T13290] R13: 00007f8bfa036038 R14: 00007f8bfa035fa0 R15: 00007ffd7a5e9008 [ 286.846748][T13290] [ 287.079907][ T3923] tipc: Node number set to 4269801491 [ 287.103216][T13294] __nla_validate_parse: 6 callbacks suppressed [ 287.103230][T13294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3233'. [ 287.122252][T13169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.585371][T13169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.627767][T12641] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.656823][T12641] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.683563][T12641] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.743849][T12641] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.781195][T13309] serio: Serial port ttyS3 [ 287.813824][T13301] loop3: detected capacity change from 0 to 512 [ 287.873817][T13301] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3236: EA inode hash validation failed [ 287.901140][T13301] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3236: corrupted inode contents [ 287.931901][T13301] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.3236: mark_inode_dirty error [ 287.946209][T13301] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3236: corrupted inode contents [ 287.985815][T13301] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.3236: mark_inode_dirty error [ 288.011080][T13314] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 288.070610][T13301] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.3236: mark inode dirty (error -117) [ 288.092983][T13301] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 288.246925][T13301] EXT4-fs (loop3): 1 orphan inode deleted [ 288.272994][T13316] FAULT_INJECTION: forcing a failure. [ 288.272994][T13316] name failslab, interval 1, probability 0, space 0, times 0 [ 288.285882][T13316] CPU: 1 UID: 0 PID: 13316 Comm: syz.4.3239 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 288.285982][T13316] Tainted: [W]=WARN [ 288.286020][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.286031][T13316] Call Trace: [ 288.286036][T13316] [ 288.286044][T13316] __dump_stack+0x1d/0x30 [ 288.286068][T13316] dump_stack_lvl+0xe8/0x140 [ 288.286092][T13316] dump_stack+0x15/0x1b [ 288.286200][T13316] should_fail_ex+0x265/0x280 [ 288.286225][T13316] should_failslab+0x8c/0xb0 [ 288.286249][T13316] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 288.286274][T13316] ? __alloc_skb+0x324/0x4d0 [ 288.286299][T13316] __alloc_skb+0x324/0x4d0 [ 288.286346][T13316] ? __alloc_skb+0x24d/0x4d0 [ 288.286377][T13316] netlink_alloc_large_skb+0xbf/0xf0 [ 288.286497][T13316] netlink_sendmsg+0x3cf/0x6b0 [ 288.286524][T13316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.286602][T13316] __sock_sendmsg+0x145/0x180 [ 288.286668][T13316] ____sys_sendmsg+0x31e/0x4a0 [ 288.286698][T13316] ___sys_sendmsg+0x17b/0x1d0 [ 288.286798][T13316] __x64_sys_sendmsg+0xd4/0x160 [ 288.286829][T13316] x64_sys_call+0x17ba/0x3000 [ 288.286854][T13316] do_syscall_64+0xd8/0x2a0 [ 288.286887][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.286985][T13316] RIP: 0033:0x7f932b5ff749 [ 288.287002][T13316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.287021][T13316] RSP: 002b:00007f932a067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.287042][T13316] RAX: ffffffffffffffda RBX: 00007f932b855fa0 RCX: 00007f932b5ff749 [ 288.287056][T13316] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 288.287069][T13316] RBP: 00007f932a067090 R08: 0000000000000000 R09: 0000000000000000 [ 288.287083][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.287096][T13316] R13: 00007f932b856038 R14: 00007f932b855fa0 R15: 00007ffee93fb068 [ 288.287246][T13316] [ 288.536768][T13301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.624997][ T29] kauditd_printk_skb: 666 callbacks suppressed [ 288.625086][ T29] audit: type=1326 audit(288.586:30079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bf9dddf90 code=0x7ffc0000 [ 288.749080][ T29] audit: type=1326 audit(288.656:30080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bf9dddf90 code=0x7ffc0000 [ 288.772160][ T29] audit: type=1326 audit(288.656:30081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 288.795313][ T29] audit: type=1326 audit(288.716:30082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 288.818345][ T29] audit: type=1326 audit(288.716:30083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 288.825961][T13318] loop4: detected capacity change from 0 to 8192 [ 288.841319][ T29] audit: type=1326 audit(288.716:30084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 288.870739][ T29] audit: type=1326 audit(288.716:30085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 288.893714][ T29] audit: type=1326 audit(288.716:30086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 288.916973][ T29] audit: type=1326 audit(288.716:30087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 288.941738][ T29] audit: type=1326 audit(288.826:30088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 288.955461][T13301] tipc: Started in network mode [ 288.970758][T13301] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 288.982140][ T3009] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 288.987508][ T3009] loop4: partition table partially beyond EOD, truncated [ 288.994695][ T3009] loop4: p1 start 100663296 is beyond EOD, truncated [ 289.001438][ T3009] loop4: p2 size 134217732 extends beyond EOD, truncated [ 289.018006][T13301] tipc: Enabled bearer , priority 10 [ 289.043384][ T3009] loop4: p4 size 14876672 extends beyond EOD, truncated [ 289.055699][ T3009] loop4: p5 size 134217732 extends beyond EOD, truncated [ 289.065710][ T3009] loop4: p6 size 14876672 extends beyond EOD, truncated [ 289.087240][T13318] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 289.092562][T13318] loop4: partition table partially beyond EOD, truncated [ 289.101517][T13318] loop4: p1 start 100663296 is beyond EOD, truncated [ 289.108260][T13318] loop4: p2 size 134217732 extends beyond EOD, truncated [ 289.130103][T13318] loop4: p4 size 14876672 extends beyond EOD, truncated [ 289.153044][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3244'. [ 289.153708][T13318] loop4: p5 size 134217732 extends beyond EOD, truncated [ 289.176202][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.185085][T13318] loop4: p6 size 14876672 extends beyond EOD, truncated [ 289.209931][T13338] hsr0: entered promiscuous mode [ 289.219322][T13339] hsr0: entered promiscuous mode [ 289.234131][T13337] hsr0: left promiscuous mode [ 289.239780][ T3009] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 289.245107][ T3009] loop4: partition table partially beyond EOD, truncated [ 289.254064][ T3009] loop4: p1 start 100663296 is beyond EOD, truncated [ 289.260836][ T3009] loop4: p2 size 134217732 extends beyond EOD, truncated [ 289.269161][ T3009] loop4: p4 size 14876672 extends beyond EOD, truncated [ 289.279490][T13336] hsr0: left promiscuous mode [ 289.292448][ T3009] loop4: p5 size 134217732 extends beyond EOD, truncated [ 289.300152][ T3009] loop4: p6 size 14876672 extends beyond EOD, truncated [ 289.526389][T13355] Falling back ldisc for ptm0. [ 289.544067][T13357] FAULT_INJECTION: forcing a failure. [ 289.544067][T13357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.557192][T13357] CPU: 1 UID: 0 PID: 13357 Comm: syz.4.3254 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.557221][T13357] Tainted: [W]=WARN [ 289.557227][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.557257][T13357] Call Trace: [ 289.557265][T13357] [ 289.557274][T13357] __dump_stack+0x1d/0x30 [ 289.557305][T13357] dump_stack_lvl+0xe8/0x140 [ 289.557329][T13357] dump_stack+0x15/0x1b [ 289.557347][T13357] should_fail_ex+0x265/0x280 [ 289.557428][T13357] should_fail+0xb/0x20 [ 289.557513][T13357] should_fail_usercopy+0x1a/0x20 [ 289.557538][T13357] _copy_from_user+0x1c/0xb0 [ 289.557565][T13357] ucma_write+0xd9/0x250 [ 289.557594][T13357] vfs_writev+0x406/0x8b0 [ 289.557658][T13357] ? __pfx_ucma_write+0x10/0x10 [ 289.557692][T13357] do_writev+0xe7/0x210 [ 289.557762][T13357] __x64_sys_writev+0x45/0x50 [ 289.557786][T13357] x64_sys_call+0x1ba5/0x3000 [ 289.557811][T13357] do_syscall_64+0xd8/0x2a0 [ 289.557840][T13357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.557877][T13357] RIP: 0033:0x7f932b5ff749 [ 289.557891][T13357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.557908][T13357] RSP: 002b:00007f932a067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 289.557931][T13357] RAX: ffffffffffffffda RBX: 00007f932b855fa0 RCX: 00007f932b5ff749 [ 289.557945][T13357] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000008 [ 289.557958][T13357] RBP: 00007f932a067090 R08: 0000000000000000 R09: 0000000000000000 [ 289.558028][T13357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.558041][T13357] R13: 00007f932b856038 R14: 00007f932b855fa0 R15: 00007ffee93fb068 [ 289.558058][T13357] [ 289.585425][T13347] vcan0 speed is unknown, defaulting to 1000 [ 289.926413][T13365] loop4: detected capacity change from 0 to 512 [ 289.936523][T13341] vcan0 speed is unknown, defaulting to 1000 [ 289.936557][T13347] lo speed is unknown, defaulting to 1000 [ 290.124256][T13365] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3256: EA inode hash validation failed [ 290.137701][T12479] tipc: Node number set to 4269801491 [ 290.154950][T13341] lo speed is unknown, defaulting to 1000 [ 290.167387][T13365] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.3256: corrupted inode contents [ 290.221226][T13365] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.3256: mark_inode_dirty error [ 290.300289][T13365] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.3256: corrupted inode contents [ 290.347812][T13365] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.3256: mark_inode_dirty error [ 290.427719][T13365] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.3256: mark inode dirty (error -117) [ 290.446594][T13371] loop3: detected capacity change from 0 to 8192 [ 290.453521][T13376] hsr0: entered promiscuous mode [ 290.473401][T13365] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 290.474778][T13375] hsr0: left promiscuous mode [ 290.496812][T13365] EXT4-fs (loop4): 1 orphan inode deleted [ 290.504687][T13371] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 290.509923][T13371] loop3: partition table partially beyond EOD, truncated [ 290.518643][T13371] loop3: p1 start 100663296 is beyond EOD, truncated [ 290.525492][T13371] loop3: p2 size 134217732 extends beyond EOD, truncated [ 290.526428][T13365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.550055][T13371] loop3: p4 size 14876672 extends beyond EOD, truncated [ 290.557736][T13371] loop3: p5 size 134217732 extends beyond EOD, truncated [ 290.565634][T13371] loop3: p6 size 14876672 extends beyond EOD, truncated [ 290.728204][T13387] tipc: Started in network mode [ 290.733147][T13387] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 290.825934][T13387] tipc: Enabled bearer , priority 10 [ 290.860743][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'. [ 291.128759][T13402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3270'. [ 291.189003][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'. [ 291.270046][T13169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.304925][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3271'. [ 291.556177][T13413] hsr0: entered promiscuous mode [ 291.604275][T13412] hsr0: left promiscuous mode [ 291.841971][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3275'. [ 291.926279][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 291.981963][ T5378] tipc: Node number set to 4269801491 [ 292.167961][T13436] siw: device registration error -23 [ 292.216637][T13438] hsr0: entered promiscuous mode [ 292.257581][T13437] hsr0: left promiscuous mode [ 292.285963][T13443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3283'. [ 292.634165][T13452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3287'. [ 292.643180][T13452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3287'. [ 292.652272][T13452] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3287'. [ 292.994152][T13462] loop4: detected capacity change from 0 to 8192 [ 293.022220][T13464] FAULT_INJECTION: forcing a failure. [ 293.022220][T13464] name failslab, interval 1, probability 0, space 0, times 0 [ 293.034874][T13464] CPU: 1 UID: 0 PID: 13464 Comm: syz.0.3291 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.034963][T13464] Tainted: [W]=WARN [ 293.034970][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.034983][T13464] Call Trace: [ 293.034992][T13464] [ 293.035000][T13464] __dump_stack+0x1d/0x30 [ 293.035072][T13464] dump_stack_lvl+0xe8/0x140 [ 293.035094][T13464] dump_stack+0x15/0x1b [ 293.035111][T13464] should_fail_ex+0x265/0x280 [ 293.035130][T13464] should_failslab+0x8c/0xb0 [ 293.035149][T13464] __kvmalloc_node_noprof+0x149/0x6b0 [ 293.035227][T13464] ? page_pool_create_percpu+0x223/0x640 [ 293.035293][T13464] page_pool_create_percpu+0x223/0x640 [ 293.035320][T13464] page_pool_create+0x1a/0x30 [ 293.035341][T13464] bpf_test_run_xdp_live+0x133/0x11d0 [ 293.035365][T13464] ? avc_has_perm_noaudit+0xab/0x130 [ 293.035432][T13464] ? avc_has_perm+0xf7/0x180 [ 293.035449][T13464] ? selinux_file_open+0x2dc/0x330 [ 293.035546][T13464] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 293.035608][T13464] ? _copy_from_user+0x89/0xb0 [ 293.035671][T13464] ? bpf_test_init+0xf4/0x140 [ 293.035700][T13464] bpf_prog_test_run_xdp+0x525/0x970 [ 293.035759][T13464] ? _kstrtol+0x81/0x90 [ 293.035775][T13464] ? __rcu_read_unlock+0x4f/0x70 [ 293.035800][T13464] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 293.035824][T13464] bpf_prog_test_run+0x22a/0x390 [ 293.035849][T13464] __sys_bpf+0x4c0/0x7c0 [ 293.035875][T13464] __x64_sys_bpf+0x41/0x50 [ 293.035919][T13464] x64_sys_call+0x28e1/0x3000 [ 293.036009][T13464] do_syscall_64+0xd8/0x2a0 [ 293.036105][T13464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.036124][T13464] RIP: 0033:0x7fd1f1c7f749 [ 293.036137][T13464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.036154][T13464] RSP: 002b:00007fd1f06df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.036232][T13464] RAX: ffffffffffffffda RBX: 00007fd1f1ed5fa0 RCX: 00007fd1f1c7f749 [ 293.036246][T13464] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 293.036260][T13464] RBP: 00007fd1f06df090 R08: 0000000000000000 R09: 0000000000000000 [ 293.036274][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.036287][T13464] R13: 00007fd1f1ed6038 R14: 00007fd1f1ed5fa0 R15: 00007ffdd711caf8 [ 293.036311][T13464] [ 293.036320][T13464] page_pool_create_percpu() gave up with errno -12 [ 293.292181][T13462] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 293.297427][T13462] loop4: partition table partially beyond EOD, truncated [ 293.321103][T13462] loop4: p1 start 100663296 is beyond EOD, truncated [ 293.328240][T13462] loop4: p2 size 134217732 extends beyond EOD, truncated [ 293.354048][T13462] loop4: p4 size 14876672 extends beyond EOD, truncated [ 293.371963][T13462] loop4: p5 size 134217732 extends beyond EOD, truncated [ 293.398298][T13462] loop4: p6 size 14876672 extends beyond EOD, truncated [ 293.621806][T13470] loop3: detected capacity change from 0 to 512 [ 293.655081][ T3009] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 293.660319][ T3009] loop4: partition table partially beyond EOD, truncated [ 293.757834][ T3009] loop4: p1 start 100663296 is beyond EOD, truncated [ 293.764616][ T3009] loop4: p2 size 134217732 extends beyond EOD, truncated [ 293.906527][ T3009] loop4: p4 size 14876672 extends beyond EOD, truncated [ 293.926963][T13475] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 293.968281][ T3009] loop4: p5 size 134217732 extends beyond EOD, truncated [ 293.989160][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 293.989176][ T29] audit: type=1400 audit(293.966:30309): avc: denied { open } for pid=13467 comm="syz.0.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.014448][ T29] audit: type=1400 audit(293.966:30310): avc: denied { kernel } for pid=13467 comm="syz.0.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.077494][ T3009] loop4: p6 size 14876672 extends beyond EOD, truncated [ 294.192801][T13477] FAULT_INJECTION: forcing a failure. [ 294.192801][T13477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.205969][T13477] CPU: 1 UID: 0 PID: 13477 Comm: syz.1.3297 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.205998][T13477] Tainted: [W]=WARN [ 294.206050][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.206063][T13477] Call Trace: [ 294.206130][T13477] [ 294.206138][T13477] __dump_stack+0x1d/0x30 [ 294.206160][T13477] dump_stack_lvl+0xe8/0x140 [ 294.206221][T13477] dump_stack+0x15/0x1b [ 294.206241][T13477] should_fail_ex+0x265/0x280 [ 294.206266][T13477] should_fail+0xb/0x20 [ 294.206286][T13477] should_fail_usercopy+0x1a/0x20 [ 294.206307][T13477] _copy_from_user+0x1c/0xb0 [ 294.206387][T13477] do_sock_getsockopt+0xf1/0x210 [ 294.206461][T13477] __x64_sys_getsockopt+0x11e/0x1a0 [ 294.206490][T13477] x64_sys_call+0x2dc7/0x3000 [ 294.206511][T13477] do_syscall_64+0xd8/0x2a0 [ 294.206542][T13477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.206562][T13477] RIP: 0033:0x7f3b4377f749 [ 294.206580][T13477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.206599][T13477] RSP: 002b:00007f3b421e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 294.206620][T13477] RAX: ffffffffffffffda RBX: 00007f3b439d5fa0 RCX: 00007f3b4377f749 [ 294.206682][T13477] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 294.206696][T13477] RBP: 00007f3b421e7090 R08: 0000200000001100 R09: 0000000000000000 [ 294.206708][T13477] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 294.206719][T13477] R13: 00007f3b439d6038 R14: 00007f3b439d5fa0 R15: 00007ffd61182708 [ 294.206765][T13477] [ 294.441712][ T29] audit: type=1400 audit(294.126:30311): avc: denied { setopt } for pid=13476 comm="syz.1.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.460825][ T29] audit: type=1400 audit(294.126:30312): avc: denied { bind } for pid=13476 comm="syz.1.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.479755][ T29] audit: type=1400 audit(294.126:30313): avc: denied { name_bind } for pid=13476 comm="syz.1.3297" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 294.501102][ T29] audit: type=1400 audit(294.136:30314): avc: denied { node_bind } for pid=13476 comm="syz.1.3297" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 294.522370][ T29] audit: type=1400 audit(294.136:30315): avc: denied { connect } for pid=13476 comm="syz.1.3297" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.543462][ T29] audit: type=1400 audit(294.136:30316): avc: denied { name_connect } for pid=13476 comm="syz.1.3297" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 294.713427][T13481] hsr0: entered promiscuous mode [ 294.758553][T13480] hsr0: left promiscuous mode [ 294.911731][ T29] audit: type=1326 audit(294.696:30317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4377f749 code=0x7ffc0000 [ 294.934998][ T29] audit: type=1326 audit(294.696:30318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.1.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4377f749 code=0x7ffc0000 [ 295.006333][T13492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'. [ 295.015381][T13492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3304'. [ 295.024368][T13492] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3304'. [ 295.037291][T13493] tipc: New replicast peer: 255.255.255.255 [ 295.043796][T13493] tipc: Enabled bearer , priority 10 [ 295.064747][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3303'. [ 295.073843][T13493] tipc: Disabling bearer [ 295.386723][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3310'. [ 295.395817][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3310'. [ 295.429378][T13512] bridge0: port 3(gretap0) entered blocking state [ 295.435904][T13512] bridge0: port 3(gretap0) entered disabled state [ 295.445194][T13512] gretap0: entered allmulticast mode [ 295.452704][T13512] gretap0: entered promiscuous mode [ 295.458524][T13512] bridge0: port 3(gretap0) entered blocking state [ 295.465035][T13512] bridge0: port 3(gretap0) entered forwarding state [ 295.477782][T13516] hsr0: entered promiscuous mode [ 295.563422][T13515] hsr0: left promiscuous mode [ 295.572044][T13512] gretap0: left allmulticast mode [ 295.577155][T13512] gretap0: left promiscuous mode [ 295.582293][T13512] bridge0: port 3(gretap0) entered disabled state [ 295.690975][T13519] vcan0 speed is unknown, defaulting to 1000 [ 295.725382][T13519] lo speed is unknown, defaulting to 1000 [ 295.847145][T13529] serio: Serial port ttyS3 [ 296.467619][T13560] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 296.746713][T13569] FAULT_INJECTION: forcing a failure. [ 296.746713][T13569] name failslab, interval 1, probability 0, space 0, times 0 [ 296.759505][T13569] CPU: 0 UID: 0 PID: 13569 Comm: syz.3.3332 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 296.759540][T13569] Tainted: [W]=WARN [ 296.759548][T13569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.759559][T13569] Call Trace: [ 296.759590][T13569] [ 296.759598][T13569] __dump_stack+0x1d/0x30 [ 296.759622][T13569] dump_stack_lvl+0xe8/0x140 [ 296.759646][T13569] dump_stack+0x15/0x1b [ 296.759695][T13569] should_fail_ex+0x265/0x280 [ 296.759717][T13569] should_failslab+0x8c/0xb0 [ 296.759740][T13569] __kmalloc_noprof+0xb9/0x5a0 [ 296.759763][T13569] ? io_cache_alloc_new+0x2a/0xb0 [ 296.759860][T13569] io_cache_alloc_new+0x2a/0xb0 [ 296.759883][T13569] __io_prep_rw+0xcf/0x6c0 [ 296.759955][T13569] ? __rcu_read_unlock+0x4f/0x70 [ 296.760023][T13569] io_prep_rwv+0x33/0x250 [ 296.760120][T13569] io_prep_readv+0x1f/0x30 [ 296.760146][T13569] io_submit_sqes+0x70f/0x11b0 [ 296.760184][T13569] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 296.760246][T13569] ? 0xffffffff81000000 [ 296.760258][T13569] ? __rcu_read_unlock+0x4f/0x70 [ 296.760286][T13569] ? proc_fail_nth_write+0x13b/0x160 [ 296.760376][T13569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 296.760399][T13569] ? vfs_write+0x7e8/0x960 [ 296.760419][T13569] ? __rcu_read_unlock+0x4f/0x70 [ 296.760506][T13569] ? __fget_files+0x184/0x1c0 [ 296.760526][T13569] ? mutex_unlock+0x4f/0x90 [ 296.760550][T13569] ? fput+0x8f/0xc0 [ 296.760573][T13569] __x64_sys_io_uring_enter+0x78/0x90 [ 296.760632][T13569] x64_sys_call+0x27e4/0x3000 [ 296.760658][T13569] do_syscall_64+0xd8/0x2a0 [ 296.760689][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.760709][T13569] RIP: 0033:0x7f8bf9ddf749 [ 296.760722][T13569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.760738][T13569] RSP: 002b:00007f8bf8847038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 296.760755][T13569] RAX: ffffffffffffffda RBX: 00007f8bfa035fa0 RCX: 00007f8bf9ddf749 [ 296.760768][T13569] RDX: 0000000000002000 RSI: 00000000000847ba RDI: 0000000000000005 [ 296.760790][T13569] RBP: 00007f8bf8847090 R08: 0000000000000000 R09: 0000000000000000 [ 296.760804][T13569] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 296.760828][T13569] R13: 00007f8bfa036038 R14: 00007f8bfa035fa0 R15: 00007ffd7a5e9008 [ 296.760846][T13569] [ 297.245479][T13589] FAULT_INJECTION: forcing a failure. [ 297.245479][T13589] name failslab, interval 1, probability 0, space 0, times 0 [ 297.258224][T13589] CPU: 1 UID: 0 PID: 13589 Comm: syz.1.3340 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 297.258259][T13589] Tainted: [W]=WARN [ 297.258267][T13589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.258280][T13589] Call Trace: [ 297.258288][T13589] [ 297.258295][T13589] __dump_stack+0x1d/0x30 [ 297.258378][T13589] dump_stack_lvl+0xe8/0x140 [ 297.258441][T13589] dump_stack+0x15/0x1b [ 297.258462][T13589] should_fail_ex+0x265/0x280 [ 297.258558][T13589] should_failslab+0x8c/0xb0 [ 297.258583][T13589] kmem_cache_alloc_noprof+0x69/0x4b0 [ 297.258660][T13589] ? sctp_get_port_local+0x438/0xae0 [ 297.258689][T13589] sctp_get_port_local+0x438/0xae0 [ 297.258728][T13589] sctp_do_bind+0x398/0x4b0 [ 297.258758][T13589] sctp_connect_new_asoc+0x153/0x3a0 [ 297.258843][T13589] sctp_sendmsg+0xf10/0x18d0 [ 297.258873][T13589] ? selinux_socket_sendmsg+0x91/0x1b0 [ 297.258895][T13589] ? __pfx_sctp_sendmsg+0x10/0x10 [ 297.258969][T13589] inet_sendmsg+0xc5/0xd0 [ 297.259056][T13589] __sock_sendmsg+0x102/0x180 [ 297.259083][T13589] __sys_sendto+0x268/0x330 [ 297.259131][T13589] __x64_sys_sendto+0x76/0x90 [ 297.259155][T13589] x64_sys_call+0x29a7/0x3000 [ 297.259175][T13589] do_syscall_64+0xd8/0x2a0 [ 297.259214][T13589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.259264][T13589] RIP: 0033:0x7f3b4377f749 [ 297.259281][T13589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.259299][T13589] RSP: 002b:00007f3b421e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 297.259321][T13589] RAX: ffffffffffffffda RBX: 00007f3b439d5fa0 RCX: 00007f3b4377f749 [ 297.259333][T13589] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 297.259417][T13589] RBP: 00007f3b421e7090 R08: 0000200000000100 R09: 000000000000001c [ 297.259437][T13589] R10: 7ddfdbdfafa51cdd R11: 0000000000000246 R12: 0000000000000001 [ 297.259451][T13589] R13: 00007f3b439d6038 R14: 00007f3b439d5fa0 R15: 00007ffd61182708 [ 297.259472][T13589] [ 