last executing test programs: 5m4.561788239s ago: executing program 1 (id=15771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x0, 0x264}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000000c0), 0x0) 5m4.496570071s ago: executing program 1 (id=15773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) 5m4.427669332s ago: executing program 1 (id=15775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffff7ffffe9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) 5m4.069250309s ago: executing program 1 (id=15779): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000005afd0000000000000000112000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) poll(0x0, 0x0, 0x9) r7 = fsmount(r6, 0x0, 0x6) r8 = creat(&(0x7f0000003440)='./file0\x00', 0x4) fcntl$setownex(r8, 0xf, &(0x7f00000054c0)) fcntl$getflags(r8, 0xb) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x4000003}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000d80)="$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") r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r11, 0x0) 5m3.400228152s ago: executing program 1 (id=15783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x0, 0x264}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000000c0), 0x0) 5m3.234210805s ago: executing program 1 (id=15785): syz_open_dev$loop(&(0x7f0000000380), 0x81, 0x387a82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x38440, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0xeb, 0x1cd400) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @local}}}, 0x108) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 5m3.202103285s ago: executing program 32 (id=15785): syz_open_dev$loop(&(0x7f0000000380), 0x81, 0x387a82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x38440, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0xeb, 0x1cd400) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @local}}}, 0x108) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2m47.922013056s ago: executing program 5 (id=17871): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) 2m47.876601696s ago: executing program 5 (id=17872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x28) 2m47.856523377s ago: executing program 5 (id=17875): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') unshare(0x2a020400) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@perf_event={0xe1}}, 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x28}], 0x1, 0x0, 0x0, 0x40801}, 0x4000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03962bbd7000fddbdf25020000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x8, 0x0, 0x6, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x23, 0x89, [@loopback, @rand_addr=0x64010101, @multicast2, @broadcast, @rand_addr=0x64010102, @broadcast, @remote, @loopback]}, @end, @timestamp={0x44, 0xc, 0x43, 0x0, 0xb, [0x4, 0x6]}, @noop, @noop]}}}}}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, r5) syslog(0x9, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') 2m47.578248602s ago: executing program 5 (id=17883): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) (async) flock(r0, 0x2) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) (async) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x20004db5, 0x2, 0x2, 0x0, 0x0, r0}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x30}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x30}, 0x28) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) (async) getsockopt$bt_hci(r5, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) readv(r4, &(0x7f0000019400)=[{&(0x7f0000019240)=""/77, 0x4d}], 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_setup(0x9, &(0x7f0000000340)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070a500000000002020207b1af8ff00000000bfa10000e000000007010000f8ffffffb702000000000000b703000000000080850000002d000000950086d2ead07535ca51164d42"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070a500000000002020207b1af8ff00000000bfa10000e000000007010000f8ffffffb702000000000000b703000000000080850000002d000000950086d2ead07535ca51164d42"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="23000f000087ced4041627906b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r6, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r9, 0x0}]) symlinkat(&(0x7f0000001480)='./file0\x00', r0, &(0x7f00000014c0)='./file0\x00') (async) symlinkat(&(0x7f0000001480)='./file0\x00', r0, &(0x7f00000014c0)='./file0\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x4, &(0x7f0000000080)='++\\\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x4, &(0x7f0000000080)='++\\\x00'}, 0x30) 2m47.121342531s ago: executing program 5 (id=17889): r0 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x18) mlockall(0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$eJzs3M+LG2UYB/Bnd2u3bt0faq22IL7oRS9Ddw9e9BJkC9KA0jZCKwhTN9GwYxIyYSEiVk+eBP8OEUTwJog3vezF/0DwthdvVhBHNqlto6k0omYpn88lDzzzTZ43IYEJ78zBi5+8s9sqs1Y+iMWFhVjsRaQbKVIsxh8+iOde+Pa7Jy9duXqhVq9vX0zpfO3y5vMppbWnvn79vc+e/mZw8rUv175ajv2NNw5+2vpx//T+mYPfLr/dLlO7TJ3uIOXpWrc7yK8VzbTTLnezlF4tmnnZTO1O2exP9FtFt9cbpryzs7rS6zfLMuWdpZuTpEF/mPK38nYnZVmWVleC2R27VTU+vVFVVURVPRDHo6qq6sFYiZPxUKzGWqzHRjwcj8SjcSoei9PxeDwRX/zw+fAwAQAAAAAAAAAAAAAAAAAAAPx7Zr3+/8zoqHlPDQAAAAAAAAAAAAAAAAAAAPeXS1euXqjV69sXUzoRUXy019hrjB/H/Vor2lFEM87Fevwao6v/x8b1+Zfr2+fSyEZ8WFy/mb++11iazG+ObicwNb85zqfJ/HKs3JnfivU4NT2/NTV/Ip595o58Fuvx/ZvRjSJ24jB7O//+ZkovvVL/U/7s6DgAAAC4H2Tplqnn71l2t/44P8P/AxPn14fZs8fmunQiohy+u5sXRbOvOPLF8fmO8UtVVf/VSywdgbf3b4u7f1OWI+Jenufnaa2FiDgaC/xLMe9fJv4Ptz/0eU8CAAAAAAAAAADALP7pDsGPx9vD72nn47zXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ds7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArwIAAP//GgHNcg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1311, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r8, 0x0) 2m46.758817949s ago: executing program 5 (id=17900): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x6}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x2000000) 2m46.707882469s ago: executing program 33 (id=17900): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x6}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x2000000) 3.661328789s ago: executing program 2 (id=20148): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) close_range(r0, 0xffffffffffffffff, 0x0) 3.61853278s ago: executing program 2 (id=20149): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) 3.425592164s ago: executing program 2 (id=20150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) open(0x0, 0x1050c1, 0x170) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$hidraw(r4, &(0x7f00000006c0)="3a04", 0x2) 3.377083985s ago: executing program 2 (id=20152): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r4]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 3.07139153s ago: executing program 2 (id=20158): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="2c63616368653d6d7461ce191b69c594f970636c2c64666c747569643d", @ANYRESHEX, @ANYBLOB=',dont_hash,euid>', @ANYRESDEC, @ANYBLOB=',smackfsdef=wfdno,\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='percpu_free_percpu\x00'}, 0x18) msgget(0x1, 0x2b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.197840167s ago: executing program 0 (id=20168): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r4]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 1.845030094s ago: executing program 0 (id=20172): syz_emit_ethernet(0xbe, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd600fe10400883afffe8000000000000000000000000000aaff020000000000000000000000000001870090780000000000000000000000000000000004005168010e78676b5529157c4a4f2468a8f55ab301a031c43b00a9d84d0a2336bb418ea68a2e44f59b8f4d4beae7bf367e646889390c945b9efb324d3ace080eaf2477ebdbb7bf1b03371a36b22c4192c19a9c68215d40fb38ed96129794604b1ff4171f0091c19f35f0e25a2626f54aad286f5f4dc6d3f8ecc062696385d9810702a6f4a189ec460e8067a2b7125666f92c502542635542388f272f1d98ad99e24bfd13ac035d0d5707dd0b77128ffa55c6e79bdf42f1958e49d9c98866109db0adc17a08f1fc4ac9f014fe96c863984e51d2b0e9ec6a158d7ea0c4d2e2def77b37470984b3624af16cf9162994c82ae2f8df515721e77459acff07b79503df12e2e986313ff5f20199f08a79c42f7826e3f60a7394c4e2a27ea40c4940bbbcd7f7e2f24b46"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) 1.824662525s ago: executing program 0 (id=20173): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1.748359856s ago: executing program 0 (id=20174): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) clock_settime(0xfffffff5, &(0x7f0000000040)) 1.675639978s ago: executing program 0 (id=20176): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sigaltstack(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_bp={&(0x7f0000000080)}, 0xea12, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x2800) 1.610579139s ago: executing program 0 (id=20180): r0 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x18) mlockall(0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1311, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r9, 0x0) 1.203065417s ago: executing program 3 (id=20189): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) close_range(r0, 0xffffffffffffffff, 0x0) 1.06997866s ago: executing program 3 (id=20192): socket(0x1d, 0x2, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 1.069587939s ago: executing program 6 (id=20193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)={0x34, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.067896249s ago: executing program 3 (id=20194): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) rename(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x7ffc, @empty, 0x8}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xffff, 0x4, [0x4, 0x7, 0x8, 0x5]}, 0x10) 1.04783863s ago: executing program 6 (id=20195): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1.009260561s ago: executing program 6 (id=20196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[], 0x340a) 1.006224701s ago: executing program 3 (id=20197): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 908.570783ms ago: executing program 6 (id=20198): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 805.958264ms ago: executing program 3 (id=20199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) open(0x0, 0x1050c1, 0x170) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$hidraw(r4, &(0x7f00000006c0)="3a04", 0x2) 727.786736ms ago: executing program 3 (id=20200): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000013c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000640)=0x13) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0xa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 702.018316ms ago: executing program 6 (id=20201): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000680)="62042700590200000000002f1eaf", 0xe}], 0x1}, 0x8001) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001680)={0x11, 0x0, 0x0}, &(0x7f00000016c0)=0x14) sendmmsg$inet6(r4, &(0x7f0000001800)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x100, @local, 0x8}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000340)="eb50b6be392be0fa148d349be5472ec1744ff3f2e5dfdcd3959c09223d6d67004ed395a6484379741dff46660cb9da8f38c3697af1c506a3aac2b3e74ebfb2d1e8750529ffe8907e7672e1268575d1bf4d4892b8216bc5da2c3db62fb7e54430e63ddd8653bd813fb26e9cc1bb1fe0f13d4f42abd94d6bb491af23c45c2cfbf0e6f86a569d80935c905c9963cc0bd1d8ad4ca79eb5fba01ea2e98bc53a2276abc5d4cec436e02e115629ccec17b4013fe0f96c19d89d6b48109b8e7cc50285d420767cb9e2f188c339688fb8a355b6", 0xcf}, {&(0x7f0000000540)="31d12ff0e9440130f031615e5f0d872f58873c0d32737143b63f4cf0ef12ee6233027925c9331a9b123d1e2e27a2340c5026967a4cc5d78720e840f587c563aea7a7947704b4f6be1c50bfa0cbb255d2705c203dd318f1745c9ca91e06427ac08dbb62ee7362c38737804bd322a3e8666b757e", 0x73}, {&(0x7f0000000200)="b63733214b196889a78a520856806a080fadff046c645716a44a5e014cfe65bcda554430", 0x24}, {&(0x7f0000000600)="d67c4570823f499415b410e44fd324884d79e335f44e62869c908ae1061c90dca3f7194b62a330966b19d9ac9b4f5dbcc5d1975206ad3016dcd03582eaded9b56b788830e9cfb70ee869f1171dec8cbf93b25fea4197e2b036b92f667f5be48de4358d87e4d87948692d9b707be6c171b0132e1839ede241d6026206ed7903508ae2520bfe80de6c4c53a0389d0b7219ac6d81749cc4bf1c572b01668b64bdb24a9c9fda7007bbff1296e519533ed8b4a5902553af6cfcd572e32bc3d8ec574c98636c6fbf7eaa0582ddae24e5", 0xcd}, {&(0x7f0000000700)="3d9c674e37eab19d369eacdb119cb0f92698a9cb2aa7f3e77ed8e2f88ed4b8e954d95e498b34367a7e964348e44c9a26cb66983c43e129d1fa58e378819d0c681ca911ebb8c5b8beb115fb76f109aeb3c111e25d27b95405305e437130c6cf61c519fd434a4a33af0cdd", 0x6a}, {&(0x7f0000000780)="11211c0a0d634f7471730a4319866439cf230a9ba8550f83a651f7c05705b3d23dcd7dfce3f40bc38f029742e6dcf3c3ab", 0x31}, {&(0x7f00000007c0)="dda0e424646bd5d9c6c6fe3c87b79a1efdbacdce358e01e4c08e274010efaf165fb01741dfaff0c3751f8d50510db2faa6da9a4c3a2f072df3b97e2b8eea91d2c01959bd62907e387a269ebda8f4f54c19c2f7829f5641d6a3d35c25364c64d4c7bcf3abccb11e77c593ee71d5533958a0cf69c8", 0x74}, {&(0x7f0000000840)="b7d2b0e9f93fc4522e32e9cf61a5f4b9bf05f8cb38845c7d4d028105de0338eb713cb2940885174d7c9dd6f55c81b441c36fb480219fa34fe3dd37cd4ea7381a81384d7bc1c42b529c287d58db620379bc679264bd4a2e58094f6b0599cab53cbebadc006c956837c1546b659c73d72fe5985db609a19df986e019d84ecd3a67abd13b5586f7c61bf7df18e95a25159e27ccc8e30f5388facc8d28028755fad7efb372624e9a437d6bb64fc17bfe4c6ad1194278061ac55a279e8f9ae6f9ed9859b58d3d7adc10a0645a901c312fea66c05c5938d90f1bcec76047fd3136aaf9acd4eaa185", 0xe5}], 0x8, &(0x7f0000000b00)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x5e, 0xb, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x10, 0xc7d, [0x3, 0x8, 0xf641, 0x9, 0xfffffffffffffff7]}}, @pad1, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x45, 0x8, [0x5, 0x596]}}, @enc_lim={0x4, 0x1, 0xcb}, @pad1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x2, 0x7, 0x0, [@remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @remote]}}}, @rthdr={{0x98, 0x29, 0x39, {0x8, 0x10, 0x0, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}]}}}], 0x170}}, {{&(0x7f0000000c80)={0xa, 0x4e20, 0x2, @private2}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000cc0)="134038f0aeef5f68607b475a0d83596654ab34c62c4c9d4f1de430e48fac67446c629d0b84c073d327283c1939a1c448ff327366c4edd160e9d2c5d89d36f73e1399237bfd7491a44e820696eaa6827462a65d8fa7fec93763ca3848c5cf0826cbbb679bdc817543dcf4fe06851ad16bd7d0c91caf4ea1f925c1cdc4a6776cdcb9622525fefcb25f066f38836282bbb4f3cc6ce5fc4169170d9eddc4ec84d315544cf4890a86496a98a595f381", 0xad}, {&(0x7f0000000d80)="77fb72bab77084950c46645438d1744fed30fa0807413c49337ff766ed96db651a79d6220d25c92209f1898747b0aa3218a2a528e7ae8fcefb43d837bf9d7fcf693e02f7c3c291eb2039dda778a1f734a2370a1eee28e20f871ce424ab411c55fce17b9f9c7f2ab5ef57426351", 0x6d}, {&(0x7f0000000e00)="c079c1d3edf915805f706d2bb11cd56accc25d75fb3732d621c16cba84eff185c3fe7ede37de304a67039720ff3cc691250d87bbd5b201ce1e2a93a7fa45369ea691", 0x42}, {&(0x7f0000000e80)="0358021173e507102517055801666148b06b17c85b0ea210004cce503cb1f660e8f763cf4e49a40acd492750439b239616fae359ea5e382b3c9727e27b4678f5b579a566c490ecb3ba922dec71f1fad8", 0x50}, {&(0x7f0000000f00)="74a9dd9602f5dbe4e052d41d88547110166c18140520df0ac3f4b7312779d5d62e7c89d95138c24a1d1abd46db3a39283a7bafdb728da35233e8ec267a860eb00771775b6a27377709398436cac5c6533828f51145d232a67a697cdca6b739c2629e269ec7430deef3036d681c43c757132503ca902b29dbe46fa508d158370e2a3e26bb3f7bed48b888c6652ae6ead54a9078b945", 0x95}, {&(0x7f0000000fc0)="b8b2070e63905cab919128f8237de9dad25dfe35aa341b614a6684a02a53ab8a4adb58be10ed5375e7425875b3786a8468f60dea21bb83934005744744d4494c00c4a376e43249e1359526e6db020b5dc073be989827bb4866608049dfadb1f9ce400aed77bfecdd6f9e0d55bbbbe15de9540dce7b4ef2818972b062b1d460b3b5a96f836b2a4d97d1e330bf8b72fd986de919b62ed9d9db456600eb5c0dedb61789ffba87455247c617409c6046a2f89f2771f6adc3", 0xb6}], 0x6, &(0x7f0000001100)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x33, 0x6, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x27, 0x6, [0xa9, 0x40, 0x0, 0x10]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x80}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x1, 