last executing test programs: 4.44176661s ago: executing program 2 (id=1855): r0 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a365ce4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff0000e1fffffffffffff39956e4f98b53ced9802b", 0xd8}], 0x1}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x689d689217177dd2) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r6) keyctl$restrict_keyring(0xa, r7, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)='dd\f\x03\xba\x7f\x98\xffqry*G;\xc7,\xcf\x7f\x81\x9c\xdeE:cb2e\x18,\x16\x17^\xfe\xc6,\tq\x88\x861{(6\x00\x95\x88\x1c|\xd9!\xc2|\xbc<~\x02\x99\xc2\xaf\x99{\x1e\x96`k\x7f\xe1\x9b\x8b\xa9.\f\x14z\x8a\xd9e\xd3H9K\x0eF\xff\xdb%\xfd\x1d\x84\xce\x12\x9dz\x18fF\x1f\'U\xbb|\xeb2\xda\xac\x91\xeb\xd9\x9a\x11\x12\xc3\xec\xbb_\xe8\x16\xe9\xb5\x00\xa6\x98\xbbY_\xcb\xac\xae\xb6\xa9\x87\"$MQ#\xbb\xe3\x1b\xf0\x9b\xef\x01\x10\xb4\xa2\xd0wf\xf8+n\x17]\x03E\x83\xc3Y\x88\xbe\x9a\t]\xca\xf9:w7\nY\xa3\x8as\x9f\xd2W_{\xed\xcf-\xff\xd7d,\xd1\x1fU\xc3\x0f\x9c\xda\b#\xb2]\xb7\xe5\x97\xf2 \xb3\xc7r~!\xa4\xabs:\xffU\tj`\xca[\x8a\x8f\t*\xf1\xdeD\xb8p\xf4\xf0\xa7\x9c\xbd?)\xd2\f\x8d\xb26\v%\xb8\xc2\xacp\xe6x7\xd6\x17\xa4$I\xc4\xfcwIHQ\xe0\xa3<=\x94\x91\xd5b\x01bT\x06\xa7\x16\xd3\xd3\xcb\\\x15\xdc\xd34\r\xa8\x11\xc42h\x1fA|\xe1\x80\xe6]\xca\x87\x93\xab\xe4\xcd\xebe\xe0\xb2Y\x16\x12\\\xe2\xa2\xd2\xdd\xfd\tGu\xbasA\x9c\xc7\x14@\xec\xe1sB\x88\xaeZ9\xc1\xfb\x1bH\xc0\x16\xc2#\xc5:\x87\xf3Z2z;W/\xcc9\xd1\xe4V\xb1') ioctl$int_in(r5, 0x5421, &(0x7f00000005c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x50) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", "10009915"}, 0xffffffffffffff28) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback, 0x5}, 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000780)) 3.496081034s ago: executing program 2 (id=1866): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) open(0x0, 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2c, 0x1}, 0x40) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000200000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170004dff028008000500", @ANYRES32=0x0, @ANYBLOB="01ba83b29b0f0c918801ff2f301d33ca9b97a61e65e904766cd7f042e5b173a4da301a64d935b83415faadc881407e11f0882ddd8f6edef6aa76798b338b6fc4fc7c4baf1b58f02bce8ea43f407b517b2b319d372d01a8affb41da6aeae8cf5c5493671b482e600aa16709612f5fb6a2e53a5c3f34c80b081f7ef5cda0ee4d3500222b8be618930191f82af9c6da9869c5cae1d2ebc7d3c76b0e601c6e6caba3fde24c29f97c2eb0e402beb765c0a8122c571824aa90d18cfc9022c2e6b0539c6f4e62962febee3b265ad6f0ca176774c9006c58ed1dd4a6cf309848", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) 3.369551326s ago: executing program 2 (id=1869): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010102, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0xfffd, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x80000000}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x80, 0x400, 0xfffffffd}}, 0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[], 0x0, 0x68, 0x0, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r0}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0), 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000180)={0x1}) r3 = gettid() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002}, 0x4004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) pread64(r4, 0x0, 0xfdef, 0x4) syz_io_uring_setup(0x7b57, &(0x7f0000000140)={0x0, 0xfce0, 0x477e, 0x2, 0x8000ae}, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05"], 0x0) syz_open_dev$evdev(0x0, 0x100000001, 0x488c00) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 2.596170083s ago: executing program 4 (id=1886): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) (fail_nth: 5) 2.243308418s ago: executing program 4 (id=1890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c000100", @ANYRES32=r4, @ANYBLOB="080003"], 0x44}}, 0x0) 2.110702121s ago: executing program 4 (id=1892): syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x800, 0x8000021c}, &(0x7f00000000c0), &(0x7f0000000040)) r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x401, 0x0) msgsnd(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100"], 0x12f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x600, 0x870bd2d, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd000000080002", @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10a00, 0x4}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x50) 884.418823ms ago: executing program 3 (id=1911): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) splice(r3, &(0x7f0000000200)=0xe60, r4, &(0x7f0000000240)=0x7, 0x6, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) mq_timedreceive(r3, &(0x7f0000000100)=""/154, 0x9a, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) 883.905253ms ago: executing program 4 (id=1912): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) 868.726764ms ago: executing program 4 (id=1914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c000100", @ANYRES32=r4, @ANYBLOB="080003"], 0x44}}, 0x0) 806.56468ms ago: executing program 4 (id=1916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = syz_io_uring_setup(0x5d01, &(0x7f00000006c0)={0x0, 0x40f5, 0x8000, 0x3, 0x3b1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = semget(0x1, 0x4, 0x39c) semop(r4, &(0x7f0000000180)=[{0x2, 0x7, 0x800}, {0x3, 0xfb97}, {0x2, 0x4}], 0x2aaaaaaaaaaaadea) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000005c0)='bcache_read\x00', r5, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x8, 0x1, 0x4, 0xbf}, {0x766, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x25, 0x5aa7}, {0x5, 0x46, 0x25, 0xd}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r7, &(0x7f0000000480)=""/70, 0x46) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x8, 0x8}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) close_range(r6, 0xffffffffffffffff, 0x0) semop(r4, 0x0, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd=r9, 0x7ff, 0x0, 0x5, 0x14, 0x1}) socket$l2tp(0x2, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 597.568842ms ago: executing program 0 (id=1920): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) 573.739093ms ago: executing program 1 (id=1921): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x6, 0x0, 0x0, 0xe, 0x4, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000200)=""/19, 0x37, 0x13, 0x0, 0x4, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0x16, &(0x7f0000000040)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x47}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x10, 0x3, 0xa, 0x100, 0x6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff7c39}], &(0x7f0000000100)='GPL\x00', 0x5, 0x18, &(0x7f0000000140)=""/24, 0x41000, 0x20, '\x00', r1, @fallback=0x36, r2, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xd, 0x800, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000600)=[{0x2, 0x3, 0x1, 0x3}, {0x4, 0x5, 0xc, 0x2}, {0x3, 0x4, 0x4, 0xb}, {0x5, 0x3, 0x3, 0x9}], 0x10, 0x4525}, 0x94) getpid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000740)=0x8) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r7, &(0x7f0000002040)={&(0x7f0000000780)=@nfc_llcp, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000800)=""/238, 0xee}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000a00)=""/38, 0x26}, {&(0x7f0000000a40)=""/250, 0xfa}, {&(0x7f0000000b40)=""/81, 0x51}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/136, 0x88}, {&(0x7f0000001c80)=""/221, 0xdd}, {&(0x7f0000001d80)=""/252, 0xfc}, {&(0x7f0000001e80)=""/183, 0xb7}], 0xa, &(0x7f0000002000)}, 0x2000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x80, r9, 0x723, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, 0x0, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002780)={r4, 0xe0, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002500)=[0x0, 0x0], &(0x7f0000002540)=[0x0], 0x0, 0x92, &(0x7f0000002580)=[{}], 0x8, 0x10, &(0x7f00000025c0), &(0x7f0000002600), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000002640)}}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a40)={0x6, 0x15, &(0x7f0000002840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x2, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @cb_func={0x18, 0xa}, @jmp={0x5, 0x1, 0xa, 0x8, 0xa, 0xffffffffffffffff, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002900)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000002940)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002980)={0x3, 0x3, 0xf237c6ab, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000029c0)=[0x1, r0, r0, r0], &(0x7f0000002a00)=[{0x0, 0x5, 0x5, 0x6}, {0x5, 0x2, 0xc, 0x7}, {0x1, 0x4, 0xc, 0x5}]}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002b00)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0xd, 0x1c, &(0x7f0000002300)=@raw=[@jmp={0x5, 0x1, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, r0}], &(0x7f0000002400)='GPL\x00', 0x1, 0x58, &(0x7f0000002440)=""/88, 0x40f00, 0x2d, '\x00', r11, @fallback=0x3, r2, 0x8, &(0x7f00000027c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002800)={0x4, 0x2, 0x3, 0x4}, 0x10, r3, r12, 0x0, &(0x7f0000002b40)=[r13], 0x0, 0x10, 0x9}, 0x94) r14 = add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r15 = add_key$keyring(&(0x7f0000002cc0), &(0x7f0000002d00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r16 = add_key$keyring(&(0x7f0000002d40), &(0x7f0000002d80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r14, r15, r16, 0x0) syz_emit_ethernet(0x110, &(0x7f0000002dc0)={@local, @local, @void, {@x25={0x805, {0x2, 0x4, 0xf3, "d4e954743d6fa4307da8677da0955200174c26f25445a4f7b09ec4a952fb81b23da51dfd664536e69a1bcc7b19e41dc25e26326ce5d89d18cba2e0f749d845afdfdbb38d975856c5610670508f6df0252520d6bc156598a2460bd218992d8bc2a8f76885c75b98c72f080371c15c432a788fb3ff30e551a1e57057e5b2aa8834e3fc55854e4b02624d085969b4f46f8f92f4cbe3324f6d134c7ad0e94fce806d7d7d5f70b994b4dae151109082dacd37ec6180f3a2ee504c90a9ee5a173ddb2f5cf0401fb4e0f64a5042ed4bb921f2f404a6e42c5ed1d626426992d7768730635a25a5e5535234a80b3d17016bced0e8083fcc6184c64fc7d9ce8c845fc887"}}}}, 0x0) connect(r5, &(0x7f0000002f00)=@un=@file={0x0, './file0\x00'}, 0x80) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r17, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x30, r18, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x400c081) 568.427934ms ago: executing program 0 (id=1922): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 547.144887ms ago: executing program 0 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400c36053fe72cdb5f858d780ebaf650000", @ANYRES16=r3, @ANYBLOB="01000000000000000000080000000800028004000380180001801400020073797a5f74756e000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 523.406748ms ago: executing program 1 (id=1924): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x2c, 0x20, 0x10, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x14, 0x0, 0x4, 0x0, 0x0, 0x4, 0x10000}, [@FRA_SRC={0x8, 0x2, @loopback}, @FRA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x4000000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r7], 0x50}, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="2e00000010008188040f80ec59acbc04f4ffffffffffffff5e140602000000000e000a000f00000002800000121f62edf876dfa4f4e015244bdf9e6b12cf3a1a4dbfca5326f82b970a6cf0617123a692224137c53019bf1bd2726133efd4fcb2004e2cd6e3e5cda28d210107fe47e9e1ad5b140423ec6ab3813f0a643eb79c64e3cbb82e98ec581436d48c0d5fbe0aeead9dc94b3c587c6d6017b693523d50754edbc04c6be47cc4828e938554e2cd9a8d55b98a5f9655fed46420051004e76c2c93702fa1b20c361411908f7a3e2da2e92624d01b32b87f9e7b73d9cbc084ad12526d14e7153b6e", 0x7f}, {&(0x7f00000005c0)="8692371c881e265ed76d8f8a70acef0cac84bd2393cdc5e6801ec9757ec554a02b9d450d8d97f755b0f4087e560f291e10b80d8a26595ba2dc5b404d24b36a63a7baf55196a41cab6c2ac99cdeb5e432de9bc30048bc3904b8383d97d4112484a642abd5e3cd1648110ae326e0ae9d0958fdca1c17995336ac8e887c820ca15f8e22542e067e249e1bf0f967ac76dd40547d07a4709a02a46b92738644a1a1ccbea8c38a6c84ebb523b6d0fdf42ed58129bb3997fc284abd111eacf73a549ef19106a4e893fba906eb672069"}], 0x1}, 0x404c080) lseek(r6, 0x3, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r9, &(0x7f00000006c0)=""/110, 0x6e, 0x1) 475.707313ms ago: executing program 0 (id=1925): r0 = socket(0x10, 0x80003, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) 473.317604ms ago: executing program 0 (id=1926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d61637674617000", @ANYRES32=r4, @ANYBLOB="080003"], 0x44}}, 0x0) 473.113824ms ago: executing program 1 (id=1927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) lsetxattr$security_selinux(&(0x7f00000003c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f0000000980)='system_u:object_r:getty_etc_t:s0\x00', 0x21, 0x2) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) fspick(r5, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") 472.641704ms ago: executing program 0 (id=1928): socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000480)="ac", 0x1) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") fchdir(0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace$getregs(0xc, r4, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) pwrite64(0xffffffffffffffff, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18e7ff0000000000000400000000000018110000182aef494b95e6dcdf1d93f77654a788974535a1e59abbef69004a66ca111c233734c5429606484c3f95f94cb4cd2ddb7044f2c963f68f2653e3868cbe917bc1206bb3e6340b765757dcccd6b2408c09841aa8c4bc6876fd7cb7f4e39142316ff7bf32efde55c3191c7419392219b91c6298a75eb376a8cb659bcbf398209bbcb68350368e89a0bec98f714a2c6741fea2b4603542fecd6dc26689a073ab5168ae215692938a6ec33b3c9e2a141a86569be4b3a3045654c7e9dfdb2ee61c5349dfaace87fef203ef583a7d321023932ddefd8e", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x18c00, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x0) unshare(0x62000000) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000880)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c02, &(0x7f00000000c0)=ANY=[], 0x0, 0x71d, &(0x7f0000000980)="$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") 422.278619ms ago: executing program 1 (id=1929): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @local, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000300)=ANY=[], 0x30}}], 0x1, 0x40000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x400000, 0x3}, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0xff, @mcast1, 0x4}}, 0x0, 0x0, 0x5, 0x0, "00ec2ff093289349bb89de25b87376f64276337642b890d33cb5b5b423d46229bc1c7ac135030000000000000000000000000000001400000300"}, 0xd8) close_range(r6, 0xffffffffffffffff, 0x10000000000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000019280)='./file0\x00', r2}, 0x18) 308.80961ms ago: executing program 2 (id=1930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x20000000) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x6000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x8, 0xffff, 0x39, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x40, 0x1, 0x2, 0xbb}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x20002, 0x1}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 285.525782ms ago: executing program 1 (id=1931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(0x0, 0x0) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='lon\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a0000006400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f407000904008100", 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 253.473536ms ago: executing program 1 (id=1932): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x0, &(0x7f00000003c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300) ptrace(0x11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b0000a3169fe9258afca4b40c51d2fe3653fc62fa818ccd270ff7ef5d94f4cdf9b303bd76be9bba327eaf1319733695e2237ab1ab931cad7dfab9870a41aeb024c77bd5f6115aa850422b7c56feec"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) pivot_root(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0008}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 207.50596ms ago: executing program 3 (id=1933): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) 202.283641ms ago: executing program 3 (id=1934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1268, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1254, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "76fde82e419662dc05da20db8c949a6948bef26eec095ebfa8cda163d657b31976525a0124a25a954abbaf23e307382100a51299108d6def73a61ab910293de1379dc293f1e5ce7270db2b4d4404ceb58fc41743b9841ae0070739761a6e64a299d31a02673aeb151dd6b5b4e5d6a1721181615da38375869f26526761002e0526f37e696324260ca3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x87, 0x4, "9bd1bfa43e507cdeca7c928c7fc51ec190b7aba37d9e6f965607fcdbc5dce3178200140c1f00f605956d5cd67e79e709f3b3c610fd8720632108c5113e8ed4bf9ba97a1e45478016debc77d32ea30e21bcc94aac650187a4240696115eb6d7585d23ed100bd0fc425cd2691a872d463722942c1b3aef85b2de49fc0491425f311c90d3"}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@$.