297.303256][T13595] siw: device registration error -23 [ 297.475289][T13599] team0: Device gtp0 is of different type [ 297.524698][T13594] SELinux: failed to load policy [ 297.651005][T13609] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 297.747181][T13619] __nla_validate_parse: 6 callbacks suppressed [ 297.747197][T13619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3353'. [ 297.762727][T13619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3353'. [ 297.771712][T13619] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3353'. [ 297.973321][T13629] Invalid ELF header magic: != ELF [ 297.996325][T13629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3355'. [ 298.061214][T13634] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3357'. [ 298.226179][T13641] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3360'. [ 298.267494][T13641] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3360'. [ 298.316467][T13644] FAULT_INJECTION: forcing a failure. [ 298.316467][T13644] name failslab, interval 1, probability 0, space 0, times 0 [ 298.331876][T13644] CPU: 0 UID: 0 PID: 13644 Comm: syz.3.3362 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.331940][T13644] Tainted: [W]=WARN [ 298.331948][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.331961][T13644] Call Trace: [ 298.331968][T13644] [ 298.332050][T13644] __dump_stack+0x1d/0x30 [ 298.332077][T13644] dump_stack_lvl+0xe8/0x140 [ 298.332100][T13644] dump_stack+0x15/0x1b [ 298.332161][T13644] should_fail_ex+0x265/0x280 [ 298.332185][T13644] should_failslab+0x8c/0xb0 [ 298.332208][T13644] kmem_cache_alloc_noprof+0x69/0x4b0 [ 298.332250][T13644] ? alloc_empty_file+0x76/0x200 [ 298.332312][T13644] alloc_empty_file+0x76/0x200 [ 298.332338][T13644] alloc_file_pseudo+0xc6/0x160 [ 298.332368][T13644] hugetlb_file_setup+0x2a6/0x3d0 [ 298.332397][T13644] ksys_mmap_pgoff+0x157/0x310 [ 298.332487][T13644] x64_sys_call+0x16bb/0x3000 [ 298.332524][T13644] do_syscall_64+0xd8/0x2a0 [ 298.332556][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.332581][T13644] RIP: 0033:0x7f8bf9ddf749 [ 298.332598][T13644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.332618][T13644] RSP: 002b:00007f8bf8847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 298.332653][T13644] RAX: ffffffffffffffda RBX: 00007f8bfa035fa0 RCX: 00007f8bf9ddf749 [ 298.332737][T13644] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 298.332751][T13644] RBP: 00007f8bf8847090 R08: ffffffffffffffff R09: 0000000000000000 [ 298.332766][T13644] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 298.332780][T13644] R13: 00007f8bfa036038 R14: 00007f8bfa035fa0 R15: 00007ffd7a5e9008 [ 298.332800][T13644] [ 298.636519][T13653] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 298.647709][T13655] FAULT_INJECTION: forcing a failure. [ 298.647709][T13655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.661058][T13655] CPU: 1 UID: 0 PID: 13655 Comm: syz.0.3365 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.661212][T13655] Tainted: [W]=WARN [ 298.661220][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.661233][T13655] Call Trace: [ 298.661241][T13655] [ 298.661248][T13655] __dump_stack+0x1d/0x30 [ 298.661272][T13655] dump_stack_lvl+0xe8/0x140 [ 298.661296][T13655] dump_stack+0x15/0x1b [ 298.661375][T13655] should_fail_ex+0x265/0x280 [ 298.661497][T13655] should_fail+0xb/0x20 [ 298.661513][T13655] should_fail_usercopy+0x1a/0x20 [ 298.661587][T13655] _copy_to_user+0x20/0xa0 [ 298.661613][T13655] __se_sys_sched_getparam+0xb7/0xf0 [ 298.661804][T13655] x64_sys_call+0x294f/0x3000 [ 298.661827][T13655] do_syscall_64+0xd8/0x2a0 [ 298.661856][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.661904][T13655] RIP: 0033:0x7fd1f1c7f749 [ 298.661917][T13655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.661935][T13655] RSP: 002b:00007fd1f06df038 EFLAGS: 00000246 ORIG_RAX: 000000000000008f [ 298.661952][T13655] RAX: ffffffffffffffda RBX: 00007fd1f1ed5fa0 RCX: 00007fd1f1c7f749 [ 298.661964][T13655] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 00000000000000a2 [ 298.661975][T13655] RBP: 00007fd1f06df090 R08: 0000000000000000 R09: 0000000000000000 [ 298.661987][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.662043][T13655] R13: 00007fd1f1ed6038 R14: 00007fd1f1ed5fa0 R15: 00007ffdd711caf8 [ 298.662061][T13655] [ 298.895247][T13653] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3367'. [ 298.920766][T13653] hsr_slave_0: left promiscuous mode [ 298.927081][T13653] hsr_slave_1: left promiscuous mode [ 298.937278][T13664] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 298.992642][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 298.992684][ T29] audit: type=1400 audit(298.976:30579): avc: denied { shutdown } for pid=13669 comm="syz.0.3371" lport=51497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.022917][T13670] netlink: 'syz.0.3371': attribute type 7 has an invalid length. [ 299.057595][ T29] audit: type=1400 audit(298.996:30580): avc: denied { setopt } for pid=13669 comm="syz.0.3371" lport=51497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.077839][ T29] audit: type=1400 audit(298.996:30581): avc: denied { map_create } for pid=13669 comm="syz.0.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 299.096599][ T29] audit: type=1400 audit(298.996:30582): avc: denied { map_read map_write } for pid=13669 comm="syz.0.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 299.116024][ T29] audit: type=1400 audit(299.016:30583): avc: denied { read write } for pid=11682 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.139758][ T29] audit: type=1400 audit(299.016:30584): avc: denied { open } for pid=11682 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.140180][T13673] loop9: detected capacity change from 0 to 7 [ 299.163784][ T29] audit: type=1400 audit(299.026:30585): avc: denied { module_request } for pid=13669 comm="syz.0.3371" kmod="fs-romfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 299.190922][ T29] audit: type=1400 audit(299.026:30586): avc: denied { ioctl } for pid=11682 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.217466][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.225336][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.233185][T13673] loop9: unable to read partition table [ 299.238886][T13673] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 299.238886][T13673] ) failed (rc=-5) [ 299.303064][ T29] audit: type=1400 audit(299.286:30587): avc: denied { create } for pid=13683 comm="syz.1.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.324452][T13682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3375'. [ 299.335289][T13682] SELinux: failed to load policy [ 299.350124][T13673] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.358020][ T29] audit: type=1400 audit(299.306:30588): avc: denied { create } for pid=13681 comm="syz.0.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 299.380094][T13673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3373'. [ 299.597543][T13706] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 299.707283][T13708] serio: Serial port ttyS3 [ 300.319548][T13722] FAULT_INJECTION: forcing a failure. [ 300.319548][T13722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.333064][T13722] CPU: 1 UID: 0 PID: 13722 Comm: syz.1.3385 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.333097][T13722] Tainted: [W]=WARN [ 300.333103][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.333156][T13722] Call Trace: [ 300.333163][T13722] [ 300.333171][T13722] __dump_stack+0x1d/0x30 [ 300.333193][T13722] dump_stack_lvl+0xe8/0x140 [ 300.333227][T13722] dump_stack+0x15/0x1b [ 300.333244][T13722] should_fail_ex+0x265/0x280 [ 300.333263][T13722] should_fail+0xb/0x20 [ 300.333284][T13722] should_fail_usercopy+0x1a/0x20 [ 300.333360][T13722] strncpy_from_user+0x27/0x260 [ 300.333386][T13722] getname_flags+0xae/0x3b0 [ 300.333407][T13722] user_path_at+0x28/0x130 [ 300.333467][T13722] __se_sys_mount_setattr+0x136/0x260 [ 300.333495][T13722] __x64_sys_mount_setattr+0x67/0x80 [ 300.333553][T13722] x64_sys_call+0x2b8b/0x3000 [ 300.333573][T13722] do_syscall_64+0xd8/0x2a0 [ 300.333604][T13722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.333626][T13722] RIP: 0033:0x7f3b4377f749 [ 300.333650][T13722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.333665][T13722] RSP: 002b:00007f3b421e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 300.333682][T13722] RAX: ffffffffffffffda RBX: 00007f3b439d5fa0 RCX: 00007f3b4377f749 [ 300.333693][T13722] RDX: 0000000000008000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 300.333706][T13722] RBP: 00007f3b421e7090 R08: 0000000000000020 R09: 0000000000000000 [ 300.333719][T13722] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 300.333793][T13722] R13: 00007f3b439d6038 R14: 00007f3b439d5fa0 R15: 00007ffd61182708 [ 300.333808][T13722] [ 300.602246][T13726] serio: Serial port ttyS3 [ 300.864088][T13751] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 300.884482][T13729] vcan0 speed is unknown, defaulting to 1000 [ 300.952170][T13761] team_slave_0: entered promiscuous mode [ 300.957844][T13761] team_slave_1: entered promiscuous mode [ 300.967344][T13761] team_slave_0: left promiscuous mode [ 300.972771][T13761] team_slave_1: left promiscuous mode [ 301.003857][T13729] lo speed is unknown, defaulting to 1000 [ 301.287386][T13807] FAULT_INJECTION: forcing a failure. [ 301.287386][T13807] name failslab, interval 1, probability 0, space 0, times 0 [ 301.300180][T13807] CPU: 0 UID: 0 PID: 13807 Comm: syz.0.3399 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.300215][T13807] Tainted: [W]=WARN [ 301.300224][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.300235][T13807] Call Trace: [ 301.300270][T13807] [ 301.300277][T13807] __dump_stack+0x1d/0x30 [ 301.300398][T13807] dump_stack_lvl+0xe8/0x140 [ 301.300442][T13807] dump_stack+0x15/0x1b [ 301.300464][T13807] should_fail_ex+0x265/0x280 [ 301.300507][T13807] should_failslab+0x8c/0xb0 [ 301.300526][T13807] kmem_cache_alloc_noprof+0x69/0x4b0 [ 301.300597][T13807] ? alloc_empty_file+0x76/0x200 [ 301.300626][T13807] alloc_empty_file+0x76/0x200 [ 301.300728][T13807] path_openat+0x63/0x23b0 [ 301.300753][T13807] ? 0xffffffffa0203298 [ 301.300780][T13807] ? __get_user_nocheck_8+0x20/0x20 [ 301.300802][T13807] ? perf_callchain_user+0x922/0x9f0 [ 301.300851][T13807] ? __bpf_get_stackid+0x6f6/0x7d0 [ 301.300929][T13807] do_filp_open+0x109/0x230 [ 301.300968][T13807] do_sys_openat2+0xa6/0x150 [ 301.300998][T13807] __x64_sys_openat+0xf2/0x120 [ 301.301045][T13807] x64_sys_call+0x2b07/0x3000 [ 301.301070][T13807] do_syscall_64+0xd8/0x2a0 [ 301.301182][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.301205][T13807] RIP: 0033:0x7fd1f1c7f749 [ 301.301238][T13807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.301256][T13807] RSP: 002b:00007fd1f06df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.301305][T13807] RAX: ffffffffffffffda RBX: 00007fd1f1ed5fa0 RCX: 00007fd1f1c7f749 [ 301.301318][T13807] RDX: 0000000000181242 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 301.301329][T13807] RBP: 00007fd1f06df090 R08: 0000000000000000 R09: 0000000000000000 [ 301.301340][T13807] R10: 0000000000000148 R11: 0000000000000246 R12: 0000000000000001 [ 301.301351][T13807] R13: 00007fd1f1ed6038 R14: 00007fd1f1ed5fa0 R15: 00007ffdd711caf8 [ 301.301414][T13807] [ 301.589446][T13816] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 301.589446][T13816] program syz.2.3405 not setting count and/or reply_len properly [ 301.639038][T13822] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 301.646293][T13814] netlink: 'syz.0.3402': attribute type 3 has an invalid length. [ 301.663839][T13825] loop4: detected capacity change from 0 to 512 [ 301.689035][T13825] EXT4-fs (loop4): 1 truncate cleaned up [ 301.710523][T13825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.850377][T13861] xt_connbytes: Forcing CT accounting to be enabled [ 301.875175][T13861] Cannot find set identified by id 0 to match [ 301.913351][T13854] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3406: bg 0: block 465: padding at end of block bitmap is not set [ 301.948080][T13856] vcan0 speed is unknown, defaulting to 1000 [ 301.958014][T13854] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 117 [ 301.970596][T13854] EXT4-fs (loop4): This should not happen!! Data will be lost [ 301.970596][T13854] [ 302.010309][T13876] program syz.1.3410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.092245][T13169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.236466][T13856] lo speed is unknown, defaulting to 1000 [ 302.262218][T13863] vcan0 speed is unknown, defaulting