last executing test programs: 1m53.58768893s ago: executing program 2 (id=2001): socket$inet6(0xa, 0x80003, 0xff) socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m53.502636308s ago: executing program 2 (id=2002): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="010000000000000000"], 0xc4}}, 0x4008800) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34100000000000001d000000"], 0x1034}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 1m52.647384898s ago: executing program 2 (id=2016): unshare(0x62040200) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_peer\x00', r6, 0x0, 0xfffffffffb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r6}, 0x18) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 1m52.050207623s ago: executing program 2 (id=2027): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x0, r2, 0x0, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r3, 0x0, r0, 0x10}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r5, 0x5, 0x4) fcntl$getown(r0, 0x9) 1m51.807634446s ago: executing program 2 (id=2034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) pipe(0x0) removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') 1m51.280698845s ago: executing program 2 (id=2044): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000)) 1m51.246060379s ago: executing program 32 (id=2044): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000)) 1.406230068s ago: executing program 3 (id=3793): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}}}, 0x24}}, 0x8010) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x6}]}) 1.182879389s ago: executing program 3 (id=3797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0xc, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) fchdir(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003eaf38447f7a85cda0000000000040000000000000004d0200000000000000fe000000003800010001017f0008000300000064000000050000"], 0x78) close(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) close(r3) r6 = getpgid(0x0) timer_create(0x2, 0x0, &(0x7f00000002c0)) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) recvmmsg(r8, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000740)=""/78, 0x4e}], 0x1}, 0x2}], 0x1, 0x40000102, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r6, @ANYRES64=r7, @ANYRESDEC=r7, @ANYRESHEX=r2, @ANYRESDEC, @ANYRESOCT=r10], 0x78) close(r10) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) 996.392176ms ago: executing program 3 (id=3801): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008095}, 0x40010) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x6c000000) 978.726288ms ago: executing program 3 (id=3803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x88c, 0x30, 0x12f, 0x20, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0x1, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0x1, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x77a, 0x80a, 0xfffffffc, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x26, 0x9d, 0xf, 0x7, 0x6b3, 0x1, 0x1, 0x3, 0x1000000, 0x1, 0xdf0, 0x18000, 0xf, 0x2, 0x4, 0x7, 0x1, 0xfffffff8, 0x5, 0xfffffffb, 0x6, 0x4, 0x3, 0x2b2, 0x9, 0x6, 0x400, 0x5, 0x6, 0x3, 0x0, 0x8, 0x0, 0x100, 0x9, 0x9, 0x3, 0x6, 0x1, 0x9, 0x4, 0x6, 0x10001, 0xba3, 0xc88, 0xfffffff4, 0x5, 0xb, 0x5a, 0x8000, 0x7, 0x7, 0x7, 0x5, 0x7, 0x4fffdf8d, 0x0, 0x20, 0x8001, 0x2, 0x7, 0x4, 0x5, 0x0, 0x10000, 0x8, 0x2, 0x80000000, 0x10, 0x1000, 0x4, 0x70, 0x23, 0x1, 0x9, 0x4, 0x400, 0x6, 0x0, 0x34, 0x1bac, 0xff, 0x10, 0x2be48b4a, 0x91df, 0x5, 0x1b, 0x3, 0x6, 0x10000, 0x7, 0x800, 0x1, 0x3, 0x0, 0x800, 0x0, 0x8000, 0x3, 0xfffffffa, 0x1000, 0xffff, 0x44, 0x2, 0x2, 0x5, 0x9, 0x4, 0x5, 0x10001, 0xc, 0x1, 0xffffffff, 0x1af, 0x4, 0x9, 0xf82, 0x3, 0x2, 0x7, 0x10000, 0x4, 0x4, 0x3, 0x80000001, 0x1, 0x0, 0x9, 0x3, 0x0, 0x2, 0x6, 0xcc7b, 0x100, 0x7, 0x0, 0x7fff, 0x2, 0x4, 0x11080000, 0x5, 0x8a, 0x1, 0x64, 0x43, 0x4, 0x5, 0x8000, 0x2, 0x3, 0x9, 0x7fffffff, 0x0, 0x35bc, 0x9, 0x0, 0x10001, 0x0, 0xd, 0x8, 0x0, 0x9, 0x4, 0x6, 0xc7, 0xb8b7, 0x5, 0xfff, 0x5, 0x2, 0x8001, 0xfff, 0x8, 0x1, 0x4, 0x9, 0x8, 0x4, 0x49ab, 0xffff, 0x5, 0x7fff, 0xfffffffc, 0x1, 0x9, 0x4, 0x6, 0x8d7, 0x5, 0x1, 0x4, 0xff9e, 0x0, 0x8, 0x8, 0xff, 0x6, 0x6, 0x8, 0x3, 0x10001, 0x7fffffff, 0x40, 0x2, 0x5, 0x4, 0x200, 0x10, 0xfffffffb, 0xc, 0x4, 0x1d66, 0x1, 0x101, 0xcb8, 0x4, 0x0, 0x2, 0x80, 0xc8, 0x100, 0x98600000, 0x5, 0x4, 0x71cb, 0x4, 0x4, 0xffff, 0x0, 0xc984, 0xd, 0x1, 0x1, 0x3, 0x3ff, 0xffffffff, 0x6, 0x401, 0x100, 0x9, 0x7, 0xfd2b, 0x8, 0x4, 0xb, 0x7, 0x2, 0x7, 0xd6, 0x8bb, 0x0, 0xffff0001, 0x3, 0x4c0a, 0x59]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 917.828544ms ago: executing program 1 (id=3806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pipe2$9p(0x0, 