+{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5b4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[\xda,\',.]\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '4^*\xad&C\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^.8\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}]}, 0x1268}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 188.865102ms ago: executing program 2 (id=1935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="48250f0000000000000000000080"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000110c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c0002800500010093000000140001"], 0x88}}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x8}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) clock_gettime(0x0, &(0x7f0000001900)) futex_waitv(&(0x7f0000001d40)=[{0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x82}, {0x8000000000000000, &(0x7f0000000280), 0x82}, {0x7, &(0x7f00000002c0)=0x3, 0x2}, {0x3, &(0x7f0000000340)=0x6, 0x82}, {0x100, &(0x7f0000000380), 0x82}, {0x80000001, &(0x7f00000003c0)=0x4, 0x2}, {0x6, &(0x7f00000004c0)=0x1, 0x82}, {0x6, &(0x7f0000000500)=0xd, 0x82}, {0x9a22, &(0x7f0000000580)=0x4, 0x82}, {0x3, &(0x7f00000005c0)=0xb2, 0x2}, {0x7fff, &(0x7f0000000600)=0x4d38, 0x2}, {0x3, &(0x7f0000000640)=0x9, 0x82}, {0x7, &(0x7f0000000680)=0x2, 0x186}, {0x0, &(0x7f00000006c0)=0xfffffffffffffffa, 0x82}, {0x1, &(0x7f0000000700)=0x1, 0x82}, {0xffffffffffff2ea3, &(0x7f0000000740)=0x9, 0x82}, {0x5, &(0x7f0000000780), 0x2}, {0x3, &(0x7f00000007c0)=0x7fffffffffffffff, 0x2}, {0x2, &(0x7f0000000800)=0x7fffffff, 0x2}, {0x2, &(0x7f0000000840)=0x6, 0x2}, {0xe, &(0x7f0000000880)=0x4, 0x82}, {0x20, &(0x7f00000008c0)=0x163, 0x82}, {0x4, &(0x7f0000000900)=0xa6, 0x82}, {0x401, &(0x7f0000000940)=0x3, 0x82}, {0x5, &(0x7f0000000980)=0x8, 0x82}, {0x7f, &(0x7f0000000dc0)=0x2, 0x82}, {0x0, &(0x7f0000000e00)=0x7, 0x82}, {0x9, &(0x7f0000000e40)=0x6cb, 0x82}, {0x8, &(0x7f0000000e80)=0x800, 0x82}, {0x3, &(0x7f0000000ec0), 0x82}, {0x4, &(0x7f0000000f00)=0x4, 0x2}, {0xec, &(0x7f0000000f40)=0x8000000000000000, 0x82}, {0x2486d2e9, &(0x7f0000000f80)=0x101, 0x2}, {0xffffffffffffffa9, &(0x7f0000000fc0)=0x5, 0x2}, {0x0, &(0x7f0000001000)=0x100000000, 0x82}, {0x7, &(0x7f0000001040)=0x51e8dba, 0x2}, {0x2, &(0x7f0000001080)=0x2, 0x82}, {0xff, &(0x7f00000010c0)=0xffffffffffff78f5, 0x82}, {0x1, &(0x7f0000001100)=0x6, 0x82}, {0x5, &(0x7f0000001140)=0x80000001, 0x82}, {0x6, &(0x7f0000001180)=0x1, 0x82}, {0x80, &(0x7f00000011c0)=0x8, 0x82}, {0x8, &(0x7f0000001200)=0x6, 0x82}, {0x0, &(0x7f0000001240)=0x2, 0x2}, {0x9, &(0x7f0000001280)=0x6, 0x82}, {0x6, &(0x7f00000012c0), 0x82}, {0x3, &(0x7f0000001300)=0x6, 0x2}, {0xffffffffffffa9fe, &(0x7f0000001340)=0x3ff, 0x82}, {0xef, &(0x7f0000001380)=0xfffffffffffffffe, 0x82}, {0x7d9, &(0x7f00000013c0)=0xfffffffffffffffb, 0x82}, {0x9, &(0x7f0000001400)=0x7fffffffffffffff, 0x82}, {0x2, &(0x7f0000001440)=0x2, 0x2}, {0xfe, &(0x7f0000001480)=0x54c2, 0x82}, {0xc8d, &(0x7f00000014c0)=0x7, 0x82}, {0x4, &(0x7f0000001500)=0x2, 0x2}, {0x5, &(0x7f0000001540)=0x3700000000, 0x104}, {0x1, &(0x7f0000001580)=0x3, 0x82}, {0x0, &(0x7f00000015c0)=0xd, 0x2}, {0x80, &(0x7f0000001600)=0x8000, 0x2}, {0xfffffffffffffffa, &(0x7f0000001640)=0x6, 0x2}, {0x31d, &(0x7f0000001680)=0x9, 0x82}, {0x92, &(0x7f00000016c0)=0xd12, 0x2}, {0xffffffffffffffff, &(0x7f0000001700)=0x41, 0x82}, {0x0, &(0x7f0000001740)=0x4, 0x2}, {0x1bf0, &(0x7f0000001780)=0x9, 0x82}, {0xd886, &(0x7f0000001800)=0xfffffffffffffffd, 0x82}, {0xfed, &(0x7f0000001840)=0x9, 0x82}, {0x6, &(0x7f0000001880)=0xd, 0x82}, {0x3, &(0x7f00000018c0)=0x7, 0x82}], 0x45, 0x0, &(0x7f0000001940), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) msgctl$IPC_RMID(0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r8 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0201"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r7, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000080000000500000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 104.53803ms ago: executing program 3 (id=1936): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) 104.17741ms ago: executing program 2 (id=1937): r0 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x3, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x4040014) 103.146991ms ago: executing program 3 (id=1938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d61637674617000", @ANYRES32=r4, @ANYBLOB="080003"], 0x44}}, 0x0) 0s ago: executing program 3 (id=1939): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000e81a0caecf6aafc0110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect(r2, &(0x7f0000000240)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x3b8, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x65}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb408}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x19ca00}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbfe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8974}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x144, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @private0, 0x1c00}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xff, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x120}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x878}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) kernel console output (not intermixed with test programs): _ex+0xdb/0x280 [ 103.436346][ T7798] ? selinux_nlmsg_lookup+0x99/0x890 [ 103.436467][ T7798] ? __rcu_read_unlock+0x34/0x70 [ 103.436499][ T7798] ? __netlink_lookup+0x266/0x2a0 [ 103.436543][ T7798] netlink_unicast+0x5c0/0x690 [ 103.436579][ T7798] netlink_sendmsg+0x58b/0x6b0 [ 103.436699][ T7798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.436784][ T7798] __sock_sendmsg+0x145/0x180 [ 103.436806][ T7798] ____sys_sendmsg+0x31e/0x4e0 [ 103.436852][ T7798] ___sys_sendmsg+0x17b/0x1d0 [ 103.436897][ T7798] __x64_sys_sendmsg+0xd4/0x160 [ 103.437004][ T7798] x64_sys_call+0x191e/0x3000 [ 103.437030][ T7798] do_syscall_64+0xd2/0x200 [ 103.437055][ T7798] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.437083][ T7798] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.437111][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.437179][ T7798] RIP: 0033:0x7fb5efbbefc9 [ 103.437197][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.437219][ T7798] RSP: 002b:00007fb5ee627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.437238][ T7798] RAX: ffffffffffffffda RBX: 00007fb5efe15fa0 RCX: 00007fb5efbbefc9 [ 103.437261][ T7798] RDX: 0000000004044000 RSI: 0000200000000380 RDI: 0000000000000003 [ 103.437272][ T7798] RBP: 00007fb5ee627090 R08: 0000000000000000 R09: 0000000000000000 [ 103.437283][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.437318][ T7798] R13: 00007fb5efe16038 R14: 00007fb5efe15fa0 R15: 00007ffd4c381138 [ 103.437339][ T7798] [ 103.440719][ T7801] loop0: detected capacity change from 0 to 512 [ 103.531484][ T7804] loop2: detected capacity change from 0 to 512 [ 103.565816][ T7801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.573419][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.590044][ T7804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.602778][ T7808] netlink: 'syz.4.1632': attribute type 29 has an invalid length. [ 103.637781][ T7804] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.808425][ T7804] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1631: bg 0: block 248: padding at end of block bitmap is not set [ 103.822951][ T7804] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1631: Failed to acquire dquot type 1 [ 103.834767][ T7804] EXT4-fs (loop2): 1 truncate cleaned up [ 103.906970][ T7804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.932365][ T7818] xt_hashlimit: max too large, truncated to 1048576 [ 103.958661][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.977805][ T7818] loop4: detected capacity change from 0 to 512 [ 104.078696][ T7831] lo speed is unknown, defaulting to 1000 [ 104.269315][ T7831] loop1: detected capacity change from 0 to 512 [ 104.278863][ T7831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.287594][ T7831] EXT4-fs (loop1): inodes count not valid: 63 vs 32 [ 104.299055][ T7822] netlink: 'syz.3.1637': attribute type 4 has an invalid length. [ 104.306967][ T7822] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1637'. [ 104.342374][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.357287][ T7804] EXT4-fs (loop2): shut down requested (0) [ 104.376010][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.386156][ T7818] EXT4-fs (loop4): too many log groups per flexible block group [ 104.401498][ T7804] syz.2.1631 (7804) used greatest stack depth: 9568 bytes left [ 104.438377][ T7818] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 104.469783][ T7818] EXT4-fs (loop4): mount failed [ 104.509746][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.575461][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1638'. [ 104.629641][ T7851] loop2: detected capacity change from 0 to 256 [ 104.673359][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1643'. [ 104.705510][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1643'. [ 104.708129][ T7859] loop1: detected capacity change from 0 to 512 [ 104.742642][ T7862] x_tables: unsorted underflow at hook 2 [ 104.758752][ T7859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.780170][ T7865] FAULT_INJECTION: forcing a failure. [ 104.780170][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 104.792974][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.4.1646 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.793002][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.793023][ T7865] Call Trace: [ 104.793030][ T7865] [ 104.793037][ T7865] __dump_stack+0x1d/0x30 [ 104.793059][ T7865] dump_stack_lvl+0xe8/0x140 [ 104.793079][ T7865] dump_stack+0x15/0x1b [ 104.793103][ T7865] should_fail_ex+0x265/0x280 [ 104.793138][ T7865] ? io_drain_req+0x67/0x350 [ 104.793162][ T7865] should_failslab+0x8c/0xb0 [ 104.793190][ T7865] __kmalloc_cache_noprof+0x4c/0x4a0 [ 104.793228][ T7865] io_drain_req+0x67/0x350 [ 104.793252][ T7865] ? io_queue_sqe_fallback+0x12a/0x140 [ 104.793277][ T7865] io_queue_sqe_fallback+0x132/0x140 [ 104.793301][ T7865] io_submit_sqes+0xc2e/0x1060 [ 104.793362][ T7865] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 104.793397][ T7865] ? 0xffffffff81000000 [ 104.793458][ T7865] ? __rcu_read_unlock+0x4f/0x70 [ 104.793531][ T7865] ? get_pid_task+0x96/0xd0 [ 104.793555][ T7865] ? proc_fail_nth_write+0x13b/0x160 [ 104.793662][ T7865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.793693][ T7865] ? vfs_write+0x7e8/0x960 [ 104.793716][ T7865] ? __rcu_read_unlock+0x4f/0x70 [ 104.793741][ T7865] ? __fget_files+0x184/0x1c0 [ 104.793795][ T7865] ? fput+0x8f/0xc0 [ 104.793829][ T7865] __x64_sys_io_uring_enter+0x78/0x90 [ 104.793865][ T7865] x64_sys_call+0x2df0/0x3000 [ 104.793888][ T7865] do_syscall_64+0xd2/0x200 [ 104.793922][ T7865] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.793951][ T7865] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.793975][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.794038][ T7865] RIP: 0033:0x7fc32dbaefc9 [ 104.794052][ T7865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.794071][ T7865] RSP: 002b:00007fc32c617038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 104.794091][ T7865] RAX: ffffffffffffffda RBX: 00007fc32de05fa0 RCX: 00007fc32dbaefc9 [ 104.794108][ T7865] RDX: 0000000000000217 RSI: 0000000000005fdd RDI: 0000000000000003 [ 104.794121][ T7865] RBP: 00007fc32c617090 R08: 0000000000000000 R09: 0000000000000000 [ 104.794134][ T7865] R10: 00000000000000a5 R11: 0000000000000246 R12: 0000000000000001 [ 104.794146][ T7865] R13: 00007fc32de06038 R14: 00007fc32de05fa0 R15: 00007ffef83bb7f8 [ 104.794166][ T7865] [ 104.795152][ T7859] EXT4-fs (loop1): 1 truncate cleaned up [ 105.036731][ T7851] 9pnet: Could not find request transport: tcp:‚à»ù€Ñð¥ò[OD÷xU<ÒÇ K/“ :ÅZéWrÄcŽo& Íb]Ë&¨4# TÕž„=zÍlóÄÑÎå³b6L¡ýP>Ÿž| ^ )(ŒŸõöxà:S0_ [ 105.037437][ T7859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.086928][ T7859] FAULT_INJECTION: forcing a failure. [ 105.086928][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 105.086964][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.087000][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.087017][ T7859] Call Trace: [ 105.087023][ T7859] [ 105.087031][ T7859] __dump_stack+0x1d/0x30 [ 105.087050][ T7859] dump_stack_lvl+0xe8/0x140 [ 105.087107][ T7859] dump_stack+0x15/0x1b [ 105.087165][ T7859] should_fail_ex+0x265/0x280 [ 105.087209][ T7859] should_failslab+0x8c/0xb0 [ 105.087243][ T7859] kmem_cache_alloc_noprof+0x50/0x480 [ 105.087307][ T7859] ? ext4_mb_new_blocks+0x79f/0x2080 [ 105.087351][ T7859] ext4_mb_new_blocks+0x79f/0x2080 [ 105.087391][ T7859] ? ext4_ind_map_blocks+0x838/0x14f0 [ 105.087443][ T7859] ? ext4_get_branch+0x321/0x3a0 [ 105.087474][ T7859] ext4_ind_map_blocks+0xb86/0x14f0 [ 105.087520][ T7859] ext4_map_blocks+0x598/0xd00 [ 105.087572][ T7859] _ext4_get_block+0x10a/0x350 [ 105.087612][ T7859] ext4_get_block+0x39/0x50 [ 105.087649][ T7859] ext4_block_write_begin+0x5e8/0xc00 [ 105.087767][ T7859] ? __pfx_ext4_get_block+0x10/0x10 [ 105.087810][ T7859] ? folio_mapping+0xb9/0xe0 [ 105.087880][ T7859] ext4_write_begin+0x647/0xeb0 [ 105.087918][ T7859] generic_perform_write+0x184/0x490 [ 105.087954][ T7859] ext4_buffered_write_iter+0x1ee/0x3c0 [ 105.087981][ T7859] ext4_file_write_iter+0x387/0xf60 [ 105.088058][ T7859] ? kstrtouint+0x76/0xc0 [ 105.088161][ T7859] ? kstrtouint_from_user+0x9f/0xf0 [ 105.088180][ T7859] ? avc_policy_seqno+0x15/0x30 [ 105.088219][ T7859] ? selinux_file_permission+0x1e4/0x320 [ 105.088250][ T7859] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 105.088322][ T7859] vfs_write+0x52a/0x960 [ 105.088384][ T7859] ksys_write+0xda/0x1a0 [ 105.088416][ T7859] __x64_sys_write+0x40/0x50 [ 105.088441][ T7859] x64_sys_call+0x2802/0x3000 [ 105.088523][ T7859] do_syscall_64+0xd2/0x200 [ 105.088555][ T7859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.088590][ T7859] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.088616][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.088643][ T7859] RIP: 0033:0x7f6f1afdefc9 [ 105.088657][ T7859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.088675][ T7859] RSP: 002b:00007f6f19a3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.088734][ T7859] RAX: ffffffffffffffda RBX: 00007f6f1b235fa0 RCX: 00007f6f1afdefc9 [ 105.088752][ T7859] RDX: 00000000fffffe51 RSI: 0000200000000180 RDI: 0000000000000006 [ 105.088769][ T7859] RBP: 00007f6f19a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.088786][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.088802][ T7859] R13: 00007f6f1b236038 R14: 00007f6f1b235fa0 R15: 00007ffd0af76d98 [ 105.088825][ T7859] [ 105.185002][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'. [ 105.186537][ T7884] FAULT_INJECTION: forcing a failure. [ 105.186537][ T7884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.186644][ T7884] CPU: 1 UID: 0 PID: 7884 Comm: syz.2.1652 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.186670][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.186687][ T7884] Call Trace: [ 105.186695][ T7884] [ 105.186704][ T7884] __dump_stack+0x1d/0x30 [ 105.186730][ T7884] dump_stack_lvl+0xe8/0x140 [ 105.186756][ T7884] dump_stack+0x15/0x1b [ 105.186833][ T7884] should_fail_ex+0x265/0x280 [ 105.186871][ T7884] should_fail+0xb/0x20 [ 105.186973][ T7884] should_fail_usercopy+0x1a/0x20 [ 105.186997][ T7884] _copy_to_user+0x20/0xa0 [ 105.187032][ T7884] simple_read_from_buffer+0xb5/0x130 [ 105.187062][ T7884] proc_fail_nth_read+0x10e/0x150 [ 105.187121][ T7884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.187158][ T7884] vfs_read+0x1a8/0x770 [ 105.187180][ T7884] ? __rcu_read_unlock+0x4f/0x70 [ 105.187295][ T7884] ? __fget_files+0x184/0x1c0 [ 105.187358][ T7884] ksys_read+0xda/0x1a0 [ 105.187391][ T7884] __x64_sys_read+0x40/0x50 [ 105.187442][ T7884] x64_sys_call+0x27c0/0x3000 [ 105.187467][ T7884] do_syscall_64+0xd2/0x200 [ 105.187571][ T7884] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.187607][ T7884] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.187636][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.187713][ T7884] RIP: 0033:0x7fb5efbbd9dc [ 105.187736][ T7884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.187772][ T7884] RSP: 