last executing test programs: 57.838354954s ago: executing program 3 (id=524): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) 57.708277464s ago: executing program 3 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) umount2(0x0, 0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x180, 0x0, 0x0, 0x200000, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xd) 56.89389108s ago: executing program 3 (id=534): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x182200, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 56.848944324s ago: executing program 3 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x46) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) sendto$inet6(r3, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x30}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000002380)={r8, "6369a39c7dc68420212dc42f51514bfd"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r9, 0xd000941e, &(0x7f0000002380)={r10, "6369a39c7dc68420212dc42f51514bfd"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000740)={0x1, 0x3, {0x80000001, @struct={0x3, 0x4}, r8, 0x2, 0x7, 0x1000, 0x9, 0x7, 0x10, @struct={0xb, 0x287}, 0x6, 0x3ff, [0x7, 0x0, 0x5, 0x7, 0x40, 0x20000000000]}, {0xffffffffffffff59, @usage=0xfed, r10, 0x6, 0x4, 0x7f, 0x5, 0x5, 0x6, @usage, 0x3, 0x0, [0x4, 0x0, 0xaabe, 0x7, 0x2, 0x100000001]}, {0x7, @usage=0x1, r11, 0x5636, 0x6a07, 0x7, 0x70b3, 0x9, 0x20, @struct={0x9, 0x4}, 0x9, 0x2, [0xa, 0x6, 0xc, 0x1, 0x80, 0xf5]}, {0x1, 0x6, 0x4}}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000bc0)={0x0, 0xfffffffffffffffe, @start={r11, 0x1, "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", "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"}, [0x6, 0x6, 0x0, 0x6, 0x4, 0x4dc5, 0x2, 0x2, 0x8, 0x2, 0x8, 0x5, 0xb, 0x637, 0xd, 0x100000001, 0x0, 0x80000000, 0x0, 0x1, 0x9645, 0x1ff, 0x81, 0x9, 0xffffffff80000001, 0x6, 0xfffffffffffffff9, 0xfffffffffffff800, 0x4, 0x8, 0x9, 0x8000, 0x4, 0x10, 0x1, 0x8, 0x8, 0x2, 0x3, 0x388, 0x0, 0x5, 0x800, 0x400, 0x80000000, 0x3, 0xffffffffffff09d7, 0x6, 0x4, 0x4, 0x0, 0x6, 0x9, 0x5, 0x4, 0x1, 0x5, 0x5, 0x8000000000000001, 0x81, 0x0, 0x9, 0x1, 0x6c9a]}) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 56.584152455s ago: executing program 3 (id=540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffdea, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = gettid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r4, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="00050000270000012cbd7000fedbdf2509025159595638800800f400c1e3510bb77dc90981878e093c7ece11"], 0x500}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) fchdir(0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) 56.320818957s ago: executing program 3 (id=546): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000f06020000000000000000000500000206001100ffff08000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 56.320232576s ago: executing program 32 (id=546): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000f06020000000000000000000500000206001100ffff08000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 39.120402334s ago: executing program 5 (id=773): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x182200, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 39.097878756s ago: executing program 5 (id=774): socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f00000005c0)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000540)='/;ev/vcsu#\x00CVq\x80\xfb\xc0\xe6C\xff\x9d9xg\x13\xd2\xd7C\xa2\xcd-z_\by\x94\x9c\x1c;\xf9ICX\xc5d\xe1Z\x06\x11i\xc5F\x1c\xf0\xf0\xf1\x7f\xd3\xb9\x18>*\xee \x99\xc2\n-\x8a?o\x00\x00\xf9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x006`Hd;\x8d\xf9(\x99\x86\xebG\x9d\b\xa8\x11', 0xffffffffffffffff) 38.097753926s ago: executing program 5 (id=790): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080029bd7000ffdbdf25300000000c0099000f00000023000000060036001900000006003600140000000600360030000000060036001c000000060036000a00000006003600050000000600360040000000060036004c8f11000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) 38.05331211s ago: executing program 5 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x86, &(0x7f0000002600)}, 0x7) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85320, &(0x7f0000000900)={{0x80}, {0x7, 0x7}, 0x1, 0x4, 0x7}) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 37.920966331s ago: executing program 5 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 37.339497828s ago: executing program 5 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) clock_settime(0xa, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = socket(0x1e, 0x80004, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/40, 0x28, 0x20, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x4) 37.302560131s ago: executing program 33 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) clock_settime(0xa, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = socket(0x1e, 0x80004, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/40, 0x28, 0x20, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x4) 23.636743823s ago: executing program 6 (id=1014): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0x38}}, 0x20040054) 23.583769307s ago: executing program 6 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0x40, &(0x7f0000000a40), 0x1, 0x56f, &(0x7f0000000140)="$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") r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r3, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) pwritev2(r4, &(0x7f0000002540)=[{&(0x7f0000000440)="85", 0x1}], 0x1, 0x400, 0x4e6ea345, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000006c0)={r3, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}}, [0x2, 0x2, 0x3, 0x6, 0x0, 0x2, 0xcb, 0x0, 0xa4d8, 0x7, 0x3, 0x701, 0x8, 0x6, 0x1]}, &(0x7f0000000000)=0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x5, r6, &(0x7f0000000400), 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ec0)={r0, 0x58, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) sendmsg$inet(r7, &(0x7f0000002140)={&(0x7f00000007c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000800)="b1a6685af2081fd2fd401175594762f431380c3917fe245b82d5ba5617868a37196f32b34cc03f1fe5395f8e6116d0ecea2cc19b137878e5278298f9a93262a616a3e402a776ca40cfda17623c5b24750ec3bbfb519476d77d92d37ace78bd815c6c7c740c8b469def9675edef509b43", 0x70}, {&(0x7f00000008c0)="4a58d892f06d5f30adccc3d3b630dc718ff7ba5f9645fd479c85505a737aa63165ec9083927338cb51c810e88ee23c6e54520ef72e186aac683f501ba92e6b13d7a337ccc1e0574b25cd4d5b9c39", 0x4e}, {&(0x7f0000000ac0)="99318ee63a3558cc753c828140b025b4673975cf929c6c289a1a7db0e6a75eccd3720628d062ffd62de654cc508d4fce737d6f680919f51c7738a1a012e90430c55b2d033ea9309e4feb9d6251be8e5f723e24827bf1e4c4d37132c39ffa734c649efb8230c482e1992c814b42c0242f6204b89473de97868bacf7c01ac629297fec170c5c05f5c45f2b55fad94e2fc680539d6a1931d1e5fb413a59acb6751793736f9e29f334feba1cb068fc6689a6d93202665726637e582d874e0b6084", 0xbf}, {&(0x7f0000000b80)="b72c3f61655767c65d606f60fb9ddc6fa48b8e9c5e71bf58c8ab38eaf32ddad755a01e58b30c506626647b6c68c86a32c79270d7dc68cbe2131c1a86bde34ef4b4f153a8d0d5022975a6b2cb61655d274f4630a37c8612f5618b00bd508f84c5c7e619172604b857f70f9dc8fa940b87a250abb5d7d85c912d0adf1e1c997c9865fc0a5083c2b909fa9250b9b8bc83ea39dfd2c533e53b4e4ed4c6f5b2c14a3c7f0ce837783b8a16facca0093e5a0b21c9290ac3a2244c36021ab8b1fbaf98f21a71681c1bd9895ff578c22267ec23b9f120f4192bab5c9d9c07a141a822ce9f26", 0xe1}, {&(0x7f0000000940)="a62a2d5d366b91b9f08c16b8cff273e3494c844554cad72f1ad5661852e89fb6b5c5942819727bcdfc98", 0x2a}, {&(0x7f0000000c80)="dfaed85b0f89c96d73035463a214a6b07365a6ff9acde4ced76ff3e645c150aed332f1d382840de883d0f7e17553b1d0b628e6c4ccb96726915969d116bce1e4225083569c99d6dfa583245b5920bcbd9443783f01d66d68db3231233d1f08583a1ee468ee15a1e5da4c0c1c4da303b5baba571e1629783a5c76f3f5bfd1495945545675501014a533a7a97951ed11d074152b92a921bdd08e84eca919fbbf0c11a8555f125608c7e173ffd511cc11499a8b0a9ad00ba00352a808806f2c075b248b5d399311", 0xc6}, {&(0x7f0000000980)="61c7532d4851bc", 0x7}, {&(0x7f0000000a00)="b87b97f900eec530a11b60f221a18c8fef799b5f20d6660505552b113affb7f5c5e2780690", 0x25}, {&(0x7f0000000f80)="5f7cd91fadc5c7363d41728ce93338a4f77b84f2ec23e4a39cba3bdec447c1321ae3f6b211c9a4368cfadc073d7a8ee40b79b931efd7c767ef8d9e3576e5ea5a9ebaa7561727dd8c641df941b632f1deca39f7730d2484b6dbbd63f6364e057ec237c8c4484c30a2eaff599f18a1c6255efd1475a87693d1f1b8553c066147b5d4877f6a95269297c0eaf93d9555e333d643b3863aadee242b787a85ba58ff090fd6783c58001792b1a59e8349d14cd57b2ddec2a52529ce5a18694e1765a96e93e1986e62f44f63e2f76239abe270c4a2fd08910465740f20f29c0bbd50c11983d61782318ff5fd0af4cae5cec7e377f1ec57dfff0ad905cb7990962cc1dfa45f1076f53a44c35a1a11197b21494886abf76ff49015e1e20fc6a06804ab56a0911b347512e13d104ff857d7e666896a55e8831c4dbcf44b61b9571373cf337f712131882462bb10b473d3f3ff4d15042f05d3f93fb6dd9252f94613b33100ed76a519be53bbfcdfc56487d06a3aa36920d7dd7937adf22f3cb7e428778794ad6b204ec248db67665376c53ebfd659282a28385021bd0d56647a511fceeebeb449922498a98b3044c0c54f592a3d7c5a622f9336d19b7857938812075f7c0270129b3536fcc30a91bd6fba4f296471c6bb37e44e291d4c6d790c6f9d9521d56683744661d759bcea603007423f65fa3a6b71e8e7f747ba87a72cb29a7452b38c91edab63f1a85f391721825877a0c0b5b62b22bf90c64f5e2b25b21ccec952c9f6d8ffca181c731b7521f2a0706672a9ceda6cf1a5db06f68be6f258c5ab962b85b5dba4beda4be3c5fc1978eadad439d49c336c88db5880f32c7a648a8a4a7480092481be06ec1bd3c4862f46ecd6f769fb9705e1375f999900434c172c6dbd4c1689ef42dce47f2919be22a2066b9f2624513e990f4357f4f2ab3b23aa31f7e3d17f5077fe4a71745dbb0752c0cd89ed410632bd2d420c0224bb85a730bc3e912af4db83013e6257ed282aa826a1616e2610deac9095fb4913abc0b17019454e3ba27a75bcb40c58724a04f27855aca937fa810ec57de862dab5c19a3e6e0911e4ae40e80fd96c2c46affb6bc1282fba6faf51881a77b95281709abe210f54974e9a84b4df2932558d5e5efe3e8df5c7fe6903308c2b930d122daff13180f680e55c9e809bd910ea55cbc01fa8238817dc95dbae98df165d5592453aca7f34494a926eb14c3573920ca89badd311f66bf0fdb596a0e9fce2742c8bdb9d8d67139e71a9e71f47ae92f0d829b2a096c2a6cf33d7ab37284538812d32f1d685dcc158ac75a15420f7cbc7e5ab8938ae61fcb6cabe0655919c6aba706f3852ae432e06ff59edb90c08708af426c04b9adc156fa42c8976317a193b15a0b23dd30c81bde959b914f6e9710f516b970a98436e878bc33782121887a99218f3b02c9f3fced0a30d3f093eadb133e0ff1799d039a41b7fdc60666df53f4d0f776e313bcaefa6ac1593ab35290dd199fe2fe7cb8c7c9dc4a1014da33ec52af47fd4a411690d60415dec778bc414556c14eb6ceb6868cd54e53b22803c9cf04013d235b475c24086840ed2f638e0ae0ae6fb80355f6b0a223400aa609845297665009c07ce6aba16d10abb5f1ed4149df14e475b41808f1785ed15d39584489dd549cb1b788274f1b1f61bed4251f9170cc60f5a79f4c53551f9d51424452c6f36d4ad2e6a203789c5f3706561f1eab75c0e4a173fc60ce1914d53a508b4d60c522d09e6f39e5ee7096ef55a94d85db8a61edcf931d3fb8269fc6bebdc1d4b7515c8017b14edd703c181f3867643b0e4d9c0391ae045008dd14f4c0b626937db11bb552bfb2e809e811ac3bd5a1d69f63519d09f62dbce533cab8ef548d5cd8209177536062ef61280560da51589ca1c6cd4804e49648f6f06dbd5d9667ad6efab82f57dcf16a8b563bea74fc6ec985c013c01ef242414c9a0fbc82478a87a6c2bf5501784faefbf025e3200eef7a328b5f3f56305386eeba3fd9ec9714b8306ce7144c7419e1e0fb25ffe002961456846f9d1e2f80d5e238a910d7842d59733e18cfa59a40c627681876c6821cce1da4347ca181f68d5ce2aaef052d98e7cc554ea765db6b06ff300d9fce596e1de89ace9f0b0b627760a1e31b32ddcc10b4f8f2bfa9e52de499cd78af336b3c1c9d5aec429fd32dfabde58521e5e41e7b2e93787046821df9fee47dd57bd95578ff726ab986b9a9f5a0914b295ddf870bd1c330926525d4b348768339400059a41658ca25ae3bd92f22e94936f944fa8a1bdcd9974c01d19089daf1019828a995bd60644532e22eb968416c92b9d8e14fc10cb3277ccdfcbd0295c4c30f2324942789b13c0dc9421bf90c0500171c518eb23fc5a045f716679cbd81a8962dec6b898f13b5dac2f0ef2034ad5e03a9d19a1583a7cae47a53893e2315c884558f1df7d2e61c15ac4af2e97772be705ad4a4246dadf4f9882da7fa7d8e60d0e26ee2b6d139c45b8dd45c7f5e116ac9169df7eb4d2780468322b192700391ef67fd5d918169e86749317139a96ad9e187cdf3100a95bf3941e696970d1c8b87f4f2b9e0ff8819f432e2ec0303c9a8360716c63e2252f928c0af9866377090d29b55629643a1003582658ce9e84d31e701e5110572e8d1e6fd19595b4b0881ae5d8008c7b7e07b354051ea7d9ecfb1c7cebc2746d925c6f4e5da289189fd98686bbf80a312a9bd2d9a7ad1f0cd4ea4279c700cb4b901149c70b8a343fe7cef616fa8f3558f77da84ec301d580a6adf3efddb5b6641be7b92dc3d8c455c2f224a7273576a2943c6bd26bb90134ddfa8100eed25d0a737e794655b46f31f5aa2cd5fd5172f839d04355d0f1c522a476af7f5aaaf4f9df58638756fb557954df17d6f2ae47c5ada45bfd75904ea3b90eb261cb1609baa410f72b80f68e95220315bfe45db97447737312fdf438931fc11b910dccf1f3f96fdf55f49e21c109387f194150f510cb15df49b38003a5942b37e9ebc0a5b89035ae55366ff5a628780ad132e726be1b588b504f7d73ee07cee75bcd8ae9c4028370d433a50ceeb744b8b2d47bb99b182ac70aeeb7ac9dca34b67ff779143e3b50ed2f25dc35874069eb4814096557eeeaf50759fdb9c9d3566345bf9c4d02f16b3dc667cc9e8491c02f7e89388bbda86e15db185a5dda1fee8fb3bb234541d50c084b9e3ce35e810eecb349304bf91e335b0d6714452f82f61bf1eee9746e523e2fb5bb4abc9d3c2ed98e461242e6353d05939549ff9f4f341ab4ef930782415beb0036097380ff41530b52aa94381c656bbcdaaf8d05c10909c30927a49354960cf6ec7c9b10792cd0427f3839048f3f27bc9bbb9303d8b6c9e9f9c004c888d07d1274cca804dfb321b6bfc5d8bb5716a9426d4a0a8b53c69087b064e7d0190eeda9bab8ee44b7bf4e36876b9ae246a1c69e03f4d549883aa42a1e375edfcbabb7d103751b23a7d85e6cd521dd4e4e3ea81388f37ab95b5ed90999246093e50c5ac69cefb16951ed3c3b454c17cb0aa4c043e40ea58b80ad3c1b40fda51d1918bd737da172fcb4a6744aabc65570dca8e5aff8bd49b748c488b4b3157cdb0b68fb66989c542cfe780d168123416cecfa8cf3b791cb624a301db744fc765dcdee6ac86b5a9fc19273db41e965369bbead2e57ba383d517a804242deafb507b696abc0704ae083afeddf06147c1fde6498ecdde7b19e408729ac2aec7432195cf3c67eb8f035e8e2ef8cbb984186b16ce3cef2a3c26f61129114eccdc8807dcc4f412a38fbdf2c8e698674e46ad92f438d20ea9ef24c0d06d2505b02785f935125f7bb3c24b6df810854e67a144729f4aaf46a51071bb04fdec2492d7bda6d83fd93df837d9aa23265300cf0bfe37ceb705caa440fddb837384809c62f101a4e7a79f4e8f1fd5ccf385f1096fa99be48e022ac2a293f3d316b256cc3bf0490c0cad80b8b2e448920340c9cbe186c6bc6006f55635165278261beccb3ce2633d72ac0f4bf56155c2379aea6efcfba1fcbe3c98222c935beaf222697652fa60ba8c6f8cc939d96bf5f67348b7329a9d33b12a313d5b679637acbdecef088eb711c934ea727a34edb6e61b8f23d2e5a675661865cc8b790851dfca47c4f9fc3c70c57e404fb16426fa3669d669762009ce3380c1bd9c601a036972c909c89fe2ec650840d673903c63ad614d0943c7defd278e19277d0288e964af14da77edcd0fa71bd6837f90bfa637095820e063731832d3f00298e08ee69c2ece070d88ffd8bd91a176332549477856fd075601156bc15197ce8be3a869774627e48f5da6469ffb22621454de6158fd8fb8da10e53ce69de60ff06e89fe8fa3da5c11fac517721c70c4415bab714bf9d0419ca9a31d8986da50364e196095f95efa495edd3388956472494c6e965246cd25dbb9f83b48d75f18adc55df83e71ce7a1f005b43b37783cb02ae278db88e260f232f4d76ca9870538f206990b8b18fcefb48c2756c12af2b6677922f8f83e8ee2853b81753bae9f3c3967bdf0e5a87b164c6ab7328ff87d66ba49b18d169e400cbb6762c6b22d6bbe067a8bf0e6010044c656dae398f79a83acb80a7e2305898f2d3048b4c864612aa75b1d8c775d634a8e830381c45778fc08bb9757f037d14a4a08d38aabc3b80aaf405a67c8e17249d4f3637bb3d056a19e9dbb8eeb5add92901fce0f5e6a032d3cf59cc5d8d90576670e9250624862dd99a81a0518062e65a49b98c2d4cb0b1c22cdf2ef5dc8633429e4e9ab528c559600c1b1ce69702cea3d5336b45b35807164d2f7548a913092624c604e8c99011fce6675138f84da000d5bcbb4ab8cdc8e155165d99a55952e1865cc012d9d465b4e4f2912ba3208ccaad4570a20444dbceb2628451f90a4bd8991e3486d07423cd3f8c72524711ba5bf1fa6c9d6a2ce33e01dc37c6ce48ec8f72d84f6145a550f0de1e8eda9d93e2f9e2ead3c69f5bf521432d507229f552952f53da099cd5f776d17fe8329def5c54b2b663b8de0313efda8f12e8380d45a4978ce240eb82af20d767a317b9875afc6c4c6dc5d464826c92d34058039015b6e611940ccc6a2fd3837590d5b5ae70cad9992c0906372f0e68712ddf2f97706f5a12671ddeb2e3e70b645785f2e3dc34680a1ffc4cf7413d086582531e7b921c4a2bd36668156c6be4ae8862c861ed1a1b51bca2cec9807086e4e70503545f9ad5fd3ec7cb7d0f148cc6624779e6e60c94a3e646ed2a0ab3de45989a8aad79dba7d0ce1606768e282d58b4db1f2ed5f5d0c4571bd5f921f91b27caf410c120caa735bdd421253f81658f94b5fccd6c1bccf992d7d1a924816a6ed7406a5c9f3bbc6856e665cab27cb372ace45b081da65d46a784f380999df2b07e32ba4f4412f025ef5340a46ec87ae3608cdc48d8fc2ab3f81527a77316c996761327cdd3c06a0a75fd3f8caf4dfd4ab570b0ac82f8cb716e2a42ef14a5856c3d06bbea57690b11a5618085f7aab7ddf0215c444c10ec92cd23596f6de7ecb1d0d5ad27712b7a9fb54d01b7113b18b1544800e7a494093b11ba169af93bc5b10c05f32fd86e033067d128eca31b0227366777e9bea954522a7b888d3f2bf3bbcc4ecdad29745b3f590f0c468a16ceeb3c2fad49414f1f0316716e1d8ccb4792916dee28450abbe5bd10abf7f608507c50c331c0d1f67762806691ea0684a7b3293a0f4fbef2788d0c7cac476e19740b9a7a70e7273c713d0a5b2b418974ef37c4a5ee96e0b6c481cd8809174", 0x1000}], 0x9, &(0x7f0000001fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast2}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@noop, @end, @noop, @lsrr={0x83, 0x13, 0xa0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @remote, @multicast2]}, @ssrr={0x89, 0xb, 0xc0, [@remote, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0x8, [{@local, 0xe}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @multicast2}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xc5, [@private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010102]}, @cipso={0x86, 0x8, 0x1, [{0x0, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0xe, [{@private=0xa010102, 0x8}]}, @timestamp_addr={0x44, 0x2c, 0xde, 0x1, 0x0, [{@multicast2, 0xff8d}, {@broadcast, 0xfffffffa}, {@rand_addr=0x64010100, 0x1ff}, {@multicast1, 0x4}, {@empty, 0x7}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x39}}], 0x180}, 0x4000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") r11 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r12 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) fallocate(r11, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r13, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r12, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r11, 0x0, 0x0, 0xffffffffffffffff}]) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) 23.037294741s ago: executing program 6 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="8e002000040004000600000008d160a763aded2437bf5cbb9f3445a2c975afa0683763958e2e588a61619ed1a03aec8a87c2637cacdb140701dc90ad9bd158502ddc5da29535f9b42a7a4e04cf515e007933ed1335d4881f5b2bc7ce887726e8ffe1fa"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x76c8, &(0x7f00000001c0)={0x0, 0xde18, 0x400, 0x3, 0x3c7}, &(0x7f0000000000), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 21.669701382s ago: executing program 6 (id=1036): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f00000001c0), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0xa3) fstat(r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) close(0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000080)=0x5, 0x4) 21.080986959s ago: executing program 6 (id=1039): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 19.679524752s ago: executing program 6 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 19.660202764s ago: executing program 34 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.067355322s ago: executing program 4 (id=1301): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000500) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xffffdffffffffffe}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 3.085108071s ago: executing program 4 (id=1313): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usbip_server_init(0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00002e62830ba036bad90100000000"], 0x18, 0x884}, 0x0) recvmmsg(r6, &(0x7f0000001140), 0x0, 0x40000042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 2.440315563s ago: executing program 1 (id=1323): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001a0000005e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fspick(r5, &(0x7f00000002c0)='.