0x4, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0xc0}}, {{&(0x7f00000011c0)={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000001200)="88e23746c56b08225392a555acbff837365a0c4a7fa3db54147cb1e4cdb52622a193316a472f934b99f6da73f9077b8e154c578b5f045af0cfc2fe5155a51d7bd3c13a5e50b5557fe765bbdc9815c063fda2b1f0669fd06c628e1de51a883b8cd5994ddb080db0cc28bc32c6a49f2b27f434cf315e01f46f01ebb80c5704f356f2738f69902249a553596450333368eebd03", 0x92}, {&(0x7f00000012c0)="997c90195f713eb2b1824ec2c4e6158fa798fef3b82ee9ca34564cf7eec641250f01b5c60ea04df8791fd81e8d91296ab11113c4112ea4c85fe00d8f3655900cf24a4fed0f0a", 0x46}, {&(0x7f0000001340)="7cc48ee303016b9f76ad6f080282ef147d17462dc5e928b618de7d2dfd31bc565a01b6a27adaaa14809eee3499f10c0fad867fd19bbf0d2a96", 0x39}, {&(0x7f0000001380)="dc35ce65054c2ced13bf528d066bb0bf0e420dc5d8a30c7b668e697dd9c867fb4040f79a32ce39a096", 0x29}, {&(0x7f00000013c0)="15484445a940a9ca5995e65829316c3bd711037ba5c051df5a94ac4aa375", 0x1e}], 0x5, &(0x7f0000001480)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x1, 0xc, 0x0, [@local, @private1, @private0, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x68}}, {{&(0x7f0000001500)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000001540)="71d7cffe95e9b5906339ae055040df9747070dd5b88d94d9657b172db99a615ed5036b67cb09c140fea23ea9d284489a99aac0a8a7b0321c36e6aebb7872f0bd59aedb495c87034920c16e948f10a243fe444e769bde07d29560f720057237cae1c421859c67f2686dd1d6585640975152c11838046cbfc042d5c4dbd69048c44c0a948884f8e1ff1876f237b58a0332afb272b4cc0acd27f965a5a5a3e229d53bb6f62bfeaeb45de2781e9eee9c755d2ba4a8d151804a1790efb99523196e31987f67289168332405d1c99da2f02eec3fcd62e41c", 0xd5}], 0x1, &(0x7f0000001700)=[@dstopts_2292={{0x98, 0x29, 0x4, {0x2b, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x0, 0x72, "aead9accdd86fc53b17aecc0f9e3dfff601fbf40366835fb964bdda9fe128d99353adddf12fe2e0a95a33414dd849809e06352354f9932c0192dbc81ebccd90a80bddbe406b22e68bb9aff72affd02183fef6b00d8b3f81bfe5b593380defbcdc34a200aeeb112ddc51391dd50410e88b0b9"}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r5}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x100}}], 0xf8}}], 0x4, 0x4000080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xf, r10, 0x5, &(0x7f0000000500)="c74a24b2491b7f4c9e678675eafeaa6af037f57b39a7ef33a46727") sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffd, @mcast1}, 0x1c) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x0, 0x65f, &(0x7f0000001980)={{0x12, 0x1, 0x250, 0xf6, 0x19, 0x86, 0x10, 0x5c6, 0x9010, 0xa52c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64d, 0x2, 0x0, 0x0, 0x1d0, 0xfd, [{{0x9, 0x4, 0x4, 0x2, 0x8, 0x40, 0x41, 0x9e, 0x7, [], [{{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x70, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0x1, 0x78f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffe}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x8, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0xff}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x5, 0x82, 0x4, [@generic={0x2, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x791}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x3, 0x7d, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8b}, @generic={0xfe, 0x10, "e53cddcd7e965ea7d5897a7d1c9c1b8412abcab1d30ca60e25ca9478e23577bc221ecde6576403902785a162874869825dfe386f1066d6bf274a63e3da4d1647325cb53b3ef991aac607b3cf3a1fcdd0ef5f020c1bd57fd3d201d098b7c5e37f6b6e6c43fb43ad5362377dc0cc7081ef4d3fcf51053d5114f324f706298a7c046458d61af8d21aecf29b86a3620aad6aadbd13ce75a84e9fdd55af36f8d7a7406d844fd52309940cc7d1e35c73ff4019e693bf84697d793893dd703a459dd493c97e30368aca0c27a3ceaec6a68b319632dd295d421abd4ebfe3d74ac20bd6d3989926fd200d97f9a2a5533999c8e0b40b0cbc854e539a629635b283"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x7, 0x7, 0xd5, [@generic={0x15, 0xd, "328ac797cc59f07a852055a6db2ffbff5e3cbf"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x820, 0x4, 0x79, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x200}, @generic={0xef, 0x6, "21631e4083a3885409152528d153b6c9131f8be71665b9bab5b689a19c514122ac6aed1fe49f0ceecf60facbae92ddd4bf1cd44b3014026a7799a80ff8901f1dfb9aa01faa3d096f39c23704774e594caee030883f416c1717823305135bbb5123b0392496925fe86a4ba2e7142da95ccddb3146c70fd133df0dfad9548f8ad2f828f6f63902355d1f4e1520613b03ebbdc07356c73b7becbe821def3d929706ccd67094d172037aebcde3340b84e6f8e4044dfebb7092781165f67a7ac426699213daf21faaf58ff831da8836b1c84198b9ccbc0d9781fc125e6232f1f401efab365473713dd7b838b635b139"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xf9, 0x7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x800}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x4, 0x4, 0x5, [@generic={0xf0, 0x1, "bd78928909b59f6d3fd3d836b2cabd707c6f594efee676a743bf36dd86a140ca96285e715cbd7b483a238b673e9eb712a1645dcffd5e23969aca0c536939434e44b30d9a89deb43b7f9a31ad9b64100eb53db2547a089ebeaa9b85373b5da499acc8f64076254135b7c8dc98c1c6476611aa8bf49b885c1f0c3867138ce88ba99b05ed5fd6894b2ad7ce6b4f9ec3cb790e613a91f986ef53f2090419d9c1957aa80ef4895bc705addf943eb5dce5883b1fdbbc335a33925e455a584d9d7e4a2a02d68e02f35bf73fd86105ee75276434f5fd724a8e746747eecd14f4f4fab7f558d0cc334b63c1dada7ddca9283b"}]}}]}}, {{0x9, 0x4, 0x5d, 0x0, 0xc, 0x4a, 0x74, 0x55, 0x8, [@hid_hid={0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xf6}}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x2, 0x40, 0x3, 0xf3, 0x2}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x4, 0x8, "a87c11"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x2, 0x6, 0x5}]}], [{{0x9, 0x5, 0xd, 0x10, 0x8, 0x7c, 0x2}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xf2, 0xe9, 0xf9, [@generic={0x1e, 0x21, "93f9266f5e99a0165636f7809d24721f4c77f8920d435cdc5ec4b3bc"}]}}, {{0x9, 0x5, 0xa, 0x8, 0xc32acf7726f4c43a, 0x7f, 0xb, 0x80}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x5, 0x28, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x672}, @generic={0x2f, 0x1, "ed381eea716c3e8e98da9115ea39fc517c70b273c2df15b1357e919e90fb51489bd7d34f6d65f5a405c13a8750"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x9, 0x7, 0x8}}, {{0x9, 0x5, 0xc4d0750bcc5e0a68, 0x0, 0x400, 0x9, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7fff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xb, 0xb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x49, 0x7}, @generic={0x6, 0x4, "7e4e9a0a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x4, 0x81, 0xe, [@generic={0x6e, 0x1, "0670b3d91574b9ddef5b001e677dc394fe5f7e24a0bafe9eb84f9aa20d744cfe679ac4e3a04c43187c489607e181ba3add35f0e48141c0209fffa7e1d780b749efce60c13ed94c1a8f6d2a50c4455a25cccca059cb8d4c8d50e4fe263c9ebac5ec30090ce60d82d62106168c"}, @generic={0x36, 0x24, "e7c714c4ba4f0a7531ffda84be1b16cb6574793e5b37f94a39d8a75e895fc1326ce7b994497cc80c8e171aa8e8ac8d7a499aa62e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xfb, 0x0, 0x5, [@generic={0x1d, 0x3, "8e808f9beb941edb67f28cd87618148cf97f0ed2ae87514db07cdb"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0xb3, 0x7, 0x1}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0xf7, 0xc0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7f}, @generic={0xea, 0x1, "4ced6f6c3798ad31a432cc976d59acaa201fbc98e0284bb8581e0604e1d92f94221d48110b3f4f2ba201197cb8db2fb51735cce0df367ae8cbc50cd7c7bce3c3e826899dcb94400d5ba5874a2258dc780664dc5c8870d956759ff804122340659026af0d75cb8c541f1a574a4b35d310c73d022654a3aa318d3ba41dc82624b8acf0b642301dffeca41ae1f2c5cd09af41be54968b196d6a92cdb2f9c5759705331d603f538cb0d737b8e367d7682ca3dde80587e7d58959c425672f1cef86e72666e59ef6a3feb91aa6b57a91157b09334ec39af2fe4185f95869a125ed25526953416bde03b1d8"}]}}]}}]}}]}}, 0x0) r11 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) 518.79492ms ago: executing program 4 (id=20202): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) close_range(r0, 0xffffffffffffffff, 0x0) 495.48841ms ago: executing program 4 (id=20203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@rnullb, 0x0, &(0x7f0000000200)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./bus\x00') 411.686932ms ago: executing program 4 (id=20204): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sigaltstack(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x5, 0x5, 0x1, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_bp={&(0x7f0000000080)}, 0xea12, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x2800) 327.668044ms ago: executing program 4 (id=20205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000840)={0x34, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 306.973954ms ago: executing program 4 (id=20206): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 287.895045ms ago: executing program 4 (id=20207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) rename(0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x7ffc, @empty, 0x8}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xffff, 0x4, [0x4, 0x7, 0x8, 0x5]}, 0x10) 16.98892ms ago: executing program 6 (id=20208): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@resgid={'resgid', 0x3d, 0xee01}}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7fffeffd) 0s ago: executing program 2 (id=20209): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x0, 0x0, 0x0, 0xe, 0x0) kernel console output (not intermixed with test programs): : entered allmulticast mode [ 1385.854669][T11550] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.863930][ T9] lo speed is unknown, defaulting to 1000 [ 1385.870151][T11550] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.880629][T11550] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.907866][T11550] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.014361][T26586] tmpfs: Bad value for 'mpol' [ 1386.104867][T26592] loop4: detected capacity change from 0 to 1024 [ 1386.132243][T26592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1386.150556][T26592] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.19152: Allocating blocks 385-513 which overlap fs metadata [ 1386.169350][T26592] EXT4-fs (loop4): pa ffff8881072649a0: logic 16, phys. 129, len 24 [ 1386.177395][T26592] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1386.190027][T26592] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 1386.202362][T26592] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1386.202362][T26592] [ 1386.212012][T26592] EXT4-fs (loop4): Total free blocks count 0 [ 1386.218071][T26592] EXT4-fs (loop4): Free/Dirty block details [ 1386.224082][T26592] EXT4-fs (loop4): free_blocks=128 [ 1386.229205][T26592] EXT4-fs (loop4): dirty_blocks=0 [ 1386.234238][T26592] EXT4-fs (loop4): Block reservation details [ 1386.240254][T26592] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 1386.277933][T26602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19156'. [ 1386.768968][T26613] FAULT_INJECTION: forcing a failure. [ 1386.768968][T26613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.782286][T26613] CPU: 1 UID: 0 PID: 26613 Comm: syz.6.19161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1386.782387][T26613] Tainted: [W]=WARN [ 1386.782395][T26613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1386.782410][T26613] Call Trace: [ 1386.782418][T26613] [ 1386.782427][T26613] __dump_stack+0x1d/0x30 [ 1386.782452][T26613] dump_stack_lvl+0xe8/0x140 [ 1386.782477][T26613] dump_stack+0x15/0x1b [ 1386.782560][T26613] should_fail_ex+0x265/0x280 [ 1386.782667][T26613] should_fail+0xb/0x20 [ 1386.782694][T26613] should_fail_usercopy+0x1a/0x20 [ 1386.782721][T26613] _copy_from_user+0x1c/0xb0 [ 1386.782847][T26613] simple_transaction_get+0xe2/0x130 [ 1386.782874][T26613] selinux_transaction_write+0x9d/0x110 [ 1386.782960][T26613] ? __pfx_selinux_transaction_write+0x10/0x10 [ 1386.782989][T26613] vfs_write+0x266/0x960 [ 1386.783015][T26613] ? __rcu_read_unlock+0x4f/0x70 [ 1386.783040][T26613] ? __fget_files+0x184/0x1c0 [ 1386.783066][T26613] __x64_sys_pwrite64+0xfd/0x150 [ 1386.783157][T26613] x64_sys_call+0xc4d/0x2ff0 [ 1386.783181][T26613] do_syscall_64+0xd2/0x200 [ 1386.783263][T26613] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1386.783301][T26613] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1386.783340][T26613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.783365][T26613] RIP: 0033:0x7f4ebf45ec29 [ 1386.783380][T26613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.783398][T26613] RSP: 002b:00007f4ebdec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1386.783465][T26613] RAX: ffffffffffffffda RBX: 00007f4ebf6a5fa0 RCX: 00007f4ebf45ec29 [ 1386.783556][T26613] RDX: 0000000000000041 RSI: 0000200000000000 RDI: 0000000000000004 [ 1386.783569][T26613] RBP: 00007f4ebdec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.783581][T26613] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1386.783593][T26613] R13: 00007f4ebf6a6038 R14: 00007f4ebf6a5fa0 R15: 00007ffc6ad39d48 [ 1386.783678][T26613] [ 1387.054975][T26617] pim6reg1: entered promiscuous mode [ 1387.060342][T26617] pim6reg1: entered allmulticast mode [ 1387.279291][T26630] loop4: detected capacity change from 0 to 1024 [ 1387.313357][T26630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.336432][T26630] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.19169: Allocating blocks 385-513 which overlap fs metadata [ 1387.373944][T26630] EXT4-fs (loop4): pa ffff888107114f50: logic 16, phys. 129, len 24 [ 1387.382127][T26630] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1387.415390][T26630] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 1387.427899][T26630] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1387.427899][T26630] [ 1387.437756][T26630] EXT4-fs (loop4): Total free blocks count 0 [ 1387.443804][T26630] EXT4-fs (loop4): Free/Dirty block details [ 1387.449702][T26630] EXT4-fs (loop4): free_blocks=128 [ 1387.454853][T26630] EXT4-fs (loop4): dirty_blocks=0 [ 1387.459968][T26630] EXT4-fs (loop4): Block reservation details [ 1387.465989][T26630] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 1387.506478][T26643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19174'. [ 1387.564597][T26648] loop4: detected capacity change from 0 to 512 [ 1387.571843][T26648] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1387.583511][T26649] sz1: rxe_newlink: already configured on lo [ 1387.590415][T26648] EXT4-fs (loop4): 1 truncate cleaned up [ 1387.608659][T26648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.657397][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 1387.657416][ T29] audit: type=1400 audit(1388.136:70985): avc: denied { lock } for pid=26652 comm="syz.6.19177" path="socket:[221589]" dev="sockfs" ino=221589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1387.725616][T26656] loop6: detected capacity change from 0 to 512 [ 1387.744975][T26656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.763312][T22147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.775689][ T29] audit: type=1400 audit(1388.256:70986): avc: denied { append } for pid=26655 comm="syz.6.19178" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1387.811529][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.053389][T26665] loop6: detected capacity change from 0 to 1024 [ 1388.060327][T26665] EXT4-fs: Ignoring removed nobh option [ 1388.400615][T26665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1388.419249][T26669] loop4: detected capacity change from 0 to 1024 [ 1388.420223][ T29] audit: type=1326 audit(1388.896:70987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.3.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1388.430768][T26671] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19184'. [ 1388.448841][ T29] audit: type=1326 audit(1388.896:70988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.3.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1388.481571][ T29] audit: type=1326 audit(1388.896:70989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.3.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1388.504715][ T29] audit: type=1326 audit(1388.896:70990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.3.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1388.527980][ T29] audit: type=1326 audit(1388.896:70991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.3.