002b:00007fb5ee627030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.187798][ T7884] RAX: ffffffffffffffda RBX: 00007fb5efe15fa0 RCX: 00007fb5efbbd9dc [ 105.187819][ T7884] RDX: 000000000000000f RSI: 00007fb5ee6270a0 RDI: 0000000000000003 [ 105.187833][ T7884] RBP: 00007fb5ee627090 R08: 0000000000000000 R09: 0000000000000000 [ 105.187863][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.187880][ T7884] R13: 00007fb5efe16038 R14: 00007fb5efe15fa0 R15: 00007ffd4c381138 [ 105.187904][ T7884] [ 105.202505][ T7877] bridge0: port 3(batadv1) entered blocking state [ 105.202598][ T7877] bridge0: port 3(batadv1) entered disabled state [ 105.202802][ T7877] batadv1: entered allmulticast mode [ 105.203361][ T7877] batadv1: entered promiscuous mode [ 105.204552][ T7877] netlink: 'syz.4.1650': attribute type 10 has an invalid length. [ 105.207697][ T7877] team0: Failed to send options change via netlink (err -105) [ 105.207718][ T7877] team0: Port device dummy0 added [ 105.209065][ T7877] netlink: 'syz.4.1650': attribute type 10 has an invalid length. [ 105.209574][ T7877] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.249369][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.346062][ T7891] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1655'. [ 105.347784][ T1042] usb 5-1: enqueue for inactive port 0 [ 105.352446][ T7877] team0: Failed to send options change via netlink (err -105) [ 105.356745][ T1042] usb 5-1: enqueue for inactive port 0 [ 105.776386][ T372] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 105.776405][ T372] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 105.779135][ T7877] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.806470][ T7877] team0: Port device dummy0 removed [ 105.822640][ T7877] dummy0: entered promiscuous mode [ 105.828361][ T7877] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 105.943730][ T7909] FAULT_INJECTION: forcing a failure. [ 105.943730][ T7909] name failslab, interval 1, probability 0, space 0, times 0 [ 105.956407][ T7909] CPU: 1 UID: 0 PID: 7909 Comm: syz.1.1659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.956434][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.956447][ T7909] Call Trace: [ 105.956455][ T7909] [ 105.956462][ T7909] __dump_stack+0x1d/0x30 [ 105.956524][ T7909] dump_stack_lvl+0xe8/0x140 [ 105.956544][ T7909] dump_stack+0x15/0x1b [ 105.956560][ T7909] should_fail_ex+0x265/0x280 [ 105.956600][ T7909] ? io_drain_req+0x67/0x350 [ 105.956625][ T7909] should_failslab+0x8c/0xb0 [ 105.956659][ T7909] __kmalloc_cache_noprof+0x4c/0x4a0 [ 105.956694][ T7909] io_drain_req+0x67/0x350 [ 105.956716][ T7909] ? io_queue_sqe_fallback+0x12a/0x140 [ 105.956808][ T7909] io_queue_sqe_fallback+0x132/0x140 [ 105.956838][ T7909] io_submit_sqes+0xc2e/0x1060 [ 105.956880][ T7909] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 105.956949][ T7909] ? 0xffffffff81000000 [ 105.956967][ T7909] ? __rcu_read_unlock+0x4f/0x70 [ 105.957068][ T7909] ? get_pid_task+0x96/0xd0 [ 105.957090][ T7909] ? proc_fail_nth_write+0x13b/0x160 [ 105.957128][ T7909] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 105.957167][ T7909] ? vfs_write+0x7e8/0x960 [ 105.957270][ T7909] ? __rcu_read_unlock+0x4f/0x70 [ 105.957302][ T7909] ? __fget_files+0x184/0x1c0 [ 105.957389][ T7909] ? fput+0x8f/0xc0 [ 105.957428][ T7909] __x64_sys_io_uring_enter+0x78/0x90 [ 105.957466][ T7909] x64_sys_call+0x2df0/0x3000 [ 105.957515][ T7909] do_syscall_64+0xd2/0x200 [ 105.957642][ T7909] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.957679][ T7909] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.957770][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.957875][ T7909] RIP: 0033:0x7f6f1afdefc9 [ 105.957889][ T7909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.957914][ T7909] RSP: 002b:00007f6f19a3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 105.957989][ T7909] RAX: ffffffffffffffda RBX: 00007f6f1b235fa0 RCX: 00007f6f1afdefc9 [ 105.958006][ T7909] RDX: 0000000000000217 RSI: 0000000000005fdd RDI: 0000000000000005 [ 105.958023][ T7909] RBP: 00007f6f19a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.958040][ T7909] R10: 00000000000000a5 R11: 0000000000000246 R12: 0000000000000001 [ 105.958130][ T7909] R13: 00007f6f1b236038 R14: 00007f6f1b235fa0 R15: 00007ffd0af76d98 [ 105.958228][ T7909] [ 105.992818][ T1042] vhci_hcd: vhci_device speed not set [ 106.002115][ T7911] loop3: detected capacity change from 0 to 1024 [ 106.083985][ T29] kauditd_printk_skb: 659 callbacks suppressed [ 106.084004][ T29] audit: type=1326 audit(106.068:28777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bde275e67 code=0x7ffc0000 [ 106.151782][ T7911] EXT4-fs: Ignoring removed orlov option [ 106.225132][ T29] audit: type=1326 audit(106.128:28778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f36d771dc2a code=0x7ffc0000 [ 106.243642][ T7911] ext4: Unknown parameter 'obj_type' [ 106.264689][ T29] audit: type=1326 audit(106.128:28779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f36d771dc2a code=0x7ffc0000 [ 106.292814][ T29] audit: type=1326 audit(106.128:28780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f36d771d717 code=0x7ffc0000 [ 106.315736][ T29] audit: type=1326 audit(106.128:28781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7910 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f36d772076a code=0x7ffc0000 [ 106.338667][ T29] audit: type=1326 audit(106.148:28782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bde21b099 code=0x7ffc0000 [ 106.361585][ T29] audit: type=1326 audit(106.148:28783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bde275e67 code=0x7ffc0000 [ 106.384411][ T29] audit: type=1326 audit(106.148:28784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bde21b099 code=0x7ffc0000 [ 106.407244][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 106.416269][ T29] audit: type=1326 audit(106.148:28785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f8bde27efc9 code=0x7ffc0000 [ 106.439105][ T29] audit: type=1326 audit(106.168:28786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8bde275e67 code=0x7ffc0000 [ 106.463923][ T7915] FAULT_INJECTION: forcing a failure. [ 106.463923][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 106.476627][ T7915] CPU: 0 UID: 0 PID: 7915 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.476703][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.476720][ T7915] Call Trace: [ 106.476730][ T7915] [ 106.476739][ T7915] __dump_stack+0x1d/0x30 [ 106.476767][ T7915] dump_stack_lvl+0xe8/0x140 [ 106.476793][ T7915] dump_stack+0x15/0x1b [ 106.476830][ T7915] should_fail_ex+0x265/0x280 [ 106.476975][ T7915] should_failslab+0x8c/0xb0 [ 106.477040][ T7915] kmem_cache_alloc_noprof+0x50/0x480 [ 106.477116][ T7915] ? audit_log_start+0x342/0x720 [ 106.477142][ T7915] audit_log_start+0x342/0x720 [ 106.477166][ T7915] ? kstrtouint+0x76/0xc0 [ 106.477202][ T7915] audit_seccomp+0x48/0x100 [ 106.477313][ T7915] ? __seccomp_filter+0x82d/0x1250 [ 106.477415][ T7915] __seccomp_filter+0x83e/0x1250 [ 106.477464][ T7915] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 106.477504][ T7915] ? vfs_write+0x7e8/0x960 [ 106.477532][ T7915] ? __rcu_read_unlock+0x4f/0x70 [ 106.477561][ T7915] ? __fget_files+0x184/0x1c0 [ 106.477596][ T7915] __secure_computing+0x82/0x150 [ 106.477669][ T7915] syscall_trace_enter+0xcf/0x1e0 [ 106.477701][ T7915] do_syscall_64+0xac/0x200 [ 106.477727][ T7915] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.477760][ T7915] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 106.477855][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.477959][ T7915] RIP: 0033:0x7fb5efbbefc9 [ 106.477978][ T7915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.478042][ T7915] RSP: 002b:00007fb5ee627038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 106.478072][ T7915] RAX: ffffffffffffffda RBX: 00007fb5efe15fa0 RCX: 00007fb5efbbefc9 [ 106.478088][ T7915] RDX: 0000000000000001 RSI: 0000200000002a80 RDI: 0000000000000005 [ 106.478165][ T7915] RBP: 00007fb5ee627090 R08: 0000000000000000 R09: 0000000000000000 [ 106.478182][ T7915] R10: 00000000ffff0001 R11: 0000000000000246 R12: 0000000000000001 [ 106.478197][ T7915] R13: 00007fb5efe16038 R14: 00007fb5efe15fa0 R15: 00007ffd4c381138 [ 106.478216][ T7915] [ 106.737291][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 106.757385][ T7929] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 106.765294][ T7929] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1666'. [ 106.836371][ T7938] FAULT_INJECTION: forcing a failure. [ 106.836371][ T7938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.849562][ T7938] CPU: 1 UID: 0 PID: 7938 Comm: syz.4.1671 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.849615][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.849685][ T7938] Call Trace: [ 106.849694][ T7938] [ 106.849705][ T7938] __dump_stack+0x1d/0x30 [ 106.849736][ T7938] dump_stack_lvl+0xe8/0x140 [ 106.849766][ T7938] dump_stack+0x15/0x1b [ 106.849788][ T7938] should_fail_ex+0x265/0x280 [ 106.849839][ T7938] should_fail+0xb/0x20 [ 106.849880][ T7938] should_fail_usercopy+0x1a/0x20 [ 106.849902][ T7938] _copy_to_user+0x20/0xa0 [ 106.849965][ T7938] simple_read_from_buffer+0xb5/0x130 [ 106.849990][ T7938] proc_fail_nth_read+0x10e/0x150 [ 106.850022][ T7938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.850135][ T7938] vfs_read+0x1a8/0x770 [ 106.850158][ T7938] ? __rcu_read_unlock+0x4f/0x70 [ 106.850185][ T7938] ? __fget_files+0x184/0x1c0 [ 106.850214][ T7938] ksys_read+0xda/0x1a0 [ 106.850263][ T7938] __x64_sys_read+0x40/0x50 [ 106.850292][ T7938] x64_sys_call+0x27c0/0x3000 [ 106.850318][ T7938] do_syscall_64+0xd2/0x200 [ 106.850345][ T7938] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.850401][ T7938] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 106.850500][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.850522][ T7938] RIP: 0033:0x7fc32dbad9dc [ 106.850538][ T7938] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.850557][ T7938] RSP: 002b:00007fc32c617030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.850577][ T7938] RAX: ffffffffffffffda RBX: 00007fc32de05fa0 RCX: 00007fc32dbad9dc [ 106.850590][ T7938] RDX: 000000000000000f RSI: 00007fc32c6170a0 RDI: 0000000000000003 [ 106.850675][ T7938] RBP: 00007fc32c617090 R08: 0000000000000000 R09: 0000000000000000 [ 106.850688][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.850701][ T7938] R13: 00007fc32de06038 R14: 00007fc32de05fa0 R15: 00007ffef83bb7f8 [ 106.850742][ T7938] [ 107.105802][ T7946] ip6gre5: entered allmulticast mode [ 107.143759][ T7946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=7946 comm=syz.4.1674 [ 107.196575][ T7959] rdma_rxe: rxe_newlink: failed to add lo [ 107.210066][ T7961] FAULT_INJECTION: forcing a failure. [ 107.210066][ T7961] name failslab, interval 1, probability 0, space 0, times 0 [ 107.222897][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.0.1678 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.222925][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.222938][ T7961] Call Trace: [ 107.222944][ T7961] [ 107.222951][ T7961] __dump_stack+0x1d/0x30 [ 107.222979][ T7961] dump_stack_lvl+0xe8/0x140 [ 107.223084][ T7961] dump_stack+0x15/0x1b [ 107.223105][ T7961] should_fail_ex+0x265/0x280 [ 107.223165][ T7961] should_failslab+0x8c/0xb0 [ 107.223192][ T7961] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 107.223359][ T7961] ? alloc_inode+0x9a/0x170 [ 107.223433][ T7961] ? __rcu_read_unlock+0x4f/0x70 [ 107.223467][ T7961] alloc_inode+0x9a/0x170 [ 107.223497][ T7961] iget_locked+0xf9/0x5d0 [ 107.223531][ T7961] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 107.223568][ T7961] ? 0xffffffffa02016e4 [ 107.223588][ T7961] kernfs_get_inode+0x2e/0x350 [ 107.223633][ T7961] kernfs_fh_to_dentry+0xbb/0x100 [ 107.223704][ T7961] exportfs_decode_fh_raw+0xba/0x4d0 [ 107.223745][ T7961] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 107.223775][ T7961] ? kstrtouint+0x76/0xc0 [ 107.223832][ T7961] do_handle_to_path+0x6c/0xe0 [ 107.223901][ T7961] do_handle_open+0x526/0x6e0 [ 107.223933][ T7961] __x64_sys_open_by_handle_at+0x44/0x50 [ 107.223966][ T7961] x64_sys_call+0x279f/0x3000 [ 107.224112][ T7961] do_syscall_64+0xd2/0x200 [ 107.224223][ T7961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.224250][ T7961] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.224272][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.224297][ T7961] RIP: 0033:0x7f8bde27efc9 [ 107.224378][ T7961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.224402][ T7961] RSP: 002b:00007f8bdccdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 107.224425][ T7961] RAX: ffffffffffffffda RBX: 00007f8bde4d5fa0 RCX: 00007f8bde27efc9 [ 107.224514][ T7961] RDX: 00000000002241c2 RSI: 0000200000000140 RDI: 0000000000000005 [ 107.224527][ T7961] RBP: 00007f8bdccdf090 R08: 0000000000000000 R09: 0000000000000000 [ 107.224582][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.224594][ T7961] R13: 00007f8bde4d6038 R14: 00007f8bde4d5fa0 R15: 00007fffd7646b38 [ 107.224614][ T7961] [ 107.491180][ T7964] netlink: 'syz.0.1680': attribute type 1 has an invalid length. [ 107.592831][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.601801][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.711513][ T7983] FAULT_INJECTION: forcing a failure. [ 107.711513][ T7983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.724765][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.0.1688 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.724900][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.724942][ T7983] Call Trace: [ 107.724948][ T7983] [ 107.724955][ T7983] __dump_stack+0x1d/0x30 [ 107.724984][ T7983] dump_stack_lvl+0xe8/0x140 [ 107.725008][ T7983] dump_stack+0x15/0x1b [ 107.725024][ T7983] should_fail_ex+0x265/0x280 [ 107.725172][ T7983] should_fail+0xb/0x20 [ 107.725208][ T7983] should_fail_usercopy+0x1a/0x20 [ 107.725228][ T7983] _copy_from_user+0x1c/0xb0 [ 107.725253][ T7983] ____sys_sendmsg+0x1c5/0x4e0 [ 107.725324][ T7983] ___sys_sendmsg+0x17b/0x1d0 [ 107.725382][ T7983] __x64_sys_sendmsg+0xd4/0x160 [ 107.725422][ T7983] x64_sys_call+0x191e/0x3000 [ 107.725491][ T7983] do_syscall_64+0xd2/0x200 [ 107.725524][ T7983] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.725552][ T7983] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.725608][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.725659][ T7983] RIP: 0033:0x7f8bde27efc9 [ 107.725721][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.725745][ T7983] RSP: 002b:00007f8bdccdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.725764][ T7983] RAX: ffffffffffffffda RBX: 00007f8bde4d5fa0 RCX: 00007f8bde27efc9 [ 107.725776][ T7983] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 107.725788][ T7983] RBP: 00007f8bdccdf090 R08: 0000000000000000 R09: 0000000000000000 [ 107.725800][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.725820][ T7983] R13: 00007f8bde4d6038 R14: 00007f8bde4d5fa0 R15: 00007fffd7646b38 [ 107.725845][ T7983] [ 107.924997][ T7986] syz2: rxe_newlink: already configured on lo [ 107.940622][ T7989] team1: entered promiscuous mode [ 107.945713][ T7989] team1: entered allmulticast mode [ 107.960787][ T7989] 8021q: adding VLAN 0 to HW filter on device team1 [ 107.998247][ T7990] team2: entered promiscuous mode [ 108.003450][ T7990] team2: entered allmulticast mode [ 108.009065][ T7990] 8021q: adding VLAN 0 to HW filter on device team2 [ 108.047029][ T7999] loop2: detected capacity change from 0 to 512 [ 108.092997][ T7999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 108.103873][ T3002] udevd[3002]: worker [6912] terminated by signal 33 (Unknown signal 33) [ 108.118798][ T8002] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 108.124916][ T7999] System zones: 1-12 [ 108.127972][ T3002] udevd[3002]: worker [6912] failed while handling '/devices/virtual/block/loop2' [ 108.145289][ T7999] ------------[ cut here ]------------ [ 108.150838][ T7999] EA inode 11 i_nlink=2 [ 108.151204][ T7999] WARNING: CPU: 1 PID: 7999 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 108.165567][ T7999] Modules linked in: [ 108.169580][ T7999] CPU: 1 UID: 0 PID: 7999 Comm: syz.2.1693 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.171726][ T8005] ip6gre8: entered allmulticast mode [ 108.179357][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.195198][ T7999] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 108.201959][ T7999] Code: 90 49 8d 7e 40 e8 66 00 b9 ff 4d 8b 6e 40 4c 89 e7 e8 7a fb b8 ff 41 8b 56 48 48 c7 c7 6f 52 55 86 4c 89 ee e8 c7 05 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 c8 94 b0 03 0f 1f 84 00 00 00 00 00 [ 108.221645][ T7999] RSP: 0000:ffffc90000f1b778 EFLAGS: 00010246 [ 108.223287][ T3002] udevd[3002]: worker [6916] terminated by signal 33 (Unknown signal 33) [ 108.227799][ T7999] RAX: 96e675567f84aa00 RBX: ffff888107bf5bb8 RCX: 0000000000080000 [ 108.227820][ T7999] RDX: ffffc90002613000 RSI: 0000000000008d9a RDI: 0000000000008d9b [ 108.252369][ T7999] RBP: 0000000000000002 R08: 0001c90000f1b5f7 R09: 0000000000000000 [ 108.252394][ T7999] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888107bf5b68 [ 108.252411][ T7999] R13: 000000000000000b R14: ffff888107bf5b20 R15: 0000000000000001 [ 108.252429][ T7999] FS: 00007fb5ee6276c0(0000) GS:ffff8882aef39000(0000) knlGS:0000000000000000 [ 108.252495][ T7999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.252523][ T7999] CR2: 00007fffd7646db8 CR3: 000000011b1fa000 CR4: 00000000003506f0 [ 108.252583][ T7999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.252596][ T7999] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 108.252611][ T7999] Call Trace: [ 108.252620][ T7999] [ 108.252641][ T7999] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 108.252774][ T7999] ? errseq_check+0x2c/0x50 [ 108.252806][ T7999] ext4_xattr_delete_inode+0x6b7/0x790 [ 108.252864][ T7999] ext4_evict_inode+0xa6a/0xd90 [ 108.252989][ T7999] ? __pfx_ext4_evict_inode+0x10/0x10 [ 108.253035][ T7999] evict+0x2e3/0x550 [ 108.253087][ T7999] ? __ext4_msg+0x18f/0x1a0 [ 108.253128][ T7999] iput+0x4ed/0x650 [ 108.253160][ T7999] ext4_process_orphan+0x1a9/0x1c0 [ 108.253226][ T7999] ext4_orphan_cleanup+0x6a8/0xa00 [ 108.253265][ T7999] ext4_fill_super+0x3483/0x3810 [ 108.253301][ T7999] ? snprintf+0x86/0xb0 [ 108.253342][ T7999] ? set_blocksize+0x1a8/0x310 [ 108.253366][ T7999] ? sb_set_blocksize+0xe3/0x100 [ 108.253446][ T7999] ? setup_bdev_super+0x30e/0x370 [ 108.253473][ T7999] ? __pfx_ext4_fill_super+0x10/0x10 [ 108.253501][ T7999] get_tree_bdev_flags+0x291/0x300 [ 108.253556][ T7999] ? __pfx_ext4_fill_super+0x10/0x10 [ 108.253600][ T7999] get_tree_bdev+0x1f/0x30 [ 108.271426][ T3002] udevd[3002]: worker [6916] failed while handling '/devices/virtual/block/loop2' [ 108.277748][ T7999] ext4_get_tree+0x1c/0x30 [ 108.292932][ T8005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8005 comm=syz.0.1695 [ 108.293334][ T7999] vfs_get_tree+0x57/0x1d0 [ 108.447215][ T7999] do_new_mount+0x24d/0x660 [ 108.451786][ T7999] path_mount+0x4a5/0xb70 [ 108.456151][ T7999] ? user_path_at+0x109/0x130 [ 108.460941][ T7999] __se_sys_mount+0x28c/0x2e0 [ 108.465669][ T7999] __x64_sys_mount+0x67/0x80 [ 108.470361][ T7999] x64_sys_call+0x2b51/0x3000 [ 108.475155][ T7999] do_syscall_64+0xd2/0x200 [ 108.479762][ T7999] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.486086][ T7999] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.492008][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.497998][ T7999] RIP: 0033:0x7fb5efbc076a [ 108.502460][ T7999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.522323][ T7999] RSP: 002b:00007fb5ee626e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.530815][ T7999] RAX: ffffffffffffffda RBX: 00007fb5ee626ef0 RCX: 00007fb5efbc076a [ 108.538886][ T7999] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb5ee626eb0 [ 108.546997][ T7999] RBP: 0000200000000180 R08: 00007fb5ee626ef0 R09: 0000000000800700 [ 108.555041][ T7999] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 108.563163][ T7999] R13: 00007fb5ee626eb0 R14: 0000000000000483 R15: 0000200000000680 [ 108.571182][ T7999] [ 108.574226][ T7999] ---[ end trace 0000000000000000 ]--- [ 108.598838][ T7999] EXT4-fs (loop2): 1 orphan inode deleted [ 108.605351][ T7999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.640625][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.666754][ T8020] loop1: detected capacity change from 0 to 1024 [ 108.669461][ T8022] loop2: detected capacity change from 0 to 1024 [ 108.680734][ T8022] EXT4-fs: Ignoring removed orlov option [ 108.687687][ T8020] EXT4-fs: Ignoring removed orlov option [ 108.711952][ T8022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.712187][ T8020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.737339][ T8020] FAULT_INJECTION: forcing a failure. [ 108.737339][ T8020] name failslab, interval 1, probability 0, space 0, times 0 [ 108.750011][ T8020] CPU: 1 UID: 0 PID: 8020 Comm: syz.1.1703 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.750109][ T8020] Tainted: [W]=WARN [ 108.750117][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.750133][ T8020] Call Trace: [ 108.750141][ T8020] [ 108.750150][ T8020] __dump_stack+0x1d/0x30 [ 108.750178][ T8020] dump_stack_lvl+0xe8/0x140 [ 108.750202][ T8020] dump_stack+0x15/0x1b [ 108.750223][ T8020] should_fail_ex+0x265/0x280 [ 108.750306][ T8020] should_failslab+0x8c/0xb0 [ 108.750338][ T8020] kmem_cache_alloc_noprof+0x50/0x480 [ 108.750371][ T8020] ? getname_flags+0x80/0x3b0 [ 108.750459][ T8020] getname_flags+0x80/0x3b0 [ 108.750493][ T8020] user_path_at+0x28/0x130 [ 108.750600][ T8020] do_utimes+0xd9/0x210 [ 108.750633][ T8020] __x64_sys_utime+0xbc/0x140 [ 108.750668][ T8020] x64_sys_call+0x2b0f/0x3000 [ 108.750744][ T8020] do_syscall_64+0xd2/0x200 [ 108.750899][ T8020] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.750930][ T8020] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.750958][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.750984][ T8020] RIP: 0033:0x7f6f1afdefc9 [ 108.751002][ T8020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.751080][ T8020] RSP: 002b:00007f6f19a3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 108.751105][ T8020] RAX: ffffffffffffffda RBX: 00007f6f1b235fa0 RCX: 00007f6f1afdefc9 [ 108.751122][ T8020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 108.751137][ T8020] RBP: 00007f6f19a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.751153][ T8020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.751169][ T8020] R13: 00007f6f1b236038 R14: 00007f6f1b235fa0 R15: 00007ffd0af76d98 [ 108.751248][ T8020] [ 108.936855][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.975775][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.431794][ T8053] tipc: Started in network mode [ 109.436735][ T8053] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 109.446133][ T8053] tipc: Enabled bearer , priority 10 [ 109.452796][ T8053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8053 comm=syz.1.1710 [ 109.525662][ T8059] loop1: detected capacity change from 0 to 128 [ 109.542353][ T8061] loop0: detected capacity change from 0 to 512 [ 109.545822][ T8057] FAULT_INJECTION: forcing a failure. [ 109.545822][ T8057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.561778][ T8057] CPU: 1 UID: 0 PID: 8057 Comm: syz.3.1712 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.561818][ T8057] Tainted: [W]=WARN [ 109.561827][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.561843][ T8057] Call Trace: [ 109.561852][ T8057] [ 109.561861][ T8057] __dump_stack+0x1d/0x30 [ 109.561890][ T8057] dump_stack_lvl+0xe8/0x140 [ 109.561913][ T8057] dump_stack+0x15/0x1b [ 109.561934][ T8057] should_fail_ex+0x265/0x280 [ 109.561986][ T8057] should_fail+0xb/0x20 [ 109.562040][ T8057] should_fail_usercopy+0x1a/0x20 [ 109.562066][ T8057] _copy_to_iter+0x251/0xe70 [ 109.562100][ T8057] seq_read_iter+0x776/0x950 [ 109.562141][ T8057] seq_read+0x270/0x2b0 [ 109.562205][ T8057] ? __pfx_seq_read+0x10/0x10 [ 109.562283][ T8057] proc_reg_read+0x128/0x1c0 [ 109.562301][ T8057] ? __pfx_proc_reg_read+0x10/0x10 [ 109.562322][ T8057] vfs_read+0x1a8/0x770 [ 109.562345][ T8057] ? __rcu_read_unlock+0x4f/0x70 [ 109.562376][ T8057] ? __fget_files+0x184/0x1c0 [ 109.562460][ T8057] ksys_read+0xda/0x1a0 [ 109.562488][ T8057] __x64_sys_read+0x40/0x50 [ 109.562512][ T8057] x64_sys_call+0x27c0/0x3000 [ 109.562538][ T8057] do_syscall_64+0xd2/0x200 [ 109.562570][ T8057] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.562649][ T8057] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.562689][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.562709][ T8057] RIP: 0033:0x7f36d771efc9 [ 109.562722][ T8057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.562779][ T8057] RSP: 002b:00007f36d6187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.562796][ T8057] RAX: ffffffffffffffda RBX: 00007f36d7975fa0 RCX: 00007f36d771efc9 [ 109.562807][ T8057] RDX: 0000000000001000 RSI: 0000200000001580 RDI: 0000000000000004 [ 109.562818][ T8057] RBP: 00007f36d6187090 R08: 0000000000000000 R09: 0000000000000000 [ 109.562829][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.562840][ T8057] R13: 00007f36d7976038 R14: 00007f36d7975fa0 R15: 00007ffdb4af7b98 [ 109.562856][ T8057] [ 109.564857][ T8061] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.665286][ T8063] bio_check_eod: 45 callbacks suppressed [ 109.665306][ T8063] syz.1.1713: attempt to access beyond end of device [ 109.665306][ T8063] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 109.674735][ T8061] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1714: bg 0: block 248: padding at end of block bitmap is not set [ 109.714834][ T8065] lo speed is unknown, defaulting to 1000 [ 109.726346][ T8061] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1714: Failed to acquire dquot type 1 [ 109.742800][ T8063] syz.1.1713: attempt to access beyond end of device [ 109.742800][ T8063] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 109.850947][ T8061] EXT4-fs (loop0): 1 truncate cleaned up [ 109.867498][ T8063] syz.1.1713: attempt to access beyond end of device [ 109.867498][ T8063] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 109.868224][ T8061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.897318][ T8063] syz.1.1713: attempt to access beyond end of device [ 109.897318][ T8063] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 109.911020][ T8063] syz.1.1713: attempt to access beyond end of device [ 109.911020][ T8063] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 109.928825][ T8069] __nla_validate_parse: 4 callbacks suppressed [ 109.928853][ T8069] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1716'. [ 109.948338][ T8063] syz.1.1713: attempt to access beyond end of device [ 109.948338][ T8063] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 109.963372][ T8063] syz.1.1713: attempt to access beyond end of device [ 109.963372][ T8063] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 109.978705][ T8068] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 109.986347][ T8063] syz.1.1713: attempt to access beyond end of device [ 109.986347][ T8063] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 110.000943][ T8063] syz.1.1713: attempt to access beyond end of device [ 110.000943][ T8063] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 110.016392][ T8075] SELinux: syz.0.1714 (8075) set checkreqprot to 1. This is no longer supported. [ 110.018432][ T8073] loop3: detected capacity change from 0 to 256 [ 110.027144][ T8068] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.042813][ T8068] net_ratelimit: 11 callbacks suppressed [ 110.042826][ T8068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.064020][ T1042] lo speed is unknown, defaulting to 1000 [ 110.069759][ T1042] syz2: Port: 1 Link ACTIVE [ 110.071354][ T8073] msdos: Unknown parameter 'nofots' [ 110.075271][ T8063] syz.1.1713: attempt to access beyond end of device [ 110.075271][ T8063] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 110.098378][ T8061] syz.0.1714 (8061) used greatest stack depth: 9200 bytes left [ 110.106088][ T8068] hub 9-0:1.0: USB hub found [ 110.115770][ T8068] FAULT_INJECTION: forcing a failure. [ 110.115770][ T8068] name failslab, interval 1, probability 0, space 0, times 0 [ 110.128504][ T8068] CPU: 0 UID: 0 PID: 8068 Comm: syz.2.1716 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.128543][ T8068] Tainted: [W]=WARN [ 110.128551][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.128585][ T8068] Call Trace: [ 110.128593][ T8068] [ 110.128603][ T8068] __dump_stack+0x1d/0x30 [ 110.128624][ T8068] dump_stack_lvl+0xe8/0x140 [ 110.128643][ T8068] dump_stack+0x15/0x1b [ 110.128747][ T8068] should_fail_ex+0x265/0x280 [ 110.128839][ T8068] ? hub_probe+0x796/0x1700 [ 110.128882][ T8068] should_failslab+0x8c/0xb0 [ 110.128964][ T8068] __kmalloc_cache_noprof+0x4c/0x4a0 [ 110.129008][ T8068] hub_probe+0x796/0x1700 [ 110.129044][ T8068] ? read_tsc+0x9/0x20 [ 110.129062][ T8068] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 110.129160][ T8068] usb_probe_interface+0x47c/0x700 [ 110.129194][ T8068] ? __pfx_usb_probe_interface+0x10/0x10 [ 110.129291][ T8068] really_probe+0x1bf/0x5c0 [ 110.129322][ T8068] __driver_probe_device+0x121/0x190 [ 110.129353][ T8068] driver_probe_device+0x37/0x2f0 [ 110.129377][ T8068] __device_attach_driver+0x205/0x310 [ 110.129455][ T8068] ? __pfx___device_attach_driver+0x10/0x10 [ 110.129481][ T8068] bus_for_each_drv+0x1c0/0x230 [ 110.129523][ T8068] __device_attach+0x1c7/0x290 [ 110.129553][ T8068] device_attach+0x17/0x20 [ 110.129582][ T8068] proc_ioctl+0x2f7/0x400 [ 110.129626][ T8068] proc_ioctl_default+0x71/0xa0 [ 110.129664][ T8068] usbdev_ioctl+0xe8b/0x1700 [ 110.129691][ T8068] ? __pfx_usbdev_ioctl+0x10/0x10 [ 110.129726][ T8068] __se_sys_ioctl+0xce/0x140 [ 110.129816][ T8068] __x64_sys_ioctl+0x43/0x50 [ 110.129888][ T8068] x64_sys_call+0x1816/0x3000 [ 110.129918][ T8068] do_syscall_64+0xd2/0x200 [ 110.129952][ T8068] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.130117][ T8068] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.130146][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.130170][ T8068] RIP: 0033:0x7fb5efbbefc9 [ 110.130186][ T8068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.130204][ T8068] RSP: 002b:00007fb5ee627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.130239][ T8068] RAX: ffffffffffffffda RBX: 00007fb5efe15fa0 RCX: 00007fb5efbbefc9 [ 110.130291][ T8068] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000007 [ 110.130303][ T8068] RBP: 00007fb5ee627090 R08: 0000000000000000 R09: 0000000000000000 [ 110.130320][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.130337][ T8068] R13: 00007fb5efe16038 R14: 00007fb5efe15fa0 R15: 00007ffd4c381138 [ 110.130375][ T8068] [ 110.136976][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.141719][ T8068] hub 9-0:1.0: config failed, out of memory (err -12) [ 110.265656][ T8079] loop3: detected capacity change from 0 to 128 [ 110.440150][ T8079] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.452354][ T1042] tipc: Node number set to 4269801494 [ 110.502279][ T8092] loop0: detected capacity change from 0 to 256 [ 110.568584][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.587993][ T8098] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 110.611680][ T8092] 9pnet: Could not find request transport: tcp:‚à»ù€Ñð¥ò[OD÷xU<ÒÇ K/“ :ÅZéWrÄcŽo& Íb]Ë&¨4# TÕž„=zÍlóÄÑÎå³b6L¡ýP>Ÿž| ^ )(ŒŸõöxà:S0_ [ 110.730698][ T8111] FAULT_INJECTION: forcing a failure. [ 110.730698][ T8111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.743829][ T8111] CPU: 0 UID: 0 PID: 8111 Comm: syz.4.1731 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.743907][ T8111] Tainted: [W]=WARN [ 110.743916][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.743932][ T8111] Call Trace: [ 110.743940][ T8111] [ 110.743949][ T8111] __dump_stack+0x1d/0x30 [ 110.743970][ T8111] dump_stack_lvl+0xe8/0x140 [ 110.744032][ T8111] dump_stack+0x15/0x1b [ 110.744053][ T8111] should_fail_ex+0x265/0x280 [ 110.744094][ T8111] should_fail+0xb/0x20 [ 110.744227][ T8111] should_fail_usercopy+0x1a/0x20 [ 110.744255][ T8111] _copy_from_user+0x1c/0xb0 [ 110.744282][ T8111] __sys_bind+0x106/0x2a0 [ 110.744395][ T8111] __x64_sys_bind+0x3f/0x50 [ 110.744424][ T8111] x64_sys_call+0x2b72/0x3000 [ 110.744445][ T8111] do_syscall_64+0xd2/0x200 [ 110.744486][ T8111] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.744555][ T8111] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.744585][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.744613][ T8111] RIP: 0033:0x7fc32dbaefc9 [ 110.744636][ T8111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.744654][ T8111] RSP: 002b:00007fc32c617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 110.744693][ T8111] RAX: ffffffffffffffda RBX: 00007fc32de05fa0 RCX: 00007fc32dbaefc9 [ 110.744711][ T8111] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 110.744728][ T8111] RBP: 00007fc32c617090 R08: 0000000000000000 R09: 0000000000000000 [ 110.744745][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.744761][ T8111] R13: 00007fc32de06038 R14: 00007fc32de05fa0 R15: 00007ffef83bb7f8 [ 110.744822][ T8111] [ 110.943916][ T8115] rdma_rxe: rxe_newlink: failed to add lo [ 111.005247][ T8117] loop4: detected