\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r10, &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 1.641991108s ago: executing program 4 (id=1326): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a7b00fcb6f19a4f7fbb00b60400000000"], 0xd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x7ff, 0x0, 0x5, 0x0}) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d18000000000000006923c63a4541062101b60a2156566de77062", 0x24, r1) 1.619246029s ago: executing program 4 (id=1327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="23020000000000000000030000000800020005000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x440d4) r5 = dup3(r2, r1, 0x0) r6 = socket(0x2b, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='environ\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.506064328s ago: executing program 4 (id=1328): memfd_secret(0x0) (async) memfd_secret(0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') (async) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800900000000000000000000000900010073797a30000000000900020073797a32"], 0x68}}, 0x0) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) socket(0x40000000015, 0x5, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f0000000140)=[{r4, 0x8000}, {r0, 0x2103}], 0x2, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000140)=[{r4, 0x8000}, {r0, 0x2103}], 0x2, 0x0, 0x0, 0x0) 1.504782439s ago: executing program 7 (id=1329): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='mountinfo\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000036d00000018110000", @ANYRES16=r1, @ANYRES16=r2], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x323cc4c0b0ec8d29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000440)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f0000000640)=ANY=[@ANYBLOB='dots,errors=continue,umask=00000000000000000000002,nodots,nodots,flush,dots,discard,check=relaxed,norots,nfs=stale_rw,seclabel,hash,\x00'], 0x1, 0x25f, &(0x7f0000000140)="$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") writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r6], 0x448}}, 0x0) sendmmsg$inet(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), r1) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x1c, r7, 0xb20, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}}, 0x24008085) lseek(r1, 0x10001, 0x0) 1.212006932s ago: executing program 1 (id=1332): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sync_file_range(0xffffffffffffffff, 0x6, 0x10000000000000, 0x2) (fail_nth: 6) 1.211371922s ago: executing program 7 (id=1333): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x23b4, &(0x7f00000002c0)={0x0, 0x7c87, 0x800, 0x0, 0x38}, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 1.180640705s ago: executing program 7 (id=1335): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000001840)=[{{&(0x7f00000000c0)={0x2, 0x4e1f, @private=0xa010101}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000240)="b4", 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="8b", 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x6e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000500)="644a4ca07609ae1d6744cc94bf52f1a885d861702331df33f2fb4ca9fd1c5505268836f5600587c2fd812895b8fde3d07392050334978c60cde9b7f3e558762065f305dedf84b78cc09aef2ef9401e0f6bce8db5314fe6bb9940026ba322b56778725bd6153bf8444c4338262a20485b84df4302f9c9dd7b55fd35b2f87c79120d1267f87ceccb087e535f33987c5a8db781818d9115e5a7b9c9e4bc4e3273cc8cd4", 0xa2}, {&(0x7f00000011c0)="e9901c8e4121f9015771b9b76ef92ac0174276173be7635a3f8f8c02247098d1d6ec3f81c31cf67eb271925c38a2c1dfc78220cbefd942f9657a654bb033457df3e4fc48f9e7f17eb1be", 0x4a}, {&(0x7f0000000400)="12", 0x1}, {&(0x7f0000000d00)="20f9f5b1e0e15bb64f667ff8f318615c3cbd5e37ec1eec8bab42e3261ae1fb84e94a542b43347e3bc92cf36b0a83898e3d6fc9e6", 0x34}, {&(0x7f0000000c00)="144705d3cd70eae496f3bc60ac04084c1bbc66ce343e904c060a30522fa105d37a1cf8be0bb6b3f68d9e1775ecbe97a5ceccd96a73e3d060b0e8924f7f27b221fb42e772af07d9d3753dfe79691fc68bd2a5f01b4459f4c43f8c2591c03c5b90bfd231b6f485c05c0cd793b00ca2bc80fbb9e3494bbbda5743806d7896922e662c84e2f299b29fc5c3d635bcfcbae8466501229ec8c473ed6db361e7e5344a46ad19b7c001c2969c3c8d4abb342e6bb22274318a1205a4bd0dea90e54cc4fdb947f65b6f13d3f333dfbd9ece74d9b226834b14edaf7a66406058b00f8982d972c5987210424bbd8835e41d49b67dee817634aa", 0xf3}, {&(0x7f0000000d40)="0d8bf2a84ca0eeed9201c6744b8dc215aee8acfdf85b62a158026c4730595b0454a5d10a79ad0d487e3d94aec98e7595dc9dc0a36ad1643d65b89967a3d7713136450aad2617fe4ab4d8b20592b0f52030d39cb3eeb42ff248d72f5c6a09a36ef797b6292a060b8851b0839637683ac0305275a633ead991ae1ce90dd2a766c6c4b802d26db3a7eefa03b5aca75bd870657e516ebcb534f5b5275a24855debbb6100f5fd943a93953ef33c8f", 0xac}, {&(0x7f0000000e00)="d16ea290a1d9494a9fa8f7e0536e6a1808056fa57a44ebd243dbc81815ec659fd64793d42830fd8e1b5e6793c68285e11e5dc85209c9e28435ef9d5db65f8e5dd8a3f9a56da43d5c5812c0d1aeae6ad2c181603ac5c541f7c20b525a6547998b9608452eb38813220eb981db096eb00827605f1cf17aeb405eea51e95dc5e21791fb48b9190f4d7a7e3263d4876a2a3a7a9e29b87c093905a3cd8589a22a795706c00ac026a6e523b4feaa65501d079cb3b7d5a1688d59fe13c3a88718eeb988ca201893f8109cb512612525c095b0d15a86bc251a974e2e3386735c76326467a2", 0xe1}, {&(0x7f0000001000)="d50423a82caf57108d3f57687a2de5790b510500efd00c6bda91fef47deac82d7adf87d3463503b712c421999cbab40791c477120e13956493b456504c524c1cbe3205ec94da7704a560a8741542f9b5485aba1093c01b747e5668d2a61c160f496438f55829237d1b542e03368bca7df18291edd7becb00212bd12755b9b648f7ffba4f6af1949ff1985205", 0x8c}], 0x8, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x3, 0x200040d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x1c) 1.176264405s ago: executing program 1 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$LINK_DETACH(0x22, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000002000000000e7e56045009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)=""/220, 0xdc}, 0xe710}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x4}, 0x18) getrusage(0x0, &(0x7f0000000180)) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) 1.140059788s ago: executing program 7 (id=1338): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f00000008c0)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6377}}, {@nodelalloc}, {@delalloc}, {@prjquota}, {@jqfmt_vfsold}]}, 0x0, 0x448, &(0x7f0000000bc0)="$eJzs28tvG8UfAPDvrpP29+sroZRHS4FAQUQ8kiYt0AMXEEgcQEKCQzkGJ61K3QY1QaJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXk0sIpaNe7qePGbh4OTuPPR9p2xjv2zNez453d2QTQs4ayf5KIPRHxW0QM1LPLCwzV/7uxMFf9e2GumsTi4pt/Jnm56wtz1bJo+b7dRWY4jUg/TYpKlpu5eOnsRK02daHIj86ee2905uKlZ86cmzg9dXrq/PiJE8ePjT3/3Pizqw8mSVru2pu19dCH04cPvvr2lderJ6+889M3Wek9xf7GODYibUgPZYH/tZhrLvd4JyrbQvY2pJO+25dha6hERNZd/fn4H4hK3Oy8gXjlk642DthU2blpZ+vd84vANpZEt1sAdEd5os+uf8vtP5p6bAnXXqxfAF1P5qo3FupbfU/f0rV8/yZeuw5FxMn5f77MtujgfQgAgFa+y+Y/T680/0vj3oZy+4q1ocGIuCsi9kfE3RFxICLuicjL3hcR999SQ9q2/ualoVvnP+nVdQe3Ctn874VibWv5/G+p3YOVIrc3j78/OXWmNnW0+E6Go39nlh9rU8f3L//6eat9jfO/bMvqL+eCRTuu9jXdoJucmJ3IJ6UdcO3jiEN9K8WfLK0EJBFxMCIOre2j95WJM09+fbhVodvH30aLdaa1WPwq4ol6/89HU/ylpP365Oj/ojZ1dLQ8Km718y+X32hV/4bi74Cs/3ctP/6biwwmjeu1M2uv4/Lvn7W8plnv8b8jeSvvlx3Fax9MzM5eGIvYkbyW55e9Pn7zvWW+LJ/FP3xk5fG/v3hPVs8DEZEdxA9GxEMR8XDR9kci4tGIONIm/h9feuzd9ce/ubL4J1f8/Vs6/pv6f+2Jytkfvm1V/+r6/3ieGi5eyX//bmO1DdzIdwcAAAB3ijR/Bj5JR5bSaToyUn+G/0DsSmvTM7NPnZp+//xk/Vn5wehPyztdAw33Q8eS+eIT6/nx4l5xuf9Ycd/4i8r/8/xIdbo22eXYodftbjH+M39Uut06YNN1YB0NuEM1j//2j2wA24nzP/Qu4x96l/EPvWul8f9RU95aAGxPzv/Qu4x/6F3GP/Qu4x960kb+rl+ilxORbolmSGxSotu/TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Q+vspg==") 1.087641272s ago: executing program 2 (id=1340): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="18000000181401000000000000000000080011"], 0x18}}, 0x400c044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000000000000000000000d7361dec748f7a98b06fc25cdbfc5ce830f65d06f380bd9a78e41fbc5d2a935da7bd32b687bdc404b9b0bae4e6eb99e668bb8d5b16f89619407e1f99250ded76ae3f3c1260da03faea1301e6fad6417364fcb8e27aca014667589bfddc3b0bda8e61e39e83eba6"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xf8}, 0x10}, 0x94) r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000400)=r7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000007ce9a468000b010300000300000000000200000a080002400027000000000000007066696c74657200001400"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES8=r8], 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r7) 1.087237463s ago: executing program 1 (id=1341): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x7cb7562f2d67) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0xc, 0x2, 0xffffffff, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) 1.071455584s ago: executing program 1 (id=1342): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00m\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r7 = shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r7) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x200800, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000580)={r8, 0xfffffffa, {0x0, 0x0, 0x0, 0x5f, 0x8, 0x0, 0x4, 0x1b, 0x0, "d4e4d178b021a5c4baf800aca2ee69c530ee11900ad5127cbe96b163a20fa410c10d67850984ffeb8672e7f59190e27b85de685bab54d62285d03efe373fba39", "0bc07de4197f26d468c1d6f16b42d2864c8f2b0a125a3f464b8462f5ab9c430ef9c89fdc80a2f7714a0f222b5f40b805de0f81a3c2c686e71ba7ef1d214516b0", "19c0147eb721087466e28df7c862eb333756365cdeac633399bb3f99702bcef4", [0x3, 0x9]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) creat(0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x97a3}, 0x18) r10 = mq_open(&(0x7f0000000dc0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf5,\x8cu\xaa\xbf~)\x94\x1b2\x83X\xabZ\xc1\xb0\xdbnB\n\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9c9\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91*\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaak\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\x00'/898, 0x42, 0x130, 0x0) mq_timedsend(r10, 0x0, 0xa00, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) 1.058776704s ago: executing program 2 (id=1343): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000014}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) lseek(r4, 0x1, 0x1) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d00"], 0x54}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) getdents64(r4, 0x0, 0x4f) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r12 = dup(r11) accept$inet6(r12, 0x0, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000100), 0xfffffd9d) sendfile(r10, r13, 0x0, 0x8000002b) socket$nl_xfrm(0x10, 0x3, 0x6) 1.056831965s ago: executing program 7 (id=1344): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x13, @private2, 0x800005}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe2422, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xb, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 989.33641ms ago: executing program 2 (id=1345): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) futex(&(0x7f00000040c0), 0x6, 0xfc, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 988.87312ms ago: executing program 2 (id=1346): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x23b4, &(0x7f00000002c0)={0x0, 0x7c87, 0x800, 0x0, 0x38}, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 988.25879ms ago: executing program 2 (id=1347): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002e000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000002"], 0x24, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0xffe0}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000100)='\xadk=', &(0x7f0000001c80)='n', 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xc7f}, 0x18) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$key(0xf, 0x3, 0x2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x100, r6, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x100}}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ')'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 866.97537ms ago: executing program 7 (id=1348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="8e002000040004000600000008d160a763aded2437bf5cbb9f3445a2c975afa0683763958e2e588a61619ed1a03aec8a87c2637cacdb140701dc90ad9bd158502ddc5da29535f9b42a7a4e04cf515e007933ed1335d4881f5b2bc7ce887726e8ffe1fa"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x76c8, &(0x7f00000001c0)={0x0, 0xde18, 0x400, 0x3, 0x3c7}, &(0x7f0000000000), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 611.708811ms ago: executing program 4 (id=1349): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00m\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r7 = shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r7) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x200800, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000580)={r8, 0xfffffffa, {0x0, 0x0, 0x0, 0x5f, 0x8, 0x0, 0x4, 0x1b, 0x0, "d4e4d178b021a5c4baf800aca2ee69c530ee11900ad5127cbe96b163a20fa410c10d67850984ffeb8672e7f59190e27b85de685bab54d62285d03efe373fba39", "0bc07de4197f26d468c1d6f16b42d2864c8f2b0a125a3f464b8462f5ab9c430ef9c89fdc80a2f7714a0f222b5f40b805de0f81a3c2c686e71ba7ef1d214516b0", "19c0147eb721087466e28df7c862eb333756365cdeac633399bb3f99702bcef4", [0x3, 0x9]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) creat(0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x97a3}, 0x18) r10 = mq_open(&(0x7f0000000dc0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf5,\x8cu\xaa\xbf~)\x94\x1b2\x83X\xabZ\xc1\xb0\xdbnB\n\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9c9\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91*\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaak\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\x00'/898, 0x42, 0x130, 0x0) mq_timedsend(r10, 0x0, 0xa00, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) 486.475341ms ago: executing program 0 (id=1350): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='xprtrdma_prepsend_failed\x00', r0, 0x0, 0x100000001}, 0xffffffffffffffd2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000400)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socket$tipc(0x1e, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) 172.615856ms ago: executing program 0 (id=1351): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) 146.099948ms ago: executing program 1 (id=1352): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f00000008c0)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6377}}, {@nodelalloc}, {@delalloc}, {@prjquota}, {@jqfmt_vfsold}]}, 0x0, 0x448, &(0x7f0000000bc0)="$eJzs28tvG8UfAPDvrpP29+sroZRHS4FAQUQ8kiYt0AMXEEgcQEKCQzkGJ61K3QY1QaJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXk0sIpaNe7qePGbh4OTuPPR9p2xjv2zNez453d2QTQs4ayf5KIPRHxW0QM1LPLCwzV/7uxMFf9e2GumsTi4pt/Jnm56wtz1bJo+b7dRWY4jUg/TYpKlpu5eOnsRK02daHIj86ee2905uKlZ86cmzg9dXrq/PiJE8ePjT3/3Pizqw8mSVru2pu19dCH04cPvvr2lderJ6+889M3Wek9xf7GODYibUgPZYH/tZhrLvd4JyrbQvY2pJO+25dha6hERNZd/fn4H4hK3Oy8gXjlk642DthU2blpZ+vd84vANpZEt1sAdEd5os+uf8vtP5p6bAnXXqxfAF1P5qo3FupbfU/f0rV8/yZeuw5FxMn5f77MtujgfQgAgFa+y+Y/T680/0vj3oZy+4q1ocGIuCsi9kfE3RFxICLuicjL3hcR999SQ9q2/ualoVvnP+nVdQe3Ctn874VibWv5/G+p3YOVIrc3j78/OXWmNnW0+E6Go39nlh9rU8f3L//6eat9jfO/bMvqL+eCRTuu9jXdoJucmJ3IJ6UdcO3jiEN9K8WfLK0EJBFxMCIOre2j95WJM09+fbhVodvH30aLdaa1WPwq4ol6/89HU/ylpP365Oj/ojZ1dLQ8Km718y+X32hV/4bi74Cs/3ctP/6biwwmjeu1M2uv4/Lvn7W8plnv8b8jeSvvlx3Fax9MzM5eGIvYkbyW55e9Pn7zvWW+LJ/FP3xk5fG/v3hPVs8DEZEdxA9GxEMR8XDR9kci4tGIONIm/h9feuzd9ce/ubL4J1f8/Vs6/pv6f+2Jytkfvm1V/+r6/3ieGi5eyX//bmO1DdzIdwcAAAB3ijR/Bj5JR5bSaToyUn+G/0DsSmvTM7NPnZp+//xk/Vn5wehPyztdAw33Q8eS+eIT6/nx4l5xuf9Ycd/4i8r/8/xIdbo22eXYodftbjH+M39Uut06YNN1YB0NuEM1j//2j2wA24nzP/Qu4x96l/EPvWul8f9RU95aAGxPzv/Qu4x/6F3GP/Qu4x960kb+rl+ilxORbolmSGxSotu/TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Q+vspg==") syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x1c4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0xfc, 0x19, "124202a763684e1c7f0db49879182a4da5ccd83cc80fad62ab18cf4759e51fa47829fc56676fed204e0eb0a89354f1b7ea3af87d36154d76d4414917f979d5cb4119f58e3f19c7bb24bf611a8eb5524a39d2f607d9c284412411e4cdc384da5744d523b0540b0d1c7cfc678126cf7e31df5b6e424a2758d4a43f71a722631325e0d99573c9ad67df8b77e2b724461472bb0ef2aa2e602623794f888c8cc515c818992a2eb6f181663786d154e9442ad6b84c826816c3c4f7b72ecdc84329ba440af9a0ded4b6095f18f170c7cb06f98f46b16e1151c9587e4820c3d8daa1eb72caaeaf2f26e59bed8818bcee4e254b374db20f7652783e1d"}, @NFC_ATTR_SE_APDU={0x94, 0x19, "42b1d6515eb31b2ddecb12ee5471bc498b03042980ff6f606e9db1c98ac4ba193b0649b85967903630b4bc5583df62c784dbee43053bc25acadc335738d5cb67900ca97581225bb5793840b696644abd92536e34bcc2d72006430c99b41d4b2a8b706a71f71307720c9ad799424091edc3506d55f2a12690e5f7df86908513cca45ed2a255c997506c574ce58cc6010b"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc2}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8004}, 0x4c040) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x2000000000000326, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0xfffffdfc}]) 126.55284ms ago: executing program 0 (id=1353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) 101.607622ms ago: executing program 0 (id=1354): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x7, 0x1f, 0x2, 0xaa14}, {0x1, 0x7f, 0xa7, 0xe8}, {0x6, 0xf4, 0x6, 0x3}, {0x0, 0x5, 0x4, 0x80000000}, {0x5c, 0x0, 0x3, 0xffffff6d}, {0x92, 0x7, 0x7, 0x81}, {0x0, 0x2, 0xfd, 0x5}, {0x9, 0xff, 0x3, 0x697}, {0x1, 0x5, 0x4, 0x8}]}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x84480, 0x0) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='smaps_rollup\x00') ioctl$SNAPSHOT_FREE(r1, 0x3305) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "cb13624847f8a789c1ae4a78a97019b4f23893a5fc8ed202e89ae9590b1c089674bd1ef6104a7b8ccd9b17b48bac37b6a0028a44f44f240b14b591eaaffce3fb", 0x18}, 0x48, r0) r4 = add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="4da3a55fae012a6727b67eb0b2d5abd1197b714e78ec51d12c0939c7391f817bc8fe711048ef8b4689c51390a5aced514c7bbd65963be4db4ea5506a0c4ab786ca6fb2898486982de2a9f343ad8cc0cdd3a084389c32bd61d48f79e261b362cd832c001136cd8f28b9f833728a405dbdee2498264b50d226fae464b77efb55e281648147dcec0c7e917ff089824ff477e6d94949020837525ae4a0e169200383ec03a35891a812377e28f721865e9b705cdda1f4f917fdd9e60b0aea8baa756179bea2039d1b3be8d35706", 0xcb, r0) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000540)='user\x00', &(0x7f0000000680)='ex\xf2\xab\xd1\xeb\xf4\xd8&\x0f\xe9\xe0G\xb0\x93cb\xbf\xef\xeb\x8e1w}\xea\aD\x8dwG}6*\x18s\xcdlC\x8a\xf92nJ\xe3\n\xa5^\xe6\x1a4\xd4D$-\xb4S\x98\xda3\xbf+,\xb2\x8b\x918r\xf4\a_\xa1\xc9\xd2\f\xc0\x1d\xdf|\xa13\xe10\xe3\xa0f?