to 1000 [ 302.291894][T13871] FAULT_INJECTION: forcing a failure. [ 302.291894][T13871] name failslab, interval 1, probability 0, space 0, times 0 [ 302.304592][T13871] CPU: 0 UID: 0 PID: 13871 Comm: syz.3.3411 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.304748][T13871] Tainted: [W]=WARN [ 302.304755][T13871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.304768][T13871] Call Trace: [ 302.304775][T13871] [ 302.304785][T13871] __dump_stack+0x1d/0x30 [ 302.304807][T13871] dump_stack_lvl+0xe8/0x140 [ 302.304904][T13871] dump_stack+0x15/0x1b [ 302.304922][T13871] should_fail_ex+0x265/0x280 [ 302.304945][T13871] should_failslab+0x8c/0xb0 [ 302.304968][T13871] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 302.305000][T13871] ? resume_store+0xf2/0x3d0 [ 302.305021][T13871] ? __pfx_resume_store+0x10/0x10 [ 302.305042][T13871] kstrndup+0x80/0x130 [ 302.305062][T13871] resume_store+0xf2/0x3d0 [ 302.305083][T13871] ? _copy_from_iter+0x13e/0xe70 [ 302.305111][T13871] ? should_fail_ex+0xdb/0x280 [ 302.305129][T13871] ? __pfx_resume_store+0x10/0x10 [ 302.305146][T13871] kobj_attr_store+0x4a/0x70 [ 302.305165][T13871] ? __pfx_kobj_attr_store+0x10/0x10 [ 302.305241][T13871] sysfs_kf_write+0xfe/0x120 [ 302.305264][T13871] ? __pfx_sysfs_kf_write+0x10/0x10 [ 302.305353][T13871] kernfs_fop_write_iter+0x1eb/0x300 [ 302.305381][T13871] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 302.305408][T13871] vfs_write+0x52a/0x960 [ 302.305434][T13871] ksys_write+0xda/0x1a0 [ 302.305521][T13871] __x64_sys_write+0x40/0x50 [ 302.305538][T13871] x64_sys_call+0x2847/0x3000 [ 302.305576][T13871] do_syscall_64+0xd8/0x2a0 [ 302.305608][T13871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.305631][T13871] RIP: 0033:0x7f8bf9ddf749 [ 302.305676][T13871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.305692][T13871] RSP: 002b:00007f8bf8826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 302.305712][T13871] RAX: ffffffffffffffda RBX: 00007f8bfa036090 RCX: 00007f8bf9ddf749 [ 302.305727][T13871] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000008 [ 302.305741][T13871] RBP: 00007f8bf8826090 R08: 0000000000000000 R09: 0000000000000000 [ 302.305815][T13871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.305827][T13871] R13: 00007f8bfa036128 R14: 00007f8bfa036090 R15: 00007ffd7a5e9008 [ 302.305844][T13871] [ 302.580365][T13863] lo speed is unknown, defaulting to 1000 [ 302.588554][T13886] vcan0 speed is unknown, defaulting to 1000 [ 302.611925][T13890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 302.669000][T13890] block device autoloading is deprecated and will be removed. [ 302.752481][T13886] lo speed is unknown, defaulting to 1000 [ 302.764461][T13942] siw: device registration error -23 [ 302.892109][T13973] __nla_validate_parse: 12 callbacks suppressed [ 302.892137][T13973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3423'. [ 303.074265][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 303.137130][T13994] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 303.137130][T13994] program syz.3.3428 not setting count and/or reply_len properly [ 303.184518][T13992] loop4: detected capacity change from 0 to 512 [ 303.195347][T13992] EXT4-fs (loop4): 1 truncate cleaned up [ 303.231880][T13992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.340982][T14006] loop3: detected capacity change from 0 to 1024 [ 303.359306][T14006] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.371897][T14006] EXT4-fs: inline encryption not supported [ 303.387587][T14010] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14010 comm=syz.0.3430 [ 303.418031][T14006] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.441204][T14009] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3425: bg 0: block 465: padding at end of block bitmap is not set [ 303.441292][T14006] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 303.467335][T14009] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 620 with error 117 [ 303.472161][T14006] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.3429: lblock 2 mapped to illegal pblock 2 (length 1) [ 303.479810][T14009] EXT4-fs (loop4): This should not happen!! Data will be lost [ 303.479810][T14009] [ 303.536679][T14006] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.3429: lblock 0 mapped to illegal pblock 48 (length 1) [ 303.581050][T13169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.593010][T14006] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3429: Failed to acquire dquot type 0 [ 303.651036][T14006] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 303.695310][T14028] 9p: Bad value for 'rfdno' [ 303.736420][T14006] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.3429: mark_inode_dirty error [ 303.748513][T14006] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 303.760328][T14006] EXT4-fs (loop3): 1 orphan inode deleted [ 303.767422][T14006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.780917][ T2914] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 303.806782][ T2914] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 303.819380][T14006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.829114][T14006] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.3429: Invalid inode table block 1 in block_group 0 [ 303.877214][T14006] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 303.906887][T14006] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.3429: mark_inode_dirty error [ 303.964526][T14006] loop3: detected capacity change from 0 to 2048 [ 303.987543][T14006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 304.039685][T14006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 304.083638][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 304.083653][ T29] audit: type=1326 audit(304.066:30989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bf9dddf90 code=0x7ffc0000 [ 304.131617][T14006] netlink: 'syz.3.3429': attribute type 3 has an invalid length. [ 304.144714][T14049] loop4: detected capacity change from 0 to 8192 [ 304.153863][ T29] audit: type=1326 audit(304.096:30990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bf9ddf34b code=0x7ffc0000 [ 304.176815][ T29] audit: type=1326 audit(304.096:30991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8bf9dde3aa code=0x7ffc0000 [ 304.199745][ T29] audit: type=1326 audit(304.106:30992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 304.222762][ T29] audit: type=1326 audit(304.106:30993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 304.245730][ T29] audit: type=1326 audit(304.106:30994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 304.268721][ T29] audit: type=1326 audit(304.106:30995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 304.291986][ T29] audit: type=1326 audit(304.106:30996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 304.315204][ T29] audit: type=1326 audit(304.106:30997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 304.338195][ T29] audit: type=1326 audit(304.106:30998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.3.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 304.392278][T14049] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 304.397527][T14049] loop4: partition table partially beyond EOD, truncated [ 304.421286][T14049] loop4: p1 start 100663296 is beyond EOD, truncated [ 304.428087][T14049] loop4: p2 size 134217732 extends beyond EOD, truncated [ 304.454905][T14049] loop4: p4 size 14876672 extends beyond EOD, truncated [ 304.482476][T14049] loop4: p5 size 134217732 extends beyond EOD, truncated [ 304.492365][T14049] loop4: p6 size 14876672 extends beyond EOD, truncated [ 304.508573][ T3009] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 304.513824][ T3009] loop4: partition table partially beyond EOD, truncated [ 304.532644][ T3009] loop4: p1 start 100663296 is beyond EOD, truncated [ 304.539379][ T3009] loop4: p2 size 134217732 extends beyond EOD, truncated [ 304.548638][ T3009] loop4: p4 size 14876672 extends beyond EOD, truncated [ 304.590370][ T3009] loop4: p5 size 134217732 extends beyond EOD, truncated [ 304.599004][ T3009] loop4: p6 size 14876672 extends beyond EOD, truncated [ 304.604735][T14085] netlink: 'syz.0.3445': attribute type 1 has an invalid length. [ 304.613787][T14085] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3445'. [ 304.736675][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3446'. [ 304.916683][T14078] loop3: detected capacity change from 0 to 32768 [ 305.140009][T14122] loop4: detected capacity change from 0 to 512 [ 305.276126][T14122] EXT4-fs (loop4): 1 truncate cleaned up [ 305.282659][T14122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.458797][T14138] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3451: bg 0: block 465: padding at end of block bitmap is not set [ 305.516400][T14138] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 305.602916][T14138] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3451: invalid indirect mapped block 234881024 (level 0) [ 305.707823][T14169] tipc: Enabling of bearer rejected, already enabled [ 305.789050][T14176] random: crng reseeded on system resumption [ 305.878587][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3464'. [ 305.982295][T13169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.340412][T14227] netlink: 'syz.4.3476': attribute type 6 has an invalid length. [ 306.369651][T14230] loop3: detected capacity change from 0 to 512 [ 306.378264][T14230] EXT4-fs (loop3): 1 truncate cleaned up [ 306.392211][T14230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.555626][T14234] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3478: bg 0: block 465: padding at end of block bitmap is not set [ 306.602443][T14234] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 708 with error 117 [ 306.614958][T14234] EXT4-fs (loop3): This should not happen!! Data will be lost [ 306.614958][T14234] [ 306.730462][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.836135][T14269] loop4: detected capacity change from 0 to 512 [ 306.852403][T14271] siw: device registration error -23 [ 306.862917][T14269] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 306.884847][T14266] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 306.991337][T14281] loop3: detected capacity change from 0 to 512 [ 307.069060][T14281] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3491: EA inode hash validation failed [ 307.098398][T14281] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3491: corrupted inode contents [ 307.117325][T14281] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.3491: mark_inode_dirty error [ 307.133071][T14281] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3491: corrupted inode contents [ 307.134335][T14296] loop4: detected capacity change from 0 to 512 [ 307.147184][T14281] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.3491: mark_inode_dirty error [ 307.170102][T14281] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.3491: mark inode dirty (error -117) [ 307.184153][T14281] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 307.195347][T14281] EXT4-fs (loop3): 1 orphan inode deleted [ 307.203667][T14296] EXT4-fs (loop4): 1 truncate cleaned up [ 307.205320][T14281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.227022][T14296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.314945][T14307] tipc: Enabling of bearer rejected, already enabled [ 307.448498][T14322] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3501'. [ 307.488358][T14310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3496: bg 0: block 465: padding at end of block bitmap is not set [ 307.514384][T14310] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1308 with error 117 [ 307.527006][T14310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 307.527006][T14310] [ 307.561133][T14329] FAULT_INJECTION: forcing a failure. [ 307.561133][T14329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.574478][T14329] CPU: 0 UID: 0 PID: 14329 Comm: syz.2.3503 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.574510][T14329] Tainted: [W]=WARN [ 307.574518][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.574531][T14329] Call Trace: [ 307.574564][T14329] [ 307.574571][T14329] __dump_stack+0x1d/0x30 [ 307.574594][T14329] dump_stack_lvl+0xe8/0x140 [ 307.574617][T14329] dump_stack+0x15/0x1b [ 307.574717][T14329] should_fail_ex+0x265/0x280 [ 307.574742][T14329] should_fail+0xb/0x20 [ 307.574771][T14329] should_fail_usercopy+0x1a/0x20 [ 307.574796][T14329] _copy_from_user+0x1c/0xb0 [ 307.574936][T14329] __sys_bind+0x106/0x2a0 [ 307.574963][T14329] __x64_sys_bind+0x3f/0x50 [ 307.574985][T14329] x64_sys_call+0x2ceb/0x3000 [ 