capacity change from 0 to 128 [ 111.027368][ T8118] FAULT_INJECTION: forcing a failure. [ 111.027368][ T8118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.040611][ T8118] CPU: 1 UID: 0 PID: 8118 Comm: syz.1.1728 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.040655][ T8118] Tainted: [W]=WARN [ 111.040664][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.040681][ T8118] Call Trace: [ 111.040689][ T8118] [ 111.040762][ T8118] __dump_stack+0x1d/0x30 [ 111.040790][ T8118] dump_stack_lvl+0xe8/0x140 [ 111.040815][ T8118] dump_stack+0x15/0x1b [ 111.040837][ T8118] should_fail_ex+0x265/0x280 [ 111.040946][ T8118] should_fail+0xb/0x20 [ 111.040982][ T8118] should_fail_usercopy+0x1a/0x20 [ 111.041037][ T8118] _copy_from_user+0x1c/0xb0 [ 111.041067][ T8118] copy_from_sockptr_offset+0x66/0xa0 [ 111.041106][ T8118] do_ip6t_set_ctl+0x5d1/0x840 [ 111.041207][ T8118] ? kstrtoull+0x111/0x140 [ 111.041240][ T8118] ? __rcu_read_unlock+0x4f/0x70 [ 111.041330][ T8118] nf_setsockopt+0x199/0x1b0 [ 111.041350][ T8118] ipv6_setsockopt+0x11a/0x130 [ 111.041421][ T8118] tcp_setsockopt+0x98/0xb0 [ 111.041460][ T8118] sock_common_setsockopt+0x69/0x80 [ 111.041609][ T8118] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 111.041766][ T8118] __sys_setsockopt+0x184/0x200 [ 111.041872][ T8118] __x64_sys_setsockopt+0x64/0x80 [ 111.041908][ T8118] x64_sys_call+0x20ec/0x3000 [ 111.042001][ T8118] do_syscall_64+0xd2/0x200 [ 111.042025][ T8118] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.042052][ T8118] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.042159][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.042189][ T8118] RIP: 0033:0x7f6f1afdefc9 [ 111.042243][ T8118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.042287][ T8118] RSP: 002b:00007f6f199fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.042312][ T8118] RAX: ffffffffffffffda RBX: 00007f6f1b236180 RCX: 00007f6f1afdefc9 [ 111.042329][ T8118] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 111.042345][ T8118] RBP: 00007f6f199fd090 R08: 00000000000003c0 R09: 0000000000000000 [ 111.042360][ T8118] R10: 0000200000001040 R11: 0000000000000246 R12: 0000000000000001 [ 111.042372][ T8118] R13: 00007f6f1b236218 R14: 00007f6f1b236180 R15: 00007ffd0af76d98 [ 111.042390][ T8118] [ 111.325409][ T29] kauditd_printk_skb: 1632 callbacks suppressed [ 111.325424][ T29] audit: type=1400 audit(111.288:30412): avc: denied { create } for pid=8119 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.327180][ T8120] loop0: detected capacity change from 0 to 512 [ 111.367340][ T8120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.392482][ T8123] loop3: detected capacity change from 0 to 128 [ 111.420532][ T8123] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 111.433254][ T8120] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 111.465589][ T8120] EXT4-fs (loop0): 1 truncate cleaned up [ 111.521926][ T8120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.562891][ T29] audit: type=1400 audit(111.518:30413): avc: denied { create } for pid=8119 comm="GPL" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 111.614124][ T8123] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 111.621703][ T8123] FAT-fs (loop3): Filesystem has been set read-only [ 111.628790][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1735'. [ 111.643594][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.652813][ T29] audit: type=1400 audit(111.598:30414): avc: denied { write } for pid=8122 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.724246][ T29] audit: type=1326 audit(111.678:30415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1afdefc9 code=0x7ffc0000 [ 111.747217][ T29] audit: type=1326 audit(111.678:30416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1afdefc9 code=0x7ffc0000 [ 111.794218][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.805532][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.814450][ T29] audit: type=1400 audit(111.708:30417): avc: denied { allowed } for pid=8128 comm="syz.3.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 111.833411][ T29] audit: type=1326 audit(111.738:30418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1afdefc9 code=0x7ffc0000 [ 111.856336][ T29] audit: type=1326 audit(111.738:30419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1afdefc9 code=0x7ffc0000 [ 111.879491][ T29] audit: type=1326 audit(111.738:30420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1afdefc9 code=0x7ffc0000 [ 111.902461][ T29] audit: type=1326 audit(111.738:30421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f6f1afdefc9 code=0x7ffc0000 [ 111.972404][ T8142] loop2: detected capacity change from 0 to 256 [ 112.000674][ T8144] loop3: detected capacity change from 0 to 512 [ 112.014933][ T8144] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.027225][ T8146] loop4: detected capacity change from 0 to 512 [ 112.037292][ T8144] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.047532][ T8144] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 112.062347][ T8144] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 112.069005][ T8144] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1744: bad orphan inode 768 [ 112.083176][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.100787][ T8146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.114284][ T8142] 9pnet: Could not find request transport: tcp:‚à»ù€Ñð¥ò[OD÷xU<ÒÇ K/“ :ÅZéWrÄcŽo& Íb]Ë&¨4# TÕž„=zÍlóÄÑÎå³b6L¡ýP>Ÿž| ^ )(ŒŸõöxà:S0_ [ 112.118804][ T8144] netlink: 'syz.3.1744': attribute type 13 has an invalid length. [ 112.136480][ T8144] netlink: 'syz.3.1744': attribute type 27 has an invalid length. [ 112.146147][ T8146] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.1743: iget: bad i_size value: 2533274857506816 [ 112.174166][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.202311][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.234265][ T8155] loop4: detected capacity change from 0 to 512 [ 112.245552][ T8152] loop3: detected capacity change from 0 to 512 [ 112.259416][ T8155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.281584][ T8152] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1745: error while reading EA inode 32 err=-116 [ 112.294462][ T8155] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.294749][ T8152] EXT4-fs (loop3): Remounting filesystem read-only [ 112.303235][ T8155] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1746: bg 0: block 248: padding at end of block bitmap is not set [ 112.307960][ T8152] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 112.332983][ T8152] EXT4-fs (loop3): 1 orphan inode deleted [ 112.339826][ T8152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.343837][ T8155] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1746: Failed to acquire dquot type 1 [ 112.356288][ T8152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.382163][ T8155] EXT4-fs (loop4): 1 truncate cleaned up [ 112.394834][ T8155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.410390][ T8163] loop2: detected capacity change from 0 to 512 [ 112.417508][ T8155] EXT4-fs (loop4): shut down requested (0) [ 112.427511][ T8163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.456544][ T8163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.469702][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.601714][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.624992][ T8182] netlink: 'syz.4.1756': attribute type 83 has an invalid length. [ 112.637814][ T8180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1755'. [ 112.651272][ T8184] loop2: detected capacity change from 0 to 256 [ 112.693901][ T8188] FAULT_INJECTION: forcing a failure. [ 112.693901][ T8188] name failslab, interval 1, probability 0, space 0, times 0 [ 112.706643][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.1.1759 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.706743][ T8188] Tainted: [W]=WARN [ 112.706752][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.706779][ T8188] Call Trace: [ 112.706785][ T8188] [ 112.706793][ T8188] __dump_stack+0x1d/0x30 [ 112.706816][ T8188] dump_stack_lvl+0xe8/0x140 [ 112.706837][ T8188] dump_stack+0x15/0x1b [ 112.706855][ T8188] should_fail_ex+0x265/0x280 [ 112.706935][ T8188] should_failslab+0x8c/0xb0 [ 112.706990][ T8188] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 112.707025][ T8188] ? sidtab_sid2str_get+0xa0/0x130 [ 112.707064][ T8188] kmemdup_noprof+0x2b/0x70 [ 112.707091][ T8188] sidtab_sid2str_get+0xa0/0x130 [ 112.707123][ T8188] security_sid_to_context_core+0x1eb/0x2e0 [ 112.707153][ T8188] security_sid_to_context+0x27/0x40 [ 112.707250][ T8188] selinux_lsmprop_to_secctx+0x67/0xf0 [ 112.707349][ T8188] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 112.707373][ T8188] audit_log_subj_ctx+0xa4/0x3e0 [ 112.707395][ T8188] ? skb_put+0xa9/0xf0 [ 112.707425][ T8188] audit_log_task_context+0x48/0x70 [ 112.707449][ T8188] audit_log_task+0xf4/0x250 [ 112.707548][ T8188] ? kstrtouint+0x76/0xc0 [ 112.707584][ T8188] audit_seccomp+0x61/0x100 [ 112.707616][ T8188] ? __seccomp_filter+0x82d/0x1250 [ 112.707716][ T8188] __seccomp_filter+0x83e/0x1250 [ 112.707805][ T8188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 112.707835][ T8188] ? vfs_write+0x7e8/0x960 [ 112.707885][ T8188] ? __rcu_read_unlock+0x4f/0x70 [ 112.707969][ T8188] ? __fget_files+0x184/0x1c0 [ 112.708000][ T8188] __secure_computing+0x82/0x150 [ 112.708028][ T8188] syscall_trace_enter+0xcf/0x1e0 [ 112.708065][ T8188] do_syscall_64+0xac/0x200 [ 112.708094][ T8188] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.708176][ T8188] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.708238][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.708260][ T8188] RIP: 0033:0x7f6f1afdefc9 [ 112.708276][ T8188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.708361][ T8188] RSP: 002b:00007f6f19a3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.708384][ T8188] RAX: ffffffffffffffda RBX: 00007f6f1b235fa0 RCX: 00007f6f1afdefc9 [ 112.708398][ T8188] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 112.708458][ T8188] RBP: 00007f6f19a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.708472][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.708485][ T8188] R13: 00007f6f1b236038 R14: 00007f6f1b235fa0 R15: 00007ffd0af76d98 [ 112.708505][ T8188] [ 112.996914][ T8184] 9pnet: Could not find request transport: tcp:‚à»ù€Ñð¥ò[OD÷xU<ÒÇ K/“ :ÅZéWrÄcŽo& Íb]Ë&¨4# TÕž„=zÍlóÄÑÎå³b6L¡ýP>Ÿž| ^ )(ŒŸõöxà:S0_ [ 113.026711][ T8182] loop4: detected capacity change from 0 to 8192 [ 113.032873][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1760'. [ 113.045587][ T8182] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.051749][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.063579][ T8182] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 113.072167][ T8182] FAT-fs (loop4): Filesystem has been set read-only [ 113.079701][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 113.091259][ T8192] bond0 (unregistering): Released all slaves [ 113.150547][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.169012][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.194181][ T8204] loop3: detected capacity change from 0 to 128 [ 113.206635][ T8204] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.220911][ T8204] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.1765: No space for directory leaf checksum. Please run e2fsck -D. [ 113.236306][ T8204] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.1765: checksumming directory block 0 [ 113.265389][ T8204] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.1765: No space for directory leaf checksum. Please run e2fsck -D. [ 113.280799][ T8204] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.1765: checksumming directory block 0 [ 113.341267][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.496682][ T8217] FAULT_INJECTION: forcing a failure. [ 113.496682][ T8217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.509998][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.3.1769 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.510031][ T8217] Tainted: [W]=WARN [ 113.510038][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.510054][ T8217] Call Trace: [ 113.510063][ T8217] [ 113.510073][ T8217] __dump_stack+0x1d/0x30 [ 113.510100][ T8217] dump_stack_lvl+0xe8/0x140 [ 113.510154][ T8217] dump_stack+0x15/0x1b [ 113.510170][ T8217] should_fail_ex+0x265/0x280 [ 113.510252][ T8217] should_fail+0xb/0x20 [ 113.510291][ T8217] should_fail_usercopy+0x1a/0x20 [ 113.510319][ T8217] _copy_to_user+0x20/0xa0 [ 113.510354][ T8217] simple_read_from_buffer+0xb5/0x130 [ 113.510427][ T8217] proc_fail_nth_read+0x10e/0x150 [ 113.510495][ T8217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.510530][ T8217] vfs_read+0x1a8/0x770 [ 113.510580][ T8217] ? __rcu_read_unlock+0x4f/0x70 [ 113.510655][ T8217] ? __fget_files+0x184/0x1c0 [ 113.510683][ T8217] ksys_read+0xda/0x1a0 [ 113.510708][ T8217] __x64_sys_read+0x40/0x50 [ 113.510772][ T8217] x64_sys_call+0x27c0/0x3000 [ 113.510799][ T8217] do_syscall_64+0xd2/0x200 [ 113.510831][ T8217] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.510865][ T8217] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 113.510949][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.510976][ T8217] RIP: 0033:0x7f36d771d9dc [ 113.510995][ T8217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.511018][ T8217] RSP: 002b:00007f36d6187030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.511042][ T8217] RAX: ffffffffffffffda RBX: 00007f36d7975fa0 RCX: 00007f36d771d9dc [ 113.511087][ T8217] RDX: 000000000000000f RSI: 00007f36d61870a0 RDI: 0000000000000003 [ 113.511100][ T8217] RBP: 00007f36d6187090 R08: 0000000000000000 R09: 0000000000000000 [ 113.511113][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.511127][ T8217] R13: 00007f36d7976038 R14: 00007f36d7975fa0 R15: 00007ffdb4af7b98 [ 113.511152][ T8217] [ 113.734745][ T8222] loop3: detected capacity change from 0 to 128 [ 113.746003][ T8219] FAULT_INJECTION: forcing a failure. [ 113.746003][ T8219] name failslab, interval 1, probability 0, space 0, times 0 [ 113.758780][ T8219] CPU: 1 UID: 0 PID: 8219 Comm: syz.2.1770 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.758821][ T8219] Tainted: [W]=WARN [ 113.758830][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.758895][ T8219] Call Trace: [ 113.758904][ T8219] [ 113.758915][ T8219] __dump_stack+0x1d/0x30 [ 113.759008][ T8219] dump_stack_lvl+0xe8/0x140 [ 113.759038][ T8219] dump_stack+0x15/0x1b [ 113.759055][ T8219] should_fail_ex+0x265/0x280 [ 113.759102][ T8219] should_failslab+0x8c/0xb0 [ 113.759157][ T8219] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 113.759195][ T8219] ? __alloc_skb+0x101/0x320 [ 113.759231][ T8219] __alloc_skb+0x101/0x320 [ 113.759289][ T8219] netlink_alloc_large_skb+0xbf/0xf0 [ 113.759361][ T8219] netlink_sendmsg+0x3cf/0x6b0 [ 113.759405][ T8219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.759447][ T8219] __sock_sendmsg+0x145/0x180 [ 113.759479][ T8219] ____sys_sendmsg+0x31e/0x4e0 [ 113.759565][ T8219] ___sys_sendmsg+0x17b/0x1d0 [ 113.759622][ T8219] __x64_sys_sendmsg+0xd4/0x160 [ 113.759657][ T8219] x64_sys_call+0x191e/0x3000 [ 113.759716][ T8219] do_syscall_64+0xd2/0x200 [ 113.759750][ T8219] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.759784][ T8219] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 113.759810][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.759887][ T8219] RIP: 0033:0x7fb5efbbefc9 [ 113.759908][ T8219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.759932][ T8219] RSP: 002b:00007fb5ee627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.759957][ T8219] RAX: ffffffffffffffda RBX: 00007fb5efe15fa0 RCX: 00007fb5efbbefc9 [ 113.760035][ T8219] RDX: 0000000020008000 RSI: 0000200000000480 RDI: 0000000000000003 [ 113.760052][ T8219] RBP: 00007fb5ee627090 R08: 0000000000000000 R09: 0000000000000000 [ 113.760068][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.760084][ T8219] R13: 00007fb5efe16038 R14: 00007fb5efe15fa0 R15: 00007ffd4c381138 [ 113.760110][ T8219] [ 113.760701][ T8222] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.848790][ T8225] ip6gre9: entered allmulticast mode [ 113.851735][ T8189] delete_channel: no stack [ 113.866707][ T8225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8225 comm=syz.2.1772 [ 113.869470][ T8222] FAULT_INJECTION: forcing a failure. [ 113.869470][ T8222] name failslab, interval 1, probability 0, space 0, times 0 [ 114.013908][ T8222] CPU: 0 UID: 0 PID: 8222 Comm: syz.3.1771 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.014013][ T8222] Tainted: [W]=WARN [ 