\x0e\xb9\xb8\xad\x16J\xf0*\xde\xea\x8d\xe5\xf7\xfamb\x00\x00\x01\x00\x00\x00\x00\x00\xda\xa9I\xbb\xf4\x179\x90\x1c9\xfchtx\xf6\xd8K\xb5YN\xbd\xa5Ix\xa9\x13\xf4\x8fb\xc9\xa7\xae+\x1e\xe1\xbcuc%\xff\x19\xaf\xa3\x7fAT- \xc5\xe9_\xc4\x16T\xa8/\xec\xe1\xb7\t\x95\xa5X\\_x\xf0\xec\x98\xacT\xc9\x87\x94h\x9do\xa2C\xedV\xb7{?!\x14)3\x9b\x89\x91tB0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@deltfilter={0x4c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x3, 0x4}, {0xfff3, 0xfffc}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xe3, 0x1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff8}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x4c}}, 0x4000010) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x210100, 0x1b1) 25.376998ms ago: executing program 2 (id=1355): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x316) io_uring_enter(r2, 0x305d, 0x20000000, 0x21, 0x0, 0x0) 24.331808ms ago: executing program 0 (id=1356): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="00c00d0000000004b7080000000000007b8af8ff00000000bfa200000000000007022200f8ffffffb703000008000000b7040000f6010000000000008000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) acct(&(0x7f00000001c0)='./file0\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r7 = syz_io_uring_complete(0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0x8000c61) r9 = eventfd(0xf) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x901, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r11, 0x10e, 0x2, 0x0, &(0x7f0000000080)) r12 = eventfd(0x5) io_submit(0x0, 0x7, &(0x7f0000000840)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6427, r6, &(0x7f0000000000)="55735bd55cc9e0", 0x7, 0x4, 0x0, 0x2, r7}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f0000000280)="b8c67b7699f71eb540aa5501f36cb4370fe5aba1a1abae44eb62cd79ac2ae96ea48bbde3fbc72bb3dfd7032ec853169fc125d691fa411f73c7fe7087f3e9b1d94ca28db3827aa1959c92b8333f41bba423b8e31b0b8dfccb8b101e91dc048712310db96d8f1d2b427bff7331b61aee30a65da10cb8552bffdd87c0281a0757f95496559321e520bcdf507683b4f5a1b0ece4e5f8756bb6d548c9366b744d5ef0c8a02b62736b6306a7d10a58c69a130e60418ea44a328320d5b377f0ff71483a5444f324b086779af335753605", 0xcd, 0x3, 0x0, 0x0, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="f936cbbe440b717236e041380ade79902aa6530740b6e1b0d2fea928d49ba1e9f9b29d81610cf7d7c3d6a8cfee86a8def0feeaec909a9adff1f9d272a999874bb60039a3d769760e361c2c70e419868384cf1f76c59291fe379db8662e7c280f11a3e8f1", 0x64, 0x0, 0x0, 0x2, r8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000400)="d5c7f4053b81d293fc41a279192eb9711892dbe5f395603f5d2ceaac583a29fd107f4400f002cce0dbfd362b48d7df11249567c818d321857582584f573d0ce37d3cfab3c4696bad8b0e54ed0818449cac5b82f1d981c15fa7465a486a74ba158dc82b49e3004624d6ed98a9c4930533232aff6f52c05b2de72d121d34eead834e5841894e7882959533a08ffbe142a21af423c3d7f2bfd3", 0x98, 0x2e, 0x0, 0x3, r9}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x4, r2, &(0x7f0000000500)="d1e1d9", 0x3, 0xfffffffffffff5c8, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000580)="e8fd70f101949c403b3b842d38953c51fc6bed95fcbda3b7abf0bf8bf0406b83190b67ba1d82ddbe776f75e0f8069a2ba7983a282ca3f2e58f35f33036e65cbbd3436135d89070a06025f61ee2968b9a1cca1f046ef3724c881530c8ce247ec9cffee1fc90f6497faf88d4f6e0f4928757619dc7f6e5ef861991634e021a6cefd0d85a9b8fe54fd190be4a53a0c7136ec73bf2cd2ac4", 0x96, 0x6, 0x0, 0x0, r10}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x9, r11, &(0x7f0000000700)="98488bd9c78d511d4a63b0c184246389b4b4674900f5b1334ea62b6247fdd9bf1fc1fc813609d54e69772b40f46e7b467000b92f30010ef5f1d64960a3ac243f9e0b831840a93a9c7ba578471253b91c3d4af1c7c40d7194e3062442b4c9b5c683ae68b34cfa81d4e0dac102a5584de4e626694636443a91dc190141344e4effa0f636bec470799be16acd14e679c886d2861a2a3780fc5dde311afeaad6dab40293066f597ba3070b95302c9b898471af92503cd6aaad9595c7ff7ee6ce3fa8f40092e70088b2844217c6728de10ca867f4", 0xd2, 0x0, 0x0, 0x2, r12}]) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) 0s ago: executing program 0 (id=1357): syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) setresuid(0xee01, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x1, 0xc8040) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) utimes(0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="4800000010000b042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="f224000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004000000"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 292] Illegal XDP return value 4294967294 on prog (id 685) dev N/A, expect packet loss! [ 91.344718][ T6300] FAULT_INJECTION: forcing a failure. [ 91.344718][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 91.358340][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.1.874 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.358378][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.358466][ T6300] Call Trace: [ 91.358472][ T6300] [ 91.358481][ T6300] __dump_stack+0x1d/0x30 [ 91.358506][ T6300] dump_stack_lvl+0xe8/0x140 [ 91.358527][ T6300] dump_stack+0x15/0x1b [ 91.358545][ T6300] should_fail_ex+0x265/0x280 [ 91.358566][ T6300] should_failslab+0x8c/0xb0 [ 91.358631][ T6300] kmem_cache_alloc_noprof+0x50/0x310 [ 91.358659][ T6300] ? getname_flags+0x80/0x3b0 [ 91.358769][ T6300] getname_flags+0x80/0x3b0 [ 91.358794][ T6300] user_path_at+0x28/0x130 [ 91.358881][ T6300] __se_sys_pivot_root+0xd0/0x710 [ 91.358915][ T6300] __x64_sys_pivot_root+0x31/0x40 [ 91.358940][ T6300] x64_sys_call+0x144/0x2ff0 [ 91.358962][ T6300] do_syscall_64+0xd2/0x200 [ 91.359005][ T6300] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.359102][ T6300] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.359129][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.359151][ T6300] RIP: 0033:0x7f9799fdebe9 [ 91.359237][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.359251][ T6300] RSP: 002b:00007f9798a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 91.359283][ T6300] RAX: ffffffffffffffda RBX: 00007f979a205fa0 RCX: 00007f9799fdebe9 [ 91.359346][ T6300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 91.359359][ T6300] RBP: 00007f9798a47090 R08: 0000000000000000 R09: 0000000000000000 [ 91.359372][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.359384][ T6300] R13: 00007f979a206038 R14: 00007f979a205fa0 R15: 00007ffc7e236f68 [ 91.359440][ T6300] [ 91.736503][ T6308] FAULT_INJECTION: forcing a failure. [ 91.736503][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 91.749815][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.1.878 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.749845][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.749913][ T6308] Call Trace: [ 91.749921][ T6308] [ 91.749930][ T6308] __dump_stack+0x1d/0x30 [ 91.749952][ T6308] dump_stack_lvl+0xe8/0x140 [ 91.749973][ T6308] dump_stack+0x15/0x1b [ 91.749988][ T6308] should_fail_ex+0x265/0x280 [ 91.750011][ T6308] should_failslab+0x8c/0xb0 [ 91.750031][ T6308] kmem_cache_alloc_noprof+0x50/0x310 [ 91.750060][ T6308] ? audit_log_start+0x365/0x6c0 [ 91.750090][ T6308] audit_log_start+0x365/0x6c0 [ 91.750122][ T6308] audit_seccomp+0x48/0x100 [ 91.750213][ T6308] ? __seccomp_filter+0x68c/0x10d0 [ 91.750235][ T6308] __seccomp_filter+0x69d/0x10d0 [ 91.750304][ T6308] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.750409][ T6308] ? vfs_write+0x7e8/0x960 [ 91.750448][ T6308] __secure_computing+0x82/0x150 [ 91.750470][ T6308] syscall_trace_enter+0xcf/0x1e0 [ 91.750493][ T6308] do_syscall_64+0xac/0x200 [ 91.750592][ T6308] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.750619][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.750680][ T6308] RIP: 0033:0x7f9799fdebe9 [ 91.750696][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.750713][ T6308] RSP: 002b:00007f9798a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 91.750739][ T6308] RAX: ffffffffffffffda RBX: 00007f979a205fa0 RCX: 00007f9799fdebe9 [ 91.750753][ T6308] RDX: ffffffffffffffff RSI: 0000200000000080 RDI: ffffffffffffff9c [ 91.750765][ T6308] RBP: 00007f9798a47090 R08: 0000000000000000 R09: 0000000000000000 [ 91.750778][ T6308] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 91.750791][ T6308] R13: 00007f979a206038 R14: 00007f979a205fa0 R15: 00007ffc7e236f68 [ 91.750815][ T6308] [ 92.011690][ T6313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.880'. [ 92.022710][ T6292] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.046400][ T6317] loop1: detected capacity change from 0 to 512 [ 92.053473][ T6292] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 422 with error 28 [ 92.066180][ T6292] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.066180][ T6292] [ 92.077367][ T6292] EXT4-fs (loop0): Total free blocks count 0 [ 92.083446][ T6292] EXT4-fs (loop0): Free/Dirty block details [ 92.089758][ T6292] EXT4-fs (loop0): free_blocks=2415919104 [ 92.095690][ T6292] EXT4-fs (loop0): dirty_blocks=432 [ 92.101075][ T6292] EXT4-fs (loop0): Block reservation details [ 92.108748][ T6292] EXT4-fs (loop0): i_reserved_data_blocks=27 [ 92.116992][ T6317] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 92.203964][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 92.203979][ T29] audit: type=1400 audit(1755974984.947:4393): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.230439][ T295] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 92.260684][ T6323] loop0: detected capacity change from 0 to 128 [ 92.296863][ T29] audit: type=1400 audit(1755974985.039:4394): avc: denied { mount } for pid=6322 comm="syz.0.883" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.302787][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 92.355390][ T6320] loop1: detected capacity change from 0 to 8192 [ 92.386004][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 92.415248][ T6320] loop1: p1 p3 p4 [ 92.419420][ T6320] loop1: p1 start 51379968 is beyond EOD, truncated [ 92.426103][ T6320] loop1: p3 size 100663552 extends beyond EOD, truncated [ 92.441917][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 92.444262][ T6320] loop1: p4 size 327680 extends beyond EOD, truncated [ 92.471736][ T29] audit: type=1400 audit(1755974985.196:4395): avc: denied { create } for pid=6319 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.523776][ T29] audit: type=1400 audit(1755974985.252:4396): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.611795][ T29] audit: type=1400 audit(1755974985.279:4397): avc: denied { create } for pid=6331 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.631857][ T29] audit: type=1400 audit(1755974985.279:4398): avc: denied { ioctl } for pid=6331 comm="syz.1.886" path="socket:[15142]" dev="sockfs" ino=15142 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.707248][ T295] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.717790][ T29] audit: type=1400 audit(1755974985.427:4399): avc: denied { relabelfrom } for pid=6339 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 92.737614][ T29] audit: type=1400 audit(1755974985.427:4400): avc: denied { relabelto } for pid=6339 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 92.757401][ T29] audit: type=1400 audit(1755974985.427:4401): avc: denied { mounton } for pid=6337 comm="syz.0.889" path="/177/file0" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.785392][ T6338] netfs: Couldn't get user pages (rc=-14) [ 92.793033][ T295] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.805010][ T29] audit: type=1400 audit(1755974985.492:4402): avc: denied { mount } for pid=6337 comm="syz.0.889" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.829062][ T295] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856681][ T295] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.878100][ T6345] loop1: detected capacity change from 0 to 512 [ 92.906480][ T6345] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 93.019400][ T6356] loop0: detected capacity change from 0 to 1024 [ 93.026392][ T6356] EXT4-fs: Ignoring removed nobh option [ 93.046257][ T6356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.059490][ T6360] loop1: detected capacity change from 0 to 8192 [ 93.121567][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.238305][ T6377] loop1: detected capacity change from 0 to 512 [ 93.274478][ T6377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.288047][ T6377] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.347426][ T6382] veth0_to_team: entered promiscuous mode [ 93.385629][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.420277][ T6386] macsec1: entered promiscuous mode [ 93.425903][ T6386] bridge0: entered promiscuous mode [ 93.433038][ T6387] loop1: detected capacity change from 0 to 128 [ 93.437167][ T6390] netfs: Couldn't get user pages (rc=-14) [ 93.440722][ T6386] bridge0: port 2(macsec1) entered blocking state [ 93.453261][ T6386] bridge0: port 2(macsec1) entered disabled state [ 93.460277][ T6387] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.460973][ T6387] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.475663][ T6386] macsec1: entered allmulticast mode [ 93.492296][ T6386] bridge0: entered allmulticast mode [ 93.498128][ T6386] macsec1: left allmulticast mode [ 93.503338][ T6386] bridge0: left allmulticast mode [ 93.508929][ T6386] bridge0: left promiscuous mode [ 93.517914][ T6387] netlink: 'syz.1.907': attribute type 32 has an invalid length. [ 93.537396][ T6394] loop0: detected capacity change from 0 to 512 [ 93.544742][ T6394] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 93.593913][ T6387] FAULT_INJECTION: forcing a failure. [ 93.593913][ T6387] name failslab, interval 1, probability 0, space 0, times 0 [ 93.606592][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.1.907 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.606618][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.606696][ T6387] Call Trace: [ 93.606704][ T6387] [ 93.606712][ T6387] __dump_stack+0x1d/0x30 [ 93.606733][ T6387] dump_stack_lvl+0xe8/0x140 [ 93.606764][ T6387] dump_stack+0x15/0x1b [ 93.606781][ T6387] should_fail_ex+0x265/0x280 [ 93.606801][ T6387] should_failslab+0x8c/0xb0 [ 93.606833][ T6387] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 93.606894][ T6387] ? ext4_alloc_inode+0x38/0x310 [ 93.606916][ T6387] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 93.606958][ T6387] ext4_alloc_inode+0x38/0x310 [ 93.606976][ T6387] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 93.607010][ T6387] alloc_inode+0x40/0x170 [ 93.607033][ T6387] new_inode+0x1d/0xe0 [ 93.607054][ T6387] __ext4_new_inode+0x15e/0x2330 [ 93.607073][ T6387] ? rcu_sync_enter+0x11c/0x160 [ 93.607096][ T6387] ? ext4_ext_migrate+0x2a3/0x9b0 [ 93.607154][ T6387] ext4_ext_migrate+0x3f7/0x9b0 [ 93.607193][ T6387] ext4_ioctl+0xf78/0x2080 [ 93.607213][ T6387] ? file_ioctl+0x146/0x530 [ 93.607303][ T6387] ? ioctl_has_perm+0x257/0x2a0 [ 93.607324][ T6387] ? do_vfs_ioctl+0x7ca/0xe10 [ 93.607339][ T6387] ? selinux_file_ioctl+0x308/0x3a0 [ 93.607356][ T6387] ? __fget_files+0x184/0x1c0 [ 93.607378][ T6387] ? __pfx_ext4_ioctl+0x10/0x10 [ 93.607448][ T6387] __se_sys_ioctl+0xce/0x140 [ 93.607534][ T6387] __x64_sys_ioctl+0x43/0x50 [ 93.607608][ T6387] x64_sys_call+0x1816/0x2ff0 [ 93.607688][ T6387] do_syscall_64+0xd2/0x200 [ 93.607712][ T6387] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.607800][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.607846][ T6387] RIP: 0033:0x7f9799fdebe9 [ 93.607862][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.607879][ T6387] RSP: 002b:00007f9798a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.607900][ T6387] RAX: ffffffffffffffda RBX: 00007f979a205fa0 RCX: 00007f9799fdebe9 [ 93.607912][ T6387] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 93.607953][ T6387] RBP: 00007f9798a47090 R08: 0000000000000000 R09: 0000000000000000 [ 93.608038][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.608049][ T6387] R13: 00007f979a206038 R14: 00007f979a205fa0 R15: 00007ffc7e236f68 [ 93.608066][ T6387] [ 93.905554][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.915'. [ 93.915794][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.915'. [ 93.941978][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.005465][ T6404] loop4: detected capacity change from 0 to 2048 [ 94.020423][ T6417] FAULT_INJECTION: forcing a failure. [ 94.020423][ T6417] name failslab, interval 1, probability 0, space 0, times 0 [ 94.033188][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.6.919 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.033248][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.033324][ T6417] Call Trace: [ 94.033332][ T6417] [ 94.033339][ T6417] __dump_stack+0x1d/0x30 [ 94.033357][ T6417] dump_stack_lvl+0xe8/0x140 [ 94.033374][ T6417] dump_stack+0x15/0x1b [ 94.033450][ T6417] should_fail_ex+0x265/0x280 [ 94.033470][ T6417] should_failslab+0x8c/0xb0 [ 94.033492][ T6417] __kvmalloc_node_noprof+0x123/0x4e0 [ 94.033578][ T6417] ? alloc_netdev_mqs+0xa0/0xa30 [ 94.033598][ T6417] ? __pfx_ppp_setup+0x10/0x10 [ 94.033680][ T6417] alloc_netdev_mqs+0xa0/0xa30 [ 94.033700][ T6417] ppp_ioctl+0x4d5/0x11c0 [ 94.033779][ T6417] ? __fget_files+0x184/0x1c0 [ 94.033810][ T6417] ? __pfx_ppp_ioctl+0x10/0x10 [ 94.033838][ T6417] __se_sys_ioctl+0xce/0x140 [ 94.033893][ T6417] __x64_sys_ioctl+0x43/0x50 [ 94.033924][ T6417] x64_sys_call+0x1816/0x2ff0 [ 94.033946][ T6417] do_syscall_64+0xd2/0x200 [ 94.033973][ T6417] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.033999][ T6417] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.034078][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.034151][ T6417] RIP: 0033:0x7fe4710aebe9 [ 94.034168][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.034186][ T6417] RSP: 002b:00007fe46fb17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.034203][ T6417] RAX: ffffffffffffffda RBX: 00007fe4712d5fa0 RCX: 00007fe4710aebe9 [ 94.034214][ T6417] RDX: 0000200000000040 RSI: 00000000c004743e RDI: 0000000000000003 [ 94.034283][ T6417] RBP: 00007fe46fb17090 R08: 0000000000000000 R09: 0000000000000000 [ 94.034297][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.034308][ T6417] R13: 00007fe4712d6038 R14: 