307.575010][T14329] do_syscall_64+0xd8/0x2a0 [ 307.575041][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.575101][T14329] RIP: 0033:0x7fa6e72af749 [ 307.575116][T14329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.575209][T14329] RSP: 002b:00007fa6e5d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 307.575229][T14329] RAX: ffffffffffffffda RBX: 00007fa6e7505fa0 RCX: 00007fa6e72af749 [ 307.575242][T14329] RDX: 0000000000000010 RSI: 0000200000e15000 RDI: 0000000000000003 [ 307.575256][T14329] RBP: 00007fa6e5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 307.575270][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.575283][T14329] R13: 00007fa6e7506038 R14: 00007fa6e7505fa0 R15: 00007ffec4fa94f8 [ 307.575321][T14329] [ 307.789414][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.823270][T13169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.925734][T14354] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 307.949765][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3511'. [ 307.958812][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3511'. [ 308.135390][T14370] loop3: detected capacity change from 0 to 512 [ 308.154474][T14380] netlink: 648 bytes leftover after parsing attributes in process `syz.2.3518'. [ 308.180209][T14370] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3514: EA inode hash validation failed [ 308.224142][T14370] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3514: corrupted inode contents [ 308.242755][T14370] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.3514: mark_inode_dirty error [ 308.272919][T14370] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3514: corrupted inode contents [ 308.312304][T14370] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.3514: mark_inode_dirty error [ 308.355175][T14370] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.3514: mark inode dirty (error -117) [ 308.356547][T14399] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.388405][T14370] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 308.402516][T14408] siw: device registration error -23 [ 308.415461][T14370] EXT4-fs (loop3): 1 orphan inode deleted [ 308.439467][T14370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.455475][T14416] FAULT_INJECTION: forcing a failure. [ 308.455475][T14416] name failslab, interval 1, probability 0, space 0, times 0 [ 308.468149][T14416] CPU: 1 UID: 0 PID: 14416 Comm: syz.1.3528 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 308.468177][T14416] Tainted: [W]=WARN [ 308.468184][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.468196][T14416] Call Trace: [ 308.468225][T14416] [ 308.468234][T14416] __dump_stack+0x1d/0x30 [ 308.468257][T14416] dump_stack_lvl+0xe8/0x140 [ 308.468323][T14416] dump_stack+0x15/0x1b [ 308.468377][T14416] should_fail_ex+0x265/0x280 [ 308.468399][T14416] should_failslab+0x8c/0xb0 [ 308.468426][T14416] __kmalloc_cache_noprof+0x65/0x4c0 [ 308.468446][T14416] ? alloc_pipe_info+0xae/0x340 [ 308.468465][T14416] alloc_pipe_info+0xae/0x340 [ 308.468549][T14416] splice_direct_to_actor+0x592/0x680 [ 308.468607][T14416] ? __pfx_direct_splice_actor+0x10/0x10 [ 308.468626][T14416] ? avc_policy_seqno+0x15/0x30 [ 308.468684][T14416] ? selinux_file_permission+0x1e2/0x320 [ 308.468715][T14416] do_splice_direct+0xda/0x150 [ 308.468736][T14416] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 308.468763][T14416] do_sendfile+0x380/0x650 [ 308.468820][T14416] __x64_sys_sendfile64+0x105/0x150 [ 308.468847][T14416] x64_sys_call+0x2db1/0x3000 [ 308.468985][T14416] do_syscall_64+0xd8/0x2a0 [ 308.469017][T14416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.469073][T14416] RIP: 0033:0x7f3b4377f749 [ 308.469090][T14416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.469109][T14416] RSP: 002b:00007f3b421e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 308.469130][T14416] RAX: ffffffffffffffda RBX: 00007f3b439d5fa0 RCX: 00007f3b4377f749 [ 308.469197][T14416] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 308.469211][T14416] RBP: 00007f3b421e7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.469224][T14416] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 308.469237][T14416] R13: 00007f3b439d6038 R14: 00007f3b439d5fa0 R15: 00007ffd61182708 [ 308.469254][T14416] [ 308.693867][T14424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3530'. [ 308.702886][T14424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3530'. [ 308.711935][T14424] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3530'. [ 308.847372][T14428] tipc: Enabling of bearer rejected, already enabled [ 308.893678][T14430] vhci_hcd vhci_hcd.3: invalid port number 9 [ 309.082779][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.092041][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 309.092057][ T29] audit: type=1400 audit(309.066:32306): avc: denied { mounton } for pid=14437 comm="syz.2.3535" path="/106" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 309.119921][ T29] audit: type=1400 audit(309.066:32307): avc: denied { module_request } for pid=14437 comm="syz.2.3535" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 309.142049][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3535'. [ 309.291710][ T29] audit: type=1400 audit(309.136:32308): avc: denied { mount } for pid=14437 comm="syz.2.3535" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 309.312881][ T29] audit: type=1400 audit(309.166:32309): avc: denied { execmem } for pid=14445 comm="syz.3.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 309.396191][T14448] loop3: detected capacity change from 0 to 512 [ 309.861811][ T29] audit: type=1400 audit(309.836:32310): avc: denied { setopt } for pid=14457 comm="syz.1.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.926458][T14460] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 310.051029][ T29] audit: type=1400 audit(309.856:32311): avc: denied { write } for pid=14457 comm="syz.1.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.070085][ T29] audit: type=1400 audit(309.866:32312): avc: denied { ioctl } for pid=14457 comm="syz.1.3539" path="socket:[43120]" dev="sockfs" ino=43120 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.222601][T14466] bridge0: entered promiscuous mode [ 310.245203][ T29] audit: type=1326 audit(310.156:32313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.1.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4377f749 code=0x7ffc0000 [ 310.268242][ T29] audit: type=1326 audit(310.156:32314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.1.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4377f749 code=0x7ffc0000 [ 310.291243][ T29] audit: type=1326 audit(310.156:32315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.1.3541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4377f749 code=0x7ffc0000 [ 310.319820][T14466] macsec1: entered promiscuous mode [ 310.347838][T14466] bridge0: port 3(macsec1) entered blocking state [ 310.354337][T14466] bridge0: port 3(macsec1) entered disabled state [ 310.403793][T14466] macsec1: entered allmulticast mode [ 310.409110][T14466] bridge0: entered allmulticast mode [ 310.466650][T14466] macsec1: left allmulticast mode [ 310.471742][T14466] bridge0: left allmulticast mode [ 310.500050][T14466] bridge0: left promiscuous mode [ 310.647083][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 310.710067][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 310.998394][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3548'. [ 311.047972][T14492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14492 comm=syz.2.3548 [ 311.133363][T14499] tipc: Started in network mode [ 311.138342][T14499] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 311.203489][T14499] tipc: Enabled bearer , priority 10 [ 311.514966][T14518] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 311.836481][T14568] loop4: detected capacity change from 0 to 512 [ 311.877728][T14568] EXT4-fs (loop4): 1 truncate cleaned up [ 311.937669][T14568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.120951][T14585] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3560: bg 0: block 465: padding at end of block bitmap is not set [ 312.176472][T14598] siw: device registration error -23 [ 312.185595][T14585] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1564 with error 117 [ 312.198270][T14585] EXT4-fs (loop4): This should not happen!! Data will be lost [ 312.198270][T14585] [ 312.216126][T14590] loop3: detected capacity change from 0 to 512 [ 312.275631][T14590] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3568: EA inode hash validation failed [ 312.304696][T14590] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3568: corrupted inode contents [ 312.321782][ T3413] tipc: Node number set to 4269801491 [ 312.371034][T14590] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.3568: mark_inode_dirty error [ 312.472830][T14610] vcan0 speed is unknown, defaulting to 1000 [ 312.525758][T14610] lo speed is unknown, defaulting to 1000 [ 312.695762][T14590] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3568: corrupted inode contents [ 312.769765][T13169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.800227][T14590] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.3568: mark_inode_dirty error [ 312.814586][T14590] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.3568: mark inode dirty (error -117) [ 312.843745][T14590] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 312.856595][T14590] EXT4-fs (loop3): 1 orphan inode deleted [ 312.900683][T14642] hsr0: entered promiscuous mode [ 312.933255][T14590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.974467][T14641] hsr0: left promiscuous mode [ 313.091621][T14653] tipc: Enabling of bearer rejected, already enabled [ 313.198064][T14670] vlan2: entered allmulticast mode [ 313.301092][T14680] netlink: 'syz.4.3582': attribute type 10 has an invalid length. [ 313.316850][T14680] team0 (unregistering): Port device team_slave_0 removed [ 313.326332][T14680] team0 (unregistering): Port device team_slave_1 removed [ 313.347486][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.366449][ T3427] hid_parser_main: 22 callbacks suppressed [ 313.366466][ T3427] hid-generic 214E:0000:0000.0065: unknown main item tag 0x0 [ 313.379873][ T3427] hid-generic 214E:0000:0000.0065: unknown main item tag 0x0 [ 313.427386][ T3427] hid-generic 214E:0000:0000.0065: hidraw0: HID v0.00 Device [] on [ 313.475789][T14721] __nla_validate_parse: 6 callbacks suppressed [ 313.475805][T14721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3584'. [ 313.505845][T14733] loop3: detected capacity change from 0 to 512 [ 313.546005][T14742] hsr0: entered promiscuous mode [ 313.558277][T14741] hsr0: left promiscuous mode [ 313.563698][T14733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3586: bg 0: block 248: padding at end of block bitmap is not set [ 313.565837][T14740] serio: Serial port ttyS3 [ 313.754384][T14733] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3586: Failed to acquire dquot type 1 [ 313.769863][T14733] EXT4-fs (loop3): 1 truncate cleaned up [ 313.778650][T14733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.221895][T14769] FAULT_INJECTION: forcing a failure. [ 314.221895][T14769] name failslab, interval 1, probability 0, space 0, times 0 [ 314.234628][T14769] CPU: 0 UID: 0 PID: 14769 Comm: syz.2.3594 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 314.234700][T14769] Tainted: [W]=WARN [ 314.234708][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.234721][T14769] Call Trace: [ 314.234729][T14769] [ 314.234738][T14769] __dump_stack+0x1d/0x30 [ 314.234765][T14769] dump_stack_lvl+0xe8/0x140 [ 314.234789][T14769] dump_stack+0x15/0x1b [ 314.234885][T14769] should_fail_ex+0x265/0x280 [ 314.234904][T14769] should_failslab+0x8c/0xb0 [ 314.234924][T14769] __kmalloc_cache_noprof+0x65/0x4c0 [ 314.234947][T14769] ? alloc_pipe_info+0xae/0x340 [ 314.234970][T14769] alloc_pipe_info+0xae/0x340 [ 314.234999][T14769] splice_direct_to_actor+0x592/0x680 [ 314.235023][T14769] ? __pfx_direct_splice_actor+0x10/0x10 [ 314.235073][T14769] ? avc_policy_seqno+0x15/0x30 [ 314.235108][T14769] ? selinux_file_permission+0x1e2/0x320 [ 314.235140][T14769] do_splice_direct+0xda/0x150 [ 314.235161][T14769] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 314.235242][T14769] do_sendfile+0x380/0x650 [ 314.235272][T14769] __x64_sys_sendfile64+0x105/0x150 [ 314.235299][T14769] x64_sys_call+0x2db1/0x3000 [ 314.235323][T14769] do_syscall_64+0xd8/0x2a0 [ 314.235435][T14769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.235463][T14769] RIP: 0033:0x7fa6e72af749 [ 314.235476][T14769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.235492][T14769] RSP: 