114.014019][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.014032][ T8222] Call Trace: [ 114.014037][ T8222] [ 114.014044][ T8222] __dump_stack+0x1d/0x30 [ 114.014065][ T8222] dump_stack_lvl+0xe8/0x140 [ 114.014089][ T8222] dump_stack+0x15/0x1b [ 114.014124][ T8222] should_fail_ex+0x265/0x280 [ 114.014186][ T8222] should_failslab+0x8c/0xb0 [ 114.014270][ T8222] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 114.014321][ T8222] ? __d_alloc+0x3d/0x340 [ 114.014350][ T8222] __d_alloc+0x3d/0x340 [ 114.014377][ T8222] d_alloc+0x2e/0x100 [ 114.014409][ T8222] lookup_one_qstr_excl+0x99/0x250 [ 114.014476][ T8222] filename_create+0x149/0x230 [ 114.014497][ T8222] do_mkdirat+0x52/0x3f0 [ 114.014519][ T8222] __x64_sys_mkdirat+0x4c/0x60 [ 114.014538][ T8222] x64_sys_call+0x2b7/0x3000 [ 114.014615][ T8222] do_syscall_64+0xd2/0x200 [ 114.014639][ T8222] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.014664][ T8222] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 114.014750][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.014770][ T8222] RIP: 0033:0x7f36d771d717 [ 114.014783][ T8222] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.014814][ T8222] RSP: 002b:00007f36d6186e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 114.014859][ T8222] RAX: ffffffffffffffda RBX: 00007f36d6186ef0 RCX: 00007f36d771d717 [ 114.014871][ T8222] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 114.014882][ T8222] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000 [ 114.014893][ T8222] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000000 [ 114.014946][ T8222] R13: 00007f36d6186eb0 R14: 0000000000000000 R15: 00002000000001c0 [ 114.014965][ T8222] [ 114.015113][ T8222] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.1771: No space for directory leaf checksum. Please run e2fsck -D. [ 114.224106][ T8222] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.1771: checksumming directory block 0 [ 114.291259][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.361735][ T8237] loop3: detected capacity change from 0 to 256 [ 114.441286][ T8237] 9pnet: Could not find request transport: tcp:‚à»ù€Ñð¥ò[OD÷xU<ÒÇ K/“ :ÅZéWrÄcŽo& Íb]Ë&¨4# TÕž„=zÍlóÄÑÎå³b6L¡ýP>Ÿž| ^ )(ŒŸõöxà:S0_ [ 114.470797][ T8239] loop2: detected capacity change from 0 to 1024 [ 114.480007][ T8239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.521051][ T8239] vhci_hcd: invalid port number 23 [ 114.526191][ T8239] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 114.544803][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.609434][ T8250] ip6gre5: entered allmulticast mode [ 114.620205][ T8250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8250 comm=syz.3.1780 [ 114.658826][ T8255] FAULT_INJECTION: forcing a failure. [ 114.658826][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 114.671723][ T8255] CPU: 0 UID: 0 PID: 8255 Comm: syz.3.1782 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.671794][ T8255] Tainted: [W]=WARN [ 114.671881][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.671894][ T8255] Call Trace: [ 114.671901][ T8255] [ 114.671907][ T8255] __dump_stack+0x1d/0x30 [ 114.671929][ T8255] dump_stack_lvl+0xe8/0x140 [ 114.671954][ T8255] dump_stack+0x15/0x1b [ 114.671971][ T8255] should_fail_ex+0x265/0x280 [ 114.672059][ T8255] should_failslab+0x8c/0xb0 [ 114.672094][ T8255] kmem_cache_alloc_noprof+0x50/0x480 [ 114.672176][ T8255] ? security_file_alloc+0x32/0x100 [ 114.672279][ T8255] security_file_alloc+0x32/0x100 [ 114.672306][ T8255] init_file+0x5c/0x1d0 [ 114.672348][ T8255] alloc_empty_file+0x8b/0x200 [ 114.672484][ T8255] path_openat+0x68/0x2170 [ 114.672504][ T8255] ? mntput+0x4b/0x80 [ 114.672556][ T8255] ? terminate_walk+0x27f/0x2a0 [ 114.672594][ T8255] ? path_openat+0x1bf8/0x2170 [ 114.672620][ T8255] ? _parse_integer_limit+0x170/0x190 [ 114.672709][ T8255] do_filp_open+0x109/0x230 [ 114.672743][ T8255] do_open_execat+0xd8/0x260 [ 114.672812][ T8255] alloc_bprm+0x25/0x350 [ 114.672832][ T8255] do_execveat_common+0x12e/0x750 [ 114.672857][ T8255] ? getname_flags+0x154/0x3b0 [ 114.672921][ T8255] __x64_sys_execveat+0x73/0x90 [ 114.672971][ T8255] x64_sys_call+0x1fec/0x3000 [ 114.672998][ T8255] do_syscall_64+0xd2/0x200 [ 114.673083][ T8255] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.673118][ T8255] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 114.673147][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.673238][ T8255] RIP: 0033:0x7f36d771efc9 [ 114.673253][ T8255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.673270][ T8255] RSP: 002b:00007f36d6187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 114.673291][ T8255] RAX: ffffffffffffffda RBX: 00007f36d7975fa0 RCX: 00007f36d771efc9 [ 114.673307][ T8255] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 114.673323][ T8255] RBP: 00007f36d6187090 R08: 0000000000001000 R09: 0000000000000000 [ 114.673339][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.673372][ T8255] R13: 00007f36d7976038 R14: 00007f36d7975fa0 R15: 00007ffdb4af7b98 [ 114.673390][ T8255] [ 114.953371][ T8290] loop3: detected capacity change from 0 to 1024 [ 114.964955][ T8290] EXT4-fs: Ignoring removed nobh option [ 114.970687][ T8290] EXT4-fs: Ignoring removed bh option [ 114.980805][ T8294] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.986925][ T8290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.007443][ T8290] FAULT_INJECTION: forcing a failure. [ 115.007443][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 115.020271][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.3.1786 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.020321][ T8290] Tainted: [W]=WARN [ 115.020328][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.020420][ T8290] Call Trace: [ 115.020427][ T8290] [ 115.020434][ T8290] __dump_stack+0x1d/0x30 [ 115.020467][ T8290] dump_stack_lvl+0xe8/0x140 [ 115.020524][ T8290] dump_stack+0x15/0x1b [ 115.020541][ T8290] should_fail_ex+0x265/0x280 [ 115.020636][ T8290] should_failslab+0x8c/0xb0 [ 115.020664][ T8290] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 115.020693][ T8290] ? __alloc_skb+0x101/0x320 [ 115.020753][ T8290] __alloc_skb+0x101/0x320 [ 115.020780][ T8290] alloc_skb_with_frags+0x7d/0x470 [ 115.020809][ T8290] ? number+0x9ae/0xab0 [ 115.020849][ T8290] sock_alloc_send_pskb+0x430/0x4e0 [ 115.020931][ T8290] ? copy_from_user_nofault+0xd5/0x120 [ 115.020985][ T8290] tun_get_user+0x9b3/0x26e0 [ 115.021021][ T8290] ? ref_tracker_alloc+0x1f2/0x2f0 [ 115.021058][ T8290] ? selinux_file_permission+0x2f0/0x320 [ 115.021130][ T8290] tun_chr_write_iter+0x15e/0x210 [ 115.021239][ T8290] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 115.021267][ T8290] vfs_write+0x52a/0x960 [ 115.021302][ T8290] ksys_write+0xda/0x1a0 [ 115.021376][ T8290] __x64_sys_write+0x40/0x50 [ 115.021399][ T8290] x64_sys_call+0x2802/0x3000 [ 115.021428][ T8290] do_syscall_64+0xd2/0x200 [ 115.021499][ T8290] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.021526][ T8290] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.021569][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.021600][ T8290] RIP: 0033:0x7f36d771da7f [ 115.021616][ T8290] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 115.021635][ T8290] RSP: 002b:00007f36d6187000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 115.021654][ T8290] RAX: ffffffffffffffda RBX: 00007f36d7975fa0 RCX: 00007f36d771da7f [ 115.021667][ T8290] RDX: 00000000ffffff68 RSI: 0000000000000000 RDI: 00000000000000c8 [ 115.021727][ T8290] RBP: 00007f36d6187090 R08: 0000000000000000 R09: 0000000000000000 [ 115.021739][ T8290] R10: ffffffffffffff68 R11: 0000000000000293 R12: 0000000000000001 [ 115.021751][ T8290] R13: 00007f36d7976038 R14: 00007f36d7975fa0 R15: 00007ffdb4af7b98 [ 115.021771][ T8290] [ 115.064058][ T8302] loop2: detected capacity change from 0 to 256 [ 115.122951][ T8304] macvtap0: refused to change device tx_queue_len [ 115.141187][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.146525][ T8304] netlink: 'syz.0.1791': attribute type 16 has an invalid length. [ 115.261566][ T8307] 9pnet: Could not find request transport: tcp:‚à»ù€Ñð¥ò[OD÷xU<ÒÇ K/“ :ÅZéWrÄcŽo& Íb]Ë&¨4# TÕž„=zÍlóÄÑÎå³b6L¡ýP>Ÿž| ^ )(ŒŸõöxà:S0_ [ 115.283605][ T8304] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 115.315729][ T8304] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.339311][ T8304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.384353][ T8315] ip6gre6: entered allmulticast mode [ 115.394707][ T8315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8315 comm=syz.3.1792 [ 115.441466][ T8317] loop0: detected capacity change from 0 to 512 [ 115.453606][ T8317] EXT4-fs (loop0): 1 truncate cleaned up [ 115.474587][ T8317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.518649][ T8328] FAULT_INJECTION: forcing a failure. [ 115.518649][ T8328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.531896][ T8328] CPU: 1 UID: 0 PID: 8328 Comm: syz.3.1798 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.532044][ T8328] Tainted: [W]=WARN [ 115.532053][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.532070][ T8328] Call Trace: [ 115.532078][ T8328] [ 115.532087][ T8328] __dump_stack+0x1d/0x30 [ 115.532109][ T8328] dump_stack_lvl+0xe8/0x140 [ 115.532128][ T8328] dump_stack+0x15/0x1b [ 115.532215][ T8328] should_fail_ex+0x265/0x280 [ 115.532255][ T8328] should_fail+0xb/0x20 [ 115.532293][ T8328] should_fail_usercopy+0x1a/0x20 [ 115.532320][ T8328] _copy_to_user+0x20/0xa0 [ 115.532416][ T8328] simple_read_from_buffer+0xb5/0x130 [ 115.532447][ T8328] proc_fail_nth_read+0x10e/0x150 [ 115.532568][ T8328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.532602][ T8328] vfs_read+0x1a8/0x770 [ 115.532631][ T8328] ? __rcu_read_unlock+0x4f/0x70 [ 115.532741][ T8328] ? __fget_files+0x184/0x1c0 [ 115.532769][ T8328] ksys_read+0xda/0x1a0 [ 115.532795][ T8328] __x64_sys_read+0x40/0x50 [ 115.532947][ T8328] x64_sys_call+0x27c0/0x3000 [ 115.533046][ T8328] do_syscall_64+0xd2/0x200 [ 115.533080][ T8328] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.533110][ T8328] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.533260][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.533282][ T8328] RIP: 0033:0x7f36d771d9dc [ 115.533301][ T8328] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.533326][ T8328] RSP: 002b:00007f36d6187030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.533350][ T8328] RAX: ffffffffffffffda RBX: 00007f36d7975fa0 RCX: 00007f36d771d9dc [ 115.533431][ T8328] RDX: 000000000000000f RSI: 00007f36d61870a0 RDI: 0000000000000003 [ 115.533447][ T8328] RBP: 00007f36d6187090 R08: 0000000000000000 R09: 0000000000000000 [ 115.533462][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.533474][ T8328] R13: 00007f36d7976038 R14: 00007f36d7975fa0 R15: 00007ffdb4af7b98 [ 115.533492][ T8328] [ 115.760892][ T8330] lo speed is unknown, defaulting to 1000 [ 115.914795][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.994618][ T8337] netlink: 'syz.3.1801': attribute type 3 has an invalid length. [ 116.063273][ T8344] ip6gre7: entered allmulticast mode [ 116.070196][ T8346] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 116.081879][ T8344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8344 comm=syz.3.1805 [ 116.131675][ T8351] loop1: detected capacity change from 0 to 128 [ 116.164102][ T8355] loop3: detected capacity change from 0 to 128 [ 116.233376][ T8351] bio_check_eod: 9779 callbacks suppressed [ 116.233473][ T8351] syz.1.1807: attempt to access beyond end of device [ 116.233473][ T8351] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 116.263653][ T8359] syz.3.1808: attempt to access beyond end of device [ 116.263653][ T8359] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 116.277429][ T8359] syz.3.1808: attempt to access beyond end of device [ 116.277429][ T8359] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 116.291125][ T8351] syz.1.1807: attempt to access beyond end of device [ 116.291125][ T8351] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 116.304782][ T8351] syz.1.1807: attempt to access beyond end of device [ 116.304782][ T8351] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 116.343189][ T8359] syz.3.1808: attempt to access beyond end of device [ 116.343189][ T8359] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 116.359112][ T8351] syz.1.1807: attempt to access beyond end of device [ 116.359112][ T8351] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 116.378354][ T8351] syz.1.1807: attempt to access beyond end of device [ 116.378354][ T8351] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 116.400217][ T29] kauditd_printk_skb: 1152 callbacks suppressed [ 116.406722][ T29] audit: type=1326 audit(116.378:31571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.410360][ T8351] syz.1.1807: attempt to access beyond end of device [ 116.410360][ T8351] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 116.437597][ T8359] syz.3.1808: attempt to access beyond end of device [ 116.437597][ T8359] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 116.460908][ T8364] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 116.464856][ T29] audit: type=1326 audit(116.378:31572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.468685][ T8364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1812'. [ 116.491636][ T29] audit: type=1326 audit(116.388:31573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.523746][ T29] audit: type=1326 audit(116.388:31574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.523782][ T29] audit: type=1326 audit(116.388:31575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.523974][ T29] audit: type=1326 audit(116.388:31576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.524006][ T29] audit: type=1326 audit(116.438:31577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.524114][ T29] audit: type=1326 audit(116.438:31578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.524157][ T29] audit: type=1326 audit(116.438:31579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.524262][ T29] audit: type=1326 audit(116.438:31580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.2.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 116.580732][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 116.580766][ T8367] batadv1: left allmulticast mode [ 116.580787][ T8367] batadv1: left promiscuous mode [ 116.580992][ T8367] bridge0: port 3(batadv1) entered disabled state [ 116.632128][ T8367] bridge_slave_1: left allmulticast mode [ 116.632224][ T8367] bridge_slave_1: left promiscuous mode [ 116.632397][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.656452][ T8367] bridge_slave_0: left allmulticast mode [ 116.656471][ T8367] bridge_slave_0: left promiscuous mode [ 116.656709][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.767720][ T8378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8378 comm=syz.3.1816 [ 116.771518][ T8377] ip6gre8: entered allmulticast mode [ 116.838933][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.839024][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.939624][ T8382] ------------[ cut here ]------------ [ 116.945169][ T8382] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x1] s64=[0x0, 0x1] u32=[0x1, 0x0] s32=[0x0, 0x1] var_off=(0x0, 0x1) [ 116.961179][ T8382] WARNING: CPU: 1 PID: 8382 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 116.971719][ T8382] Modules linked in: [ 116.975664][ T8382] CPU: 1 UID: 0 PID: 8382 Comm: syz.2.1818 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.987039][ T8382] Tainted: [W]=WARN [ 116.990903][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.001147][ T8382] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 117.007437][ T8382] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 82 00 bb ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 117.027150][ T8382] RSP: 0018:ffffc90000f9b408 EFLAGS: 00010282 [ 117.033267][ T8382] RAX: 08e1405469d1ad00 RBX: ffff88811a71a040 RCX: 0000000000080000 [ 117.041344][ T8382] RDX: ffffc90002613000 RSI: 0000000000007ebb RDI: 0000000000007ebc [ 117.049333][ T8382] RBP: 0000000000000000 R08: 0001c90000f9b257 R09: 0000000000000000 [ 117.057397][ T8382] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a71a000 [ 117.065482][ T8382] R13: ffff88812fc90000 R14: ffff88812fc90000 R15: ffff88811a71a038 [ 117.073484][ T8382] FS: 00007fb5ee6276c0(0000) GS:ffff8882aef39000(0000) knlGS:0000000000000000 [ 117.082505][ T8382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.089092][ T8382] CR2: ffffffffdfa50000 CR3: 000000011c0ee000 CR4: 00000000003506f0 [ 117.097143][ T8382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.105198][ T8382] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 117.113188][ T8382] Call Trace: [ 117.116479][ T8382] [ 117.119422][ T8382] reg_set_min_max+0x1c1/0x260 [ 117.124274][ T8382] check_cond_jmp_op+0x1370/0x19e0 [ 117.129427][ T8382] do_check+0x3363/0x8460 [ 117.133870][ T8382] ? init_func_state+0x58f/0x1370 [ 117.138974][ T8382] ? __pfx_verbose+0x10/0x10 [ 117.143660][ T8382] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 117.149230][ T8382] do_check_common+0xc5e/0x12b0 [ 117.154241][ T8382] bpf_check+0xaaae/0xd9d0 [ 117.158758][ T8382] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 117.164835][ T8382] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 117.170807][ T8382] ? _find_next_bit+0x29/0x90 [ 117.175511][ T8382] ? pcpu_block_update+0x24e/0x3b0 [ 117.180659][ T8382] ? css_rstat_updated+0xb7/0x240 [ 117.185829][ T8382] ? __rcu_read_unlock+0x4f/0x70 [ 117.190808][ T8382] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 117.196739][ T8382] ? xfd_validate_state+0x45/0xf0 [ 117.201843][ T8382] ? save_fpregs_to_fpstate+0x100/0x160 [ 117.207485][ T8382] ? finish_task_switch+0xad/0x2b0 [ 117.212655][ T8382] ? __schedule+0x6b9/0xb30 [ 117.217241][ T8382] ? should_fail_ex+0x30/0x280 [ 117.222091][ T8382] ? should_failslab+0x8c/0xb0 [ 117.226995][ T8382] ? __kmalloc_noprof+0x2a2/0x570 [ 117.232064][ T8382] ? security_bpf_prog_load+0x60/0x140 [ 117.237646][ T8382] ? selinux_bpf_prog_load+0xad/0xd0 [ 117.242968][ T8382] ? security_bpf_prog_load+0x9e/0x140 [ 117.248492][ T8382] bpf_prog_load+0xf6e/0x1100 [ 117.253230][ T8382] ? security_bpf+0x2b/0x90 [ 117.257760][ T8382] __sys_bpf+0x469/0x7c0 [ 117.262167][ T8382] __x64_sys_bpf+0x41/0x50 [ 117.266615][ T8382] x64_sys_call+0x2aee/0x3000 [ 117.271323][ T8382] do_syscall_64+0xd2/0x200 [ 117.275865][ T8382] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.282084][ T8382] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.287825][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.293799][ T8382] RIP: 0033:0x7fb5efbbefc9 [ 117.298228][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.317944][ T8382] RSP: 002b:00007fb5ee627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.326468][ T8382] RAX: ffffffffffffffda RBX: 00007fb5efe15fa0 RCX: 00007fb5efbbefc9 [ 117.334534][ T8382] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 117.342546][ T8382] RBP: 00007fb5efc41f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.350618][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.358600][ T8382] R13: 00007fb5efe16038 R14: 00007fb5efe15fa0 R15: 00007ffd4c381138 [ 117.366633][ T8382] [ 117.369661][ T8382] ---[ end trace 0000000000000000 ]--- [ 117.376738][ T8389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1821'. [ 117.450795][ T8398] FAULT_INJECTION: forcing a failure. [ 117.450795][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 117.463529][ T8398] CPU: 1 UID: 0 PID: 8398 Comm: syz.0.1825 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.463615][ T8398] Tainted: [W]=WARN [ 117.463623][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.463640][ T8398] Call Trace: [ 117.463648][ T8398] [ 117.463705][ T8398] __dump_stack+0x1d/0x30 [ 117.463730][ T8398] dump_stack_lvl+0xe8/0x140 [ 117.463753][ T8398] dump_stack+0x15/0x1b [ 117.463774][ T8398] should_fail_ex+0x265/0x280 [ 117.463816][ T8398] should_failslab+0x8c/0xb0 [ 117.463912][ T8398] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 117.463949][ T8398] ? __alloc_skb+0x101/0x320 [ 117.463990][ T8398] __alloc_skb+0x101/0x320 [ 117.464077][ T8398] ? audit_log_start+0x342/0x720 [ 117.464103][ T8398] audit_log_start+0x3a0/0x720 [ 117.464126][ T8398] ? kstrtouint+0x76/0xc0 [ 117.464174][ T8398] audit_seccomp+0x48/0x100 [ 117.464268][ T8398] ? __seccomp_filter+0x82d/0x1250 [ 117.464300][ T8398] __seccomp_filter+0x83e/0x1250 [ 117.464333][ T8398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 117.464423][ T8398] ? vfs_write+0x7e8/0x960 [ 117.464460][ T8398] __secure_computing+0x82/0x150 [ 117.464507][ T8398] syscall_trace_enter+0xcf/0x1e0 [ 117.464574][ T8398] do_syscall_64+0xac/0x200 [ 117.464599][ T8398] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.464624][ T8398] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.464650][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.464744][ T8398] RIP: 0033:0x7f8bde27efc9 [ 117.464764][ T8398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.464788][ T8398] RSP: 002b:00007f8bdccdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e2 [ 117.464808][ T8398] RAX: ffffffffffffffda RBX: 00007f8bde4d5fa0 RCX: 00007f8bde27efc9 [ 117.464821][ T8398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.464833][ T8398] RBP: 00007f8bdccdf090 R08: 0000000000000000 R09: 0000000000000000 [ 117.464845][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.464858][ T8398] R13: 00007f8bde4d6038 R14: 00007f8bde4d5fa0 R15: 00007fffd7646b38 [ 117.464975][ T8398] [ 117.687644][ T8397] netlink: 'syz.1.1824': attribute type 1 has an invalid length. [ 117.695466][ T8397] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1824'. [ 117.717439][ T8400] loop2: detected capacity change from 0 to 128 [ 117.728190][ T8402] FAULT_INJECTION: forcing a failure. [ 117.728190][ T8402] name failslab, interval 1, probability 0, space 0, times 0 [ 117.740999][ T8402] CPU: 1 UID: 0 PID: 8402 Comm: syz.0.1827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.741038][ T8402] Tainted: [W]=WARN [ 117.741046][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.741061][ T8402] Call Trace: [ 117.741069][ T8402] [ 117.741078][ T8402] __dump_stack+0x1d/0x30 [ 117.741184][ T8402] dump_stack_lvl+0xe8/0x140 [ 117.741208][ T8402] dump_stack+0x15/0x1b [ 117.741261][ T8402] should_fail_ex+0x265/0x280 [ 117.741300][ T8402] should_failslab+0x8c/0xb0 [ 117.741407][ T8402] __kmalloc_noprof+0xa5/0x570 [ 117.741465][ T8402] ? tls_get_rec+0x75/0x410 [ 117.741500][ T8402] tls_get_rec+0x75/0x410 [ 117.741566][ T8402] ? __rcu_read_unlock+0x4f/0x70 [ 117.741602][ T8402] tls_sw_sendmsg+0x32b/0x1560 [ 117.741717][ T8402] ? avc_has_perm_noaudit+0x1b1/0x200 [ 117.741782][ T8402] ? selinux_socket_sendmsg+0x175/0x1b0 [ 117.741815][ T8402] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 117.741855][ T8402] inet6_sendmsg+0xc5/0xd0 [ 117.741874][ T8402] __sock_sendmsg+0x8b/0x180 [ 117.741933][ T8402] sock_write_iter+0x1a7/0x1f0 [ 117.741963][ T8402] do_iter_readv_writev+0x4a1/0x540 [ 117.742000][ T8402] vfs_writev+0x2df/0x8b0 [ 117.742098][ T8402] do_writev+0xe7/0x210 [ 117.742139][ T8402] __x64_sys_writev+0x45/0x50 [ 117.742172][ T8402] x64_sys_call+0x1e9a/0x3000 [ 117.742200][ T8402] do_syscall_64+0xd2/0x200 [ 117.742311][ T8402] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.742349][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.742454][ T8402] RIP: 0033:0x7f8bde27efc9 [ 117.742474][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.742509][ T8402] RSP: 002b:00007f8bdccdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 117.742580][ T8402] RAX: ffffffffffffffda RBX: 00007f8bde4d5fa0 RCX: 00007f8bde27efc9 [ 117.742591][ T8402] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 117.742603][ T8402] RBP: 00007f8bdccdf090 R08: 0000000000000000 R09: 0000000000000000 [ 117.742636][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.742652][ T8402] R13: 00007f8bde4d6038 R14: 00007f8bde4d5fa0 R15: 00007fffd7646b38 [ 117.742677][ T8402] [ 117.999172][ T8410] ip6gre9: entered allmulticast mode [ 118.008429][ T8410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8410 comm=syz.0.1829 [ 118.029556][ T8409] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1830'. [ 118.093069][ T8413] xt_hashlimit: max too large, truncated to 1048576 [ 118.098389][ T8415] vhci_hcd: invalid port number 85 [ 118.105007][ T8415] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 118.132564][ T8416] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1833'. [ 118.142329][ T8413] loop4: detected capacity change from 0 to 512 [ 118.168436][ T8419] loop0: detected capacity change from 0 to 512 [ 118.179237][ T8421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1834'. [ 118.199372][ T8413] EXT4-fs (loop4): too many log groups per flexible block group [ 118.210343][ T8413] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 118.227464][ T8419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.236405][ T8413] EXT4-fs (loop4): mount failed [ 118.251583][ T8425] sd 0:0:1:0: device reset [ 118.283871][ T8419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 118.340590][ T8419] FAULT_INJECTION: forcing a failure. [ 118.340590][ T8419] name failslab, interval 1, probability 0, space 0, times 0 [ 118.353331][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.0.1835 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.353399][ T8419] Tainted: [W]=WARN [ 118.353408][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.353421][ T8419] Call Trace: [ 118.353429][ T8419] [ 118.353438][ T8419] __dump_stack+0x1d/0x30 [ 118.353466][ T8419] dump_stack_lvl+0xe8/0x140 [ 118.353491][ T8419] dump_stack+0x15/0x1b [ 118.353566][ T8419] should_fail_ex+0x265/0x280 [ 118.353600][ T8419] should_failslab+0x8c/0xb0 [ 118.353639][ T8419] __kmalloc_noprof+0xa5/0x570 [ 118.353676][ T8419] ? copy_splice_read+0xc2/0x660 [ 118.353735][ T8419] copy_splice_read+0xc2/0x660 [ 118.353826][ T8419] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 118.353846][ T8419] splice_direct_to_actor+0x290/0x680 [ 118.353939][ T8419] ? __pfx_direct_splice_actor+0x10/0x10 [ 118.353975][ T8419] do_splice_direct+0xda/0x150 [ 118.353996][ T8419] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 118.354153][ T8419] do_sendfile+0x380/0x650 [ 118.354338][ T8419] __x64_sys_sendfile64+0x105/0x150 [ 118.354447][ T8419] x64_sys_call+0x2bb4/0x3000 [ 118.354476][ T8419] do_syscall_64+0xd2/0x200 [ 118.354509][ T8419] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.354545][ T8419] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.354576][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.354673][ T8419] RIP: 0033:0x7f8bde27efc9 [ 118.354692][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.354716][ T8419] RSP: 002b:00007f8bdccdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 118.354737][ T8419] RAX: ffffffffffffffda RBX: 00007f8bde4d5fa0 RCX: 00007f8bde27efc9 [ 118.354781][ T8419] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 118.354794][ T8419] RBP: 00007f8bdccdf090 R08: 0000000000000000 R09: 0000000000000000 [ 118.354810][ T8419] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 118.354825][ T8419] R13: 00007f8bde4d6038 R14: 00007f8bde4d5fa0 R15: 00007fffd7646b38 [ 118.354921][ T8419] [ 118.625228][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 118.674119][ T8439] ip6gre10: entered allmulticast mode [ 118.690999][ T8443] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1841'. [ 118.703722][ T8439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8439 comm=syz.2.1843 [ 118.749724][ T8446] loop2: detected capacity change from 0 to 512 [ 118.761993][ T8446] EXT4-fs error (device loop2): ext4_quota_enable:7136: inode #3: comm syz.2.1844: unexpected EA_INODE flag [ 118.779307][ T8446] EXT4-fs (loop2): Remounting filesystem read-only [ 118.795466][ T8450] loop0: detected capacity change from 0 to 512 [ 118.814730][ T8446] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 118.831070][ T8452] FAULT_INJECTION: forcing a failure. [ 118.831070][ T8452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.836274][ T8446] EXT4-fs (loop2): mount failed [ 118.844240][ T8452] CPU: 1 UID: 0 PID: 8452 Comm: syz.4.1846 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.844279][ T8452] Tainted: [W]=WARN [ 118.844289][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.844306][ T8452] Call Trace: [ 118.844316][ T8452] [ 118.844329][ T8452] __dump_stack+0x1d/0x30 [ 118.844360][ T8452] dump_stack_lvl+0xe8/0x140 [ 118.844418][ T8452] dump_stack+0x15/0x1b [ 118.844443][ T8452] should_fail_ex+0x265/0x280 [ 118.844493][ T8452] should_fail+0xb/0x20 [ 118.844574][ T8452] should_fail_usercopy+0x1a/0x20 [ 118.844660][ T8452] _copy_to_user+0x20/0xa0 [ 118.844712][ T8452] simple_read_from_buffer+0xb5/0x130 [ 118.844744][ T8452] proc_fail_nth_read+0x10e/0x150 [ 118.844858][ T8452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.844898][ T8452] vfs_read+0x1a8/0x770 [ 118.844930][ T8452] ? __rcu_read_unlock+0x4f/0x70 [ 118.844966][ T8452] ? __fget_files+0x184/0x1c0 [ 118.845044][ T8452] ? inode_to_bdi+0x47/0xa0 [ 118.845107][ T8452] ksys_read+0xda/0x1a0 [ 118.845151][ T8452] __x64_sys_read+0x40/0x50 [ 118.845183][ T8452] x64_sys_call+0x27c0/0x3000 [ 118.845275][ T8452] do_syscall_64+0xd2/0x200 [ 118.845332][ T8452] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.845370][ T8452] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.845403][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.845491][ T8452] RIP: 0033:0x7fc32dbad9dc [ 118.845513][ T8452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.845537][ T8452] RSP: 002b:00007fc32c617030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.845586][ T8452] RAX: ffffffffffffffda RBX: 00007fc32de05fa0 RCX: 00007fc32dbad9dc [ 118.845647][ T8452] RDX: 000000000000000f RSI: 00007fc32c6170a0 RDI: 0000000000000004 [ 118.845666][ T8452] RBP: 00007fc32c617090 R08: 0000000000000000 R09: 0000000000000000 [ 118.845684][ T8452] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 118.845702][ T8452] R13: 00007fc32de06038 R14: 00007fc32de05fa0 R15: 00007ffef83bb7f8 [ 118.845729][ T8452] [ 118.968480][ T8454] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 119.066379][ T8454] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1847'. [ 119.089279][ T8450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.120503][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.134800][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.238444][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 119.256462][ T8481] loop1: detected capacity change from 0 to 512 [ 119.265446][ T8487] loop2: detected capacity change from 0 to 2048 [ 119.279520][ T8481] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.287332][ T8481] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1852: bg 0: block 248: padding at end of block bitmap is not set [ 119.302192][ T8481] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1852: Failed to acquire dquot type 1 [ 119.306400][ T8487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.314993][ T8481] EXT4-fs (loop1): 1 truncate cleaned up [ 119.336153][ T8491] loop4: detected capacity change from 0 to 512 [ 119.348213][ T8491] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1851: error while reading EA inode 32 err=-116 [ 119.350882][ T8481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.386092][ T8491] EXT4-fs (loop4): Remounting filesystem read-only [ 119.393059][ T8487] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1853: bg 0: block 234: padding at end of block bitmap is not set [ 119.403843][ T8491] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 119.409167][ T8487] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 858 with error 117 [ 119.417832][ T8491] EXT4-fs (loop4): 1 orphan inode deleted [ 119.430174][ T8487] EXT4-fs (loop2): This should not happen!! Data will be lost [ 119.430174][ T8487] [ 119.436426][ T8491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.471342][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.479082][ T8491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.577585][ T8499] loop1: detected capacity change from 0 to 512 [ 119.589184][ T8499] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1854: error while reading EA inode 32 err=-116 [ 119.603491][ T8499] EXT4-fs (loop1): Remounting filesystem read-only [ 119.610406][ T8499] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 119.620711][ T8499] EXT4-fs (loop1): 1 orphan inode deleted [ 119.822631][ T8503] loop0: detected capacity change from 0 to 512 [ 119.853363][ T8503] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm : corrupted inode contents [ 119.865034][ T8503] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #4: comm : mark_inode_dirty error [ 119.875847][ T8503] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm : corrupted inode contents [ 119.887523][ T8503] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm : mark_inode_dirty error [ 119.898740][ T8503] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm : Failed to acquire dquot type 1 [ 119.911201][ T8508] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.1856: corrupted inode contents [ 119.923366][ T8508] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #4: comm syz.0.1856: mark_inode_dirty error [ 