00007fe4712d5fa0 R15: 00007fffd29849d8 [ 94.034325][ T6417] [ 94.260470][ T6404] Alternate GPT is invalid, using primary GPT. [ 94.266885][ T6404] loop4: p2 p3 p7 [ 94.305561][ T6421] loop6: detected capacity change from 0 to 512 [ 94.320556][ T6421] ext4: Unknown parameter 'fsuuid' [ 94.358252][ T6422] loop1: detected capacity change from 0 to 512 [ 94.576457][ T6428] loop2: detected capacity change from 0 to 512 [ 94.598632][ T6430] loop0: detected capacity change from 0 to 128 [ 94.606119][ T6428] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 94.657004][ T6434] loop2: detected capacity change from 0 to 512 [ 94.667919][ T6430] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.703511][ T6434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.719678][ T6430] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.722844][ T6434] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.968514][ T6442] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.923: lblock 23 mapped to illegal pblock 18 (length 1) [ 94.985462][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.011064][ T6442] EXT4-fs (loop2): Remounting filesystem read-only [ 95.023301][ T6419] syz.4.913 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 95.037344][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.4.913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.037404][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.037416][ T6419] Call Trace: [ 95.037422][ T6419] [ 95.037504][ T6419] __dump_stack+0x1d/0x30 [ 95.037523][ T6419] dump_stack_lvl+0xe8/0x140 [ 95.037615][ T6419] dump_stack+0x15/0x1b [ 95.037633][ T6419] dump_header+0x81/0x220 [ 95.037663][ T6419] oom_kill_process+0x342/0x400 [ 95.037705][ T6419] out_of_memory+0x979/0xb80 [ 95.037773][ T6419] try_charge_memcg+0x5e6/0x9e0 [ 95.037869][ T6419] obj_cgroup_charge_pages+0xa6/0x150 [ 95.037903][ T6419] __memcg_kmem_charge_page+0x9f/0x170 [ 95.037985][ T6419] __alloc_frozen_pages_noprof+0x188/0x360 [ 95.038024][ T6419] alloc_pages_mpol+0xb3/0x250 [ 95.038132][ T6419] alloc_pages_noprof+0x90/0x130 [ 95.038160][ T6419] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 95.038245][ T6419] __kvmalloc_node_noprof+0x30f/0x4e0 [ 95.038273][ T6419] ? ip_set_alloc+0x1f/0x30 [ 95.038339][ T6419] ? ip_set_alloc+0x1f/0x30 [ 95.038363][ T6419] ? __kmalloc_cache_noprof+0x189/0x320 [ 95.038411][ T6419] ip_set_alloc+0x1f/0x30 [ 95.038446][ T6419] hash_netiface_create+0x282/0x740 [ 95.038535][ T6419] ? __pfx_hash_netiface_create+0x10/0x10 [ 95.038573][ T6419] ip_set_create+0x3cc/0x960 [ 95.038621][ T6419] ? __nla_parse+0x40/0x60 [ 95.038642][ T6419] nfnetlink_rcv_msg+0x4c6/0x590 [ 95.038687][ T6419] netlink_rcv_skb+0x120/0x220 [ 95.038709][ T6419] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 95.038758][ T6419] nfnetlink_rcv+0x16b/0x1690 [ 95.038815][ T6419] ? __list_del_entry_valid_or_report+0x65/0x130 [ 95.038903][ T6419] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 95.038949][ T6419] ? should_fail_ex+0x30/0x280 [ 95.038971][ T6419] ? selinux_nlmsg_lookup+0x99/0x890 [ 95.039003][ T6419] ? __rcu_read_unlock+0x34/0x70 [ 95.039051][ T6419] ? __netlink_lookup+0x266/0x2a0 [ 95.039076][ T6419] netlink_unicast+0x5c0/0x690 [ 95.039112][ T6419] netlink_sendmsg+0x58b/0x6b0 [ 95.039137][ T6419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.039229][ T6419] __sock_sendmsg+0x142/0x180 [ 95.039259][ T6419] ____sys_sendmsg+0x31e/0x4e0 [ 95.039286][ T6419] ___sys_sendmsg+0x17b/0x1d0 [ 95.039324][ T6419] __x64_sys_sendmsg+0xd4/0x160 [ 95.039352][ T6419] x64_sys_call+0x191e/0x2ff0 [ 95.039391][ T6419] do_syscall_64+0xd2/0x200 [ 95.039427][ T6419] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.039518][ T6419] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.039575][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.039598][ T6419] RIP: 0033:0x7f5dd64febe9 [ 95.039614][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.039633][ T6419] RSP: 002b:00007f5dd4f46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.039654][ T6419] RAX: ffffffffffffffda RBX: 00007f5dd6726090 RCX: 00007f5dd64febe9 [ 95.039668][ T6419] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 95.039710][ T6419] RBP: 00007f5dd6581e19 R08: 0000000000000000 R09: 0000000000000000 [ 95.039721][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.039731][ T6419] R13: 00007f5dd6726128 R14: 00007f5dd6726090 R15: 00007fffa8e85b68 [ 95.039751][ T6419] [ 95.039759][ T6419] memory: usage 307200kB, limit 307200kB, failcnt 417 [ 95.380860][ T6419] memory+swap: usage 308840kB, limit 9007199254740988kB, failcnt 0 [ 95.388863][ T6419] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 95.396164][ T6419] Memory cgroup stats for /syz4: [ 95.417455][ T6419] cache 4096 [ 95.425734][ T6419] rss 0 [ 95.428522][ T6419] shmem 0 [ 95.431452][ T6419] mapped_file 0 [ 95.433529][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.435125][ T6419] dirty 0 [ 95.447093][ T6419] writeback 0 [ 95.450826][ T6419] workingset_refault_anon 31 [ 95.455613][ T6419] workingset_refault_file 171 [ 95.460521][ T6419] swap 1675264 [ 95.463887][ T6419] swapcached 4096 [ 95.467589][ T6419] pgpgin 81636 [ 95.471182][ T6419] pgpgout 81633 [ 95.475187][ T6419] pgfault 107247 [ 95.478960][ T6419] pgmajfault 12 [ 95.482623][ T6419] inactive_anon 4096 [ 95.486728][ T6419] active_anon 0 [ 95.490269][ T6419] inactive_file 4096 [ 95.490280][ T6419] active_file 4096 [ 95.490287][ T6419] unevictable 0 [ 95.490354][ T6419] hierarchical_memory_limit 314572800 [ 95.507252][ T6419] hierarchical_memsw_limit 9223372036854771712 [ 95.507266][ T6419] total_cache 4096 [ 95.507278][ T6419] total_rss 0 [ 95.507283][ T6419] total_shmem 0 [ 95.507290][ T6419] total_mapped_file 0 [ 95.507296][ T6419] total_dirty 0 [ 95.507302][ T6419] total_writeback 0 [ 95.507309][ T6419] total_workingset_refault_anon 31 [ 95.507316][ T6419] total_workingset_refault_file 171 [ 95.507323][ T6419] total_swap 1675264 [ 95.507330][ T6419] total_swapcached 4096 [ 95.555317][ T6419] total_pgpgin 81636 [ 95.555329][ T6419] total_pgpgout 81633 [ 95.555336][ T6419] total_pgfault 107247 [ 95.555342][ T6419] total_pgmajfault 12 [ 95.555349][ T6419] total_inactive_anon 4096 [ 95.555356][ T6419] total_active_anon 0 [ 95.555363][ T6419] total_inactive_file 4096 [ 95.585260][ T6419] total_active_file 4096 [ 95.589600][ T6419] total_unevictable 0 [ 95.593580][ T6419] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.913,pid=6403,uid=0 [ 95.608356][ T6419] Memory cgroup out of memory: Killed process 6403 (syz.4.913) total-vm:95812kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 95.712884][ T6455] loop2: detected capacity change from 0 to 512 [ 95.731026][ T6455] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.745654][ T6455] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.929: bad orphan inode 13 [ 95.784435][ T6455] ext4_test_bit(bit=12, block=18) = 1 [ 95.790126][ T6455] is_bad_inode(inode)=0 [ 95.794274][ T6455] NEXT_ORPHAN(inode)=2130706432 [ 95.799916][ T6455] max_ino=32 [ 95.803687][ T6455] i_nlink=1 [ 95.806155][ T36] usb 9-1: enqueue for inactive port 0 [ 95.807794][ T6455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.825774][ T36] usb 9-1: enqueue for inactive port 0 [ 95.842664][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.936122][ T36] vhci_hcd: vhci_device speed not set [ 95.985191][ T6463] loop4: detected capacity change from 0 to 8192 [ 96.044792][ T6463] loop4: p1 p3 p4 [ 96.048867][ T6463] loop4: p1 start 51379968 is beyond EOD, truncated [ 96.056272][ T6463] loop4: p3 size 100663552 extends beyond EOD, truncated [ 96.078822][ T6463] loop4: p4 size 327680 extends beyond EOD, truncated [ 96.359495][ T6482] loop6: detected capacity change from 0 to 1024 [ 96.370211][ T6482] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.382129][ T6482] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 96.390256][ T6482] EXT4-fs (loop6): orphan cleanup on readonly fs [ 96.397988][ T6482] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 3: comm syz.6.938: lblock 3 mapped to illegal pblock 3 (length 1) [ 96.413506][ T6482] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.938: Failed to acquire dquot type 0 [ 96.426692][ T6482] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 3: comm syz.6.938: lblock 3 mapped to illegal pblock 3 (length 1) [ 96.441564][ T6482] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.938: Failed to acquire dquot type 0 [ 96.452969][ T6482] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.938: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.467545][ T6482] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 3: comm syz.6.938: lblock 3 mapped to illegal pblock 3 (length 1) [ 96.482785][ T6482] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.938: Failed to acquire dquot type 0 [ 96.494443][ T6482] EXT4-fs (loop6): 1 orphan inode deleted [ 96.501250][ T6482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.505131][ T6495] loop1: detected capacity change from 0 to 512 [ 96.522488][ T6495] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 96.565794][ T6065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.648568][ T6499] loop6: detected capacity change from 0 to 2048 [ 96.658637][ T6499] EXT4-fs: Ignoring removed bh option [ 96.692961][ T6506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6506 comm=syz.1.946 [ 96.706455][ T6506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6506 comm=syz.1.946 [ 96.897621][ T6519] loop2: detected capacity change from 0 to 1024 [ 96.923916][ T6519] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.936293][ T6514] loop1: detected capacity change from 0 to 8192 [ 96.942684][ T6519] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.952: lblock 3 mapped to illegal pblock 3 (length 3) [ 96.959343][ T6519] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 96.972300][ T6519] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.972300][ T6519] [ 96.977396][ T6514] loop1: p1 p3 p4 [ 96.987546][ T6514] loop1: p1 start 51379968 is beyond EOD, truncated [ 96.987631][ T6519] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.952: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 96.994329][ T6514] loop1: p3 size 100663552 extends beyond EOD, truncated [ 97.020612][ T6519] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 97.034213][ T6526] loop0: detected capacity change from 0 to 512 [ 97.051267][ T6526] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 97.060581][ T6514] loop1: p4 size 327680 extends beyond EOD, truncated [ 97.156865][ T6531] __nla_validate_parse: 1 callbacks suppressed [ 97.156881][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 97.262523][ T6534] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.276121][ T6534] rdma_op ffff888123f86d80 conn xmit_rdma 0000000000000000 [ 97.304101][ T6536] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6536 comm=syz.1.958 [ 97.316815][ T6536] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6536 comm=syz.1.958 [ 97.460635][ T6547] tmpfs: Bad value for 'mpol' [ 97.509302][ T6554] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6554 comm=syz.0.965 [ 97.521773][ T6554] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6554 comm=syz.0.965 [ 97.561161][ T6557] loop0: detected capacity change from 0 to 512 [ 97.568495][ T6557] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 97.765022][ T6568] loop6: detected capacity change from 0 to 512 [ 97.793128][ T6568] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.805892][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 97.805913][ T29] audit: type=1400 audit(1755974990.125:4731): avc: denied { cpu } for pid=6565 comm="syz.4.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 97.863463][ T29] audit: type=1400 audit(1755974990.153:4732): avc: denied { setopt } for pid=6567 comm="syz.6.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.908085][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.969'. [ 97.931164][ T29] audit: type=1400 audit(1755974990.245:4733): avc: denied { connect } for pid=6574 comm="syz.6.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.953275][ T6564] veth0: entered promiscuous mode [ 97.959050][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 98.044468][ T6576] $Hÿ: renamed from bond0 (while UP) [ 98.053245][ T6578] loop2: detected capacity change from 0 to 512 [ 98.074106][ T6576] $Hÿ: entered promiscuous mode [ 98.079346][ T6576] bond_slave_0: entered promiscuous mode [ 98.085600][ T6576] bond_slave_1: entered promiscuous mode [ 98.103818][ T6580] loop4: detected capacity change from 0 to 128 [ 98.116650][ T6580] bio_check_eod: 78 callbacks suppressed [ 98.116667][ T6580] syz.4.973: attempt to access beyond end of device [ 98.116667][ T6580] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 98.120105][ T6578] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.192762][ T6586] FAULT_INJECTION: forcing a failure. [ 98.192762][ T6586] name failslab, interval 1, probability 0, space 0, times 0 [ 98.205598][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: syz.4.975 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.205637][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.205647][ T6586] Call Trace: [ 98.205653][ T6586] [ 98.205658][ T6586] __dump_stack+0x1d/0x30 [ 98.205679][ T6586] dump_stack_lvl+0xe8/0x140 [ 98.205698][ T6586] dump_stack+0x15/0x1b [ 98.205715][ T6586] should_fail_ex+0x265/0x280 [ 98.205733][ T6586] should_failslab+0x8c/0xb0 [ 98.205764][ T6586] kmem_cache_alloc_noprof+0x50/0x310 [ 98.205792][ T6586] ? security_inode_alloc+0x37/0x100 [ 98.205822][ T6586] security_inode_alloc+0x37/0x100 [ 98.205912][ T6586] inode_init_always_gfp+0x4b7/0x500 [ 98.205935][ T6586] ? __pfx_mqueue_fill_super+0x10/0x10 [ 98.205961][ T6586] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 98.206044][ T6586] alloc_inode+0x58/0x170 [ 98.206062][ T6586] new_inode+0x1d/0xe0 [ 98.206080][ T6586] ? __pfx_mqueue_fill_super+0x10/0x10 [ 98.206119][ T6586] mqueue_fill_super+0x89/0x1d0 [ 98.206144][ T6586] ? __pfx_mqueue_fill_super+0x10/0x10 [ 98.206170][ T6586] get_tree_nodev+0x80/0x100 [ 98.206193][ T6586] mqueue_get_tree+0x63/0x90 [ 98.206220][ T6586] vfs_get_tree+0x57/0x1d0 [ 98.206239][ T6586] fc_mount_longterm+0x18/0xb0 [ 98.206267][ T6586] mq_init_ns+0x249/0x2f0 [ 98.206291][ T6586] copy_ipcs+0x214/0x3b0 [ 98.206378][ T6586] create_new_namespaces+0x12a/0x3d0 [ 98.206410][ T6586] unshare_nsproxy_namespaces+0xe8/0x120 [ 98.206442][ T6586] ksys_unshare+0x3d0/0x6d0 [ 98.206488][ T6586] ? trace_sys_enter+0xd0/0xf0 [ 98.206515][ T6586] __x64_sys_unshare+0x1f/0x30 [ 98.206568][ T6586] x64_sys_call+0x2911/0x2ff0 [ 98.206586][ T6586] do_syscall_64+0xd2/0x200 [ 98.206608][ T6586] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 98.206627][ T6586] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.206717][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.206744][ T6586] RIP: 0033:0x7f5dd64febe9 [ 98.206762][ T6586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.206780][ T6586] RSP: 002b:00007f5dd4f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 98.206801][ T6586] RAX: ffffffffffffffda RBX: 00007f5dd6725fa0 RCX: 00007f5dd64febe9 [ 98.206814][ T6586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 98.206838][ T6586] RBP: 00007f5dd4f67090 R08: 0000000000000000 R09: 0000000000000000 [ 98.206850][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.206928][ T6586] R13: 00007f5dd6726038 R14: 00007f5dd6725fa0 R15: 00007fffa8e85b68 [ 98.206948][ T6586] [ 98.518354][ T6595] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 98.522708][ T29] audit: type=1400 audit(1755974990.780:4734): avc: denied { setopt } for pid=6594 comm="syz.1.977" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.547412][ T29] audit: type=1400 audit(1755974990.780:4735): avc: denied { ioctl } for pid=6594 comm="+}[@" path="socket:[16796]" dev="sockfs" ino=16796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.554132][ T6597] loop4: detected capacity change from 0 to 512 [ 98.572158][ T29] audit: type=1400 audit(1755974990.780:4736): avc: denied { bind } for pid=6594 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.597656][ T29] audit: type=1400 audit(1755974990.780:4737): avc: denied { write } for pid=6594 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.638901][ T6597] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.648256][ T6597] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (29) [ 98.658017][ T6597] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 98.672251][ T29] audit: type=1326 audit(1755974990.919:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b787eebe9 code=0x7ffc0000 [ 98.695888][ T29] audit: type=1326 audit(1755974990.919:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b787eebe9 code=0x7ffc0000 [ 98.719687][ T29] audit: type=1326 audit(1755974990.919:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6602 comm="syz.2.