002b:00007fa6e5d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 314.235509][T14769] RAX: ffffffffffffffda RBX: 00007fa6e7505fa0 RCX: 00007fa6e72af749 [ 314.235520][T14769] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 314.235592][T14769] RBP: 00007fa6e5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 314.235604][T14769] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 314.235616][T14769] R13: 00007fa6e7506038 R14: 00007fa6e7505fa0 R15: 00007ffec4fa94f8 [ 314.235635][T14769] [ 314.575044][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.575121][T14776] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 314.608819][T14778] netlink: 'syz.1.3598': attribute type 10 has an invalid length. [ 314.623135][T14778] team0 (unregistering): Port device team_slave_0 removed [ 314.632563][T14778] team0 (unregistering): Port device team_slave_1 removed [ 314.656606][T14774] loop4: detected capacity change from 0 to 512 [ 314.665259][T14813] hsr0: entered promiscuous mode [ 314.665684][T14774] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.4.3595: corrupted xattr block 95: invalid header [ 314.697595][T14820] serio: Serial port ttyS3 [ 314.704283][T14774] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3595: bg 0: block 7: invalid block bitmap [ 314.716812][T14774] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 314.725909][T14774] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #11: comm syz.4.3595: corrupted xattr block 95: invalid header [ 314.739819][T14774] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 314.749263][T14774] EXT4-fs (loop4): 1 orphan inode deleted [ 314.756035][T14774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.769284][T14774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.778963][T14812] hsr0: left promiscuous mode [ 314.836730][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 314.836744][ T29] audit: type=1400 audit(314.816:33046): avc: denied { name_bind } for pid=14843 comm="syz.0.3603" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 314.872095][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3605'. [ 314.881077][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3605'. [ 314.890062][T14848] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3605'. [ 314.905030][ T29] audit: type=1400 audit(314.886:33047): avc: denied { bind } for pid=14852 comm="syz.4.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.929438][T14855] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 314.942629][ T29] audit: type=1400 audit(314.916:33048): avc: denied { setopt } for pid=14853 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.006219][ T29] audit: type=1400 audit(314.986:33049): avc: denied { create } for pid=14862 comm="syz.1.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 315.679045][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 315.819418][ T29] audit: type=1326 audit(315.796:33050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f1c7f749 code=0x7ffc0000 [ 316.000628][ T29] audit: type=1326 audit(315.826:33051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f1c7f749 code=0x7ffc0000 [ 316.023697][ T29] audit: type=1326 audit(315.826:33052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f1c7f749 code=0x7ffc0000 [ 316.046683][ T29] audit: type=1326 audit(315.846:33053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f1c7f749 code=0x7ffc0000 [ 316.069627][ T29] audit: type=1326 audit(315.846:33054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f1c7f749 code=0x7ffc0000 [ 316.092615][ T29] audit: type=1326 audit(315.846:33055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14879 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1f1c7f749 code=0x7ffc0000 [ 316.156898][ T53] bond0 (unregistering): Released all slaves [ 316.186176][T14887] hsr0: entered promiscuous mode [ 316.204681][T14886] hsr0: left promiscuous mode [ 316.359718][T14881] tipc: Enabling of bearer rejected, already enabled [ 316.708317][ T53] tipc: Disabling bearer [ 316.713412][ T53] tipc: Left network mode [ 316.775949][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3616'. [ 316.787819][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'. [ 316.796943][T14903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3618'. [ 316.804216][T14904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.813288][T14904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.828839][T14904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.836275][T14904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.946001][T14928] loop4: detected capacity change from 0 to 256 [ 316.956208][ T53] hsr_slave_0: left promiscuous mode [ 316.963772][ T53] hsr_slave_1: left promiscuous mode [ 316.977361][T14928] FAT-fs (loop4): Directory bread(block 64) failed [ 316.990856][T14928] FAT-fs (loop4): Directory bread(block 65) failed [ 317.041865][T14928] FAT-fs (loop4): Directory bread(block 66) failed [ 317.061784][T14928] FAT-fs (loop4): Directory bread(block 67) failed [ 317.081539][T14928] FAT-fs (loop4): Directory bread(block 68) failed [ 317.105672][T14928] FAT-fs (loop4): Directory bread(block 69) failed [ 317.122278][T14928] FAT-fs (loop4): Directory bread(block 70) failed [ 317.144433][T14928] FAT-fs (loop4): Directory bread(block 71) failed [ 317.151577][T14928] FAT-fs (loop4): Directory bread(block 72) failed [ 317.158269][T14928] FAT-fs (loop4): Directory bread(block 73) failed [ 317.278135][T14953] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 317.288615][T14948] Invalid ELF header magic: != ELF [ 317.459898][T14954] +}[@: attempt to access beyond end of device [ 317.459898][T14954] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 317.544433][T14963] serio: Serial port ttyS3 [ 317.568101][T14965] loop3: detected capacity change from 0 to 512 [ 318.294693][T14994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 318.435542][T15005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3639'. [ 318.506973][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3639'. [ 318.731072][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'. [ 318.783351][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3645'. [ 318.821117][T15033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3645'. [ 318.889189][T15035] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 319.042475][T15049] serio: Serial port ttyS3 [ 319.118880][T15058] netlink: 'syz.3.3651': attribute type 17 has an invalid length. [ 319.126769][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 319.135638][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3651'. [ 319.207359][T15066] loop4: detected capacity change from 0 to 512 [ 319.217249][T15058] gretap0: entered promiscuous mode [ 319.225208][T15066] EXT4-fs (loop4): 1 truncate cleaned up [ 319.231242][T15066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.243527][T15058] gretap0: left promiscuous mode [ 319.352195][T15086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3655'. [ 319.360303][T15085] loop3: detected capacity change from 0 to 512 [ 319.369770][T15081] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3654: bg 0: block 465: padding at end of block bitmap is not set [ 319.383777][T15085] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 319.395323][T15081] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1620 with error 117 [ 319.407967][T15081] EXT4-fs (loop4): This should not happen!! Data will be lost [ 319.407967][T15081] [ 319.419175][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'. [ 319.430684][T15085] EXT4-fs (loop3): 1 truncate cleaned up [ 319.442228][T15085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.526682][T15105] netlink: 'syz.1.3658': attribute type 10 has an invalid length. [ 319.554412][T13169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.574149][T15105] netlink: 'syz.1.3658': attribute type 10 has an invalid length. [ 319.600013][T15105] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 319.841806][ T29] kauditd_printk_skb: 1437 callbacks suppressed [ 319.841827][ T29] audit: type=1326 audit(319.826:34493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.3.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 320.099342][T15134] netlink: 'syz.4.3663': attribute type 1 has an invalid length. [ 320.116478][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.244880][T15125] loop4: detected capacity change from 0 to 8192 [ 320.378921][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3668'. [ 320.409005][T15125] loop4: p1 p2 p3 p4 [ 320.470978][T15125] loop4: p1 size 196608 extends beyond EOD, truncated [ 320.612434][T15125] loop4: p2 start 164919041 is beyond EOD, truncated [ 320.619276][T15125] loop4: p3 size 66846464 extends beyond EOD, truncated [ 320.675075][T15125] loop4: p4 size 37048832 extends beyond EOD, truncated [ 320.721461][ T3009] loop4: p1 p2 p3 p4 [ 320.726342][ T3009] loop4: p1 size 196608 extends beyond EOD, truncated [ 320.744498][ T3009] loop4: p2 start 164919041 is beyond EOD, truncated [ 320.751212][ T3009] loop4: p3 size 66846464 extends beyond EOD, truncated [ 320.802299][ T3009] loop4: p4 size 37048832 extends beyond EOD, truncated [ 320.822066][ T29] audit: type=1326 audit(319.866:34494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15084 comm="syz.3.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 320.845153][ T29] audit: type=1326 audit(319.946:34495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15124 comm="syz.4.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f932b5fe1ff code=0x7ffc0000 [ 320.867988][ T29] audit: type=1326 audit(320.126:34496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e72af749 code=0x7ffc0000 [ 320.890956][ T29] audit: type=1326 audit(320.126:34497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e72af749 code=0x7ffc0000 [ 320.913923][ T29] audit: type=1326 audit(320.126:34498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e72af749 code=0x7ffc0000 [ 320.937316][ T29] audit: type=1326 audit(320.126:34499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e72af749 code=0x7ffc0000 [ 320.960460][ T29] audit: type=1326 audit(320.136:34500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e72af749 code=0x7ffc0000 [ 320.983478][ T29] audit: type=1326 audit(320.136:34501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6e72af749 code=0x7ffc0000 [ 321.006345][ T29] audit: type=1326 audit(320.136:34502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz.2.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e72af749 code=0x7ffc0000 [ 321.114027][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 321.517640][T15234] loop3: detected capacity change from 0 to 2048 [ 321.555542][T15236] serio: Serial port ttyS3 [ 321.612765][T15234] loop3: p1 < > p4 [ 321.624126][T15234] loop3: p4 size 8388608 extends beyond EOD, truncated [ 321.643383][ T3009] loop3: p1 < > p4 [ 321.653608][ T3009] loop3: p4 size 8388608 extends beyond EOD, truncated [ 321.735807][T15264] siw: device registration error -23 [ 321.792699][T15268] netlink: 'syz.1.3679': attribute type 4 has an invalid length. [ 321.806432][T15268] netlink: 'syz.1.3679': attribute type 4 has an invalid length. [ 322.049492][T15276] FAULT_INJECTION: forcing a failure. [ 322.049492][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 322.062253][T15276] CPU: 1 UID: 0 PID: 15276 Comm: syz.4.3680 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 322.062281][T15276] Tainted: [W]=WARN [ 322.062287][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.062298][T15276] Call Trace: [ 322.062305][T15276] [ 322.062363][T15276] __dump_stack+0x1d/0x30 [ 322.062428][T15276] dump_stack_lvl+0xe8/0x140 [ 322.062448][T15276] dump_stack+0x15/0x1b [ 322.062512][T15276] should_fail_ex+0x265/0x280 [ 322.062536][T15276] should_failslab+0x8c/0xb0 [ 322.062560][T15276] __kvmalloc_node_noprof+0x149/0x6b0 [ 322.062622][T15276] ? vmemdup_user+0x2b/0xd0 [ 322.062688][T15276] ? should_fail_usercopy+0x1a/0x20 [ 322.062713][T15276] vmemdup_user+0x2b/0xd0 [ 322.062733][T15276] path_setxattrat+0x1b6/0x310 [ 322.062784][T15276] __x64_sys_fsetxattr+0x6b/0x80 [ 322.062862][T15276] x64_sys_call+0x23c4/0x3000 [ 322.062882][T15276] do_syscall_64+0xd8/0x2a0 [ 322.062909][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.062927][T15276] RIP: 0033:0x7f932b5ff749 [ 322.062971][T15276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.062990][T15276] RSP: 002b:00007f932a067038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 322.063011][T15276] RAX: ffffffffffffffda RBX: 00007f932b855fa0 RCX: 00007f932b5ff749 [ 322.063025][T15276] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000007 [ 322.063036][T15276] RBP: 00007f932a067090 R08: 0000000000000000 R09: 0000000000000000 [ 322.063047][T15276] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 322.063091][T15276] R13: 00007f932b856038 R14: 00007f932b855fa0 R15: 00007ffee93fb068 [ 322.063109][T15276] [ 322.268190][T15279] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 322.574893][T15300] hsr0: entered promiscuous mode [ 322.674661][T15299] hsr0: left promiscuous mode [ 322.802451][T15312] random: crng reseeded on system resumption [ 322.858288][T15315] serio: Serial port ttyS3 [ 323.538258][T15331] FAULT_INJECTION: forcing a failure. [ 323.538258][T15331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.551355][T15331] CPU: 0 UID: 0 PID: 15331 Comm: syz.2.3697 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 323.551453][T15331] Tainted: [W]=WARN [ 323.551460][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.551474][T15331] Call Trace: [ 323.551481][T15331] [ 323.551490][T15331] __dump_stack+0x1d/0x30 [ 323.551522][T15331] dump_stack_lvl+0xe8/0x140 [ 323.551593][T15331] dump_stack+0x15/0x1b [ 323.551676][T15331] should_fail_ex+0x265/0x280 [ 323.551699][T15331] should_fail+0xb/0x20 [ 323.551718][T15331] should_fail_usercopy+0x1a/0x20 [ 323.551828][T15331] _copy_from_user+0x1c/0xb0 [ 323.551856][T15331] kstrtouint_from_user+0x69/0xf0 [ 323.551876][T15331] ? 