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1388.551159][ T29] audit: type=1326 audit(1388.896:70992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.3.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1388.574386][ T29] audit: type=1326 audit(1388.896:70993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.3.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1388.597720][ T29] audit: type=1326 audit(1388.896:70994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26670 comm="syz.3.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1388.625546][T26669] EXT4-fs: Ignoring removed orlov option [ 1388.651112][T26669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1388.713180][T26669] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.19182: lblock 0 mapped to illegal pblock 0 (length 1) [ 1388.779560][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.791855][T26669] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1388.804208][T26669] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1388.804208][T26669] [ 1388.847450][T11572] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:57: lblock 0 mapped to illegal pblock 0 (length 1) [ 1388.932318][T11572] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1388.944736][T11572] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1388.944736][T11572] [ 1388.987822][T22147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1389.027532][T26686] loop4: detected capacity change from 0 to 512 [ 1389.079788][T26686] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1389.147537][T26686] EXT4-fs (loop4): 1 truncate cleaned up [ 1389.185708][T26693] FAULT_INJECTION: forcing a failure. [ 1389.185708][T26693] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.198550][T26693] CPU: 1 UID: 0 PID: 26693 Comm: syz.6.19191 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1389.198588][T26693] Tainted: [W]=WARN [ 1389.198594][T26693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1389.198607][T26693] Call Trace: [ 1389.198613][T26693] [ 1389.198620][T26693] __dump_stack+0x1d/0x30 [ 1389.198642][T26693] dump_stack_lvl+0xe8/0x140 [ 1389.198740][T26693] dump_stack+0x15/0x1b [ 1389.198841][T26693] should_fail_ex+0x265/0x280 [ 1389.198869][T26693] should_failslab+0x8c/0xb0 [ 1389.198902][T26693] kmem_cache_alloc_noprof+0x50/0x310 [ 1389.198939][T26693] ? fcntl_getlk+0x3d/0x6e0 [ 1389.198970][T26693] fcntl_getlk+0x3d/0x6e0 [ 1389.199017][T26693] ? should_fail_ex+0xdb/0x280 [ 1389.199043][T26693] do_fcntl+0x6d5/0xdf0 [ 1389.199082][T26693] ? selinux_file_fcntl+0x1cb/0x1e0 [ 1389.199169][T26693] __se_sys_fcntl+0xb1/0x120 [ 1389.199209][T26693] __x64_sys_fcntl+0x43/0x50 [ 1389.199349][T26693] x64_sys_call+0x29a0/0x2ff0 [ 1389.199372][T26693] do_syscall_64+0xd2/0x200 [ 1389.199465][T26693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1389.199498][T26693] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1389.199533][T26693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.199554][T26693] RIP: 0033:0x7f4ebf45ec29 [ 1389.199628][T26693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.199651][T26693] RSP: 002b:00007f4ebdec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1389.199674][T26693] RAX: ffffffffffffffda RBX: 00007f4ebf6a5fa0 RCX: 00007f4ebf45ec29 [ 1389.199690][T26693] RDX: 00002000000006c0 RSI: 0000000000000024 RDI: 0000000000000003 [ 1389.199705][T26693] RBP: 00007f4ebdec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.199720][T26693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.199734][T26693] R13: 00007f4ebf6a6038 R14: 00007f4ebf6a5fa0 R15: 00007ffc6ad39d48 [ 1389.199832][T26693] [ 1389.200111][T26686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.521241][T22147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.648425][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19200'. [ 1389.735370][T26729] 9pnet_fd: Insufficient options for proto=fd [ 1389.865872][T26742] wireguard0: entered promiscuous mode [ 1389.871370][T26742] wireguard0: entered allmulticast mode [ 1390.011208][T26747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19212'. [ 1390.044855][T26750] FAULT_INJECTION: forcing a failure. [ 1390.044855][T26750] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.057620][T26750] CPU: 1 UID: 0 PID: 26750 Comm: syz.4.19209 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1390.057736][T26750] Tainted: [W]=WARN [ 1390.057743][T26750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1390.057758][T26750] Call Trace: [ 1390.057783][T26750] [ 1390.057793][T26750] __dump_stack+0x1d/0x30 [ 1390.057898][T26750] dump_stack_lvl+0xe8/0x140 [ 1390.057923][T26750] dump_stack+0x15/0x1b [ 1390.057942][T26750] should_fail_ex+0x265/0x280 [ 1390.058036][T26750] should_failslab+0x8c/0xb0 [ 1390.058069][T26750] __kmalloc_cache_node_noprof+0x54/0x320 [ 1390.058168][T26750] ? __get_vm_area_node+0x106/0x1d0 [ 1390.058210][T26750] __get_vm_area_node+0x106/0x1d0 [ 1390.058315][T26750] __vmalloc_node_range_noprof+0x273/0xe00 [ 1390.058348][T26750] ? copy_process+0x399/0x2000 [ 1390.058380][T26750] ? __account_obj_stock+0x2cc/0x350 [ 1390.058414][T26750] ? __rcu_read_unlock+0x4f/0x70 [ 1390.058501][T26750] __vmalloc_node_noprof+0x89/0xc0 [ 1390.058674][T26750] ? copy_process+0x399/0x2000 [ 1390.058764][T26750] ? copy_process+0x399/0x2000 [ 1390.058794][T26750] dup_task_struct+0x449/0x6a0 [ 1390.058825][T26750] ? _parse_integer+0x27/0x40 [ 1390.058867][T26750] copy_process+0x399/0x2000 [ 1390.058891][T26750] ? kstrtouint+0x76/0xc0 [ 1390.058913][T26750] ? kstrtouint_from_user+0x9f/0xf0 [ 1390.058946][T26750] ? __rcu_read_unlock+0x4f/0x70 [ 1390.059049][T26750] kernel_clone+0x16c/0x5c0 [ 1390.059085][T26750] ? vfs_write+0x7e8/0x960 [ 1390.059111][T26750] __x64_sys_clone+0xe6/0x120 [ 1390.059145][T26750] x64_sys_call+0x119c/0x2ff0 [ 1390.059230][T26750] do_syscall_64+0xd2/0x200 [ 1390.059269][T26750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1390.059293][T26750] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1390.059327][T26750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.059446][T26750] RIP: 0033:0x7f21b5c6ec29 [ 1390.059518][T26750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.059537][T26750] RSP: 002b:00007f21b46adfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1390.059643][T26750] RAX: ffffffffffffffda RBX: 00007f21b5eb6090 RCX: 00007f21b5c6ec29 [ 1390.059657][T26750] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000060104000 [ 1390.059669][T26750] RBP: 00007f21b46ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.059746][T26750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1390.059761][T26750] R13: 00007f21b5eb6128 R14: 00007f21b5eb6090 R15: 00007ffcdaaa0558 [ 1390.059785][T26750] [ 1390.059796][T26750] syz.4.19209: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1390.325661][T26750] CPU: 1 UID: 0 PID: 26750 Comm: syz.4.19209 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1390.325809][T26750] Tainted: [W]=WARN [ 1390.325819][T26750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1390.325850][T26750] Call Trace: [ 1390.325858][T26750] [ 1390.325866][T26750] __dump_stack+0x1d/0x30 [ 1390.325943][T26750] dump_stack_lvl+0xe8/0x140 [ 1390.326004][T26750] dump_stack+0x15/0x1b [ 1390.326022][T26750] warn_alloc+0x12b/0x1a0 [ 1390.326068][T26750] __vmalloc_node_range_noprof+0x297/0xe00 [ 1390.326128][T26750] ? __account_obj_stock+0x2cc/0x350 [ 1390.326158][T26750] ? __rcu_read_unlock+0x4f/0x70 [ 1390.326259][T26750] __vmalloc_node_noprof+0x89/0xc0 [ 1390.326300][T26750] ? copy_process+0x399/0x2000 [ 1390.326329][T26750] ? copy_process+0x399/0x2000 [ 1390.326376][T26750] dup_task_struct+0x449/0x6a0 [ 1390.326409][T26750] ? _parse_integer+0x27/0x40 [ 1390.326441][T26750] copy_process+0x399/0x2000 [ 1390.326544][T26750] ? kstrtouint+0x76/0xc0 [ 1390.326572][T26750] ? kstrtouint_from_user+0x9f/0xf0 [ 1390.326598][T26750] ? __rcu_read_unlock+0x4f/0x70 [ 1390.326687][T26750] kernel_clone+0x16c/0x5c0 [ 1390.326716][T26750] ? vfs_write+0x7e8/0x960 [ 1390.326743][T26750] __x64_sys_clone+0xe6/0x120 [ 1390.326858][T26750] x64_sys_call+0x119c/0x2ff0 [ 1390.326886][T26750] do_syscall_64+0xd2/0x200 [ 1390.326923][T26750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1390.327039][T26750] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1390.327152][T26750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.327180][T26750] RIP: 0033:0x7f21b5c6ec29 [ 1390.327199][T26750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.327235][T26750] RSP: 002b:00007f21b46adfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1390.327261][T26750] RAX: ffffffffffffffda RBX: 00007f21b5eb6090 RCX: 00007f21b5c6ec29 [ 1390.327277][T26750] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000060104000 [ 1390.327291][T26750] RBP: 00007f21b46ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.327306][T26750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1390.327320][T26750] R13: 00007f21b5eb6128 R14: 00007f21b5eb6090 R15: 00007ffcdaaa0558 [ 1390.327343][T26750] [ 1390.327352][T26750] Mem-Info: [ 1390.556249][T26750] active_anon:22962 inactive_anon:37 isolated_anon:0 [ 1390.556249][T26750] active_file:25049 inactive_file:5806 isolated_file:0 [ 1390.556249][T26750] unevictable:0 dirty:836 writeback:0 [ 1390.556249][T26750] slab_reclaimable:3753 slab_unreclaimable:48814 [ 1390.556249][T26750] mapped:39060 shmem:10941 pagetables:1752 [ 1390.556249][T26750] sec_pagetables:0 bounce:0 [ 1390.556249][T26750] kernel_misc_reclaimable:0 [ 1390.556249][T26750] free:1779072 free_pcp:15427 free_cma:0 [ 1390.572869][T26760] lo speed is unknown, defaulting to 1000 [ 1390.601512][T26750] Node 0 active_anon:91848kB inactive_anon:148kB active_file:100196kB inactive_file:23224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156240kB dirty:3344kB writeback:0kB shmem:43764kB kernel_stack:5248kB pagetables:7008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1390.601574][T26750] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.663801][T26750] lowmem_reserve[]: 0 2883 7862 7862 [ 1390.669126][T26750] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 1390.699506][T26750] lowmem_reserve[]: 0 0 4978 4978 [ 1390.704589][T26750] Node 0 Normal free:4149876kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91964kB inactive_anon:148kB active_file:100196kB inactive_file:23224kB unevictable:0kB writepending:3344kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:58852kB local_pcp:26824kB free_cma:0kB [ 1390.737156][T26750] lowmem_reserve[]: 0 0 0 0 [ 1390.741686][T26750] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1390.754450][T26750] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 1390.770676][T26750] Node 0 Normal: 769*4kB (M) 1482*8kB (UME) 3001*16kB (UME) 572*32kB (UM) 443*64kB (UME) 828*128kB (UM) 622*256kB (UME) 391*512kB (UME) 315*1024kB (UME) 98*2048kB (UME) 745*4096kB (UM) = 4149796kB [ 1390.790134][T26750] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.799578][T26750] 41775 total pagecache pages [ 1390.804274][T26750] 38 pages in swap cache [ 1390.808505][T26750] Free swap = 108460kB [ 1390.812672][T26750] Total swap = 124996kB [ 1390.816904][T26750] 2097051 pages RAM [ 1390.820705][T26750] 0 pages HighMem/MovableOnly [ 1390.825392][T26750] 80446 pages reserved [ 1390.938840][T26771] loop4: detected capacity change from 0 to 512 [ 1390.953858][T26771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1391.036874][T26771] EXT4-fs (loop4): 1 truncate cleaned up [ 1391.053714][T26780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19224'. [ 1391.074719][T26771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1391.223751][T26789] loop6: detected capacity change from 0 to 512 [ 1391.235167][T22147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.252086][T26789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1391.342576][T26789] EXT4-fs (loop6): 1 truncate cleaned up [ 1391.361504][T26789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1391.457746][T26800] rdma_rxe: rxe_newlink: failed to add lo [ 1391.553943][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.587183][T26806] FAULT_INJECTION: forcing a failure. [ 1391.587183][T26806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.600308][T26806] CPU: 1 UID: 0 PID: 26806 Comm: syz.6.19233 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1391.600470][T26806] Tainted: [W]=WARN [ 1391.600477][T26806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1391.600490][T26806] Call Trace: [ 1391.600496][T26806] [ 1391.600504][T26806] __dump_stack+0x1d/0x30 [ 1391.600529][T26806] dump_stack_lvl+0xe8/0x140 [ 1391.600553][T26806] dump_stack+0x15/0x1b [ 1391.600647][T26806] should_fail_ex+0x265/0x280 [ 1391.600678][T26806] should_fail+0xb/0x20 [ 1391.600736][T26806] should_fail_usercopy+0x1a/0x20 [ 1391.600785][T26806] _copy_to_user+0x20/0xa0 [ 1391.600825][T26806] sg_read+0xb5a/0xcb0 [ 1391.600868][T26806] ? __pfx_sg_read+0x10/0x10 [ 1391.600998][T26806] vfs_read+0x1a5/0x770 [ 1391.601023][T26806] ? __rcu_read_unlock+0x4f/0x70 [ 1391.601049][T26806] ? __fget_files+0x184/0x1c0 [ 1391.601083][T26806] ksys_read+0xda/0x1a0 [ 1391.601111][T26806] __x64_sys_read+0x40/0x50 [ 1391.601200][T26806] x64_sys_call+0x27bc/0x2ff0 [ 1391.601221][T26806] do_syscall_64+0xd2/0x200 [ 1391.601254][T26806] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1391.601279][T26806] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1391.601359][T26806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.601384][T26806] RIP: 0033:0x7f4ebf45ec29 [ 1391.601401][T26806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.601420][T26806] RSP: 002b:00007f4ebdec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1391.601516][T26806] RAX: ffffffffffffffda RBX: 00007f4ebf6a5fa0 RCX: 00007f4ebf45ec29 [ 1391.601531][T26806] RDX: 00000000ffffffbf RSI: 0000000000000000 RDI: 0000000000000004 [ 1391.601546][T26806] RBP: 00007f4ebdec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.601560][T26806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.601574][T26806] R13: 00007f4ebf6a6038 R14: 00007f4ebf6a5fa0 R15: 00007ffc6ad39d48 [ 1391.601596][T26806] [ 1392.005287][T26797] loop4: detected capacity change from 0 to 512 [ 1392.027959][T26797] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1392.061808][T26797] EXT4-fs (loop4): 1 truncate cleaned up [ 1392.089461][T26797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1392.218965][T22147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.301235][T26813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19235'. [ 1392.819047][T26835] netlink: 'syz.4.19245': attribute type 13 has an invalid length. [ 1392.860610][T26835] gretap0: refused to change device tx_queue_len [ 1392.867078][T26835] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1393.030772][T26851] FAULT_INJECTION: forcing a failure. [ 1393.030772][T26851] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.043576][T26851] CPU: 1 UID: 0 PID: 26851 Comm: syz.4.19252 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1393.043674][T26851] Tainted: [W]=WARN [ 1393.043680][T26851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1393.043691][T26851] Call Trace: [ 1393.043697][T26851] [ 1393.043706][T26851] __dump_stack+0x1d/0x30 [ 1393.043735][T26851] dump_stack_lvl+0xe8/0x140 [ 1393.043757][T26851] dump_stack+0x15/0x1b [ 1393.043772][T26851] should_fail_ex+0x265/0x280 [ 1393.043805][T26851] should_failslab+0x8c/0xb0 [ 1393.043832][T26851] kmem_cache_alloc_noprof+0x50/0x310 [ 1393.043932][T26851] ? getname_flags+0x80/0x3b0 [ 1393.043966][T26851] getname_flags+0x80/0x3b0 [ 1393.044041][T26851] do_sys_openat2+0x60/0x110 [ 1393.044076][T26851] __x64_sys_openat+0xf2/0x120 [ 1393.044106][T26851] x64_sys_call+0x2e9c/0x2ff0 [ 1393.044131][T26851] do_syscall_64+0xd2/0x200 [ 1393.044232][T26851] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1393.044261][T26851] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1393.044293][T26851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.044377][T26851] RIP: 0033:0x7f21b5c6ec29 [ 