119.935200][ T8508] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.1856: corrupted inode contents [ 119.947501][ T8508] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1856: mark_inode_dirty error [ 119.959280][ T8508] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1856: Failed to acquire dquot type 1 [ 119.999863][ T8511] lo speed is unknown, defaulting to 1000 [ 120.209565][ T8527] FAULT_INJECTION: forcing a failure. [ 120.209565][ T8527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.222781][ T8527] CPU: 1 UID: 0 PID: 8527 Comm: syz.4.1864 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.222829][ T8527] Tainted: [W]=WARN [ 120.222837][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.222852][ T8527] Call Trace: [ 120.222859][ T8527] [ 120.222867][ T8527] __dump_stack+0x1d/0x30 [ 120.222889][ T8527] dump_stack_lvl+0xe8/0x140 [ 120.222962][ T8527] dump_stack+0x15/0x1b [ 120.222982][ T8527] should_fail_ex+0x265/0x280 [ 120.223100][ T8527] should_fail+0xb/0x20 [ 120.223157][ T8527] should_fail_usercopy+0x1a/0x20 [ 120.223183][ T8527] _copy_from_user+0x1c/0xb0 [ 120.223215][ T8527] bpf_test_init+0xb9/0x140 [ 120.223330][ T8527] bpf_prog_test_run_xdp+0x305/0x970 [ 120.223483][ T8527] ? _kstrtol+0x51/0x90 [ 120.223514][ T8527] ? __rcu_read_unlock+0x4f/0x70 [ 120.223548][ T8527] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 120.223586][ T8527] bpf_prog_test_run+0x22a/0x390 [ 120.223680][ T8527] __sys_bpf+0x4c0/0x7c0 [ 120.223732][ T8527] __x64_sys_bpf+0x41/0x50 [ 120.223772][ T8527] x64_sys_call+0x2aee/0x3000 [ 120.223857][ T8527] do_syscall_64+0xd2/0x200 [ 120.223892][ T8527] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.223923][ T8527] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.224015][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.224042][ T8527] RIP: 0033:0x7fc32dbaefc9 [ 120.224059][ T8527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.224090][ T8527] RSP: 002b:00007fc32c617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.224112][ T8527] RAX: ffffffffffffffda RBX: 00007fc32de05fa0 RCX: 00007fc32dbaefc9 [ 120.224128][ T8527] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 120.224145][ T8527] RBP: 00007fc32c617090 R08: 0000000000000000 R09: 0000000000000000 [ 120.224162][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.224178][ T8527] R13: 00007fc32de06038 R14: 00007fc32de05fa0 R15: 00007ffef83bb7f8 [ 120.224222][ T8527] [ 120.483351][ T8531] loop4: detected capacity change from 0 to 128 [ 120.497159][ T8529] loop2: detected capacity change from 0 to 512 [ 120.539833][ T8535] ip6gre9: entered allmulticast mode [ 120.575605][ T8535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=8535 comm=syz.3.1868 [ 120.659238][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.667869][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.711120][ T8545] rdma_rxe: rxe_newlink: failed to add lo [ 120.793014][ T8552] xt_hashlimit: max too large, truncated to 1048576 [ 120.955244][ T8562] netlink: 'syz.1.1878': attribute type 10 has an invalid length. [ 120.979190][ T8562] netlink: 'syz.1.1878': attribute type 10 has an invalid length. [ 120.995350][ T8562] team0: Port device dummy0 removed [ 121.002703][ T8562] dummy0: entered promiscuous mode [ 121.008404][ T8562] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 121.142607][ T8575] loop3: detected capacity change from 0 to 4096 [ 121.240777][ T8531] bio_check_eod: 17831 callbacks suppressed [ 121.240796][ T8531] GPL: attempt to access beyond end of device [ 121.240796][ T8531] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.262348][ T8584] rdma_rxe: rxe_newlink: failed to add lo [ 121.270698][ T8531] GPL: attempt to access beyond end of device [ 121.270698][ T8531] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.284139][ T8531] GPL: attempt to access beyond end of device [ 121.284139][ T8531] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.297877][ T8531] GPL: attempt to access beyond end of device [ 121.297877][ T8531] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.311092][ T8531] GPL: attempt to access beyond end of device [ 121.311092][ T8531] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.325058][ T8531] GPL: attempt to access beyond end of device [ 121.325058][ T8531] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.338246][ T8531] GPL: attempt to access beyond end of device [ 121.338246][ T8531] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.363132][ T8286] kworker/u8:32: attempt to access beyond end of device [ 121.363132][ T8286] loop4: rw=1, sector=705, nr_sectors = 1 limit=128 [ 121.400586][ T29] kauditd_printk_skb: 2124 callbacks suppressed [ 121.400682][ T29] audit: type=1326 audit(121.388:33693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5efbb5e67 code=0x7ffc0000 [ 121.429882][ T29] audit: type=1326 audit(121.388:33694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5efb5b099 code=0x7ffc0000 [ 121.452902][ T29] audit: type=1326 audit(121.388:33695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb5efbbefc9 code=0x7ffc0000 [ 121.476191][ T8588] FAULT_INJECTION: forcing a failure. [ 121.476191][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 121.489082][ T8588] CPU: 0 UID: 0 PID: 8588 Comm: syz.4.1886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.489124][ T8588] Tainted: [W]=WARN [ 121.489133][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.489149][ T8588] Call Trace: [ 121.489158][ T8588] [ 121.489169][ T8588] __dump_stack+0x1d/0x30 [ 121.489196][ T8588] dump_stack_lvl+0xe8/0x140 [ 121.489290][ T8588] dump_stack+0x15/0x1b [ 121.489311][ T8588] should_fail_ex+0x265/0x280 [ 121.489370][ T8588] ? assoc_array_insert+0x2e0/0x1990 [ 121.489397][ T8588] should_failslab+0x8c/0xb0 [ 121.489474][ T8588] __kmalloc_cache_noprof+0x4c/0x4a0 [ 121.489523][ T8588] assoc_array_insert+0x2e0/0x1990 [ 121.489552][ T8588] ? avc_has_perm+0xf7/0x180 [ 121.489592][ T8588] __key_link_begin+0x8a/0x140 [ 121.489665][ T8588] __key_create_or_update+0x30f/0x750 [ 121.489698][ T8588] ? key_validate+0xad/0xd0 [ 121.489815][ T8588] key_create_or_update+0x42/0x60 [ 121.489842][ T8588] __se_sys_add_key+0x29b/0x350 [ 121.489877][ T8588] __x64_sys_add_key+0x67/0x80 [ 121.489909][ T8588] x64_sys_call+0x28c8/0x3000 [ 121.489942][ T8588] do_syscall_64+0xd2/0x200 [ 121.489969][ T8588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.489998][ T8588] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.490061][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.490084][ T8588] RIP: 0033:0x7fc32dbaefc9 [ 121.490100][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.490189][ T8588] RSP: 002b:00007fc32c617038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 121.490209][ T8588] RAX: ffffffffffffffda RBX: 00007fc32de05fa0 RCX: 00007fc32dbaefc9 [ 121.490229][ T8588] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000040 [ 121.490243][ T8588] RBP: 00007fc32c617090 R08: 0000000016ea8902 R09: 0000000000000000 [ 121.490256][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.490319][ T8588] R13: 00007fc32de06038 R14: 00007fc32de05fa0 R15: 00007ffef83bb7f8 [ 121.490340][ T8588] [ 121.490360][ T29] audit: type=1400 audit(121.398:33696): avc: denied { prog_load } for pid=8587 comm="syz.4.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.618440][ T8591] FAULT_INJECTION: forcing a failure. [ 121.618440][ T8591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.621467][ T29] audit: type=1400 audit(121.398:33697): avc: denied { bpf } for pid=8587 comm="syz.4.1886" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.621502][ T29] audit: type=1400 audit(121.398:33698): avc: denied { perfmon } for pid=8587 comm="syz.4.1886" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.625958][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: syz.0.1887 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.626031][ T8591] Tainted: [W]=WARN [ 121.626041][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.626060][ T8591] Call Trace: [ 121.626068][ T8591] [ 121.626080][ T8591] __dump_stack+0x1d/0x30 [ 121.626122][ T8591] dump_stack_lvl+0xe8/0x140 [ 121.626150][ T8591] dump_stack+0x15/0x1b [ 121.626172][ T8591] should_fail_ex+0x265/0x280 [ 121.626223][ T8591] should_fail+0xb/0x20 [ 121.626308][ T8591] should_fail_usercopy+0x1a/0x20 [ 121.626337][ T8591] _copy_to_user+0x20/0xa0 [ 121.626374][ T8591] simple_read_from_buffer+0xb5/0x130 [ 121.626407][ T8591] proc_fail_nth_read+0x10e/0x150 [ 121.626476][ T8591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.626518][ T8591] vfs_read+0x1a8/0x770 [ 121.626548][ T8591] ? __rcu_read_unlock+0x4f/0x70 [ 121.626584][ T8591] ? __fget_files+0x184/0x1c0 [ 121.626694][ T8591] ksys_read+0xda/0x1a0 [ 121.626796][ T8591] __x64_sys_read+0x40/0x50 [ 121.626829][ T8591] x64_sys_call+0x27c0/0x3000 [ 121.626861][ T8591] do_syscall_64+0xd2/0x200 [ 121.626962][ T8591] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.627001][ T8591] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.627056][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.627078][ T8591] RIP: 0033:0x7f8bde27d9dc [ 121.627101][ T8591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 121.627126][ T8591] RSP: 002b:00007f8bdccdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.627153][ T8591] RAX: ffffffffffffffda RBX: 00007f8bde4d5fa0 RCX: 00007f8bde27d9dc [ 121.627233][ T8591] RDX: 000000000000000f RSI: 00007f8bdccdf0a0 RDI: 0000000000000003 [ 121.627251][ T8591] RBP: 00007f8bdccdf090 R08: 0000000000000000 R09: 0000000000000000 [ 121.627269][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.627329][ T8591] R13: 00007f8bde4d6038 R14: 00007f8bde4d5fa0 R15: 00007fffd7646b38 [ 121.627358][ T8591] [ 121.744785][ T8596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 121.749054][ T29] audit: type=1400 audit(121.418:33699): avc: denied { prog_run } for pid=8587 comm="syz.4.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 121.769540][ T8596] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 121.780961][ T29] audit: type=1326 audit(121.458:33700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8538 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5efbb5e67 code=0x7ffc0000 [ 121.787380][ T8600] __nla_validate_parse: 5 callbacks suppressed [ 121.787476][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1890'. [ 121.802220][ T8599] xt_hashlimit: max too large, truncated to 1048576 [ 121.806186][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 121.940036][ T8602] loop0: detected capacity change from 0 to 512 [ 122.091043][ T8609] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1894'. [ 122.108514][ T8602] EXT4-fs (loop0): too many log groups per flexible block group [ 122.121328][ T8602] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 122.128265][ T8602] EXT4-fs (loop0): mount failed [ 122.146117][ T8616] 9pnet_fd: Insufficient options for proto=fd [ 122.157253][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1892'. [ 122.166345][ T8619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1892'. [ 122.181736][ T8618] rdma_rxe: rxe_newlink: failed to add lo [ 122.237337][ T8625] loop3: detected capacity change from 0 to 1024 [ 122.248725][ T8625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.287464][ T8625] SELinux: Context @ is not valid (left unmapped). [ 122.306787][ T8627] lo speed is unknown, defaulting to 1000 [ 122.424449][ T8634] xt_hashlimit: max too large, truncated to 1048576 [ 122.500935][ T8637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1902'. [ 122.509921][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'. [ 122.703144][ T8644] lo speed is unknown, defaulting to 1000 [ 122.762926][ T8650] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1906'. [ 122.809546][ T8655] rdma_rxe: rxe_newlink: failed to add lo [ 122.851397][ T8659] FAULT_INJECTION: forcing a failure. [ 122.851397][ T8659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.864581][ T8659] CPU: 0 UID: 0 PID: 8659 Comm: syz.1.1910 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.864627][ T8659] Tainted: [W]=WARN [ 122.864633][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.864646][ T8659] Call Trace: [ 122.864652][ T8659] [ 122.864660][ T8659] __dump_stack+0x1d/0x30 [ 122.864779][ T8659] dump_stack_lvl+0xe8/0x140 [ 122.864807][ T8659] dump_stack+0x15/0x1b [ 122.864828][ T8659] should_fail_ex+0x265/0x280 [ 122.864882][ T8659] should_fail+0xb/0x20 [ 122.864925][ T8659] should_fail_usercopy+0x1a/0x20 [ 122.864967][ T8659] _copy_to_user+0x20/0xa0 [ 122.865073][ T8659] simple_read_from_buffer+0xb5/0x130 [ 122.865104][ T8659] proc_fail_nth_read+0x10e/0x150 [ 122.865239][ T8659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.865349][ T8659] vfs_read+0x1a8/0x770 [ 122.865490][ T8659] ? __rcu_read_unlock+0x4f/0x70 [ 122.865523][ T8659] ? __fget_files+0x184/0x1c0 [ 122.865561][ T8659] ksys_read+0xda/0x1a0 [ 122.865618][ T8659] __x64_sys_read+0x40/0x50 [ 122.865650][ T8659] x64_sys_call+0x27c0/0x3000 [ 122.865742][ T8659] do_syscall_64+0xd2/0x200 [ 122.865776][ T8659] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.865812][ T8659] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.865843][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.865909][ T8659] RIP: 0033:0x7f6f1afdd9dc [ 122.865929][ T8659] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.865995][ T8659] RSP: 002b:00007f6f19a3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.866015][ T8659] RAX: ffffffffffffffda RBX: 00007f6f1b235fa0 RCX: 00007f6f1afdd9dc [ 122.866027][ T8659] RDX: 000000000000000f RSI: 00007f6f19a3f0a0 RDI: 0000000000000003 [ 122.866040][ T8659] RBP: 00007f6f19a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.866052][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.866065][ T8659] R13: 00007f6f1b236038 R14: 00007f6f1b235fa0 R15: 00007ffd0af76d98 [ 122.866109][ T8659] [ 123.103545][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1914'. [ 123.112766][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 123.457386][ T8694] netlink: 'syz.1.1924': attribute type 10 has an invalid length. [ 123.487325][ T8700] xt_hashlimit: max too large, truncated to 1048576 [ 123.628022][ T8702] loop0: detected capacity change from 0 to 32768 [ 123.686491][ T6913] loop0: p1 p3 < > [ 123.698301][ T8702] loop0: p1 p3 < > [ 123.725892][ T8702] lo speed is unknown, defaulting to 1000 [ 123.774735][ T8715] loop0: detected capacity change from 0 to 164 [ 123.787121][ T8715] iso9660: Unknown parameter './file0' [ 123.804192][ T8719] rdma_op ffff88811b2ec180 conn xmit_rdma 0000000000000000 [ 123.889346][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 123.889349][ T6911] udevd[6911]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 123.927464][ T6914] udevd[6914]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 123.938811][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 123.962836][ T8732] ================================================================== [ 123.970970][ T8732] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 123.978539][ T8732] [ 123.980865][ T8732] write to 0xffff888103fe0b00 of 8 bytes by task 8731 on cpu 1: [ 123.988504][ T8732] mas_wr_store_entry+0x1d98/0x26e0 [ 123.993711][ T8732] mas_store_prealloc+0x74d/0xa80 [ 123.998742][ T8732] vma_iter_store_new+0x1c5/0x200 [ 124.003778][ T8732] vma_complete+0x125/0x580 [ 124.008284][ T8732] __split_vma+0x5d9/0x650 [ 124.012715][ T8732] vma_modify+0x3f2/0xc80 [ 124.017048][ T8732] vma_modify_flags+0x101/0x130 [ 124.021909][ T8732] mprotect_fixup+0x2cc/0x570 [ 124.026598][ T8732] do_mprotect_pkey+0x6d6/0x980 [ 124.031467][ T8732] __x64_sys_mprotect+0x48/0x60 [ 124.036328][ T8732] x64_sys_call+0x2752/0x3000 [ 124.041014][ T8732] do_syscall_64+0xd2/0x200 [ 124.045530][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.051451][ T8732] [ 124.053778][ T8732] read to 0xffff888103fe0b00 of 8 bytes by task 8732 on cpu 0: [ 124.061326][ T8732] mas_state_walk+0x485/0x650 [ 124.066017][ T8732] mas_walk+0x60/0x150 [ 124.070091][ T8732] lock_vma_under_rcu+0x95/0x170 [ 124.075054][ T8732] do_user_addr_fault+0x233/0x1080 [ 124.080177][ T8732] exc_page_fault+0x62/0xa0 [ 124.084693][ T8732] asm_exc_page_fault+0x26/0x30 [ 124.089580][ T8732] [ 124.091922][ T8732] value changed: 0xffff888104670b0e -> 0xffff888103fe0b00 [ 124.099117][ T8732] [ 124.101447][ T8732] Reported by Kernel Concurrency Sanitizer on: [ 124.107605][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.3.1939 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.118898][ T8732] Tainted: [W]=WARN [ 124.122704][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.132851][ T8732] ==================================================================