0xffffffff81000000 [ 323.551888][T15331] ? selinux_file_permission+0x1e2/0x320 [ 323.551924][T15331] proc_fail_nth_write+0x50/0x160 [ 323.551953][T15331] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 323.552032][T15331] vfs_write+0x269/0x960 [ 323.552047][T15331] ? __rcu_read_unlock+0x4f/0x70 [ 323.552118][T15331] ? __fget_files+0x184/0x1c0 [ 323.552142][T15331] ? mutex_lock+0x58/0x90 [ 323.552201][T15331] ksys_write+0xda/0x1a0 [ 323.552221][T15331] __x64_sys_write+0x40/0x50 [ 323.552241][T15331] x64_sys_call+0x2847/0x3000 [ 323.552267][T15331] do_syscall_64+0xd8/0x2a0 [ 323.552393][T15331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.552417][T15331] RIP: 0033:0x7fa6e72ae1ff [ 323.552434][T15331] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 323.552452][T15331] RSP: 002b:00007fa6e5d17030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 323.552473][T15331] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6e72ae1ff [ 323.552486][T15331] RDX: 0000000000000001 RSI: 00007fa6e5d170a0 RDI: 0000000000000003 [ 323.552559][T15331] RBP: 00007fa6e5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 323.552613][T15331] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 323.552626][T15331] R13: 00007fa6e7506038 R14: 00007fa6e7505fa0 R15: 00007ffec4fa94f8 [ 323.552646][T15331] [ 323.883567][T15337] FAULT_INJECTION: forcing a failure. [ 323.883567][T15337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.896746][T15337] CPU: 1 UID: 0 PID: 15337 Comm: syz.2.3700 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 323.896776][T15337] Tainted: [W]=WARN [ 323.896782][T15337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.896794][T15337] Call Trace: [ 323.896800][T15337] [ 323.896807][T15337] __dump_stack+0x1d/0x30 [ 323.896891][T15337] dump_stack_lvl+0xe8/0x140 [ 323.896914][T15337] dump_stack+0x15/0x1b [ 323.896933][T15337] should_fail_ex+0x265/0x280 [ 323.896957][T15337] should_fail+0xb/0x20 [ 323.896978][T15337] should_fail_usercopy+0x1a/0x20 [ 323.897006][T15337] _copy_to_user+0x20/0xa0 [ 323.897030][T15337] simple_read_from_buffer+0xb5/0x130 [ 323.897048][T15337] proc_fail_nth_read+0x10e/0x150 [ 323.897083][T15337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.897157][T15337] vfs_read+0x1a8/0x770 [ 323.897270][T15337] ? bpf_trace_run2+0x124/0x1d0 [ 323.897296][T15337] ? __rcu_read_unlock+0x4f/0x70 [ 323.897318][T15337] ? __fget_files+0x184/0x1c0 [ 323.897342][T15337] ? mutex_lock+0x58/0x90 [ 323.897370][T15337] ksys_read+0xda/0x1a0 [ 323.897392][T15337] __x64_sys_read+0x40/0x50 [ 323.897409][T15337] x64_sys_call+0x2889/0x3000 [ 323.897429][T15337] do_syscall_64+0xd8/0x2a0 [ 323.897463][T15337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.897482][T15337] RIP: 0033:0x7fa6e72ae15c [ 323.897498][T15337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.897531][T15337] RSP: 002b:00007fa6e5d17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.897558][T15337] RAX: ffffffffffffffda RBX: 00007fa6e7505fa0 RCX: 00007fa6e72ae15c [ 323.897570][T15337] RDX: 000000000000000f RSI: 00007fa6e5d170a0 RDI: 0000000000000006 [ 323.897648][T15337] RBP: 00007fa6e5d17090 R08: 0000000000000000 R09: 0000000000000000 [ 323.897659][T15337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.897744][T15337] R13: 00007fa6e7506038 R14: 00007fa6e7505fa0 R15: 00007ffec4fa94f8 [ 323.897765][T15337] [ 324.121354][T15341] hsr0: entered promiscuous mode [ 324.144597][T15338] hsr0: left promiscuous mode [ 324.247130][T15342] tipc: Enabling of bearer rejected, already enabled [ 324.335340][T15352] netlink: 'syz.2.3704': attribute type 1 has an invalid length. [ 324.828310][T15394] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.851903][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 324.851917][ T29] audit: type=1326 audit(324.836:34922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b437765e7 code=0x7ffc0000 [ 324.951688][ T29] audit: type=1326 audit(324.836:34923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b4371b829 code=0x7ffc0000 [ 324.974612][ T29] audit: type=1326 audit(324.836:34924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4377f749 code=0x7ffc0000 [ 324.997644][ T29] audit: type=1326 audit(324.846:34925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b437765e7 code=0x7ffc0000 [ 325.020660][ T29] audit: type=1326 audit(324.846:34926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b4371b829 code=0x7ffc0000 [ 325.043683][ T29] audit: type=1326 audit(324.846:34927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4377f749 code=0x7ffc0000 [ 325.067626][T15407] serio: Serial port ttyS3 [ 325.074746][T15410] __nla_validate_parse: 11 callbacks suppressed [ 325.074767][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3710'. [ 325.098889][T15410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3710'. [ 325.115599][ T29] audit: type=1400 audit(325.096:34928): avc: denied { read } for pid=15414 comm="syz.4.3711" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 325.138519][ T29] audit: type=1400 audit(325.096:34929): avc: denied { open } for pid=15414 comm="syz.4.3711" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 325.201111][T15421] hsr0: entered promiscuous mode [ 325.229228][T15419] hsr0: left promiscuous mode [ 325.309941][ T29] audit: type=1400 audit(325.266:34930): avc: denied { create } for pid=15426 comm="syz.2.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 325.329074][ T29] audit: type=1400 audit(325.266:34931): avc: denied { read } for pid=15426 comm="syz.2.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 325.664756][T15442] loop4: detected capacity change from 0 to 512 [ 326.092593][T15450] tipc: Enabling of bearer rejected, already enabled [ 326.216624][T15453] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.752762][T15459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3720'. [ 326.798875][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'. [ 327.114762][T15485] hsr0: entered promiscuous mode [ 327.162240][T15484] hsr0: left promiscuous mode [ 327.275073][T15494] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 327.275746][T15495] serio: Serial port ttyS3 [ 327.303445][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3730'. [ 327.304172][T15498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3727'. [ 327.346587][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3727'. [ 327.464411][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3734'. [ 327.530265][T15525] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 327.547536][T15528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3735'. [ 327.806607][T15530] hsr0: entered promiscuous mode [ 327.815749][T15529] hsr0: left promiscuous mode [ 328.245138][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 328.335869][T15563] hsr0: entered promiscuous mode [ 328.345049][T15562] hsr0: left promiscuous mode [ 328.577576][T15588] serio: Serial port ttyS3 [ 328.941280][T15604] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 328.953118][T15606] FAULT_INJECTION: forcing a failure. [ 328.953118][T15606] name failslab, interval 1, probability 0, space 0, times 0 [ 328.965783][T15606] CPU: 0 UID: 0 PID: 15606 Comm: syz.2.3759 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 328.965869][T15606] Tainted: [W]=WARN [ 328.965876][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.965957][T15606] Call Trace: [ 328.965964][T15606] [ 328.965971][T15606] __dump_stack+0x1d/0x30 [ 328.965996][T15606] dump_stack_lvl+0xe8/0x140 [ 328.966076][T15606] dump_stack+0x15/0x1b [ 328.966097][T15606] should_fail_ex+0x265/0x280 [ 328.966118][T15606] should_failslab+0x8c/0xb0 [ 328.966138][T15606] kmem_cache_alloc_noprof+0x69/0x4b0 [ 328.966204][T15606] ? audit_log_start+0x342/0x720 [ 328.966226][T15606] audit_log_start+0x342/0x720 [ 328.966322][T15606] audit_seccomp+0x48/0x100 [ 328.966347][T15606] ? __seccomp_filter+0x832/0x1260 [ 328.966373][T15606] __seccomp_filter+0x843/0x1260 [ 328.966403][T15606] ? io_uring_create+0x32/0x4e0 [ 328.966501][T15606] ? memchr_inv+0x30/0x2e0 [ 328.966527][T15606] __secure_computing+0x82/0x150 [ 328.966594][T15606] syscall_trace_enter+0xcf/0x1e0 [ 328.966615][T15606] do_syscall_64+0xb2/0x2a0 [ 328.966641][T15606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.966666][T15606] RIP: 0033:0x7fa6e72af783 [ 328.966679][T15606] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 328.966746][T15606] RSP: 002b:00007fa6e5d16fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 328.966763][T15606] RAX: ffffffffffffffda RBX: 00007fa6e7505fa0 RCX: 00007fa6e72af783 [ 328.966774][T15606] RDX: 0000000000000003 RSI: 000000000009adb0 RDI: 0000000000000000 [ 328.966785][T15606] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 328.966796][T15606] R10: 0000000000008001 R11: 0000000000000246 R12: ffffffffffffffff [ 328.966807][T15606] R13: 0000000000000000 R14: 000000000000774a R15: 0000200000000140 [ 328.966822][T15606] [ 329.179625][T15611] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 329.228370][T15609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.253677][T15609] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 329.391241][T15665] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 329.402540][T15665] bond2 (unregistering): Released all slaves [ 329.439533][T15735] bridge0: port 3(batadv1) entered blocking state [ 329.446169][T15735] bridge0: port 3(batadv1) entered disabled state [ 329.453207][T15735] batadv1: entered allmulticast mode [ 329.459145][T15735] batadv1: entered promiscuous mode [ 329.556611][T15746] ip6gre0: entered promiscuous mode [ 329.564523][T15746] team0: Device ip6gre0 is of different type [ 329.577118][T15748] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 329.668551][T15760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15760 comm=syz.1.3777 [ 329.729003][T15769] serio: Serial port ttyS3 [ 329.941701][ T359] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 329.951030][ T359] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 330.244807][T15780] loop3: detected capacity change from 0 to 512 [ 330.253762][T15780] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.3.3782: corrupted xattr block 95: invalid header [ 330.268004][T15780] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3782: bg 0: block 7: invalid block bitmap [ 330.280413][T15780] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 330.289441][T15780] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #11: comm syz.3.3782: corrupted xattr block 95: invalid header [ 330.303330][T15780] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 330.312433][T15780] EXT4-fs (loop3): 1 orphan inode deleted [ 330.318485][T15780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.331431][T15780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.358058][T15787] FAULT_INJECTION: forcing a failure. [ 330.358058][T15787] name failslab, interval 1, probability 0, space 0, times 0 [ 330.370712][T15787] CPU: 1 UID: 0 PID: 15787 Comm: syz.4.3783 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 330.370751][T15787] Tainted: [W]=WARN [ 330.370759][T15787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.370773][T15787] Call Trace: [ 330.370781][T15787] [ 330.370854][T15787] __dump_stack+0x1d/0x30 [ 330.370896][T15787] dump_stack_lvl+0xe8/0x140 [ 330.370931][T15787] dump_stack+0x15/0x1b [ 330.370951][T15787] should_fail_ex+0x265/0x280 [ 330.370972][T15787] should_failslab+0x8c/0xb0 [ 330.371066][T15787] kmem_cache_alloc_noprof+0x69/0x4b0 [ 330.371203][T15787] ? sctp_get_port_local+0x438/0xae0 [ 330.371221][T15787] sctp_get_port_local+0x438/0xae0 [ 330.371262][T15787] sctp_do_bind+0x398/0x4b0 [ 330.371285][T15787] sctp_connect_new_asoc+0x153/0x3a0 [ 330.371351][T15787] __sctp_connect+0x424/0x7a0 [ 330.371369][T15787] sctp_inet_connect+0xe8/0x110 [ 330.371397][T15787] ? __pfx_sctp_inet_connect+0x10/0x10 [ 330.371411][T15787] __sys_connect+0x1f2/0x2b0 [ 330.371427][T15787] __x64_sys_connect+0x3f/0x50 [ 330.371440][T15787] x64_sys_call+0x2e09/0x3000 [ 330.371482][T15787] do_syscall_64+0xd8/0x2a0 [ 330.371501][T15787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.371540][T15787] RIP: 0033:0x7f932b5ff749 [ 330.371550][T15787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.371561][T15787] RSP: 002b:00007f932a067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 330.371572][T15787] RAX: ffffffffffffffda RBX: 00007f932b855fa0 RCX: 00007f932b5ff749 [ 330.371604][T15787] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000005 [ 330.371611][T15787] RBP: 00007f932a067090 R08: 0000000000000000 R09: 0000000000000000 [ 330.371619][T15787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.371626][T15787] R13: 00007f932b856038 R14: 00007f932b855fa0 R15: 00007ffee93fb068 [ 330.371637][T15787] [ 330.666641][T15805] __nla_validate_parse: 15 callbacks suppressed [ 330.666692][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3790'. [ 330.688348][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3788'. [ 330.714880][ T29] kauditd_printk_skb: 486 callbacks suppressed [ 330.714895][ T29] audit: type=1326 audit(330.696:35416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.744473][ T29] audit: type=1326 audit(330.696:35417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.767597][ T29] audit: type=1326 audit(330.696:35418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.769802][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3792'. [ 330.790643][ T29] audit: type=1326 audit(330.696:35419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.822530][ T29] audit: type=1326 audit(330.696:35420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.845617][ T29] audit: type=1326 audit(330.696:35421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.868719][ T29] audit: type=1326 audit(330.696:35422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.891914][ T29] audit: type=1326 audit(330.696:35423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.914884][ T29] audit: type=1326 audit(330.696:35424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.937851][ T29] audit: type=1326 audit(330.696:35425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15806 comm="syz.3.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf9ddf749 code=0x7ffc0000 [ 330.990538][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3792'. [ 331.079433][T15837] serio: Serial port ttyS3 [ 331.213112][T15845] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3796'. [ 331.291931][T15850] FAULT_INJECTION: forcing a failure. [ 331.291931][T15850] name failslab, interval 1, probability 0, space 0, times 0 [ 331.304709][T15850] CPU: 1 UID: 0 PID: 15850 Comm: syz.4.3797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 331.304737][T15850] Tainted: [W]=WARN [ 331.304743][T15850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.304755][T15850] Call Trace: [ 331.304762][T15850] [ 331.304770][T15850] __dump_stack+0x1d/0x30 [ 331.304792][T15850] dump_stack_lvl+0xe8/0x140 [ 331.304870][T15850] dump_stack+0x15/0x1b [ 331.304891][T15850] should_fail_ex+0x265/0x280 [ 331.304916][T15850] should_failslab+0x8c/0xb0 [ 331.304936][T15850] kmem_cache_alloc_noprof+0x69/0x4b0 [ 331.304986][T15850] ? skb_clone+0x151/0x1f0 [ 331.305012][T15850] skb_clone+0x151/0x1f0 [ 331.305060][T15850] __netlink_deliver_tap+0x2c9/0x500 [ 331.305094][T15850] netlink_unicast+0x66b/0x690 [ 331.305123][T15850] netlink_sendmsg+0x58b/0x6b0 [ 331.305154][T15850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.305260][T15850] __sock_sendmsg+0x145/0x180 [ 331.305339][T15850] ____sys_sendmsg+0x31e/0x4a0 [ 331.305367][T15850] ___sys_sendmsg+0x17b/0x1d0 [ 331.305477][T15850] ? __bpf_get_stackid+0x7c0/0x7d0 [ 331.305547][T15850] __x64_sys_sendmsg+0xd4/0x160 [ 331.305625][T15850] x64_sys_call+0x17ba/0x3000 [ 331.305651][T15850] do_syscall_64+0xd8/0x2a0 [ 331.305684][T15850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.305821][T15850] RIP: 0033:0x7f932b5ff749 [ 331.305834][T15850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.305850][T15850] RSP: 002b:00007f932a067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.305871][T15850] RAX: ffffffffffffffda RBX: 00007f932b855fa0 RCX: 00007f932b5ff749 [ 331.305885][T15850] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 331.305990][T15850] RBP: 00007f932a067090 R08: 0000000000000000 R09: 0000000000000000 [ 331.306001][T15850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.306012][T15850] R13: 00007f932b856038 R14: 00007f932b855fa0 R15: 00007ffee93fb068 [ 331.306028][T15850] [ 331.540555][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 331.566750][T15804] vcan0 speed is unknown, defaulting to 1000 [ 331.583702][T15854] loop4: detected capacity change from 0 to 8192 [ 331.602061][T15854] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 331.607306][T15854] loop4: partition table partially beyond EOD, truncated [ 331.643162][T15854] loop4: p1 start 100663296 is beyond EOD, truncated [ 331.649873][T15854] loop4: p2 size 134217732 extends beyond EOD, truncated [ 331.694455][T15804] lo speed is unknown, defaulting to 1000 [ 331.698832][T12479] IPVS: starting estimator thread 0... [ 331.711431][T15854] loop4: p4 size 14876672 extends beyond EOD, truncated [ 331.724355][T15854] loop4: p5 size 134217732 extends beyond EOD, truncated [ 331.734504][T15854] loop4: p6 size 14876672 extends beyond EOD, truncated [ 331.914017][T15859] IPVS: using max 2448 ests per chain, 122400 per kthread [ 331.925185][T15896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3801'. [ 331.934261][T15896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3801'. [ 331.943250][T15896] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3801'. [ 332.232790][T15903] loop3: detected capacity change from 0 to 512 [ 332.244398][T15903] EXT4-fs (loop3): 1 truncate cleaned up [ 332.250682][T15903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.353438][T12650] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:28: bg 0: block 465: padding at end of block bitmap is not set [ 332.368335][T12650] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1316 with error 117 [ 332.380947][T12650] EXT4-fs (loop3): This should not happen!! Data will be lost [ 332.380947][T12650] [ 332.449379][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.487769][T15920] loop3: detected capacity change from 0 to 512 [ 332.501020][T15920] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 332.512647][T15920] EXT4-fs (loop3): 1 truncate cleaned up [ 332.518745][T15920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.553804][T11682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.574804][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3810'. [ 332.583993][T15931] IPVS: Error connecting to the multicast addr [ 332.636796][T15935] loop3: detected capacity change from 0 to 8192 [ 332.682101][T15935] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 332.687500][T15935] loop3: partition table partially beyond EOD, truncated [ 332.695971][T15955] FAULT_INJECTION: forcing a failure. [ 332.695971][T15955] name failslab, interval 1, probability 0, space 0, times 0 [ 332.708720][T15955] CPU: 1 UID: 0 PID: 15955 Comm: syz.4.3814 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.708816][T15935] loop3: p1 start 100663296 is beyond EOD, [ 332.708892][T15955] ================================================================== [ 332.708922][T15955] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 332.708957][T15955] [ 332.708963][T15955] write to 0xffffffff86874a00 of 8 bytes by task 15935 on cpu 0: [ 332.708978][T15955] data_alloc+0x31c/0x390 [ 332.709002][T15955] prb_reserve+0x964/0xb60 [ 332.709026][T15955] vprintk_store+0x56d/0x860 [ 332.709051][T15955] vprintk_emit+0x15a/0x610 [ 332.709077][T15955] vprintk_default+0x26/0x30 [ 332.709104][T15955] vprintk+0x1d/0x30 [ 332.709123][T15955] _printk+0x79/0xa0 [ 332.709137][T15955] bdev_disk_changed+0x821/0xcb0 [ 332.709164][T15955] loop_set_status+0x5d2/0x6a0 [ 332.709184][T15955] lo_ioctl+0x671/0x12b0 [ 332.709199][T15955] blkdev_ioctl+0x37d/0x460 [ 332.709217][T15955] __se_sys_ioctl+0xce/0x140 [ 332.709243][T15955] __x64_sys_ioctl+0x43/0x50 [ 332.709270][T15955] x64_sys_call+0x14b0/0x3000 [ 332.709293][T15955] do_syscall_64+0xd8/0x2a0 [ 332.709320][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.709345][T15955] [ 332.709351][T15955] read to 0xffffffff86874a00 of 8 bytes by task 15955 on cpu 1: [ 332.709366][T15955] prb_reserve+0x249/0xb60 [ 332.709390][T15955] vprintk_store+0x56d/0x860 [ 332.709416][T15955] vprintk_emit+0x15a/0x610 [ 332.709441][T15955] vprintk_default+0x26/0x30 [ 332.709469][T15955] vprintk+0x1d/0x30 [ 332.709488][T15955] _printk+0x79/0xa0 [ 332.709503][T15955] dump_stack_print_info+0x183/0x1b0 [ 332.709523][T15955] __dump_stack+0x11/0x30 [ 332.709542][T15955] dump_stack_lvl+0xe8/0x140 [ 332.709561][T15955] dump_stack+0x15/0x1b [ 332.709579][T15955] should_fail_ex+0x265/0x280 [ 332.709598][T15955] should_failslab+0x8c/0xb0 [ 332.709618][T15955] __kmalloc_noprof+0xb9/0x5a0 [ 332.709638][T15955] copy_splice_read+0xc2/0x660 [ 332.709655][T15955] splice_direct_to_actor+0x290/0x680 [ 332.709674][T15955] do_splice_direct+0xda/0x150 [ 332.709691][T15955] do_sendfile+0x380/0x650 [ 332.709714][T15955] __x64_sys_sendfile64+0x105/0x150 [ 332.709735][T15955] x64_sys_call+0x2db1/0x3000 [ 332.709764][T15955] do_syscall_64+0xd8/0x2a0 [ 332.709790][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.709810][T15955] [ 332.709814][T15955] value changed: 0xfffffffffffe8020 -> 0x00000000000938f0 [ 332.709825][T15955] [ 332.709829][T15955] Reported by Kernel Concurrency Sanitizer on: [ 332.709842][T15955] CPU: 1 UID: 0 PID: 15955 Comm: syz.4.3814 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.709871][T15955] Tainted: [W]=WARN [ 332.709878][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.709890][T15955] ================================================================== [ 332.708755][T15955] Tainted: [W]=WARN [ 332.709903][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.709914][T15955] Call Trace: [ 332.709920][T15955] [ 332.709971][T15955] __dump_stack+0x1d/0x30 [ 332.709992][T15955] dump_stack_lvl+0xe8/0x140 [ 332.710014][T15955] dump_stack+0x15/0x1b [ 332.710032][T15955] should_fail_ex+0x265/0x280 [ 332.710054][T15955] should_failslab+0x8c/0xb0 [ 332.710086][T15955] __kmalloc_noprof+0xb9/0x5a0 [ 332.710106][T15955] ? copy_splice_read+0xc2/0x660 [ 332.710126][T15955] copy_splice_read+0xc2/0x660 [ 332.710222][T15955] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 332.710339][T15955] splice_direct_to_actor+0x290/0x680 [ 332.710360][T15955] ? __pfx_direct_splice_actor+0x10/0x10 [ 332.710403][T15955] do_splice_direct+0xda/0x150 [ 332.710423][T15955] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 332.710480][T15955] do_sendfile+0x380/0x650 [ 332.710537][T15955] __x64_sys_sendfile64+0x105/0x150 [ 332.710562][T15955] x64_sys_call+0x2db1/0x3000 [ 332.710585][T15955] do_syscall_64+0xd8/0x2a0 [ 332.710615][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.710648][T15955] RIP: 0033:0x7f932b5ff749 [ 332.710663][T15955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.710681][T15955] RSP: 002b:00007f932a067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.710700][T15955] RAX: ffffffffffffffda RBX: 00007f932b855fa0 RCX: 00007f932b5ff749 [ 332.710713][T15955] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 332.710726][T15955] RBP: 00007f932a067090 R08: 0000000000000000 R09: 0000000000000000 [ 332.710798][T15955] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 332.710811][T15955] R13: 00007f932b856038 R14: 00007f932b855fa0 R15: 00007ffee93fb068 [ 332.710829][T15955] [ 333.168065][T15935] truncated [ 333.171152][T15935] loop3: p2 size 134217732 extends beyond EOD, truncated [ 333.179302][T15935] loop3: p4 size 14876672 extends beyond EOD, truncated [ 333.186733][T15935] loop3: p5 size 134217732 extends beyond EOD, truncated [ 333.194465][T15935] loop3: p6 size 14876672 extends beyond EOD, truncated