1393.044391][T26851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1393.044409][T26851] RSP: 002b:00007f21b46cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1393.044448][T26851] RAX: ffffffffffffffda RBX: 00007f21b5eb5fa0 RCX: 00007f21b5c6ec29 [ 1393.044465][T26851] RDX: 00000000000a0683 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1393.044481][T26851] RBP: 00007f21b46cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.044495][T26851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.044536][T26851] R13: 00007f21b5eb6038 R14: 00007f21b5eb5fa0 R15: 00007ffcdaaa0558 [ 1393.044554][T26851] [ 1393.274996][T26858] loop4: detected capacity change from 0 to 512 [ 1393.282250][T26858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1393.309786][T26858] EXT4-fs (loop4): 1 truncate cleaned up [ 1393.324194][T26858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.439044][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 1393.439062][ T29] audit: type=1326 audit(1393.916:71229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.468596][ T29] audit: type=1326 audit(1393.916:71230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.491790][ T29] audit: type=1326 audit(1393.926:71231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.515169][ T29] audit: type=1326 audit(1393.946:71232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.538442][ T29] audit: type=1326 audit(1393.946:71233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.566831][ T29] audit: type=1326 audit(1393.946:71234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.591691][ T29] audit: type=1326 audit(1393.946:71235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.615616][ T29] audit: type=1326 audit(1393.946:71236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.643570][ T29] audit: type=1326 audit(1394.076:71237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.666849][ T29] audit: type=1326 audit(1394.076:71238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26865 comm="syz.6.19258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1393.697504][T22147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.925144][T26885] random: crng reseeded on system resumption [ 1393.970964][T26881] random: crng reseeded on system resumption [ 1394.006584][T26890] 9pnet: Could not find request transport: o= [ 1394.019231][T26890] netlink: 'syz.0.19266': attribute type 5 has an invalid length. [ 1394.034042][T26894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19267'. [ 1394.134374][T26890] tipc: Enabling of bearer rejected, already enabled [ 1394.208467][T26906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19272'. [ 1394.288332][T26916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19270'. [ 1394.315161][T26920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19278'. [ 1394.436865][T26935] pim6reg1: entered promiscuous mode [ 1394.442231][T26935] pim6reg1: entered allmulticast mode [ 1394.831258][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19291'. [ 1394.877258][T26950] loop6: detected capacity change from 0 to 1024 [ 1394.928738][T26950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.934469][T26956] rdma_rxe: rxe_newlink: failed to add lo [ 1394.973875][T26950] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.19292: Allocating blocks 385-513 which overlap fs metadata [ 1395.030206][T26950] EXT4-fs (loop6): pa ffff888107114ee0: logic 16, phys. 129, len 24 [ 1395.038362][T26950] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1395.136263][T26950] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 1395.148623][T26950] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1395.148623][T26950] [ 1395.158312][T26950] EXT4-fs (loop6): Total free blocks count 0 [ 1395.164331][T26950] EXT4-fs (loop6): Free/Dirty block details [ 1395.170300][T26950] EXT4-fs (loop6): free_blocks=128 [ 1395.175447][T26950] EXT4-fs (loop6): dirty_blocks=0 [ 1395.180483][T26950] EXT4-fs (loop6): Block reservation details [ 1395.186615][T26950] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 1395.590959][T26977] loop6: detected capacity change from 0 to 1024 [ 1395.597709][T26977] EXT4-fs: Ignoring removed nobh option [ 1395.686831][T26977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.951647][T26983] FAULT_INJECTION: forcing a failure. [ 1395.951647][T26983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.965307][T26983] CPU: 1 UID: 0 PID: 26983 Comm: syz.4.19303 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1395.965350][T26983] Tainted: [W]=WARN [ 1395.965359][T26983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1395.965374][T26983] Call Trace: [ 1395.965380][T26983] [ 1395.965388][T26983] __dump_stack+0x1d/0x30 [ 1395.965483][T26983] dump_stack_lvl+0xe8/0x140 [ 1395.965501][T26983] dump_stack+0x15/0x1b [ 1395.965519][T26983] should_fail_ex+0x265/0x280 [ 1395.965630][T26983] should_fail+0xb/0x20 [ 1395.965654][T26983] should_fail_usercopy+0x1a/0x20 [ 1395.965714][T26983] strncpy_from_user+0x25/0x230 [ 1395.965776][T26983] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1395.965855][T26983] ? getname_flags+0x80/0x3b0 [ 1395.965893][T26983] getname_flags+0xae/0x3b0 [ 1395.965924][T26983] user_path_at+0x28/0x130 [ 1395.966053][T26983] __se_sys_mount+0x25b/0x2e0 [ 1395.966079][T26983] ? fput+0x8f/0xc0 [ 1395.966142][T26983] __x64_sys_mount+0x67/0x80 [ 1395.966168][T26983] x64_sys_call+0x2b4d/0x2ff0 [ 1395.966194][T26983] do_syscall_64+0xd2/0x200 [ 1395.966307][T26983] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1395.966332][T26983] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1395.966385][T26983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.966411][T26983] RIP: 0033:0x7f21b5c6ec29 [ 1395.966429][T26983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1395.966450][T26983] RSP: 002b:00007f21b46cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1395.966495][T26983] RAX: ffffffffffffffda RBX: 00007f21b5eb5fa0 RCX: 00007f21b5c6ec29 [ 1395.966508][T26983] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 1395.966519][T26983] RBP: 00007f21b46cf090 R08: 0000200000000400 R09: 0000000000000000 [ 1395.966530][T26983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.966603][T26983] R13: 00007f21b5eb6038 R14: 00007f21b5eb5fa0 R15: 00007ffcdaaa0558 [ 1395.966692][T26983] [ 1396.213334][T26988] pim6reg1: entered promiscuous mode [ 1396.218690][T26988] pim6reg1: entered allmulticast mode [ 1396.259944][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.288505][T26992] wireguard0: entered promiscuous mode [ 1396.294180][T26992] wireguard0: entered allmulticast mode [ 1396.450001][T27000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19310'. [ 1396.559617][T27011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19315'. [ 1396.752186][T27026] pim6reg1: entered promiscuous mode [ 1396.757566][T27026] pim6reg1: entered allmulticast mode [ 1396.929672][T26995] loop6: detected capacity change from 0 to 512 [ 1396.955526][T26995] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1396.970691][T26995] EXT4-fs (loop6): 1 truncate cleaned up [ 1396.977233][T26995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1396.996797][T26995] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #15: comm syz.6.19307: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 1397.053564][T27034] wireguard0: entered promiscuous mode [ 1397.059156][T27034] wireguard0: entered allmulticast mode [ 1397.066155][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.391941][T27052] loop6: detected capacity change from 0 to 8192 [ 1397.442341][T27052] loop6: p1 p2 p3 p4 [ 1397.451354][T27052] loop6: p2 start 151000334 is beyond EOD, truncated [ 1397.458110][T27052] loop6: p3 start 331777 is beyond EOD, truncated [ 1397.464601][T27052] loop6: p4 size 263168 extends beyond EOD, truncated [ 1397.591450][T27056] 9pnet: Could not find request transport: o= [ 1397.604157][T27056] netlink: 'syz.2.19334': attribute type 5 has an invalid length. [ 1397.844283][T27056] tipc: Enabling of bearer rejected, already enabled [ 1398.135628][T27070] program syz.3.19339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1398.146710][T27070] netlink: 'syz.3.19339': attribute type 1 has an invalid length. [ 1398.154655][T27070] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19339'. [ 1398.597366][T27076] random: crng reseeded on system resumption [ 1398.688307][T27080] wireguard0: entered promiscuous mode [ 1398.694013][T27080] wireguard0: entered allmulticast mode [ 1398.804050][T27084] loop6: detected capacity change from 0 to 512 [ 1398.822937][T27084] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1398.868283][T27084] EXT4-fs (loop6): 1 truncate cleaned up [ 1398.878896][T27084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1398.943181][T27084] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #15: comm syz.6.19346: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 1398.964685][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 1398.964697][ T29] audit: type=1400 audit(1399.446:71397): avc: denied { remount } for pid=27090 comm="syz.2.19348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1399.027303][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.055219][ T29] audit: type=1326 audit(1399.536:71398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.6.19349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1399.093754][ T29] audit: type=1326 audit(1399.556:71399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.6.19349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1399.117092][ T29] audit: type=1326 audit(1399.556:71400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.6.19349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1399.140252][ T29] audit: type=1326 audit(1399.556:71401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.6.19349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1399.224290][ T29] audit: type=1326 audit(1399.656:71402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.6.19349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1399.247715][ T29] audit: type=1326 audit(1399.656:71403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.6.19349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1399.271102][ T29] audit: type=1326 audit(1399.656:71404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.6.19349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebf45ec29 code=0x7ffc0000 [ 1399.381971][T27107] random: crng reseeded on system resumption [ 1399.490244][ T29] audit: type=1326 audit(1399.966:71405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27119 comm="syz.2.19360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1399.515364][T27122] loop6: detected capacity change from 0 to 512 [ 1399.521964][T27122] EXT4-fs: Ignoring removed mblk_io_submit option [ 1399.558747][T27122] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1399.572141][ T29] audit: type=1326 audit(1399.966:71406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27119 comm="syz.2.19360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1399.637842][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.645373][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.652838][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.661060][T27122] EXT4-fs (loop6): 1 truncate cleaned up [ 1399.667234][T27122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.758115][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.765602][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.773101][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.780540][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.787973][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.795398][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.802801][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1399.852744][ T3379] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz1 [ 1400.624518][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.984691][T27175] loop6: detected capacity change from 0 to 512 [ 1401.000317][T27175] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1401.022837][T27175] EXT4-fs (loop6): 1 truncate cleaned up [ 1401.035537][T27175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1401.063047][T27175] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #15: comm syz.6.19380: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 1401.112554][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.315675][T27189] loop6: detected capacity change from 0 to 512 [ 1401.334176][T27189] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1401.360075][T27189] EXT4-fs (loop6): 1 truncate cleaned up [ 1401.372583][T27189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1401.666012][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.111987][T27210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19390'. [ 1402.482446][T27226] random: crng reseeded on system resumption [ 1402.538076][T27234] loop6: detected capacity change from 0 to 8192 [ 1402.586853][T27237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19402'. [ 1403.058216][T27244] wireguard0: entered promiscuous mode [ 1403.063866][T27244] wireguard0: entered allmulticast mode [ 1403.454928][T27268] FAULT_INJECTION: forcing a failure. [ 1403.454928][T27268] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.467658][T27268] CPU: 1 UID: 0 PID: 27268 Comm: syz.4.19416 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1403.467695][T27268] Tainted: [W]=WARN [ 1403.467751][T27268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1403.467765][T27268] Call Trace: [ 1403.467773][T27268] [ 1403.467781][T27268] __dump_stack+0x1d/0x30 [ 1403.467805][T27268] dump_stack_lvl+0xe8/0x140 [ 1403.467824][T27268] dump_stack+0x15/0x1b [ 1403.467842][T27268] should_fail_ex+0x265/0x280 [ 1403.467919][T27268] should_failslab+0x8c/0xb0 [ 1403.467951][T27268] kmem_cache_alloc_noprof+0x50/0x310 [ 1403.468013][T27268] ? security_file_alloc+0x32/0x100 [ 1403.468116][T27268] security_file_alloc+0x32/0x100 [ 1403.468197][T27268] init_file+0x5c/0x1d0 [ 1403.468235][T27268] alloc_empty_file+0x8b/0x200 [ 1403.468328][T27268] alloc_file_pseudo+0xc6/0x160 [ 1403.468366][T27268] anon_inode_getfd+0xc1/0x150 [ 1403.468406][T27268] bpf_enable_stats+0xc5/0x110 [ 1403.468448][T27268] __sys_bpf+0x286/0x7b0 [ 1403.468481][T27268] __x64_sys_bpf+0x41/0x50 [ 1403.468505][T27268] x64_sys_call+0x2aea/0x2ff0 [ 1403.468603][T27268] do_syscall_64+0xd2/0x200 [ 1403.468708][T27268] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1403.468740][T27268] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1403.468771][T27268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.468797][T27268] RIP: 0033:0x7f21b5c6ec29 [ 1403.468812][T27268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.468831][T27268] RSP: 002b:00007f21b46cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1403.468851][T27268] RAX: ffffffffffffffda RBX: 00007f21b5eb5fa0 RCX: 00007f21b5c6ec29 [ 1403.468927][T27268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 1403.468943][T27268] RBP: 00007f21b46cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.468958][T27268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.468974][T27268] R13: 00007f21b5eb6038 R14: 00007f21b5eb5fa0 R15: 00007ffcdaaa0558 [ 1403.468997][T27268] [ 1403.790899][T27280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19422'. [ 1403.964663][T27292] FAULT_INJECTION: forcing a failure. [ 1403.964663][T27292] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.977455][T27292] CPU: 0 UID: 0 PID: 27292 Comm: syz.6.19427 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1403.977490][T27292] Tainted: [W]=WARN [ 1403.977498][T27292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1403.977511][T27292] Call Trace: [ 1403.977586][T27292] [ 1403.977594][T27292] __dump_stack+0x1d/0x30 [ 1403.977617][T27292] dump_stack_lvl+0xe8/0x140 [ 1403.977678][T27292] dump_stack+0x15/0x1b [ 1403.977694][T27292] should_fail_ex+0x265/0x280 [ 1403.977767][T27292] should_failslab+0x8c/0xb0 [ 1403.977792][T27292] kmem_cache_alloc_noprof+0x50/0x310 [ 1403.977840][T27292] ? getname_flags+0x80/0x3b0 [ 1403.977884][T27292] getname_flags+0x80/0x3b0 [ 1403.977914][T27292] __se_sys_newstat+0x4b/0x280 [ 1403.977953][T27292] ? fput+0x8f/0xc0 [ 1403.978057][T27292] ? ksys_write+0x192/0x1a0 [ 1403.978083][T27292] __x64_sys_newstat+0x31/0x40 [ 1403.978116][T27292] x64_sys_call+0x73e/0x2ff0 [ 1403.978139][T27292] do_syscall_64+0xd2/0x200 [ 1403.978185][T27292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1403.978267][T27292] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1403.978407][T27292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.978497][T27292] RIP: 0033:0x7f4ebf45ec29 [ 1403.978514][T27292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.978534][T27292] RSP: 002b:00007f4ebdec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1403.978636][T27292] RAX: ffffffffffffffda RBX: 00007f4ebf6a5fa0 RCX: 00007f4ebf45ec29 [ 1403.978650][T27292] RDX: 0000000000000000 RSI: 0000200000001c80 RDI: 0000200000000cc0 [ 1403.978663][T27292] RBP: 00007f4ebdec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.978677][T27292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.978690][T27292] R13: 00007f4ebf6a6038 R14: 00007f4ebf6a5fa0 R15: 00007ffc6ad39d48 [ 1403.978710][T27292] [ 1404.203464][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 1404.203481][ T29] audit: type=1326 audit(1404.686:71821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.262430][ T29] audit: type=1326 audit(1404.716:71822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.270932][T27300] loop6: detected capacity change from 0 to 8192 [ 1404.285862][ T29] audit: type=1326 audit(1404.716:71823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.315440][ T29] audit: type=1326 audit(1404.716:71824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.338624][ T29] audit: type=1326 audit(1404.716:71825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.361924][ T29] audit: type=1326 audit(1404.716:71826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.384967][ T29] audit: type=1326 audit(1404.726:71827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27301 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f090c3114e5 code=0x7ffc0000 [ 1404.408187][ T29] audit: type=1326 audit(1404.726:71828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.431399][ T29] audit: type=1326 audit(1404.726:71829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.454571][ T29] audit: type=1326 audit(1404.726:71830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27297 comm="syz.3.19428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1404.776451][T27323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19439'. [ 1405.037602][T27334] FAULT_INJECTION: forcing a failure. [ 1405.037602][T27334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1405.050814][T27334] CPU: 1 UID: 0 PID: 27334 Comm: syz.0.19443 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1405.050855][T27334] Tainted: [W]=WARN [ 1405.050862][T27334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1405.050876][T27334] Call Trace: [ 1405.050901][T27334] [ 1405.050911][T27334] __dump_stack+0x1d/0x30 [ 1405.050936][T27334] dump_stack_lvl+0xe8/0x140 [ 1405.050961][T27334] dump_stack+0x15/0x1b [ 1405.050981][T27334] should_fail_ex+0x265/0x280 [ 1405.051072][T27334] should_fail+0xb/0x20 [ 1405.051127][T27334] should_fail_usercopy+0x1a/0x20 [ 1405.051242][T27334] _copy_from_user+0x1c/0xb0 [ 1405.051319][T27334] ___sys_sendmsg+0xc1/0x1d0 [ 1405.051432][T27334] __x64_sys_sendmsg+0xd4/0x160 [ 1405.051461][T27334] x64_sys_call+0x191e/0x2ff0 [ 1405.051487][T27334] do_syscall_64+0xd2/0x200 [ 1405.051544][T27334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1405.051575][T27334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1405.051609][T27334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.051631][T27334] RIP: 0033:0x7f1fdb14ec29 [ 1405.051676][T27334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1405.051706][T27334] RSP: 002b:00007f1fd9baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1405.051739][T27334] RAX: ffffffffffffffda RBX: 00007f1fdb395fa0 RCX: 00007f1fdb14ec29 [ 1405.051753][T27334] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 1405.051768][T27334] RBP: 00007f1fd9baf090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.051783][T27334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.051797][T27334] R13: 00007f1fdb396038 R14: 00007f1fdb395fa0 R15: 00007ffc52b6a148 [ 1405.051818][T27334] [ 1405.508296][T27353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19451'. [ 1406.072367][T27386] wireguard0: entered promiscuous mode [ 1406.077868][T27386] wireguard0: entered allmulticast mode [ 1406.179264][T27392] pim6reg1: entered promiscuous mode [ 1406.184821][T27392] pim6reg1: entered allmulticast mode [ 1406.478011][T27427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19486'. [ 1406.518705][T27431] pim6reg1: entered promiscuous mode [ 1406.524095][T27431] pim6reg1: entered allmulticast mode [ 1406.705777][T27443] rdma_rxe: rxe_newlink: failed to add lo [ 1406.811338][T27452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27452 comm=syz.3.19494 [ 1406.865568][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19494'. [ 1406.889388][T27458] FAULT_INJECTION: forcing a failure. [ 1406.889388][T27458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.902529][T27458] CPU: 0 UID: 0 PID: 27458 Comm: syz.6.19498 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1406.902579][T27458] Tainted: [W]=WARN [ 1406.902585][T27458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1406.902599][T27458] Call Trace: [ 1406.902607][T27458] [ 1406.902615][T27458] __dump_stack+0x1d/0x30 [ 1406.902656][T27458] dump_stack_lvl+0xe8/0x140 [ 1406.902679][T27458] dump_stack+0x15/0x1b [ 1406.902772][T27458] should_fail_ex+0x265/0x280 [ 1406.902827][T27458] should_fail+0xb/0x20 [ 1406.902851][T27458] should_fail_usercopy+0x1a/0x20 [ 1406.902875][T27458] _copy_from_iter+0xd2/0xe80 [ 1406.902901][T27458] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 1406.902985][T27458] copy_page_from_iter+0x178/0x2a0 [ 1406.903080][T27458] ? anon_pipe_write+0x21/0xaa0 [ 1406.903113][T27458] anon_pipe_write+0x514/0xaa0 [ 1406.903192][T27458] ? anon_pipe_write+0x21/0xaa0 [ 1406.903300][T27458] ? __pfx_anon_pipe_write+0x10/0x10 [ 1406.903361][T27458] vfs_write+0x527/0x960 [ 1406.903394][T27458] ksys_write+0xda/0x1a0 [ 1406.903423][T27458] __x64_sys_write+0x40/0x50 [ 1406.903444][T27458] x64_sys_call+0x27fe/0x2ff0 [ 1406.903463][T27458] do_syscall_64+0xd2/0x200 [ 1406.903519][T27458] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1406.903568][T27458] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1406.903607][T27458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.903635][T27458] RIP: 0033:0x7f4ebf45ec29 [ 1406.903654][T27458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.903676][T27458] RSP: 002b:00007f4ebdec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1406.903697][T27458] RAX: ffffffffffffffda RBX: 00007f4ebf6a5fa0 RCX: 00007f4ebf45ec29 [ 1406.903759][T27458] RDX: 0000000000000015 RSI: 0000200000000300 RDI: 0000000000000004 [ 1406.903773][T27458] RBP: 00007f4ebdec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.903788][T27458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.903803][T27458] R13: 00007f4ebf6a6038 R14: 00007f4ebf6a5fa0 R15: 00007ffc6ad39d48 [ 1406.903826][T27458] [ 1407.235928][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19501'. [ 1407.807492][T27510] lo speed is unknown, defaulting to 1000 [ 1407.996566][T27532] netlink: 520 bytes leftover after parsing attributes in process `syz.0.19531'. [ 1408.031927][T27535] usb usb1: usbfs: process 27535 (syz.3.19532) did not claim interface 0 before use [ 1408.065053][T27541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19535'. [ 1408.204901][T27554] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 1408.212582][T27554] usb usb1: usbfs: process 27554 (syz.0.19541) did not claim interface 0 before use [ 1408.309396][T27557] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19542'. [ 1408.358465][T27561] FAULT_INJECTION: forcing a failure. [ 1408.358465][T27561] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.371163][T27561] CPU: 1 UID: 0 PID: 27561 Comm: syz.2.19544 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1408.371248][T27561] Tainted: [W]=WARN [ 1408.371255][T27561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1408.371267][T27561] Call Trace: [ 1408.371273][T27561] [ 1408.371280][T27561] __dump_stack+0x1d/0x30 [ 1408.371298][T27562] loop6: detected capacity change from 0 to 164 [ 1408.371301][T27561] dump_stack_lvl+0xe8/0x140 [ 1408.371326][T27561] dump_stack+0x15/0x1b [ 1408.371344][T27561] should_fail_ex+0x265/0x280 [ 1408.371410][T27561] should_failslab+0x8c/0xb0 [ 1408.371448][T27561] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1408.371499][T27561] ? __alloc_skb+0x101/0x320 [ 1408.371644][T27561] __alloc_skb+0x101/0x320 [ 1408.371671][T27561] ? audit_log_start+0x365/0x6c0 [ 1408.371746][T27561] audit_log_start+0x380/0x6c0 [ 1408.371794][T27561] audit_seccomp+0x48/0x100 [ 1408.371829][T27561] ? __seccomp_filter+0x68c/0x10d0 [ 1408.371859][T27561] __seccomp_filter+0x69d/0x10d0 [ 1408.371947][T27561] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1408.372064][T27561] ? vfs_write+0x7e8/0x960 [ 1408.372102][T27561] __secure_computing+0x82/0x150 [ 1408.372131][T27561] syscall_trace_enter+0xcf/0x1e0 [ 1408.372165][T27561] do_syscall_64+0xac/0x200 [ 1408.372212][T27561] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1408.372286][T27561] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1408.372326][T27561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.372417][T27561] RIP: 0033:0x7fa96335ec29 [ 1408.372438][T27561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.372463][T27561] RSP: 002b:00007fa961dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1408.372494][T27561] RAX: ffffffffffffffda RBX: 00007fa9635a5fa0 RCX: 00007fa96335ec29 [ 1408.372551][T27561] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 1408.372595][T27561] RBP: 00007fa961dbf090 R08: 0000000000000009 R09: 0000000000000000 [ 1408.372629][T27561] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 1408.372646][T27561] R13: 00007fa9635a6038 R14: 00007fa9635a5fa0 R15: 00007ffe0f44ccf8 [ 1408.372672][T27561] [ 1408.456472][ C0] vcan0: j1939_tp_rxtimer: 0xffff888184176800: rx timeout, send abort [ 1408.600985][T27567] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.648130][T27567] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.701071][T27575] netlink: 'syz.6.19550': attribute type 3 has an invalid length. [ 1408.719110][T27567] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.725099][T27575] IPv6: NLM_F_CREATE should be specified when creating new route [ 1408.747206][T27575] loop6: detected capacity change from 0 to 1024 [ 1408.756175][T27575] ext4: Invalid uid '0x00000000ffffffff' [ 1408.774775][T27567] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.791469][T27577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19551'. [ 1408.838980][T11519] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.850089][T11519] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.862929][T11519] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.879929][T11519] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.936814][T27584] pim6reg1: entered promiscuous mode [ 1408.942290][T27584] pim6reg1: entered allmulticast mode [ 1408.954819][ C0] vcan0: j1939_tp_rxtimer: 0xffff888184176400: rx timeout, send abort [ 1408.963107][ C0] vcan0: j1939_tp_rxtimer: 0xffff888184176800: abort rx timeout. Force session deactivation [ 1409.076811][T27598] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19557'. [ 1409.086639][T27598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19557'. [ 1409.102224][T27600] wireguard0: entered promiscuous mode [ 1409.107723][T27600] wireguard0: entered allmulticast mode [ 1409.463084][ C0] vcan0: j1939_tp_rxtimer: 0xffff888184176400: abort rx timeout. Force session deactivation [ 1409.624849][T27627] pim6reg1: entered promiscuous mode [ 1409.624867][T27627] pim6reg1: entered allmulticast mode [ 1409.937876][T27644] wireguard0: entered promiscuous mode [ 1409.937898][T27644] wireguard0: entered allmulticast mode [ 1409.968121][T27640] loop6: detected capacity change from 0 to 8192 [ 1410.218798][ T29] kauditd_printk_skb: 833 callbacks suppressed [ 1410.218851][ T29] audit: type=1326 audit(1410.696:72662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21b5c65be7 code=0x7ffc0000 [ 1410.219272][ T29] audit: type=1326 audit(1410.696:72663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21b5c0ae09 code=0x7ffc0000 [ 1410.219309][ T29] audit: type=1326 audit(1410.696:72664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f21b5c65be7 code=0x7ffc0000 [ 1410.219363][ T29] audit: type=1326 audit(1410.696:72665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21b5c0ae09 code=0x7ffc0000 [ 1410.219388][ T29] audit: type=1326 audit(1410.696:72666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1410.219689][ T29] audit: type=1326 audit(1410.696:72667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1410.219824][ T29] audit: type=1326 audit(1410.696:72668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1410.219979][ T29] audit: type=1326 audit(1410.696:72669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1410.220114][ T29] audit: type=1326 audit(1410.696:72670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1410.220201][ T29] audit: type=1326 audit(1410.696:72671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27656 comm="syz.4.19584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1410.296979][T27662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19587'. [ 1410.893301][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19599'. [ 1411.606022][T27718] random: crng reseeded on system resumption [ 1411.679085][T27722] 9pnet_fd: Insufficient options for proto=fd [ 1412.188820][T27762] FAULT_INJECTION: forcing a failure. [ 1412.188820][T27762] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.201513][T27762] CPU: 0 UID: 0 PID: 27762 Comm: ,&#^% Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1412.201617][T27762] Tainted: [W]=WARN [ 1412.201624][T27762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1412.201636][T27762] Call Trace: [ 1412.201642][T27762] [ 1412.201649][T27762] __dump_stack+0x1d/0x30 [ 1412.201728][T27762] dump_stack_lvl+0xe8/0x140 [ 1412.201747][T27762] dump_stack+0x15/0x1b [ 1412.201762][T27762] should_fail_ex+0x265/0x280 [ 1412.201833][T27762] should_failslab+0x8c/0xb0 [ 1412.201915][T27762] __kvmalloc_node_noprof+0x123/0x4e0 [ 1412.202049][T27762] ? vmemdup_user+0x26/0xd0 [ 1412.202086][T27762] ? should_fail_usercopy+0x1a/0x20 [ 1412.202119][T27762] vmemdup_user+0x26/0xd0 [ 1412.202158][T27762] path_setxattrat+0x1b6/0x310 [ 1412.202209][T27762] __x64_sys_fsetxattr+0x6b/0x80 [ 1412.202237][T27762] x64_sys_call+0x1ced/0x2ff0 [ 1412.202259][T27762] do_syscall_64+0xd2/0x200 [ 1412.202393][T27762] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1412.202442][T27762] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1412.202476][T27762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.202500][T27762] RIP: 0033:0x7f4ebf45ec29 [ 1412.202513][T27762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1412.202534][T27762] RSP: 002b:00007f4ebdec7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1412.202583][T27762] RAX: ffffffffffffffda RBX: 00007f4ebf6a5fa0 RCX: 00007f4ebf45ec29 [ 1412.202595][T27762] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 1412.202606][T27762] RBP: 00007f4ebdec7090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.202622][T27762] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1412.202633][T27762] R13: 00007f4ebf6a6038 R14: 00007f4ebf6a5fa0 R15: 00007ffc6ad39d48 [ 1412.202653][T27762] [ 