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f1b787eebe9 code=0x7ffc0000 [ 98.747746][ T6597] loop4: detected capacity change from 0 to 128 [ 98.756571][ T6597] vfat: Unknown parameter 'syzkaller' [ 98.772147][ T6611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6611 comm=syz.0.983 [ 98.809918][ T6611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6611 comm=syz.0.983 [ 99.194276][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 99.206606][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.214122][ T6656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.235285][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.242867][ T6656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.254257][ T6660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6660 comm=syz.1.1000 [ 99.266918][ T6660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6660 comm=syz.1.1000 [ 99.285513][ T6661] lo speed is unknown, defaulting to 1000 [ 99.291712][ T6661] lo speed is unknown, defaulting to 1000 [ 99.298200][ T6661] lo speed is unknown, defaulting to 1000 [ 99.311154][ T6661] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.332531][ T6661] lo speed is unknown, defaulting to 1000 [ 99.341931][ T6661] lo speed is unknown, defaulting to 1000 [ 99.348092][ T6661] lo speed is unknown, defaulting to 1000 [ 99.354242][ T6661] lo speed is unknown, defaulting to 1000 [ 99.362185][ T6661] lo speed is unknown, defaulting to 1000 [ 99.377889][ T6667] loop1: detected capacity change from 0 to 512 [ 99.405056][ T6667] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 99.444670][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'. [ 99.458777][ T6669] loop1: detected capacity change from 0 to 512 [ 99.481023][ T6656] lo speed is unknown, defaulting to 1000 [ 99.487610][ T6669] EXT4-fs (loop1): unsupported inode size: 0 [ 99.493719][ T6669] EXT4-fs (loop1): blocksize: 4096 [ 99.586534][ T6678] loop1: detected capacity change from 0 to 512 [ 99.613542][ T6678] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.635904][ T6677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1008'. [ 99.637498][ T6678] netlink: 'syz.1.1006': attribute type 6 has an invalid length. [ 99.779493][ T6680] loop0: detected capacity change from 0 to 512 [ 99.786726][ T6680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.812074][ T6704] loop1: detected capacity change from 0 to 512 [ 99.816188][ T6706] netlink: 'syz.4.1012': attribute type 19 has an invalid length. [ 99.826423][ T6706] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1012'. [ 99.843646][ T6680] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 99.860274][ T6680] EXT4-fs (loop0): mount failed [ 99.866473][ T6704] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.974657][ T6714] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 99.984377][ T6724] loop6: detected capacity change from 0 to 1024 [ 99.985285][ T6704] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.1011: lblock 23 mapped to illegal pblock 18 (length 1) [ 99.999850][ T6724] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.1016: Invalid inode table block 0 in block_group 0 [ 100.007448][ T6704] EXT4-fs (loop1): Remounting filesystem read-only [ 100.020978][ T6724] EXT4-fs (loop6): get root inode failed [ 100.032403][ T6724] EXT4-fs (loop6): mount failed [ 100.118259][ T6735] loop1: detected capacity change from 0 to 256 [ 100.132334][ T6733] lo speed is unknown, defaulting to 1000 [ 100.138482][ T6735] FAT-fs (loop1): Invalid FSINFO signature: 0x0ffffff8, 0x00000000 (sector = 33) [ 100.147751][ T6735] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start df000002) [ 100.157990][ T6735] FAT-fs (loop1): Filesystem has been set read-only [ 100.187903][ T6724] loop6: detected capacity change from 0 to 2048 [ 100.211562][ T6739] FAULT_INJECTION: forcing a failure. [ 100.211562][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 100.224253][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.0.1019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.224281][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.224294][ T6739] Call Trace: [ 100.224300][ T6739] [ 100.224310][ T6739] __dump_stack+0x1d/0x30 [ 100.224340][ T6739] dump_stack_lvl+0xe8/0x140 [ 100.224398][ T6739] dump_stack+0x15/0x1b [ 100.224412][ T6739] should_fail_ex+0x265/0x280 [ 100.224433][ T6739] should_failslab+0x8c/0xb0 [ 100.224458][ T6739] kmem_cache_alloc_noprof+0x50/0x310 [ 100.224521][ T6739] ? security_file_alloc+0x32/0x100 [ 100.224548][ T6739] security_file_alloc+0x32/0x100 [ 100.224596][ T6739] init_file+0x5c/0x1d0 [ 100.224622][ T6739] alloc_empty_file+0x8b/0x200 [ 100.224646][ T6739] alloc_file_pseudo+0xc6/0x160 [ 100.224677][ T6739] __shmem_file_setup+0x1de/0x210 [ 100.224712][ T6739] shmem_file_setup+0x3b/0x50 [ 100.224805][ T6739] __se_sys_memfd_create+0x2c3/0x590 [ 100.224874][ T6739] __x64_sys_memfd_create+0x31/0x40 [ 100.224896][ T6739] x64_sys_call+0x2abe/0x2ff0 [ 100.224992][ T6739] do_syscall_64+0xd2/0x200 [ 100.225062][ T6739] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.225087][ T6739] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 100.225192][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.225214][ T6739] RIP: 0033:0x7f7de685ebe9 [ 100.225230][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.225316][ T6739] RSP: 002b:00007f7de52c6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 100.225346][ T6739] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007f7de685ebe9 [ 100.225359][ T6739] RDX: 00007f7de52c6dec RSI: 0000000000000000 RDI: 00007f7de68e27e8 [ 100.225375][ T6739] RBP: 00002000000005c0 R08: 00007f7de52c6b07 R09: 0000000000000000 [ 100.225452][ T6739] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 100.225465][ T6739] R13: 00007f7de52c6dec R14: 00007f7de52c6df0 R15: 00007ffd81e38cc8 [ 100.225486][ T6739] [ 100.227655][ T6724] EXT4-fs mount: 12 callbacks suppressed [ 100.227669][ T6724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.478424][ T6065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.677635][ T6760] FAULT_INJECTION: forcing a failure. [ 100.677635][ T6760] name failslab, interval 1, probability 0, space 0, times 0 [ 100.690568][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.2.1026 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.690598][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.690681][ T6760] Call Trace: [ 100.690687][ T6760] [ 100.690694][ T6760] __dump_stack+0x1d/0x30 [ 100.690713][ T6760] dump_stack_lvl+0xe8/0x140 [ 100.690760][ T6760] dump_stack+0x15/0x1b [ 100.690778][ T6760] should_fail_ex+0x265/0x280 [ 100.690800][ T6760] ? audit_log_d_path+0x8d/0x150 [ 100.690895][ T6760] should_failslab+0x8c/0xb0 [ 100.690919][ T6760] __kmalloc_cache_noprof+0x4c/0x320 [ 100.690950][ T6760] audit_log_d_path+0x8d/0x150 [ 100.691021][ T6760] audit_log_d_path_exe+0x42/0x70 [ 100.691046][ T6760] audit_log_task+0x1e9/0x250 [ 100.691070][ T6760] audit_seccomp+0x61/0x100 [ 100.691094][ T6760] ? __seccomp_filter+0x68c/0x10d0 [ 100.691129][ T6760] __seccomp_filter+0x69d/0x10d0 [ 100.691155][ T6760] ? _raw_spin_unlock+0x26/0x50 [ 100.691250][ T6760] __secure_computing+0x82/0x150 [ 100.691267][ T6760] syscall_trace_enter+0xcf/0x1e0 [ 100.691320][ T6760] do_syscall_64+0xac/0x200 [ 100.691343][ T6760] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.691381][ T6760] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 100.691402][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.691505][ T6760] RIP: 0033:0x7f1b788214a5 [ 100.691519][ T6760] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 100.691536][ T6760] RSP: 002b:00007f1b77256fa0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 100.691556][ T6760] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f1b788214a5 [ 100.691567][ T6760] RDX: 00007f1b77256fe0 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.691578][ T6760] RBP: 00007f1b77257090 R08: 0000000000000000 R09: 0000000000000000 [ 100.691588][ T6760] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 100.691599][ T6760] R13: 00007f1b78a16038 R14: 00007f1b78a15fa0 R15: 00007ffe0c807758 [ 100.691692][ T6760] [ 101.519590][ T6779] netlink: 'syz.0.1033': attribute type 10 has an invalid length. [ 101.954665][ T6789] loop6: detected capacity change from 0 to 1024 [ 102.373276][ T6789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.405239][ T6789] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.427333][ T6794] loop0: detected capacity change from 0 to 512 [ 102.437571][ T6794] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 102.483418][ T6065] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /36/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 102.552736][ T6065] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /36/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 102.657192][ T6065] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 102.714767][ T6803] loop4: detected capacity change from 0 to 8192 [ 102.732103][ T6812] loop2: detected capacity change from 0 to 512 [ 102.751214][ T6065] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /36/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 102.785286][ T6812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.798996][ T6803] loop4: p1 p2 p4 < > [ 102.803065][ T6803] loop4: partition table partially beyond EOD, truncated [ 102.816572][ T6803] loop4: p1 start 16777216 is beyond EOD, truncated [ 102.823196][ T6803] loop4: p2 size 515840 extends beyond EOD, truncated [ 102.830929][ T6812] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.843149][ T6065] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 102.870920][ T6803] loop4: p4 start 16777216 is beyond EOD, truncated [ 102.882264][ T6819] FAULT_INJECTION: forcing a failure. [ 102.882264][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 102.895099][ T6819] CPU: 0 UID: 0 PID: 6819 Comm: syz.0.1047 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.895124][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.895134][ T6819] Call Trace: [ 102.895140][ T6819] [ 102.895147][ T6819] __dump_stack+0x1d/0x30 [ 102.895166][ T6819] dump_stack_lvl+0xe8/0x140 [ 102.895231][ T6819] dump_stack+0x15/0x1b [ 102.895324][ T6819] should_fail_ex+0x265/0x280 [ 102.895403][ T6819] should_failslab+0x8c/0xb0 [ 102.895464][ T6819] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 102.895547][ T6819] ? __d_alloc+0x3d/0x340 [ 102.895578][ T6819] __d_alloc+0x3d/0x340 [ 102.895626][ T6819] d_alloc_anon+0x17/0x20 [ 102.895652][ T6819] path_from_stashed+0x1cf/0x330 [ 102.895672][ T6819] ? __pfx_proc_ns_get_link+0x10/0x10 [ 102.895696][ T6819] ns_get_path+0x5b/0x80 [ 102.895745][ T6819] proc_ns_get_link+0x80/0x160 [ 102.895770][ T6819] pick_link+0x41d/0x830 [ 102.895832][ T6819] step_into+0x7b6/0x820 [ 102.895917][ T6819] ? d_splice_alias_ops+0xdc/0x280 [ 102.895979][ T6819] path_openat+0x13e8/0x2170 [ 102.896014][ T6819] do_filp_open+0x109/0x230 [ 102.896042][ T6819] do_sys_openat2+0xa6/0x110 [ 102.896078][ T6819] __x64_sys_openat+0xf2/0x120 [ 102.896104][ T6819] x64_sys_call+0x2e9c/0x2ff0 [ 102.896163][ T6819] do_syscall_64+0xd2/0x200 [ 102.896188][ T6819] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.896210][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.896248][ T6819] RIP: 0033:0x7f7de685d550 [ 102.896264][ T6819] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 102.896285][ T6819] RSP: 002b:00007f7de52a5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 102.896381][ T6819] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7de685d550 [ 102.896395][ T6819] RDX: 0000000000000000 RSI: 00007f7de68e1f06 RDI: 00000000ffffff9c [ 102.896409][ T6819] RBP: 00007f7de68e1f06 R08: 0000000000000000 R09: 0000000000000000 [ 102.896422][ T6819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 102.896436][ T6819] R13: 00007f7de6a86128 R14: 00007f7de6a86090 R15: 00007ffd81e38cc8 [ 102.896452][ T6819] [ 103.120259][ T6065] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /36/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 103.149342][ T6065] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 103.168734][ T6065] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /36/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 103.197442][ T6065] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 103.222784][ T6065] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /36/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 103.269182][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 103.269195][ T29] audit: type=1400 audit(2000000000.036:5163): avc: denied { create } for pid=6810 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.315519][ T6823] loop0: detected capacity change from 0 to 8192 [ 103.322071][ T29] audit: type=1400 audit(2000000000.064:5164): avc: denied { write } for pid=6810 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.358722][ T29] audit: type=1326 audit(2000000000.110:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 103.382233][ T29] audit: type=1326 audit(2000000000.110:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 103.406347][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.411790][ T6823] loop0: p1 p3 p4 [ 103.419358][ T6823] loop0: p1 start 51379968 is beyond EOD, truncated [ 103.426035][ T6823] loop0: p3 size 100663552 extends beyond EOD, truncated [ 103.433962][ T6823] loop0: p4 size 327680 extends beyond EOD, truncated [ 103.441241][ T29] audit: type=1326 audit(2000000000.129:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 103.466628][ T29] audit: type=1326 audit(2000000000.129:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 103.494236][ T29] audit: type=1326 audit(2000000000.129:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 103.519467][ T29] audit: type=1326 audit(2000000000.129:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 103.547941][ T6736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.548434][ T29] audit: type=1326 audit(2000000000.249:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 103.581906][ T29] audit: type=1326 audit(2000000000.249:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9799fd5ba7 code=0x7ffc0000 [ 103.641453][ T6842] loop0: detected capacity change from 0 to 512 [ 103.650309][ T6842] ext4: Unknown parameter 'fsuuid' [ 103.660646][ T6845] loop4: detected capacity change from 0 to 512 [ 103.676370][ T6845] ext4: Unknown parameter 'fsuuid' [ 103.786606][ T6852] loop1: detected capacity change from 0 to 128 [ 103.914431][ T6850] syz.1.1058: attempt to access beyond end of device [ 103.914431][ T6850] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 103.941319][ T37] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.963337][ T6850] syz.1.1058: attempt to access beyond end of device [ 103.963337][ T6850] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 103.984468][ T6850] syz.1.1058: attempt to access beyond end of device [ 103.984468][ T6850] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.000587][ T6850] syz.1.1058: attempt to access beyond end of device [ 104.000587][ T6850] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.014378][ T6850] syz.1.1058: attempt to access beyond end of device [ 104.014378][ T6850] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.029070][ T6850] syz.1.1058: attempt to access beyond end of device [ 104.029070][ T6850] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.071619][ T37] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.093552][ T6850] syz.1.1058: attempt to access beyond end of device [ 104.093552][ T6850] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.278586][ T6850] syz.1.1058: attempt to access beyond end of device [ 104.278586][ T6850] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.365290][ T6850] syz.1.1058: attempt to access beyond end of device [ 104.365290][ T6850] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.431501][ T6850] syz.1.1058: attempt to access beyond end of device [ 104.431501][ T6850] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 104.519808][ T37] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.582889][ T37] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.640209][ T6867] loop2: detected capacity change from 0 to 8192 [ 104.680445][ T6867] loop2: p1 p3 p4 [ 104.690404][ T6867] loop2: p1 start 51379968 is beyond EOD, truncated [ 104.697033][ T6867] loop2: p3 size 100663552 extends beyond EOD, truncated [ 104.713381][ T37] bridge_slave_1: left allmulticast mode [ 104.719262][ T37] bridge_slave_1: left promiscuous mode [ 104.725297][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.739404][ T6867] loop2: p4 size 327680 extends beyond EOD, truncated [ 104.742869][ T6881] loop1: detected capacity change from 0 to 164 [ 104.755872][ T37] bridge_slave_0: left allmulticast mode [ 104.761664][ T37] bridge_slave_0: left promiscuous mode [ 104.767784][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.865886][ T6889] FAULT_INJECTION: forcing a failure. [ 104.865886][ T6889] name failslab, interval 1, probability 0, space 0, times 0 [ 104.878663][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.4.1069 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.878689][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.878746][ T6889] Call Trace: [ 104.878751][ T6889] [ 104.878794][ T6889] __dump_stack+0x1d/0x30 [ 104.878815][ T6889] dump_stack_lvl+0xe8/0x140 [ 104.878834][ T6889] dump_stack+0x15/0x1b [ 104.878890][ T6889] should_fail_ex+0x265/0x280 [ 104.878911][ T6889] should_failslab+0x8c/0xb0 [ 104.878935][ T6889] kmem_cache_alloc_noprof+0x50/0x310 [ 104.878960][ T6889] ? getname_flags+0x80/0x3b0 [ 104.879033][ T6889] getname_flags+0x80/0x3b0 [ 104.879055][ T6889] user_path_at+0x28/0x130 [ 104.879080][ T6889] vfs_open_tree+0x198/0x540 [ 104.879176][ T6889] __x64_sys_open_tree+0x45/0xc0 [ 104.879194][ T6889] x64_sys_call+0x2a87/0x2ff0 [ 104.879212][ T6889] do_syscall_64+0xd2/0x200 [ 104.879293][ T6889] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.879314][ T6889] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.879339][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.879422][ T6889] RIP: 0033:0x7f5dd64febe9 [ 104.879435][ T6889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.879450][ T6889] RSP: 002b:00007f5dd4f67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 104.879469][ T6889] RAX: ffffffffffffffda RBX: 00007f5dd6725fa0 RCX: 00007f5dd64febe9 [ 104.879582][ T6889] RDX: 0000000000001001 RSI: 0000000000000000 RDI: ffffffffffffffff [ 104.879603][ T6889] RBP: 00007f5dd4f67090 R08: 0000000000000000 R09: 0000000000000000 [ 104.879615][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.879627][ T6889] R13: 00007f5dd6726038 R14: 00007f5dd6725fa0 R15: 00007fffa8e85b68 [ 104.879646][ T6889] [ 104.882124][ T37] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.061231][ T6900] loop4: detected capacity change from 0 to 512 [ 105.084110][ T37] bond_slave_0: left promiscuous mode [ 105.085437][ T6900] ext4: Unknown parameter 'fsuuid' [ 105.096189][ T37] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.105372][ T37] bond_slave_1: left promiscuous mode [ 105.105903][ T37] $Hÿ (unregistering): Released all slaves [ 105.108460][ T6859] lo speed is unknown, defaulting to 1000 [ 105.111523][ T6881] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.174753][ T6906] netlink: 'syz.0.1074': attribute type 12 has an invalid length. [ 105.182993][ T6906] netlink: 'syz.0.1074': attribute type 29 has an invalid length. [ 105.190951][ T6906] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1074'. [ 105.200224][ T6906] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1074'. [ 105.231242][ T37] hsr_slave_0: left promiscuous mode [ 105.232295][ T6906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=6906 comm=syz.0.1074 [ 105.255325][ T37] hsr_slave_1: left promiscuous mode [ 105.261130][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.268628][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.288205][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.295692][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.334714][ T37] veth1_macvtap: left promiscuous mode [ 105.346833][ T37] veth0_macvtap: left promiscuous mode [ 105.354867][ T37] veth1_vlan: left promiscuous mode [ 105.360339][ T37] veth0_vlan: left promiscuous mode [ 105.365734][ T6917] loop0: detected capacity change from 0 to 512 [ 105.373345][ T6917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.383011][ T6917] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 105.383119][ T6917] EXT4-fs: failed to create workqueue [ 105.398824][ T6917] EXT4-fs (loop0): mount failed [ 105.452264][ T6923] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 105.458893][ T6923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.466727][ T6923] vhci_hcd vhci_hcd.0: Device attached [ 105.631486][ T37] team0 (unregistering): Port device team_slave_1 removed [ 105.730259][ T3362] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 105.865960][ T37] team0 (unregistering): Port device team_slave_0 removed [ 105.976315][ T6931] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1081'. [ 106.060522][ T6924] vhci_hcd: connection reset by peer [ 106.067434][ T295] vhci_hcd: stop threads [ 106.071706][ T295] vhci_hcd: release socket [ 106.076121][ T295] vhci_hcd: disconnect device [ 106.093181][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 106.234387][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.241637][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.249055][ T6859] bridge_slave_0: entered allmulticast mode [ 106.256019][ T6859] bridge_slave_0: entered promiscuous mode [ 106.263292][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.270518][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.278109][ T6859] bridge_slave_1: entered allmulticast mode [ 106.284822][ T6859] bridge_slave_1: entered promiscuous mode [ 106.309646][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.327316][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.358305][ T6859] team0: Port device team_slave_0 added [ 106.367579][ T6859] team0: Port device team_slave_1 added [ 106.404247][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.411313][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.438300][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.451933][ T6964] loop0: detected capacity change from 0 to 512 [ 106.458902][ T6964] ext4: Unknown parameter 'fsuuid' [ 106.510980][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.517950][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.544165][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.662715][ T6977] ªªªªªª: renamed from wg2 (while UP) [ 106.703623][ T6859] hsr_slave_0: entered promiscuous mode [ 106.710159][ T6859] hsr_slave_1: entered promiscuous mode [ 106.716214][ T6859] debugfs: 'hsr0' already exists in 'hsr' [ 106.721961][ T6859] Cannot create hsr debugfs directory [ 106.791072][ T6859] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 106.810667][ T6859] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 106.826488][ T6859] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 106.840709][ T6859] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 106.883992][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.891389][ T6859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.899065][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.906122][ T6859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.952681][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.966035][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.973790][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.988914][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.010512][ T6859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.021105][ T6859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.163346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.170650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.192711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.201340][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.406421][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.490087][ T7027] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.526594][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 107.535617][ T7033] netlink: 'syz.1.1117': attribute type 30 has an invalid length. [ 107.566071][ T295] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.578709][ T295] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.609667][ T295] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.630516][ T295] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.694859][ T6859] veth0_vlan: entered promiscuous mode [ 107.704833][ T6859] veth1_vlan: entered promiscuous mode [ 107.721305][ T6859] veth0_macvtap: entered promiscuous mode [ 107.730284][ T6859] veth1_macvtap: entered promiscuous mode [ 107.742192][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.754862][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.766607][ T295] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.776895][ T295] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.794552][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.803656][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.976879][ T7069] loop1: detected capacity change from 0 to 256 [ 107.997580][ T7069] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 108.006516][ T7069] FAT-fs (loop1): Filesystem has been set read-only [ 108.560017][ T7086] veth0: entered promiscuous mode [ 108.735293][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 108.735306][ T29] audit: type=1326 audit(2000000005.085:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7094 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de685ebe9 code=0x7ffc0000 [ 108.765604][ T29] audit: type=1326 audit(2000000005.085:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7094 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7de685ebe9 code=0x7ffc0000 [ 108.789894][ T29] audit: type=1326 audit(2000000005.085:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7094 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de685ebe9 code=0x7ffc0000 [ 108.813600][ T29] audit: type=1326 audit(2000000005.085:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7094 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f7de685ebe9 code=0x7ffc0000 [ 108.837666][ T29] audit: type=1326 audit(2000000005.085:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7094 comm="syz.0.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de685ebe9 code=0x7ffc0000 [ 108.954530][ T29] audit: type=1326 audit(2000000005.288:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 108.979249][ T29] audit: type=1326 audit(2000000005.288:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 109.036773][ T7102] sctp: [Deprecated]: syz.2.1139 (pid 7102) Use of int in maxseg socket option. [ 109.036773][ T7102] Use struct sctp_assoc_value instead [ 109.078032][ T29] audit: type=1326 audit(2000000005.381:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b787eebe9 code=0x7ffc0000 [ 109.111888][ T29] audit: type=1326 audit(2000000005.381:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f1b787eebe9 code=0x7ffc0000 [ 109.134960][ T29] audit: type=1326 audit(2000000005.381:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b787eebe9 code=0x7ffc0000 [ 109.160022][ T7085] veth0: left promiscuous mode [ 109.300196][ T7118] loop1: detected capacity change from 0 to 128 [ 109.845198][ T7126] openvswitch: netlink: Message has 6 unknown bytes. [ 109.936456][ T7130] FAULT_INJECTION: forcing a failure. [ 109.936456][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 109.949141][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.0.1147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.949182][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.949195][ T7130] Call Trace: [ 109.949254][ T7130] [ 109.949263][ T7130] __dump_stack+0x1d/0x30 [ 109.949285][ T7130] dump_stack_lvl+0xe8/0x140 [ 109.949356][ T7130] dump_stack+0x15/0x1b [ 109.949434][ T7130] should_fail_ex+0x265/0x280 [ 109.949455][ T7130] should_failslab+0x8c/0xb0 [ 109.949479][ T7130] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 109.949584][ T7130] ? make_vfsuid+0x49/0xa0 [ 109.949603][ T7130] ? v9fs_session_init+0x4b/0xde0 [ 109.949623][ T7130] kstrdup+0x3e/0xd0 [ 109.949706][ T7130] v9fs_session_init+0x4b/0xde0 [ 109.949727][ T7130] ? __rcu_read_unlock+0x4f/0x70 [ 109.949820][ T7130] ? avc_has_perm_noaudit+0x1b1/0x200 [ 109.949843][ T7130] ? should_fail_ex+0xdb/0x280 [ 109.949862][ T7130] ? v9fs_mount+0x51/0x5c0 [ 109.949948][ T7130] ? should_failslab+0x8c/0xb0 [ 109.949968][ T7130] ? __kmalloc_cache_noprof+0x189/0x320 [ 109.949992][ T7130] v9fs_mount+0x67/0x5c0 [ 109.950068][ T7130] ? selinux_capable+0x31/0x40 [ 109.950094][ T7130] ? __pfx_v9fs_mount+0x10/0x10 [ 109.950201][ T7130] legacy_get_tree+0x78/0xd0 [ 109.950224][ T7130] vfs_get_tree+0x57/0x1d0 [ 109.950326][ T7130] do_new_mount+0x207/0x5e0 [ 109.950349][ T7130] ? security_capable+0x83/0x90 [ 109.950370][ T7130] path_mount+0x4a4/0xb20 [ 109.950392][ T7130] ? user_path_at+0x109/0x130 [ 109.950452][ T7130] __se_sys_mount+0x28f/0x2e0 [ 109.950488][ T7130] __x64_sys_mount+0x67/0x80 [ 109.950512][ T7130] x64_sys_call+0x2b4d/0x2ff0 [ 109.950534][ T7130] do_syscall_64+0xd2/0x200 [ 109.950561][ T7130] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.950581][ T7130] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.950673][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.950695][ T7130] RIP: 0033:0x7f7de685ebe9 [ 109.950711][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.950728][ T7130] RSP: 002b:00007f7de52c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.950815][ T7130] RAX: ffffffffffffffda RBX: 00007f7de6a85fa0 RCX: 00007f7de685ebe9 [ 109.950829][ T7130] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 109.950842][ T7130] RBP: 00007f7de52c7090 R08: 0000200000000000 R09: 0000000000000000 [ 109.950855][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.950868][ T7130] R13: 00007f7de6a86038 R14: 00007f7de6a85fa0 R15: 00007ffd81e38cc8 [ 109.950888][ T7130] [ 110.266021][ T7132] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1148'. [ 110.276472][ T7132] hsr_slave_0: left promiscuous mode [ 110.383624][ T7147] sctp: [Deprecated]: syz.0.1155 (pid 7147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.383624][ T7147] Use struct sctp_sack_info instead [ 110.390489][ T7145] sd 0:0:1:0: device reset [ 110.552686][ T7151] loop0: detected capacity change from 0 to 8192 [ 110.569012][ T7163] loop1: detected capacity change from 0 to 512 [ 110.611025][ T7163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.636649][ T7163] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.683064][ T7173] sctp: [Deprecated]: syz.0.1162 (pid 7173) Use of int in maxseg socket option. [ 110.683064][ T7173] Use struct sctp_assoc_value instead [ 110.770046][ T7177] sctp: [Deprecated]: syz.0.1163 (pid 7177) Use of int in maxseg socket option. [ 110.770046][ T7177] Use struct sctp_assoc_value instead [ 110.826533][ T7163] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.1161: lblock 23 mapped to illegal pblock 18 (length 1) [ 110.842337][ T7163] EXT4-fs (loop1): Remounting filesystem read-only [ 110.861030][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.883590][ T7183] loop0: detected capacity change from 0 to 512 [ 110.902393][ T7183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.940270][ T7183] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.979483][ T7183] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.1164: iget: bad i_size value: 2533274857506816 [ 111.024783][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.126587][ T7204] sd 0:0:1:0: device reset [ 111.224323][ T3362] usb 3-1: enqueue for inactive port 0 [ 111.240753][ T3362] usb 3-1: enqueue for inactive port 0 [ 111.367170][ T7212] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 111.394699][ T7218] FAULT_INJECTION: forcing a failure. [ 111.394699][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 111.407529][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.7.1175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.407624][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.407634][ T7218] Call Trace: [ 111.407639][ T7218] [ 111.407646][ T7218] __dump_stack+0x1d/0x30 [ 111.407665][ T7218] dump_stack_lvl+0xe8/0x140 [ 111.407686][ T7218] dump_stack+0x15/0x1b [ 111.407756][ T7218] should_fail_ex+0x265/0x280 [ 111.407776][ T7218] should_failslab+0x8c/0xb0 [ 111.407847][ T7218] kmem_cache_alloc_noprof+0x50/0x310 [ 111.407876][ T7218] ? audit_log_start+0x365/0x6c0 [ 111.408020][ T7218] audit_log_start+0x365/0x6c0 [ 111.408047][ T7218] audit_seccomp+0x48/0x100 [ 111.408068][ T7218] ? __seccomp_filter+0x68c/0x10d0 [ 111.408088][ T7218] __seccomp_filter+0x69d/0x10d0 [ 111.408153][ T7218] ? mt_find+0x200/0x320 [ 111.408187][ T7218] __secure_computing+0x82/0x150 [ 111.408270][ T7218] syscall_trace_enter+0xcf/0x1e0 [ 111.408292][ T7218] do_syscall_64+0xac/0x200 [ 111.408387][ T7218] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.408446][ T7218] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.408467][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.408492][ T7218] RIP: 0033:0x7fd71825d5fc [ 111.408506][ T7218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.408539][ T7218] RSP: 002b:00007fd716cc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.408556][ T7218] RAX: ffffffffffffffda RBX: 00007fd718485fa0 RCX: 00007fd71825d5fc [ 111.408567][ T7218] RDX: 000000000000000f RSI: 00007fd716cc70a0 RDI: 0000000000000006 [ 111.408580][ T7218] RBP: 00007fd716cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.408594][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.408606][ T7218] R13: 00007fd718486038 R14: 00007fd718485fa0 R15: 00007ffcd6a79398 [ 111.408625][ T7218] [ 111.408828][ T7213] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 111.600061][ T3362] vhci_hcd: vhci_device speed not set [ 111.605984][ T7213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.619204][ T7213] vhci_hcd vhci_hcd.0: Device attached [ 111.629378][ T7220] netlink: 'syz.0.1174': attribute type 10 has an invalid length. [ 111.813590][ T7231] loop7: detected capacity change from 0 to 512 [ 111.821756][ T7231] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.829568][ T7231] EXT4-fs (loop7): failed to initialize system zone (-117) [ 111.837517][ T7231] EXT4-fs (loop7): mount failed [ 111.884098][ T3385] usb 9-1: new low-speed USB device number 4 using vhci_hcd [ 111.944158][ T7214] vhci_hcd: connection reset by peer [ 111.950877][ T12] vhci_hcd: stop threads [ 111.955154][ T12] vhci_hcd: release socket [ 111.959711][ T12] vhci_hcd: disconnect device [ 111.964880][ T7239] lo: entered promiscuous mode [ 111.970345][ T7239] lo: entered allmulticast mode [ 111.976598][ T7239] tunl0: entered promiscuous mode [ 111.981772][ T7239] tunl0: entered allmulticast mode [ 111.988477][ T7239] gre0: entered promiscuous mode [ 111.993492][ T7239] gre0: entered allmulticast mode [ 111.999626][ T7239] gretap0: entered promiscuous mode [ 112.004934][ T7239] gretap0: entered allmulticast mode [ 112.011827][ T7239] erspan0: entered promiscuous mode [ 112.017071][ T7239] erspan0: entered allmulticast mode [ 112.025045][ T7239] ip_vti0: entered promiscuous mode [ 112.030267][ T7239] ip_vti0: entered allmulticast mode [ 112.036693][ T7239] ip6_vti0: entered promiscuous mode [ 112.041994][ T7239] ip6_vti0: entered allmulticast mode [ 112.049381][ T7239] sit0: entered promiscuous mode [ 112.054409][ T7239] sit0: entered allmulticast mode [ 112.054720][ T7240] loop7: detected capacity change from 0 to 164 [ 112.060804][ T7239] ip6tnl0: entered promiscuous mode [ 112.071122][ T7239] ip6tnl0: entered allmulticast mode [ 112.096249][ T7233] loop2: detected capacity change from 0 to 1024 [ 112.103925][ T7239] ip6gre0: entered promiscuous mode [ 112.109236][ T7239] ip6gre0: entered allmulticast mode [ 112.115647][ T7240] rock: directory entry would overflow storage [ 112.118598][ T7233] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 112.122017][ T7240] rock: sig=0x66, size=4, remaining=3 [ 112.131820][ T7233] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.149175][ T7239] syz_tun: entered promiscuous mode [ 112.154393][ T7239] syz_tun: entered allmulticast mode [ 112.161006][ T7233] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #32: comm syz.2.1181: iget: special inode unallocated [ 112.174886][ T7239] ip6gretap0: entered promiscuous mode [ 112.180473][ T7239] ip6gretap0: entered allmulticast mode [ 112.188520][ T7239] bridge0: entered promiscuous mode [ 112.191515][ T7233] EXT4-fs (loop2): no journal found [ 112.193730][ T7239] bridge0: entered allmulticast mode [ 112.205782][ T7239] vcan0: entered promiscuous mode [ 112.210922][ T7239] vcan0: entered allmulticast mode [ 112.216555][ T7239] bond0: entered promiscuous mode [ 112.221662][ T7239] bond_slave_0: entered promiscuous mode [ 112.227432][ T7239] bond_slave_1: entered promiscuous mode [ 112.233301][ T7239] bond0: entered allmulticast mode [ 112.238412][ T7239] bond_slave_0: entered allmulticast mode [ 112.244220][ T7239] bond_slave_1: entered allmulticast mode [ 112.252452][ T7239] team0: entered promiscuous mode [ 112.257506][ T7239] team_slave_0: entered promiscuous mode [ 112.259383][ T7245] loop0: detected capacity change from 0 to 128 [ 112.263337][ T7239] team_slave_1: entered promiscuous mode [ 112.275128][ T7239] team0: entered allmulticast mode [ 112.280300][ T7239] team_slave_0: entered allmulticast mode [ 112.286063][ T7239] team_slave_1: entered allmulticast mode [ 112.297741][ T7245] bio_check_eod: 2148 callbacks suppressed [ 112.297757][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.297757][ T7245] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 112.300722][ T7239] dummy0: entered promiscuous mode [ 112.322618][ T7239] dummy0: entered allmulticast mode [ 112.328094][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.328094][ T7245] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 112.332343][ T7239] nlmon0: entered promiscuous mode [ 112.342394][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.342394][ T7245] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 112.346946][ T7239] nlmon0: entered allmulticast mode [ 112.362304][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.362304][ T7245] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 112.379956][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.379956][ T7245] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 112.394107][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.394107][ T7245] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 112.407990][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.407990][ T7245] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 112.421667][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.421667][ T7245] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 