1412.467574][T27775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.477339][T27775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.497349][T27776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19634'. [ 1412.543743][T27778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.914386][T27808] FAULT_INJECTION: forcing a failure. [ 1412.914386][T27808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1412.927648][T27808] CPU: 0 UID: 0 PID: 27808 Comm: syz.2.19651 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1412.927729][T27808] Tainted: [W]=WARN [ 1412.927738][T27808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1412.927752][T27808] Call Trace: [ 1412.927760][T27808] [ 1412.927775][T27808] __dump_stack+0x1d/0x30 [ 1412.927800][T27808] dump_stack_lvl+0xe8/0x140 [ 1412.927883][T27808] dump_stack+0x15/0x1b [ 1412.927903][T27808] should_fail_ex+0x265/0x280 [ 1412.927931][T27808] should_fail_alloc_page+0xf2/0x100 [ 1412.927966][T27808] __alloc_frozen_pages_noprof+0xff/0x360 [ 1412.928070][T27808] alloc_pages_mpol+0xb3/0x250 [ 1412.928114][T27808] alloc_pages_noprof+0x90/0x130 [ 1412.928167][T27808] get_zeroed_page_noprof+0x1a/0x40 [ 1412.928256][T27808] simple_transaction_get+0x4c/0x130 [ 1412.928292][T27808] selinux_transaction_write+0x9d/0x110 [ 1412.928328][T27808] ? __pfx_selinux_transaction_write+0x10/0x10 [ 1412.928358][T27808] vfs_write+0x266/0x960 [ 1412.928440][T27808] ? __rcu_read_unlock+0x4f/0x70 [ 1412.928468][T27808] ? __fget_files+0x184/0x1c0 [ 1412.928498][T27808] ksys_write+0xda/0x1a0 [ 1412.928521][T27808] __x64_sys_write+0x40/0x50 [ 1412.928579][T27808] x64_sys_call+0x27fe/0x2ff0 [ 1412.928607][T27808] do_syscall_64+0xd2/0x200 [ 1412.928649][T27808] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1412.928738][T27808] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1412.928836][T27808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.928885][T27808] RIP: 0033:0x7fa96335ec29 [ 1412.928902][T27808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1412.928926][T27808] RSP: 002b:00007fa961dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1412.928992][T27808] RAX: ffffffffffffffda RBX: 00007fa9635a5fa0 RCX: 00007fa96335ec29 [ 1412.929009][T27808] RDX: 0000000000000056 RSI: 0000200000001a80 RDI: 0000000000000007 [ 1412.929031][T27808] RBP: 00007fa961dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.929047][T27808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.929063][T27808] R13: 00007fa9635a6038 R14: 00007fa9635a5fa0 R15: 00007ffe0f44ccf8 [ 1412.929114][T27808] [ 1413.666376][T27851] random: crng reseeded on system resumption [ 1413.699647][T27857] sz1: rxe_newlink: already configured on lo [ 1413.752514][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19673'. [ 1413.904937][T27867] loop6: detected capacity change from 0 to 512 [ 1414.117604][T27867] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1414.163970][T27867] EXT4-fs (loop6): 1 truncate cleaned up [ 1414.184008][T27867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.329086][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.352542][T27874] loop6: detected capacity change from 0 to 1024 [ 1414.363757][T27874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1414.380801][T27874] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.19679: Allocating blocks 385-513 which overlap fs metadata [ 1414.407727][T27874] EXT4-fs (loop6): pa ffff888107264850: logic 16, phys. 129, len 24 [ 1414.415769][T27874] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1414.433923][T27874] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 1414.446279][T27874] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1414.446279][T27874] [ 1414.455969][T27874] EXT4-fs (loop6): Total free blocks count 0 [ 1414.462078][T27874] EXT4-fs (loop6): Free/Dirty block details [ 1414.467968][T27874] EXT4-fs (loop6): free_blocks=128 [ 1414.473224][T27874] EXT4-fs (loop6): dirty_blocks=0 [ 1414.478299][T27874] EXT4-fs (loop6): Block reservation details [ 1414.484325][T27874] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 1414.611539][T27892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19686'. [ 1414.881334][T27914] loop6: detected capacity change from 0 to 8192 [ 1414.908119][T27921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19692'. [ 1414.953767][T27923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19698'. [ 1415.739782][ T29] kauditd_printk_skb: 713 callbacks suppressed [ 1415.739798][ T29] audit: type=1326 audit(1416.216:73385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.769175][ T29] audit: type=1326 audit(1416.216:73386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.798126][ T29] audit: type=1326 audit(1416.276:73387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.821312][ T29] audit: type=1326 audit(1416.276:73388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.844656][ T29] audit: type=1326 audit(1416.276:73389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.867867][ T29] audit: type=1326 audit(1416.276:73390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.891052][ T29] audit: type=1326 audit(1416.276:73391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.914327][ T29] audit: type=1326 audit(1416.276:73392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.937444][ T29] audit: type=1326 audit(1416.276:73393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1415.960662][ T29] audit: type=1326 audit(1416.276:73394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.0.19704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1416.048551][T27951] netlink: 'syz.4.19706': attribute type 10 has an invalid length. [ 1416.071797][T27951] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1416.095497][T27949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1416.130993][T27949] bridge_slave_0: left allmulticast mode [ 1416.136729][T27949] bridge_slave_0: left promiscuous mode [ 1416.142438][T27949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.153413][T27949] bridge_slave_1: left allmulticast mode [ 1416.159148][T27949] bridge_slave_1: left promiscuous mode [ 1416.164893][T27949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.174304][T27949] bond0: (slave bond_slave_0): Releasing backup interface [ 1416.184815][T27949] bond0: (slave bond_slave_1): Releasing backup interface [ 1416.199607][T27949] team0: Port device team_slave_0 removed [ 1416.209416][T27949] team0: Port device team_slave_1 removed [ 1416.216482][T27949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.223992][T27949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.234059][T27949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.241502][T27949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.255039][T27957] loop6: detected capacity change from 0 to 1024 [ 1416.261747][T27957] EXT4-fs: Ignoring removed nobh option [ 1416.272502][T27957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1416.347741][T27962] wireguard0: entered promiscuous mode [ 1416.353513][T27962] wireguard0: entered allmulticast mode [ 1417.050764][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.194941][T27992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19722'. [ 1417.346339][T27999] loop6: detected capacity change from 0 to 512 [ 1417.346872][T27999] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1417.355321][T27999] EXT4-fs (loop6): 1 truncate cleaned up [ 1417.355694][T27999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1417.465825][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.589036][T28015] sz1: rxe_newlink: already configured on lo [ 1417.717067][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19733'. [ 1418.518431][T28043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19741'. [ 1418.865640][T28057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19747'. [ 1418.914659][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19749'. [ 1419.963423][T28089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19760'. [ 1420.020685][T28091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19761'. [ 1420.136968][T28099] random: crng reseeded on system resumption [ 1420.214592][T28103] loop6: detected capacity change from 0 to 8192 [ 1420.458454][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19771'. [ 1420.997037][T28135] wireguard0: entered promiscuous mode [ 1421.002713][T28135] wireguard0: entered allmulticast mode [ 1421.095562][T28142] 9pnet_fd: Insufficient options for proto=fd [ 1421.412589][T28156] rdma_rxe: rxe_newlink: failed to add lo [ 1421.620032][T28166] wireguard0: entered promiscuous mode [ 1421.625646][T28166] wireguard0: entered allmulticast mode [ 1421.693118][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 1421.693133][ T29] audit: type=1326 audit(1422.176:73563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1421.722469][ T29] audit: type=1326 audit(1422.176:73564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1421.822084][T28173] 9pnet_fd: Insufficient options for proto=fd [ 1422.232620][ T29] audit: type=1326 audit(1422.176:73565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1422.255912][ T29] audit: type=1326 audit(1422.176:73566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1422.279297][ T29] audit: type=1326 audit(1422.176:73567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1422.302452][ T29] audit: type=1326 audit(1422.176:73568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1422.325809][ T29] audit: type=1326 audit(1422.176:73569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1422.348992][ T29] audit: type=1326 audit(1422.176:73570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1422.372209][ T29] audit: type=1326 audit(1422.176:73571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1422.395331][ T29] audit: type=1326 audit(1422.176:73572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.19792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1422.473868][T28185] smc: net device bond0 erased user defined pnetid SYZ0 [ 1422.826255][T28197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19803'. [ 1422.842319][T28197] hsr_slave_1 (unregistering): left promiscuous mode [ 1423.343034][T28192] loop6: detected capacity change from 0 to 512 [ 1423.350412][T28192] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1423.361425][T28192] EXT4-fs (loop6): 1 truncate cleaned up [ 1423.368767][T28192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.424925][T28206] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.494002][T28206] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.556386][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.574578][T28206] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.633821][T28206] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.690727][T11533] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.706259][T11533] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.724752][T11533] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.742458][T11533] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.930621][T28225] rdma_rxe: rxe_newlink: failed to add lo [ 1424.211497][T28239] FAULT_INJECTION: forcing a failure. [ 1424.211497][T28239] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.224234][T28239] CPU: 0 UID: 0 PID: 28239 Comm: syz.2.19817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1424.224273][T28239] Tainted: [W]=WARN [ 1424.224288][T28239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1424.224304][T28239] Call Trace: [ 1424.224312][T28239] [ 1424.224326][T28239] __dump_stack+0x1d/0x30 [ 1424.224347][T28239] dump_stack_lvl+0xe8/0x140 [ 1424.224368][T28239] dump_stack+0x15/0x1b [ 1424.224388][T28239] should_fail_ex+0x265/0x280 [ 1424.224419][T28239] should_failslab+0x8c/0xb0 [ 1424.224534][T28239] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1424.224571][T28239] ? __d_alloc+0x3d/0x340 [ 1424.224633][T28239] __d_alloc+0x3d/0x340 [ 1424.224728][T28239] d_alloc_parallel+0x53/0xc60 [ 1424.224766][T28239] ? __d_lookup+0x316/0x340 [ 1424.224881][T28239] ? _parse_integer+0x27/0x40 [ 1424.224909][T28239] ? kstrtoull+0x111/0x140 [ 1424.224943][T28239] ? lookup_noperm_common+0x1be/0x2a0 [ 1424.224984][T28239] ? d_lookup+0xb2/0xd0 [ 1424.225019][T28239] proc_fill_cache+0x158/0x240 [ 1424.225114][T28239] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 1424.225143][T28239] proc_pident_readdir+0x1f7/0x2d0 [ 1424.225207][T28239] proc_tgid_base_readdir+0x29/0x40 [ 1424.225234][T28239] iterate_dir+0x111/0x330 [ 1424.225255][T28239] ? mutex_lock+0xd/0x30 [ 1424.225306][T28239] __se_sys_getdents64+0x88/0x1b0 [ 1424.225325][T28239] ? __pfx_filldir64+0x10/0x10 [ 1424.225346][T28239] __x64_sys_getdents64+0x43/0x50 [ 1424.225366][T28239] x64_sys_call+0x2d9f/0x2ff0 [ 1424.225483][T28239] do_syscall_64+0xd2/0x200 [ 1424.225519][T28239] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1424.225546][T28239] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1424.225606][T28239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.225631][T28239] RIP: 0033:0x7fa96335ec29 [ 1424.225649][T28239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.225671][T28239] RSP: 002b:00007fa961dbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1424.225751][T28239] RAX: ffffffffffffffda RBX: 00007fa9635a5fa0 RCX: 00007fa96335ec29 [ 1424.225823][T28239] RDX: 0000000000001000 RSI: 0000200000002540 RDI: 0000000000000004 [ 1424.225838][T28239] RBP: 00007fa961dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.225852][T28239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.225867][T28239] R13: 00007fa9635a6038 R14: 00007fa9635a5fa0 R15: 00007ffe0f44ccf8 [ 1424.225889][T28239] [ 1424.598267][T28248] loop6: detected capacity change from 0 to 1024 [ 1424.605292][T28248] EXT4-fs: Ignoring removed nobh option [ 1424.721823][T28248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.069708][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.109984][T28260] loop6: detected capacity change from 0 to 512 [ 1425.134071][T28260] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1425.157253][T28260] EXT4-fs (loop6): 1 truncate cleaned up [ 1425.165532][T28260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.421203][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.734582][T28275] random: crng reseeded on system resumption [ 1425.954664][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19833'. [ 1426.026682][T28289] rdma_rxe: rxe_newlink: failed to add lo [ 1426.491072][T28299] loop6: detected capacity change from 0 to 8192 [ 1426.557218][T28301] pim6reg1: entered promiscuous mode [ 1426.562617][T28301] pim6reg1: entered allmulticast mode [ 1426.743590][T28309] random: crng reseeded on system resumption [ 1426.971271][T28311] rdma_rxe: rxe_newlink: failed to add lo [ 1427.143287][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 1427.143306][ T29] audit: type=1326 audit(1427.626:73775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f090c2d5be7 code=0x7ffc0000 [ 1427.156234][T28315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19847'. [ 1427.176383][ T29] audit: type=1326 audit(1427.626:73776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f090c27ae09 code=0x7ffc0000 [ 1427.204650][ T29] audit: type=1326 audit(1427.626:73777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f090c2d5be7 code=0x7ffc0000 [ 1427.227820][ T29] audit: type=1326 audit(1427.626:73778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f090c27ae09 code=0x7ffc0000 [ 1427.251448][ T29] audit: type=1326 audit(1427.626:73779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1427.274678][ T29] audit: type=1326 audit(1427.626:73780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1427.297829][ T29] audit: type=1326 audit(1427.626:73781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1427.321035][ T29] audit: type=1326 audit(1427.626:73782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090c2dec29 code=0x7ffc0000 [ 1427.344441][ T29] audit: type=1326 audit(1427.626:73783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f090c2dd590 code=0x7ffc0000 [ 1427.367636][ T29] audit: type=1326 audit(1427.626:73784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28314 comm="syz.3.19847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f090c2e0457 code=0x7ffc0000 [ 1427.623979][T28344] netlink: 'syz.4.19860': attribute type 12 has an invalid length. [ 1427.683526][T28351] random: crng reseeded on system resumption [ 1427.748200][T28362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19869'. [ 1427.753864][T28366] rdma_rxe: rxe_newlink: failed to add lo [ 1427.972003][T28384] hsr0: entered promiscuous mode [ 1427.977445][T28384] FAULT_INJECTION: forcing a failure. [ 1427.977445][T28384] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.990139][T28384] CPU: 0 UID: 0 PID: 28384 Comm: syz.4.19877 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1427.990169][T28384] Tainted: [W]=WARN [ 1427.990175][T28384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1427.990312][T28384] Call Trace: [ 1427.990318][T28384] [ 1427.990325][T28384] __dump_stack+0x1d/0x30 [ 1427.990343][T28384] dump_stack_lvl+0xe8/0x140 [ 1427.990359][T28384] dump_stack+0x15/0x1b [ 1427.990394][T28384] should_fail_ex+0x265/0x280 [ 1427.990415][T28384] should_failslab+0x8c/0xb0 [ 1427.990479][T28384] kmem_cache_alloc_noprof+0x50/0x310 [ 1427.990519][T28384] ? skb_clone+0x151/0x1f0 [ 1427.990543][T28384] skb_clone+0x151/0x1f0 [ 1427.990571][T28384] __netlink_deliver_tap+0x2c9/0x500 [ 1427.990597][T28384] netlink_unicast+0x66b/0x690 [ 1427.990618][T28384] netlink_sendmsg+0x58b/0x6b0 [ 1427.990671][T28384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.990692][T28384] __sock_sendmsg+0x142/0x180 [ 1427.990721][T28384] ____sys_sendmsg+0x31e/0x4e0 [ 1427.990748][T28384] ___sys_sendmsg+0x17b/0x1d0 [ 1427.990812][T28384] __x64_sys_sendmsg+0xd4/0x160 [ 1427.990839][T28384] x64_sys_call+0x191e/0x2ff0 [ 1427.990856][T28384] do_syscall_64+0xd2/0x200 [ 1427.990930][T28384] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1427.991005][T28384] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1427.991106][T28384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.991132][T28384] RIP: 0033:0x7f21b5c6ec29 [ 1427.991149][T28384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.991168][T28384] RSP: 002b:00007f21b46cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.991183][T28384] RAX: ffffffffffffffda RBX: 00007f21b5eb5fa0 RCX: 00007f21b5c6ec29 [ 1427.991193][T28384] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 000000000000000b [ 1427.991203][T28384] RBP: 00007f21b46cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.991278][T28384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.991288][T28384] R13: 00007f21b5eb6038 R14: 00007f21b5eb5fa0 R15: 00007ffcdaaa0558 [ 1427.991303][T28384] [ 1427.991329][T28384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19877'. [ 1428.214279][T28384] hsr_slave_0: left promiscuous mode [ 1428.219976][T28384] hsr_slave_1: left promiscuous mode [ 1428.228094][T28384] hsr0 (unregistering): left promiscuous mode [ 1428.361942][T28393] random: crng reseeded on system resumption [ 1428.550177][T28419] random: crng reseeded on system resumption [ 1428.600089][T28424] smc: net device bond0 applied user defined pnetid SYZ1 [ 1428.607904][T28424] smc: net device bond0 erased user defined pnetid SYZ1 [ 1428.835686][T28438] loop6: detected capacity change from 0 to 512 [ 1428.847944][T28440] vhci_hcd: invalid port number 96 [ 1428.853178][T28440] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 1428.893431][T28438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1428.933595][T28455] rdma_rxe: rxe_newlink: failed to add lo [ 1428.991646][T28438] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.19903: corrupted inode contents [ 1429.014459][T28461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19907'. [ 1429.060314][T28438] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.19903: mark_inode_dirty error [ 1429.253284][T28438] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.19903: corrupted inode contents [ 1429.289904][T28465] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.19903: corrupted inode contents [ 1429.302715][T28465] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.19903: mark_inode_dirty error [ 1429.315261][T28465] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.19903: corrupted inode contents [ 1429.333127][T28465] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.19903: mark_inode_dirty error [ 1429.352365][T28465] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.19903: corrupted inode contents [ 1429.364671][T28465] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.19903: mark_inode_dirty error [ 1429.408314][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.312268][T28529] rdma_rxe: rxe_newlink: failed to add lo [ 1430.440599][T28533] random: crng reseeded on system resumption [ 1430.801241][T28535] loop6: detected capacity change from 0 to 512 [ 1430.809706][T28535] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1430.828399][T28535] EXT4-fs (loop6): 1 truncate cleaned up [ 1430.845584][T28535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.006329][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.031264][T28563] loop6: detected capacity change from 0 to 512 [ 1431.039442][T28563] EXT4-fs: Ignoring removed mblk_io_submit option [ 1431.046213][T28563] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1431.060621][T28563] EXT4-fs (loop6): 1 truncate cleaned up [ 1431.068228][T28563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.183396][T28571] random: crng reseeded on system resumption [ 1431.459028][T28586] smc: net device bond0 applied user defined pnetid SYZ0 [ 1431.466745][T28586] FAULT_INJECTION: forcing a failure. [ 1431.466745][T28586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.480112][T28586] CPU: 1 UID: 0 PID: 28586 Comm: syz.0.19956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1431.480148][T28586] Tainted: [W]=WARN [ 1431.480193][T28586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1431.480207][T28586] Call Trace: [ 1431.480214][T28586] [ 1431.480274][T28586] __dump_stack+0x1d/0x30 [ 1431.480298][T28586] dump_stack_lvl+0xe8/0x140 [ 1431.480321][T28586] dump_stack+0x15/0x1b [ 1431.480339][T28586] should_fail_ex+0x265/0x280 [ 1431.480366][T28586] should_fail+0xb/0x20 [ 1431.480385][T28586] should_fail_usercopy+0x1a/0x20 [ 1431.480464][T28586] _copy_from_user+0x1c/0xb0 [ 1431.480500][T28586] ___sys_sendmsg+0xc1/0x1d0 [ 1431.480629][T28586] __x64_sys_sendmsg+0xd4/0x160 [ 1431.480662][T28586] x64_sys_call+0x191e/0x2ff0 [ 1431.480688][T28586] do_syscall_64+0xd2/0x200 [ 1431.480756][T28586] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1431.480845][T28586] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1431.480899][T28586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.480924][T28586] RIP: 0033:0x7f1fdb14ec29 [ 1431.480941][T28586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1431.481034][T28586] RSP: 002b:00007f1fd9baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1431.481051][T28586] RAX: ffffffffffffffda RBX: 00007f1fdb395fa0 RCX: 00007f1fdb14ec29 [ 1431.481063][T28586] RDX: 0000000000004084 RSI: 0000200000000080 RDI: 0000000000000004 [ 1431.481076][T28586] RBP: 00007f1fd9baf090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.481142][T28586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.481154][T28586] R13: 00007f1fdb396038 R14: 00007f1fdb395fa0 R15: 00007ffc52b6a148 [ 1431.481171][T28586] [ 1431.963393][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.010891][T28599] random: crng reseeded on system resumption [ 1432.057630][T28597] smc: net device bond0 erased user defined pnetid SYZ0 [ 1432.103905][T28605] FAULT_INJECTION: forcing a failure. [ 1432.103905][T28605] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.116637][T28605] CPU: 0 UID: 0 PID: 28605 Comm: syz.6.19963 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1432.116694][T28605] Tainted: [W]=WARN [ 1432.116703][T28605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1432.116717][T28605] Call Trace: [ 1432.116723][T28605] [ 1432.116730][T28605] __dump_stack+0x1d/0x30 [ 1432.116754][T28605] dump_stack_lvl+0xe8/0x140 [ 1432.116778][T28605] dump_stack+0x15/0x1b [ 1432.116862][T28605] should_fail_ex+0x265/0x280 [ 1432.116899][T28605] should_failslab+0x8c/0xb0 [ 1432.116953][T28605] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1432.117043][T28605] ? __alloc_skb+0x101/0x320 [ 1432.117069][T28605] ? tcp_chrono_stop+0x19d/0x210 [ 1432.117171][T28605] __alloc_skb+0x101/0x320 [ 1432.117199][T28605] tcp_stream_alloc_skb+0x2d/0x1d0 [ 1432.117241][T28605] tcp_connect+0xce9/0x2290 [ 1432.117276][T28605] ? tcp_fastopen_defer_connect+0x69/0x1e0 [ 1432.117316][T28605] tcp_v6_connect+0xb61/0xc30 [ 1432.117363][T28605] __inet_stream_connect+0x169/0x7e0 [ 1432.117389][T28605] ? tcp_sendmsg_fastopen+0x172/0x520 [ 1432.117406][T28605] ? should_failslab+0x8c/0xb0 [ 1432.117449][T28605] ? __kmalloc_cache_noprof+0x189/0x320 [ 1432.117478][T28605] tcp_sendmsg_fastopen+0x43a/0x520 [ 1432.117519][T28605] tcp_sendmsg_locked+0x26e1/0x2c00 [ 1432.117621][T28605] ? mntput_no_expire+0x6f/0x460 [ 1432.117656][T28605] ? __rcu_read_unlock+0x4f/0x70 [ 1432.117752][T28605] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1432.117786][T28605] ? avc_has_perm+0xf7/0x180 [ 1432.117818][T28605] ? _raw_spin_unlock_bh+0x36/0x40 [ 1432.117844][T28605] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1432.117920][T28605] tcp_sendmsg+0x2f/0x50 [ 1432.117978][T28605] inet6_sendmsg+0x76/0xd0 [ 1432.118003][T28605] __sock_sendmsg+0x8b/0x180 [ 1432.118111][T28605] __sys_sendto+0x268/0x330 [ 1432.118152][T28605] __x64_sys_sendto+0x76/0x90 [ 1432.118233][T28605] x64_sys_call+0x2d05/0x2ff0 [ 1432.118256][T28605] do_syscall_64+0xd2/0x200 [ 1432.118384][T28605] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1432.118408][T28605] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1432.118566][T28605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.118666][T28605] RIP: 0033:0x7f4ebf45ec29 [ 1432.118686][T28605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1432.118708][T28605] RSP: 002b:00007f4ebdec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1432.118730][T28605] RAX: ffffffffffffffda RBX: 00007f4ebf6a5fa0 RCX: 00007f4ebf45ec29 [ 1432.118742][T28605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1432.118754][T28605] RBP: 00007f4ebdec7090 R08: 00002000000001c0 R09: 000000000000001c [ 1432.118766][T28605] R10: 000000002400c049 R11: 0000000000000246 R12: 0000000000000001 [ 1432.118778][T28605] R13: 00007f4ebf6a6038 R14: 00007f4ebf6a5fa0 R15: 00007ffc6ad39d48 [ 1432.118856][T28605] [ 1432.476443][T28612] loop6: detected capacity change from 0 to 512 [ 1432.499806][T28612] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.19966: error while reading EA inode 32 err=-116 [ 1432.519554][T28612] EXT4-fs (loop6): Remounting filesystem read-only [ 1432.526147][T28612] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 1432.536404][T28612] EXT4-fs (loop6): 1 orphan inode deleted [ 1432.538436][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 1432.538454][ T29] audit: type=1326 audit(1433.016:74439): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1432.543801][T28612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.585055][ T29] audit: type=1326 audit(1433.026:74440): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1432.608560][ T29] audit: type=1326 audit(1433.026:74441): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1432.632161][ T29] audit: type=1326 audit(1433.026:74442): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1432.655642][ T29] audit: type=1326 audit(1433.026:74443): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1fdb14ec63 code=0x7ffc0000 [ 1432.678958][ T29] audit: type=1326 audit(1433.026:74444): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1fdb14d6df code=0x7ffc0000 [ 1432.702260][ T29] audit: type=1326 audit(1433.026:74445): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1fdb14ecb7 code=0x7ffc0000 [ 1432.785607][ T29] audit: type=1326 audit(1433.166:74446): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fdb14d590 code=0x7ffc0000 [ 1432.809149][ T29] audit: type=1326 audit(1433.166:74447): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1fdb14d88a code=0x7ffc0000 [ 1432.832540][ T29] audit: type=1326 audit(1433.166:74448): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.0.19957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fdb14ec29 code=0x7ffc0000 [ 1432.884087][T28626] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19972'. [ 1432.893851][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.945295][T28628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19973'. [ 1432.972220][T28637] random: crng reseeded on system resumption [ 1433.132474][T28640] FAULT_INJECTION: forcing a failure. [ 1433.132474][T28640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.145667][T28640] CPU: 1 UID: 0 PID: 28640 Comm: syz.4.19978 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1433.145699][T28640] Tainted: [W]=WARN [ 1433.145780][T28640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1433.145793][T28640] Call Trace: [ 1433.145800][T28640] [ 1433.145810][T28640] __dump_stack+0x1d/0x30 [ 1433.145836][T28640] dump_stack_lvl+0xe8/0x140 [ 1433.145858][T28640] dump_stack+0x15/0x1b [ 1433.145878][T28640] should_fail_ex+0x265/0x280 [ 1433.145924][T28640] should_fail+0xb/0x20 [ 1433.145948][T28640] should_fail_usercopy+0x1a/0x20 [ 1433.145980][T28640] _copy_from_user+0x1c/0xb0 [ 1433.146017][T28640] proc_control+0x43/0xa0 [ 1433.146122][T28640] usbdev_ioctl+0x948/0x1710 [ 1433.146162][T28640] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1433.146196][T28640] __se_sys_ioctl+0xce/0x140 [ 1433.146219][T28640] __x64_sys_ioctl+0x43/0x50 [ 1433.146242][T28640] x64_sys_call+0x1816/0x2ff0 [ 1433.146308][T28640] do_syscall_64+0xd2/0x200 [ 1433.146343][T28640] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1433.146375][T28640] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1433.146433][T28640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.146458][T28640] RIP: 0033:0x7f21b5c6ec29 [ 1433.146477][T28640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.146500][T28640] RSP: 002b:00007f21b46cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.146521][T28640] RAX: ffffffffffffffda RBX: 00007f21b5eb5fa0 RCX: 00007f21b5c6ec29 [ 1433.146536][T28640] RDX: 0000200000000240 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1433.146549][T28640] RBP: 00007f21b46cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.146584][T28640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.146600][T28640] R13: 00007f21b5eb6038 R14: 00007f21b5eb5fa0 R15: 00007ffcdaaa0558 [ 1433.146622][T28640] [ 1433.534157][T28645] loop6: detected capacity change from 0 to 8192 [ 1433.588477][T28645] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.694452][T28645] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.764650][T28645] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.808135][T28668] netlink: 'syz.0.19989': attribute type 10 has an invalid length. [ 1433.824788][T28645] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.851074][T28668] team0: Port device dummy0 added [ 1433.865093][T28670] netlink: 'syz.0.19989': attribute type 10 has an invalid length. [ 1433.884058][T28670] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1433.904247][T28670] team0: Failed to send options change via netlink (err -105) [ 1433.911956][T28670] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1433.924796][T28670] team0: Port device dummy0 removed [ 1433.937168][T28670] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1433.980791][T11571] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.002740][T11571] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.023113][T11571] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.048498][T11571] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.178561][T28691] random: crng reseeded on system resumption [ 