112.436684][ T7239] caif0: entered promiscuous mode [ 112.439782][ T7245] syz.0.1184: attempt to access beyond end of device [ 112.439782][ T7245] loop0: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 112.441804][ T7239] caif0: entered allmulticast mode [ 112.441821][ T7239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.478806][ T7250] loop2: detected capacity change from 0 to 8192 [ 112.514357][ T1671] kworker/u8:5: attempt to access beyond end of device [ 112.514357][ T1671] loop0: rw=1, sector=305, nr_sectors = 80 limit=128 [ 112.534430][ T7250] loop2: p1 p3 p4 [ 112.538238][ T7250] loop2: p1 start 51379968 is beyond EOD, truncated [ 112.544872][ T7250] loop2: p3 size 100663552 extends beyond EOD, truncated [ 112.554242][ T7250] loop2: p4 size 327680 extends beyond EOD, truncated [ 112.754481][ T7282] lo: entered promiscuous mode [ 112.759525][ T7282] lo: entered allmulticast mode [ 112.774193][ T7282] tunl0: entered promiscuous mode [ 112.779326][ T7282] tunl0: entered allmulticast mode [ 112.786637][ T7282] gre0: entered promiscuous mode [ 112.791669][ T7282] gre0: entered allmulticast mode [ 112.822967][ T7282] gretap0: entered promiscuous mode [ 112.828267][ T7282] gretap0: entered allmulticast mode [ 112.834951][ T7282] erspan0: entered promiscuous mode [ 112.840286][ T7282] erspan0: entered allmulticast mode [ 112.840424][ T7284] loop2: detected capacity change from 0 to 164 [ 112.854903][ T7284] rock: directory entry would overflow storage [ 112.861330][ T7284] rock: sig=0x66, size=4, remaining=3 [ 112.862908][ T7282] ip_vti0: entered promiscuous mode [ 112.872289][ T7282] ip_vti0: entered allmulticast mode [ 112.879513][ T7282] ip6_vti0: entered promiscuous mode [ 112.885437][ T7282] ip6_vti0: entered allmulticast mode [ 112.893749][ T7282] sit0: entered promiscuous mode [ 112.899028][ T7282] sit0: entered allmulticast mode [ 112.905195][ T7282] ip6tnl0: entered promiscuous mode [ 112.910473][ T7282] ip6tnl0: entered allmulticast mode [ 112.918653][ T7282] ip6gre0: entered promiscuous mode [ 112.924470][ T7282] ip6gre0: entered allmulticast mode [ 112.931470][ T7282] syz_tun: entered promiscuous mode [ 112.936742][ T7282] syz_tun: entered allmulticast mode [ 112.944279][ T7282] ip6gretap0: entered promiscuous mode [ 112.950391][ T7282] ip6gretap0: entered allmulticast mode [ 112.959435][ T7282] bridge0: entered promiscuous mode [ 112.964723][ T7282] bridge0: entered allmulticast mode [ 112.976243][ T7282] vcan0: entered promiscuous mode [ 112.981388][ T7282] vcan0: entered allmulticast mode [ 112.993377][ T7282] bond0: entered promiscuous mode [ 112.998422][ T7282] bond_slave_0: entered promiscuous mode [ 113.004280][ T7282] bond_slave_1: entered promiscuous mode [ 113.010102][ T7282] bond0: entered allmulticast mode [ 113.015752][ T7282] bond_slave_0: entered allmulticast mode [ 113.021465][ T7282] bond_slave_1: entered allmulticast mode [ 113.029053][ T7282] team0: entered promiscuous mode [ 113.034163][ T7282] team_slave_0: entered promiscuous mode [ 113.039959][ T7282] team_slave_1: entered promiscuous mode [ 113.045863][ T7282] team0: entered allmulticast mode [ 113.050974][ T7282] team_slave_0: entered allmulticast mode [ 113.057313][ T7282] team_slave_1: entered allmulticast mode [ 113.064662][ T7282] dummy0: entered promiscuous mode [ 113.069793][ T7282] dummy0: entered allmulticast mode [ 113.076677][ T7282] nlmon0: entered promiscuous mode [ 113.081871][ T7282] nlmon0: entered allmulticast mode [ 113.088831][ T7282] caif0: entered promiscuous mode [ 113.093854][ T7282] caif0: entered allmulticast mode [ 113.099017][ T7282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.132552][ T7295] loop7: detected capacity change from 0 to 512 [ 113.142923][ T7295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.155670][ T7295] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.204330][ T7295] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 18: comm syz.7.1198: lblock 23 mapped to illegal pblock 18 (length 1) [ 113.220535][ T7295] EXT4-fs (loop7): Remounting filesystem read-only [ 113.236363][ T6859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.406588][ T7308] sctp: [Deprecated]: syz.1.1201 (pid 7308) Use of int in maxseg socket option. [ 113.406588][ T7308] Use struct sctp_assoc_value instead [ 113.477157][ T7311] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 113.485122][ T7311] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.492710][ T7311] vhci_hcd vhci_hcd.0: Device attached [ 113.758413][ T3362] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 113.777362][ T7335] FAULT_INJECTION: forcing a failure. [ 113.777362][ T7335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.790650][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: GPL Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.790679][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.790758][ T7335] Call Trace: [ 113.790765][ T7335] [ 113.790774][ T7335] __dump_stack+0x1d/0x30 [ 113.790796][ T7335] dump_stack_lvl+0xe8/0x140 [ 113.790853][ T7335] dump_stack+0x15/0x1b [ 113.790869][ T7335] should_fail_ex+0x265/0x280 [ 113.790890][ T7335] should_fail_alloc_page+0xf2/0x100 [ 113.790917][ T7335] __alloc_frozen_pages_noprof+0xff/0x360 [ 113.790990][ T7335] alloc_pages_mpol+0xb3/0x250 [ 113.791050][ T7335] alloc_pages_noprof+0x90/0x130 [ 113.791080][ T7335] pte_alloc_one+0x2d/0x120 [ 113.791104][ T7335] __pte_alloc+0x32/0x2b0 [ 113.791129][ T7335] handle_mm_fault+0x1c55/0x2c20 [ 113.791202][ T7335] ? check_vma_flags+0x2e1/0x340 [ 113.791229][ T7335] __get_user_pages+0x102e/0x1fa0 [ 113.791262][ T7335] __gup_longterm_locked+0x8f4/0xe60 [ 113.791286][ T7335] ? _parse_integer_limit+0x170/0x190 [ 113.791343][ T7335] ? _parse_integer+0x27/0x40 [ 113.791363][ T7335] ? kstrtoull+0x111/0x140 [ 113.791383][ T7335] gup_fast_fallback+0x1f5/0x1420 [ 113.791452][ T7335] ? __rcu_read_unlock+0x4f/0x70 [ 113.791476][ T7335] get_user_pages_fast+0x5f/0x90 [ 113.791496][ T7335] __se_sys_get_mempolicy+0x38e/0xd80 [ 113.791540][ T7335] __x64_sys_get_mempolicy+0x67/0x80 [ 113.791601][ T7335] x64_sys_call+0x2882/0x2ff0 [ 113.791618][ T7335] do_syscall_64+0xd2/0x200 [ 113.791645][ T7335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.791710][ T7335] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.791736][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.791757][ T7335] RIP: 0033:0x7f5dd64febe9 [ 113.791774][ T7335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.791796][ T7335] RSP: 002b:00007f5dd4f67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 113.791876][ T7335] RAX: ffffffffffffffda RBX: 00007f5dd6725fa0 RCX: 00007f5dd64febe9 [ 113.791886][ T7335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.791897][ T7335] RBP: 00007f5dd4f67090 R08: 0000000000000003 R09: 0000000000000000 [ 113.791908][ T7335] R10: 0000200000a88000 R11: 0000000000000246 R12: 0000000000000001 [ 113.791919][ T7335] R13: 00007f5dd6726038 R14: 00007f5dd6725fa0 R15: 00007fffa8e85b68 [ 113.791936][ T7335] [ 114.037734][ T7336] loop0: detected capacity change from 0 to 128 [ 114.183876][ T7314] vhci_hcd: connection reset by peer [ 114.202254][ T1671] vhci_hcd: stop threads [ 114.203556][ T7354] loop0: detected capacity change from 0 to 512 [ 114.206622][ T1671] vhci_hcd: release socket [ 114.220094][ T1671] vhci_hcd: disconnect device [ 114.252905][ T7354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.268015][ T7354] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.328631][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 114.328647][ T29] audit: type=1326 audit(2000000010.245:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.355631][ T7354] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.1210: lblock 23 mapped to illegal pblock 18 (length 1) [ 114.359496][ T29] audit: type=1326 audit(2000000010.245:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.359518][ T29] audit: type=1326 audit(2000000010.245:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.380306][ T7354] EXT4-fs (loop0): Remounting filesystem read-only [ 114.400110][ T29] audit: type=1326 audit(2000000010.245:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.400196][ T29] audit: type=1326 audit(2000000010.245:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.400216][ T29] audit: type=1326 audit(2000000010.245:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.508327][ T29] audit: type=1326 audit(2000000010.245:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.536162][ T29] audit: type=1326 audit(2000000010.245:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.561519][ T29] audit: type=1326 audit(2000000010.245:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.585567][ T29] audit: type=1326 audit(2000000010.245:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.1.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9799fdebe9 code=0x7ffc0000 [ 114.627344][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.751053][ T7398] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1226'. [ 114.762582][ T7402] loop4: detected capacity change from 0 to 2048 [ 114.780407][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.799402][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.817165][ T7402] loop4: p2 p3 p7 [ 114.824766][ T7405] FAULT_INJECTION: forcing a failure. [ 114.824766][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 114.837864][ T7405] CPU: 0 UID: 0 PID: 7405 Comm: syz.0.1229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.837890][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.837902][ T7405] Call Trace: [ 114.837909][ T7405] [ 114.837917][ T7405] __dump_stack+0x1d/0x30 [ 114.837953][ T7405] dump_stack_lvl+0xe8/0x140 [ 114.837977][ T7405] dump_stack+0x15/0x1b [ 114.837991][ T7405] should_fail_ex+0x265/0x280 [ 114.838010][ T7405] should_failslab+0x8c/0xb0 [ 114.838034][ T7405] kmem_cache_alloc_noprof+0x50/0x310 [ 114.838098][ T7405] ? getname_flags+0x80/0x3b0 [ 114.838127][ T7405] getname_flags+0x80/0x3b0 [ 114.838151][ T7405] do_mq_open+0xd9/0x4f0 [ 114.838199][ T7405] ? should_fail_ex+0xdb/0x280 [ 114.838222][ T7405] __x64_sys_mq_open+0xcb/0x100 [ 114.838246][ T7405] x64_sys_call+0x8c6/0x2ff0 [ 114.838266][ T7405] do_syscall_64+0xd2/0x200 [ 114.838337][ T7405] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.838379][ T7405] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.838401][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.838449][ T7405] RIP: 0033:0x7f7de685ebe9 [ 114.838464][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.838481][ T7405] RSP: 002b:00007f7de52c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 114.838498][ T7405] RAX: ffffffffffffffda RBX: 00007f7de6a85fa0 RCX: 00007f7de685ebe9 [ 114.838526][ T7405] RDX: 0000000000000000 RSI: 6e93ebbbcc0884f2 RDI: 0000200000000480 [ 114.838537][ T7405] RBP: 00007f7de52c7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.838547][ T7405] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 114.838558][ T7405] R13: 00007f7de6a86038 R14: 00007f7de6a85fa0 R15: 00007ffd81e38cc8 [ 114.838574][ T7405] [ 114.839376][ T7403] loop1: detected capacity change from 0 to 8192 [ 115.034197][ T7411] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1230'. [ 115.050204][ T7403] loop1: p1 p3 p4 [ 115.054170][ T7403] loop1: p1 start 51379968 is beyond EOD, truncated [ 115.061081][ T7403] loop1: p3 size 100663552 extends beyond EOD, truncated [ 115.068759][ T7403] loop1: p4 size 327680 extends beyond EOD, truncated [ 115.097293][ T7413] lo speed is unknown, defaulting to 1000 [ 115.105331][ T7409] netlink: 'syz.7.1231': attribute type 10 has an invalid length. [ 115.107222][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 115.113465][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1231'. [ 115.135541][ T7409] geneve1: entered promiscuous mode [ 115.141671][ T7409] geneve1: entered allmulticast mode [ 115.150241][ T7409] team0: Port device geneve1 added [ 115.447690][ T7443] loop0: detected capacity change from 0 to 512 [ 115.465281][ T7441] loop7: detected capacity change from 0 to 128 [ 115.553089][ T7443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.577950][ T7443] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.612170][ T7448] siw: device registration error -23 [ 115.674957][ T7443] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.1243: lblock 23 mapped to illegal pblock 18 (length 1) [ 115.701534][ T7443] EXT4-fs (loop0): Remounting filesystem read-only [ 115.713101][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1247'. [ 115.749389][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.826520][ T7462] sd 0:0:1:0: device reset [ 115.844304][ T7465] tipc: Started in network mode [ 115.849283][ T7465] tipc: Node identity 024a6259ff5d, cluster identity 4711 [ 115.856686][ T7465] tipc: Enabled bearer , priority 0 [ 115.874677][ T7465] syzkaller0: entered promiscuous mode [ 115.880786][ T7465] syzkaller0: entered allmulticast mode [ 115.893435][ T7465] tipc: Resetting bearer [ 115.900394][ T7464] tipc: Resetting bearer [ 115.908687][ T7464] tipc: Disabling bearer [ 116.009798][ T7477] FAULT_INJECTION: forcing a failure. [ 116.009798][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 116.022703][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.4.1257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.022767][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.022779][ T7477] Call Trace: [ 116.022787][ T7477] [ 116.022796][ T7477] __dump_stack+0x1d/0x30 [ 116.022818][ T7477] dump_stack_lvl+0xe8/0x140 [ 116.022839][ T7477] dump_stack+0x15/0x1b [ 116.022984][ T7477] should_fail_ex+0x265/0x280 [ 116.023002][ T7477] should_failslab+0x8c/0xb0 [ 116.023023][ T7477] kmem_cache_alloc_noprof+0x50/0x310 [ 116.023051][ T7477] ? skb_clone+0x151/0x1f0 [ 116.023075][ T7477] skb_clone+0x151/0x1f0 [ 116.023115][ T7477] nfnetlink_rcv+0x305/0x1690 [ 116.023169][ T7477] ? refill_obj_stock+0x254/0x2e0 [ 116.023201][ T7477] ? xas_load+0x413/0x430 [ 116.023304][ T7477] ? xas_load+0x413/0x430 [ 116.023329][ T7477] ? __rcu_read_unlock+0x4f/0x70 [ 116.023399][ T7477] ? xa_load+0xb1/0xe0 [ 116.023421][ T7477] ? __account_obj_stock+0x211/0x350 [ 116.023445][ T7477] ? obj_cgroup_charge_account+0x122/0x1a0 [ 116.023587][ T7477] ? should_fail_ex+0x30/0x280 [ 116.023607][ T7477] ? __rcu_read_unlock+0x4f/0x70 [ 116.023626][ T7477] ? should_fail_ex+0xdb/0x280 [ 116.023658][ T7477] netlink_unicast+0x5c0/0x690 [ 116.023691][ T7477] netlink_sendmsg+0x58b/0x6b0 [ 116.023714][ T7477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.023734][ T7477] __sock_sendmsg+0x142/0x180 [ 116.023779][ T7477] ____sys_sendmsg+0x31e/0x4e0 [ 116.023805][ T7477] ___sys_sendmsg+0x17b/0x1d0 [ 116.023841][ T7477] __x64_sys_sendmsg+0xd4/0x160 [ 116.023867][ T7477] x64_sys_call+0x191e/0x2ff0 [ 116.023926][ T7477] do_syscall_64+0xd2/0x200 [ 116.023949][ T7477] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.023980][ T7477] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.024006][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.024028][ T7477] RIP: 0033:0x7f5dd64febe9 [ 116.024105][ T7477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.024122][ T7477] RSP: 002b:00007f5dd4f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.024144][ T7477] RAX: ffffffffffffffda RBX: 00007f5dd6725fa0 RCX: 00007f5dd64febe9 [ 116.024157][ T7477] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000003 [ 116.024170][ T7477] RBP: 00007f5dd4f67090 R08: 0000000000000000 R09: 0000000000000000 [ 116.024183][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.024196][ T7477] R13: 00007f5dd6726038 R14: 00007f5dd6725fa0 R15: 00007fffa8e85b68 [ 116.024266][ T7477] [ 116.353043][ T7480] FAULT_INJECTION: forcing a failure. [ 116.353043][ T7480] name failslab, interval 1, probability 0, space 0, times 0 [ 116.368744][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.0.1258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.368853][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.368871][ T7480] Call Trace: [ 116.368878][ T7480] [ 116.368884][ T7480] __dump_stack+0x1d/0x30 [ 116.368905][ T7480] dump_stack_lvl+0xe8/0x140 [ 116.368925][ T7480] dump_stack+0x15/0x1b [ 116.368942][ T7480] should_fail_ex+0x265/0x280 [ 116.368964][ T7480] ? kobject_uevent_env+0x1c0/0x570 [ 116.368986][ T7480] should_failslab+0x8c/0xb0 [ 116.369055][ T7480] __kmalloc_cache_noprof+0x4c/0x320 [ 116.369087][ T7480] kobject_uevent_env+0x1c0/0x570 [ 116.369110][ T7480] kobject_uevent+0x1d/0x30 [ 116.369127][ T7480] rfkill_set_block+0x260/0x290 [ 116.369149][ T7480] rfkill_fop_write+0x3af/0x440 [ 116.369173][ T7480] ? __pfx_rfkill_fop_write+0x10/0x10 [ 116.369336][ T7480] vfs_write+0x266/0x960 [ 116.369362][ T7480] ? __rcu_read_unlock+0x4f/0x70 [ 116.369382][ T7480] ? __fget_files+0x184/0x1c0 [ 116.369473][ T7480] ksys_write+0xda/0x1a0 [ 116.369493][ T7480] __x64_sys_write+0x40/0x50 [ 116.369514][ T7480] x64_sys_call+0x27fe/0x2ff0 [ 116.369543][ T7480] do_syscall_64+0xd2/0x200 [ 116.369567][ T7480] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.369595][ T7480] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.369631][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.369651][ T7480] RIP: 0033:0x7f7de685ebe9 [ 116.369664][ T7480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.369678][ T7480] RSP: 002b:00007f7de52c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.369732][ T7480] RAX: ffffffffffffffda RBX: 00007f7de6a85fa0 RCX: 00007f7de685ebe9 [ 116.369746][ T7480] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 116.369832][ T7480] RBP: 00007f7de52c7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.369843][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.369854][ T7480] R13: 00007f7de6a86038 R14: 00007f7de6a85fa0 R15: 00007ffd81e38cc8 [ 116.369871][ T7480] [ 116.639294][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 116.769856][ T7482] lo speed is unknown, defaulting to 1000 [ 116.779178][ T7489] sctp: [Deprecated]: syz.0.1261 (pid 7489) Use of int in maxseg socket option. [ 116.779178][ T7489] Use struct sctp_assoc_value instead [ 116.918576][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1265'. [ 116.950975][ T7505] loop7: detected capacity change from 0 to 128 [ 117.013367][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 117.055226][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 117.094558][ T7518] FAULT_INJECTION: forcing a failure. [ 117.094558][ T7518] name failslab, interval 1, probability 0, space 0, times 0 [ 117.111917][ T7518] CPU: 0 UID: 0 PID: 7518 Comm: syz.2.1271 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.111945][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.111957][ T7518] Call Trace: [ 117.111963][ T7518] [ 117.111970][ T7518] __dump_stack+0x1d/0x30 [ 117.112069][ T7518] dump_stack_lvl+0xe8/0x140 [ 117.112087][ T7518] dump_stack+0x15/0x1b [ 117.112151][ T7518] should_fail_ex+0x265/0x280 [ 117.112172][ T7518] should_failslab+0x8c/0xb0 [ 117.112195][ T7518] __kvmalloc_node_noprof+0x123/0x4e0 [ 117.112223][ T7518] ? io_alloc_cache_init+0x31/0xa0 [ 117.112323][ T7518] io_alloc_cache_init+0x31/0xa0 [ 117.112346][ T7518] io_rsrc_cache_init+0x43/0x50 [ 117.112382][ T7518] io_ring_ctx_alloc+0x346/0x6a0 [ 117.112407][ T7518] io_uring_create+0x10f/0x610 [ 117.112432][ T7518] __se_sys_io_uring_setup+0x1f7/0x210 [ 117.112485][ T7518] __x64_sys_io_uring_setup+0x31/0x40 [ 117.112502][ T7518] x64_sys_call+0x2b21/0x2ff0 [ 117.112569][ T7518] do_syscall_64+0xd2/0x200 [ 117.112594][ T7518] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.112614][ T7518] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.112704][ T7518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.112723][ T7518] RIP: 0033:0x7f1b787eebe9 [ 117.112738][ T7518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.112756][ T7518] RSP: 002b:00007f1b77256fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 117.112850][ T7518] RAX: ffffffffffffffda RBX: 00007f1b78a15fa0 RCX: 00007f1b787eebe9 [ 117.112861][ T7518] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 117.112871][ T7518] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 117.112882][ T7518] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 117.112893][ T7518] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 117.112912][ T7518] [ 117.367430][ T7524] loop2: detected capacity change from 0 to 512 [ 117.374975][ T7524] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.383112][ T3385] usb 9-1: enqueue for inactive port 0 [ 117.391504][ T3385] usb 9-1: enqueue for inactive port 0 [ 117.401009][ T7524] EXT4-fs (loop2): failed to initialize system zone (-117) [ 117.411215][ T7524] EXT4-fs (loop2): mount failed [ 117.469593][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'. [ 117.485592][ T3385] vhci_hcd: vhci_device speed not set [ 117.491133][ T7529] program syz.2.1275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.686305][ T7531] loop2: detected capacity change from 0 to 128 [ 117.752695][ T7531] bio_check_eod: 269 callbacks suppressed [ 117.752707][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.752707][ T7531] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 117.775020][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.775020][ T7531] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 117.792441][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.792441][ T7531] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 117.796874][ T3386] kernel write not supported for file /761/clear_refs (pid: 3386 comm: kworker/0:3) [ 117.810576][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.810576][ T7531] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 117.836658][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.836658][ T7531] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 117.852020][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.852020][ T7531] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 117.866057][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.866057][ T7531] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 117.880357][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.880357][ T7531] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 117.894418][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.894418][ T7531] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 117.917390][ T7543] tipc: Started in network mode [ 117.923159][ T7543] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 117.933369][ T7531] syz.2.1276: attempt to access beyond end of device [ 117.933369][ T7531] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 117.950000][ T7543] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 117.960500][ T7543] tipc: Enabled bearer , priority 10 [ 118.037201][ T7552] 0ªî{X¹¦: renamed from gretap0 [ 118.046403][ T7552] 0ªî{X¹¦: entered allmulticast mode [ 118.082528][ T7552] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 118.162688][ T7565] FAULT_INJECTION: forcing a failure. [ 118.162688][ T7565] name failslab, interval 1, probability 0, space 0, times 0 [ 118.175685][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.1.1287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.175712][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.175722][ T7565] Call Trace: [ 118.175728][ T7565] [ 118.175736][ T7565] __dump_stack+0x1d/0x30 [ 118.175866][ T7565] dump_stack_lvl+0xe8/0x140 [ 118.175883][ T7565] dump_stack+0x15/0x1b [ 118.175901][ T7565] should_fail_ex+0x265/0x280 [ 118.175923][ T7565] should_failslab+0x8c/0xb0 [ 118.175949][ T7565] kmem_cache_alloc_node_noprof+0x57/0x320 [ 118.175989][ T7565] ? __alloc_skb+0x101/0x320 [ 118.176068][ T7565] __alloc_skb+0x101/0x320 [ 118.176091][ T7565] ? audit_log_start+0x365/0x6c0 [ 118.176115][ T7565] audit_log_start+0x380/0x6c0 [ 118.176139][ T7565] ? __rcu_read_unlock+0x4f/0x70 [ 118.176214][ T7565] audit_log_common_recv_msg+0xbe/0x190 [ 118.176232][ T7565] audit_receive+0x149d/0x2180 [ 118.176294][ T7565] ? __netlink_deliver_tap+0x4f5/0x500 [ 118.176318][ T7565] ? __netlink_lookup+0x266/0x2a0 [ 118.176343][ T7565] netlink_unicast+0x5c0/0x690 [ 118.176371][ T7565] netlink_sendmsg+0x58b/0x6b0 [ 118.176399][ T7565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.176421][ T7565] __sock_sendmsg+0x142/0x180 [ 118.176472][ T7565] ____sys_sendmsg+0x31e/0x4e0 [ 118.176498][ T7565] ___sys_sendmsg+0x17b/0x1d0 [ 118.176532][ T7565] __x64_sys_sendmsg+0xd4/0x160 [ 118.176553][ T7565] x64_sys_call+0x191e/0x2ff0 [ 118.176592][ T7565] do_syscall_64+0xd2/0x200 [ 118.176618][ T7565] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 118.176641][ T7565] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 118.176662][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.176795][ T7565] RIP: 0033:0x7f9799fdebe9 [ 118.176831][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.176845][ T7565] RSP: 002b:00007f9798a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.176862][ T7565] RAX: ffffffffffffffda RBX: 00007f979a205fa0 RCX: 00007f9799fdebe9 [ 118.176875][ T7565] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 118.176889][ T7565] RBP: 00007f9798a47090 R08: 0000000000000000 R09: 0000000000000000 [ 118.176901][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.176911][ T7565] R13: 00007f979a206038 R14: 00007f979a205fa0 R15: 00007ffc7e236f68 [ 118.176969][ T7565] [ 118.491769][ T7571] loop1: detected capacity change from 0 to 512 [ 118.545985][ T7571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.561580][ T7571] ext4 filesystem being mounted at /301/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.626755][ T7571] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.1290: lblock 23 mapped to illegal pblock 18 (length 1) [ 118.641509][ T7571] EXT4-fs (loop1): Remounting filesystem read-only [ 118.663145][ T7587] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 118.669829][ T7587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.677566][ T7587] vhci_hcd vhci_hcd.0: Device attached [ 118.687789][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.898616][ T7588] vhci_hcd: connection closed [ 118.898882][ T295] vhci_hcd: stop threads [ 118.907911][ T295] vhci_hcd: release socket [ 118.912405][ T295] vhci_hcd: disconnect device [ 118.997037][ T7596] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 119.016896][ T7598] loop2: detected capacity change from 0 to 164 [ 119.025108][ T7598] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 119.039597][ T3385] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 119.047302][ T3385] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 119.055169][ T3385] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 119.063028][ T36] tipc: Node number set to 1 [ 119.068211][ T3385] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 119.120815][ T7603] netlink: 'syz.1.1299': attribute type 10 has an invalid length. [ 119.437117][ T7606] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.457212][ T1671] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 119.468181][ T7606] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 119.531052][ T7613] sctp: [Deprecated]: syz.7.1303 (pid 7613) Use of int in maxseg socket option. [ 119.531052][ T7613] Use struct sctp_assoc_value instead [ 119.546217][ T3362] usb 15-1: enqueue for inactive port 0 [ 119.556723][ T3362] usb 15-1: enqueue for inactive port 0 [ 119.600554][ T7618] sctp: [Deprecated]: syz.0.1305 (pid 7618) Use of int in maxseg socket option. [ 119.600554][ T7618] Use struct sctp_assoc_value instead [ 119.641528][ T3362] vhci_hcd: vhci_device speed not set [ 119.775544][ T7629] netlink: 'syz.7.1306': attribute type 10 has an invalid length. [ 119.786635][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.805774][ T7629] bridge_slave_1: left allmulticast mode [ 119.811535][ T7629] bridge_slave_1: left promiscuous mode [ 119.817364][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.829435][ T7631] loop0: detected capacity change from 0 to 128 [ 119.854820][ T7629] bridge_slave_1: entered promiscuous mode [ 119.861137][ T7629] bridge_slave_1: entered allmulticast mode [ 119.873446][ T7629] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 119.881416][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 119.881431][ T29] audit: type=1326 audit(2000000015.367:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 119.913392][ T29] audit: type=1326 audit(2000000015.377:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 119.937121][ T29] audit: type=1326 audit(2000000015.377:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 119.961212][ T29] audit: type=1326 audit(2000000015.377:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 119.986834][ T29] audit: type=1326 audit(2000000015.377:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 120.013632][ T29] audit: type=1326 audit(2000000015.377:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 120.043276][ T29] audit: type=1326 audit(2000000015.377:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 120.068792][ T29] audit: type=1326 audit(2000000015.386:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 120.107812][ T29] audit: type=1326 audit(2000000015.386:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 120.134769][ T29] audit: type=1326 audit(2000000015.386:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.7.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71825ebe9 code=0x7ffc0000 [ 120.263901][ T7638] netlink: 'syz.0.1310': attribute type 10 has an invalid length. [ 120.550137][ T7648] loop2: detected capacity change from 0 to 512 [ 120.562325][ T7648] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.572259][ T7648] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 120.682794][ T7651] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 120.689417][ T7651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.696941][ T7651] vhci_hcd vhci_hcd.0: Device attached [ 120.707930][ T7653] loop7: detected capacity change from 0 to 512 [ 120.714895][ T7653] EXT4-fs: Ignoring removed orlov option [ 120.929806][ T7648] netlink: zone id is out of range [ 120.934506][ T7653] loop7: detected capacity change from 0 to 512 [ 120.935043][ T7648] netlink: zone id is out of range [ 120.941685][ T7653] EXT4-fs: Ignoring removed orlov option [ 120.946501][ T7648] netlink: zone id is out of range [ 120.957300][ T7648] netlink: zone id is out of range [ 120.962610][ T7648] netlink: zone id is out of range [ 120.963643][ T36] usb 9-1: new low-speed USB device number 5 using vhci_hcd [ 120.968435][ T7648] netlink: zone id is out of range [ 120.981268][ T7648] netlink: zone id is out of range [ 120.987185][ T7648] netlink: zone id is out of range [ 121.044754][ T7664] __nla_validate_parse: 5 callbacks suppressed [ 121.044768][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1320'. [ 121.061376][ T7664] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1320'. [ 121.201451][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1321'. [ 121.240568][ T7691] netlink: 'syz.0.1322': attribute type 10 has an invalid length. [ 121.339167][ T7654] vhci_hcd: connection reset by peer [ 121.347627][ T12] vhci_hcd: stop threads [ 121.351979][ T12] vhci_hcd: release socket [ 121.356466][ T12] vhci_hcd: disconnect device [ 121.541195][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 121.925618][ T7723] vhci_hcd: invalid port number 255 [ 121.946307][ T7725] loop4: detected capacity change from 0 to 512 [ 121.954774][ T7725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.971042][ T7725] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 121.988823][ T7725] 9pnet_fd: Insufficient options for proto=fd [ 122.009277][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.067989][ T7733] loop7: detected capacity change from 0 to 512 [ 122.075189][ T7733] msdos: Unknown parameter 'norots' [ 122.129869][ T7738] FAULT_INJECTION: forcing a failure. [ 122.129869][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 122.143113][ T7738] CPU: 0 UID: 0 PID: 7738 Comm: syz.1.1332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.143141][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.143155][ T7738] Call Trace: [ 122.143162][ T7738] [ 122.143171][ T7738] __dump_stack+0x1d/0x30 [ 122.143191][ T7738] dump_stack_lvl+0xe8/0x140 [ 122.143209][ T7738] dump_stack+0x15/0x1b [ 122.143278][ T7738] should_fail_ex+0x265/0x280 [ 122.143301][ T7738] should_failslab+0x8c/0xb0 [ 122.143344][ T7738] kmem_cache_alloc_noprof+0x50/0x310 [ 122.143529][ T7738] ? audit_log_start+0x365/0x6c0 [ 122.143558][ T7738] audit_log_start+0x365/0x6c0 [ 122.143586][ T7738] audit_seccomp+0x48/0x100 [ 122.143686][ T7738] ? __seccomp_filter+0x68c/0x10d0 [ 122.143707][ T7738] __seccomp_filter+0x69d/0x10d0 [ 122.143739][ T7738] ? __rcu_read_unlock+0x4f/0x70 [ 122.143756][ T7738] ? bpf_trace_run2+0x124/0x1c0 [ 122.143782][ T7738] __secure_computing+0x82/0x150 [ 122.143803][ T7738] syscall_trace_enter+0xcf/0x1e0 [ 122.143865][ T7738] do_syscall_64+0xac/0x200 [ 122.143888][ T7738] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.143950][ T7738] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.143979][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.144001][ T7738] RIP: 0033:0x7f9799fdd5fc [ 122.144017][ T7738] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.144103][ T7738] RSP: 002b:00007f9798a47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.144121][ T7738] RAX: ffffffffffffffda RBX: 00007f979a205fa0 RCX: 00007f9799fdd5fc [ 122.144152][ T7738] RDX: 000000000000000f RSI: 00007f9798a470a0 RDI: 0000000000000004 [ 122.144164][ T7738] RBP: 00007f9798a47090 R08: 0000000000000000 R09: 0000000000000000 [ 122.144176][ T7738] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 122.144187][ T7738] R13: 00007f979a206038 R14: 00007f979a205fa0 R15: 00007ffc7e236f68 [ 122.144206][ T7738] [ 122.428399][ T7751] loop7: detected capacity change from 0 to 512 [ 122.435329][ T7751] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.444572][ T7751] EXT4-fs (loop7): failed to initialize system zone (-117) [ 122.452382][ T7751] EXT4-fs (loop7): mount failed [ 123.084971][ T7783] loop0: detected capacity change from 0 to 2048 [ 123.101292][ T7783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 123.217748][ T7786] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.236703][ T7787] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 123.249382][ T7787] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.249382][ T7787] [ 123.259074][ T7787] EXT4-fs (loop0): Total free blocks count 0 [ 123.265096][ T7787] EXT4-fs (loop0): Free/Dirty block details [ 123.271165][ T7787] EXT4-fs (loop0): free_blocks=2415919104 [ 123.276909][ T7787] EXT4-fs (loop0): dirty_blocks=2592 [ 123.282424][ T7787] EXT4-fs (loop0): Block reservation details [ 123.288549][ T7787] EXT4-fs (loop0): i_reserved_data_blocks=162 [ 123.383285][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 123.531150][ T7801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7801 comm=syz.0.1356 [ 123.560930][ T7802] loop1: detected capacity change from 0 to 512 [ 123.567921][ T7802] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.585849][ T7802] EXT4-fs (loop1): failed to initialize system zone (-117) [ 123.606803][ T7802] EXT4-fs (loop1): mount failed [ 123.624238][ T7799] ================================================================== [ 123.633654][ T7799] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 123.641839][ T7799] [ 123.644277][ T7799] read-write to 0xffff8881033dcb88 of 8 bytes by interrupt on cpu 0: [ 123.652431][ T7799] rtc_pie_update_irq+0x93/0xf0 [ 123.657768][ T7799] __hrtimer_run_queues+0x20c/0x5a0 [ 123.664632][ T7799] hrtimer_interrupt+0x21a/0x460 [ 123.670972][ T7799] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 123.677889][ T7799] sysvec_apic_timer_interrupt+0x32/0x80 [ 123.683897][ T7799] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 123.690505][ T7799] [ 123.693373][ T7799] read to 0xffff8881033dcb88 of 8 bytes by task 7799 on cpu 1: [ 123.701947][ T7799] rtc_dev_poll+0x78/0xb0 [ 123.706663][ T7799] __io_read+0x2e4/0xc20 [ 123.710915][ T7799] io_read+0x1c/0x60 [ 123.715429][ T7799] __io_issue_sqe+0xfb/0x2e0 [ 123.722132][ T7799] io_issue_sqe+0x53/0x970 [ 123.728388][ T7799] io_req_task_submit+0x6b/0xd0 [ 123.734690][ T7799] io_handle_tw_list+0x190/0x1c0 [ 123.741153][ T7799] tctx_task_work_run+0x6d/0x1a0 [ 123.746638][ T7799] tctx_task_work+0x3f/0x80 [ 123.752026][ T7799] task_work_run+0x131/0x1a0 [ 123.757239][ T7799] get_signal+0xe13/0xf70 [ 123.762455][ T7799] arch_do_signal_or_restart+0x96/0x480 [ 123.768721][ T7799] exit_to_user_mode_loop+0x7a/0x100 [ 123.774224][ T7799] do_syscall_64+0x1d6/0x200 [ 123.780419][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.787721][ T7799] [ 123.790225][ T7799] value changed: 0x0000000000019dc0 -> 0x0000000000019ec0 [ 123.798258][ T7799] [ 123.800576][ T7799] Reported by Kernel Concurrency Sanitizer on: [ 123.806721][ T7799] CPU: 1 UID: 0 PID: 7799 Comm: syz.2.1355 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.818339][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.828851][ T7799] ================================================================== [ 126.477833][ T36] usb 9-1: enqueue for inactive port 0 [ 126.484471][ T36] usb 9-1: enqueue for inactive port 0 [ 126.564541][ T36] vhci_hcd: vhci_device speed not set