1434.535278][T28717] loop6: detected capacity change from 0 to 128 [ 1434.557409][T28717] syz.6.20010: attempt to access beyond end of device [ 1434.557409][T28717] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 1434.635875][T28717] netlink: 256 bytes leftover after parsing attributes in process `syz.6.20010'. [ 1434.857911][T28733] loop6: detected capacity change from 0 to 512 [ 1434.893129][T28733] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1435.005580][T28733] EXT4-fs (loop6): 1 truncate cleaned up [ 1435.012077][T28733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.038708][T28733] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #15: comm syz.6.20017: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 1435.086886][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.412703][T28759] loop6: detected capacity change from 0 to 512 [ 1435.436288][T28759] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.20025: Failed to acquire dquot type 1 [ 1435.455440][T28759] EXT4-fs (loop6): 1 truncate cleaned up [ 1435.469449][T28759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.548668][T28768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20028'. [ 1436.083230][T28798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20041'. [ 1436.104601][T28800] syz_tun: entered allmulticast mode [ 1436.263754][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.971912][T28835] tipc: Enabling of bearer rejected, failed to enable media [ 1437.197998][T28846] loop6: detected capacity change from 0 to 512 [ 1437.208930][T28848] FAULT_INJECTION: forcing a failure. [ 1437.208930][T28848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.222120][T28848] CPU: 1 UID: 0 PID: 28848 Comm: syz.0.20061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1437.222159][T28848] Tainted: [W]=WARN [ 1437.222168][T28848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1437.222188][T28848] Call Trace: [ 1437.222195][T28848] [ 1437.222214][T28848] __dump_stack+0x1d/0x30 [ 1437.222240][T28848] dump_stack_lvl+0xe8/0x140 [ 1437.222259][T28848] dump_stack+0x15/0x1b [ 1437.222322][T28848] should_fail_ex+0x265/0x280 [ 1437.222352][T28848] should_fail+0xb/0x20 [ 1437.222378][T28848] should_fail_usercopy+0x1a/0x20 [ 1437.222408][T28848] _copy_from_user+0x1c/0xb0 [ 1437.222519][T28848] ___sys_sendmsg+0xc1/0x1d0 [ 1437.222643][T28848] __x64_sys_sendmsg+0xd4/0x160 [ 1437.222683][T28848] x64_sys_call+0x191e/0x2ff0 [ 1437.222711][T28848] do_syscall_64+0xd2/0x200 [ 1437.222873][T28848] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1437.222904][T28848] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1437.222943][T28848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.222977][T28848] RIP: 0033:0x7f1fdb14ec29 [ 1437.222991][T28848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.223009][T28848] RSP: 002b:00007f1fd9baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.223031][T28848] RAX: ffffffffffffffda RBX: 00007f1fdb395fa0 RCX: 00007f1fdb14ec29 [ 1437.223047][T28848] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1437.223062][T28848] RBP: 00007f1fd9baf090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.223087][T28848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.223101][T28848] R13: 00007f1fdb396038 R14: 00007f1fdb395fa0 R15: 00007ffc52b6a148 [ 1437.223120][T28848] [ 1437.239247][T28846] EXT4-fs: Ignoring removed mblk_io_submit option [ 1437.466914][T28846] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1437.489030][T28846] EXT4-fs (loop6): 1 truncate cleaned up [ 1437.504393][T28846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1437.589423][ T29] kauditd_printk_skb: 843 callbacks suppressed [ 1437.589440][ T29] audit: type=1326 audit(1438.066:75290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.619218][ T29] audit: type=1326 audit(1438.066:75291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.642646][ T29] audit: type=1326 audit(1438.076:75292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.665879][ T29] audit: type=1326 audit(1438.076:75293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.689128][ T29] audit: type=1326 audit(1438.076:75294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.712957][ T29] audit: type=1326 audit(1438.076:75295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.736192][ T29] audit: type=1326 audit(1438.076:75296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.759376][ T29] audit: type=1326 audit(1438.076:75297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.782626][ T29] audit: type=1326 audit(1438.076:75298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1437.805862][ T29] audit: type=1326 audit(1438.076:75299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28860 comm="syz.2.20065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96335ec29 code=0x7ffc0000 [ 1438.008734][T28865] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.071088][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.096729][T28865] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.203554][T28886] smc: net device bond0 applied user defined pnetid SYZ1 [ 1438.210986][T28886] smc: net device bond0 erased user defined pnetid SYZ1 [ 1438.248327][T28865] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.356178][T28865] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.546478][T11527] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.567104][T11532] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.640195][T11532] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.701209][T11532] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.318625][T28891] loop6: detected capacity change from 0 to 512 [ 1439.334235][T28891] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1439.362464][T28891] EXT4-fs (loop6): 1 truncate cleaned up [ 1439.371765][T28891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1439.566692][T28919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20087'. [ 1439.846957][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.496926][T28960] pim6reg1: entered promiscuous mode [ 1440.502403][T28960] pim6reg1: entered allmulticast mode [ 1440.745338][T28964] loop6: detected capacity change from 0 to 512 [ 1440.752718][T28964] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1440.765044][T28964] EXT4-fs (loop6): 1 truncate cleaned up [ 1440.771148][T28964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.771784][T28963] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.853845][T28963] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.934498][T28963] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.985068][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.997978][T28979] 9pnet_fd: Insufficient options for proto=fd [ 1441.024089][T28963] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.116615][T11002] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.152476][T11544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.169579][T11544] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.198137][T11544] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.579433][T29031] random: crng reseeded on system resumption [ 1442.592283][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 1442.592295][ T29] audit: type=1326 audit(1443.076:75745): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1442.625838][ T29] audit: type=1326 audit(1443.106:75746): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21b5c6ec63 code=0x7ffc0000 [ 1442.649321][ T29] audit: type=1326 audit(1443.106:75747): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f21b5c6d6df code=0x7ffc0000 [ 1442.672682][ T29] audit: type=1326 audit(1443.106:75748): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f21b5c6ecb7 code=0x7ffc0000 [ 1442.696166][ T29] audit: type=1326 audit(1443.106:75749): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21b5c6d590 code=0x7ffc0000 [ 1442.719763][ T29] audit: type=1326 audit(1443.106:75750): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f21b5c6d88a code=0x7ffc0000 [ 1442.734604][T29033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20135'. [ 1442.743059][ T29] audit: type=1326 audit(1443.106:75751): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1442.743098][ T29] audit: type=1326 audit(1443.106:75752): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1442.782492][ T29] audit: type=1326 audit(1443.216:75753): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1442.822584][ T29] audit: type=1326 audit(1443.216:75754): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29008 comm="syz.4.20124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b5c6ec29 code=0x7ffc0000 [ 1443.000546][T29049] loop6: detected capacity change from 0 to 1024 [ 1443.019674][T29049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1443.045901][T29049] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.20141: Allocating blocks 385-513 which overlap fs metadata [ 1443.063197][T29049] EXT4-fs (loop6): pa ffff888107114bd0: logic 16, phys. 129, len 24 [ 1443.071200][T29049] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1443.167561][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.840813][T29063] loop6: detected capacity change from 0 to 512 [ 1443.859033][T29063] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1443.878853][T29063] EXT4-fs (loop6): 1 truncate cleaned up [ 1443.888735][T29063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.971817][T29083] 9pnet_fd: Insufficient options for proto=fd [ 1444.135000][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.222489][T29094] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.290699][T29094] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.324461][T29101] sz1: rxe_newlink: already configured on lo [ 1444.338137][T29094] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.463849][T29094] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.563248][T11539] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.584031][T11539] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.608972][T11539] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.633676][T11539] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.716166][T29105] loop6: detected capacity change from 0 to 512 [ 1444.753226][T29109] pim6reg1: entered promiscuous mode [ 1444.758665][T29109] pim6reg1: entered allmulticast mode [ 1444.783333][T29105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1444.859979][T29105] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.20160: corrupted inode contents [ 1444.893215][T29105] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.20160: mark_inode_dirty error [ 1444.925664][T29105] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.20160: corrupted inode contents [ 1444.949469][T29105] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.20160: mark_inode_dirty error [ 1445.002800][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.248967][T29127] loop6: detected capacity change from 0 to 512 [ 1445.267889][T29123] 9pnet_fd: Insufficient options for proto=fd [ 1445.306403][T29127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1445.360040][T29127] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.20170: corrupted inode contents [ 1445.374458][T29127] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.20170: mark_inode_dirty error [ 1445.387362][T29127] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.20170: corrupted inode contents [ 1445.403619][T29127] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.20170: mark_inode_dirty error [ 1445.436473][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.545939][T29146] random: crng reseeded on system resumption [ 1445.579431][T29152] loop6: detected capacity change from 0 to 512 [ 1445.594533][T29152] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1445.615112][T29152] EXT4-fs (loop6): 1 truncate cleaned up [ 1445.628698][T29152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1445.746426][T29150] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.793911][T29150] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.806519][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.883973][T29150] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.938810][T29169] loop6: detected capacity change from 0 to 256 [ 1445.945925][T29169] msdos: Bad value for 'tz' [ 1445.975201][T29150] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.068056][T29182] random: crng reseeded on system resumption [ 1446.534145][T29204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.543011][T29204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.107765][T29219] loop6: detected capacity change from 0 to 512 [ 1447.114648][T29219] EXT4-fs: Ignoring removed mblk_io_submit option [ 1447.122171][T29219] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1447.133998][T29219] EXT4-fs (loop6): 1 truncate cleaned up [ 1447.140226][T29219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1447.326210][T29219] ================================================================== [ 1447.334352][T29219] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 1447.342645][T29219] [ 1447.344990][T29219] write to 0xffff888107233254 of 4 bytes by task 29224 on cpu 0: [ 1447.352700][T29219] xas_set_mark+0x12b/0x140 [ 1447.357211][T29219] tag_pages_for_writeback+0xc2/0x290 [ 1447.362580][T29219] ext4_do_writepages+0x6b2/0x2750 [ 1447.367693][T29219] ext4_writepages+0x176/0x300 [ 1447.372457][T29219] do_writepages+0x1c3/0x310 [ 1447.377052][T29219] file_write_and_wait_range+0x156/0x2c0 [ 1447.382692][T29219] generic_buffers_fsync_noflush+0x45/0x120 [ 1447.388608][T29219] ext4_sync_file+0x1ab/0x690 [ 1447.393313][T29219] vfs_fsync_range+0x10a/0x130 [ 1447.398102][T29219] ext4_buffered_write_iter+0x34f/0x3c0 [ 1447.403682][T29219] ext4_file_write_iter+0xdbf/0xf00 [ 1447.408888][T29219] iter_file_splice_write+0x666/0xa60 [ 1447.414254][T29219] direct_splice_actor+0x156/0x2a0 [ 1447.419359][T29219] splice_direct_to_actor+0x312/0x680 [ 1447.424732][T29219] do_splice_direct+0xda/0x150 [ 1447.429506][T29219] do_sendfile+0x380/0x650 [ 1447.433927][T29219] __x64_sys_sendfile64+0x105/0x150 [ 1447.439133][T29219] x64_sys_call+0x2bb0/0x2ff0 [ 1447.443810][T29219] do_syscall_64+0xd2/0x200 [ 1447.448322][T29219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.454214][T29219] [ 1447.456535][T29219] read to 0xffff888107233254 of 4 bytes by task 29219 on cpu 1: [ 1447.464185][T29219] filemap_write_and_wait_range+0xfc/0x340 [ 1447.470026][T29219] filemap_invalidate_pages+0xa4/0x1a0 [ 1447.475491][T29219] kiocb_invalidate_pages+0x6e/0x80 [ 1447.480688][T29219] __iomap_dio_rw+0x5d4/0x1250 [ 1447.485460][T29219] iomap_dio_rw+0x40/0x90 [ 1447.489783][T29219] ext4_file_write_iter+0xad9/0xf00 [ 1447.495005][T29219] iter_file_splice_write+0x666/0xa60 [ 1447.500397][T29219] direct_splice_actor+0x156/0x2a0 [ 1447.505523][T29219] splice_direct_to_actor+0x312/0x680 [ 1447.510909][T29219] do_splice_direct+0xda/0x150 [ 1447.515675][T29219] do_sendfile+0x380/0x650 [ 1447.520114][T29219] __x64_sys_sendfile64+0x105/0x150 [ 1447.525316][T29219] x64_sys_call+0x2bb0/0x2ff0 [ 1447.529994][T29219] do_syscall_64+0xd2/0x200 [ 1447.534503][T29219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.540392][T29219] [ 1447.542708][T29219] value changed: 0x02000021 -> 0x04000021 [ 1447.548440][T29219] [ 1447.550759][T29219] Reported by Kernel Concurrency Sanitizer on: [ 1447.556901][T29219] CPU: 1 UID: 0 PID: 29219 Comm: syz.6.20208 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1447.568354][T29219] Tainted: [W]=WARN [ 1447.572151][T29219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1447.582221][T29219] ================================================================== [ 1448.020063][T22790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.287190][T11539] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.298474][T11539] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.309514][T11539] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.321026][T11539] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0