0x160b4fa3253610b4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r1) 913.261684ms ago: executing program 4 (id=3807): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}}}, 0x24}}, 0x8010) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x6}]}) 901.481795ms ago: executing program 1 (id=3808): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x73a, 0x1) 769.469388ms ago: executing program 4 (id=3810): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)=@deltfilter={0x1a0, 0x2d, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xa, 0xd}, {0xffff, 0xfff1}, {0x4, 0xffef}}, [@filter_kind_options=@f_matchall={{0xd}, {0x164, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x148, 0x2, [@m_skbedit={0x144, 0x1d, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfb, 0x8001, 0x4, 0xfffffffd, 0x98}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffc}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xf}}]}, {0xd7, 0x6, "6c5990c8a48074541f31efb18df8c8bc9568c0f7bae24333150eecf774ef561ec12d9efae759ebbdd4fc43f7b88a6af4c757fb78e70aa9f166049f2506a9828a82317d8368310fddfd6280a16dd2111303b20e90318d608e05e1b93b47562122b7140e07f6135c33a47d6e2ce2436dfa4ef298e037c48dfbc8f81fa75d4705e83872e96af402233ccb4dba30dbf5ebbbee7134ebbff9a75fe4be3ae78d2ce357cf95108fbfccadeba9aa80bc886059a95646b6a348b659e1f8a255aff58460e7633561279444f10f6972fd308c2d3bc74a2a4a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8800}, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)=',&#^%\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x1}, 0x18) rt_sigpending(0x0, 0x0) r2 = syz_io_uring_setup(0x52fb, &(0x7f00000007c0)={0x0, 0x4a0c, 0x80, 0x10000, 0x33d}, &(0x7f00000003c0), &(0x7f0000000540)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000380)=ANY=[@ANYRES32=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x2, &(0x7f0000000340)=0x0) io_cancel(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f0000000640)="135a24ae615558e26fd72b6a08d9c1876a0740e0ac966c25eeada23fe3c20e88ea58546cd82c763383f4debdbfc46972b7871bd9af9553f09e9d73cecec3bcc37a6656698e87c27c49c223324294f28bfffef512534e1f6a990c3a8442843595ee0092f8d63d723e1543c2ee721b7a030a0cff5cda7cff1180646fc45a4a1532e9103380eb6bd64606aafc3cfd8f04317fe291aa14344164a5b6e099f9eabf41adb1cf2beb00994a493ef2091fe9b548850c82d0555f05718e54611d6b3e3fd01c95715ebe271a8b9a159401ba5ffc7c9b809df9ebeb28be5ddb74b6", 0xdc, 0xef, 0x0, 0x2}, &(0x7f0000000580)) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000000000)) r9 = syz_io_uring_setup(0x626a, &(0x7f00000008c0)={0x0, 0x17cb, 0x20, 0x203, 0x129, 0x0, r2}, &(0x7f0000000940), &(0x7f0000000980)) io_uring_register$IORING_UNREGISTER_NAPI(r9, 0x1c, 0x0, 0x1) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r10, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r11, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) 766.939148ms ago: executing program 3 (id=3811): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000cff0f0000000000003b523f"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0xa}, 0x28) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x800000000006}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r7, 0x4) fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) 746.51836ms ago: executing program 1 (id=3812): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x290) (async) r3 = gettid() tkill(r3, 0x7) (async) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x14122, 0x0, 0xfffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000083000000bf0900000000000055090100e6ff0000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000201000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xdb, &(0x7f0000000380)=""/219, 0x41000}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (rerun: 64) socket$kcm(0x10, 0x2, 0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1ffffffffffffeb0, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 32) r5 = semget$private(0x0, 0x7, 0x180) (rerun: 32) semop(r5, &(0x7f0000000200)=[{0x4, 0xa7dd, 0x3000}], 0x1) (async) semtimedop(r5, &(0x7f0000000140)=[{0x4, 0x6000}], 0x1, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x30) (async) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r8}, 0x10) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) 672.075877ms ago: executing program 4 (id=3813): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000440)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fdffff0000000300", @ANYRES32=r1, @ANYBLOB="0000000040000200140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="04001a80e2b9"], 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mq_open(&(0x7f0000000040)='GPL\x00', 0x40, 0x2, &(0x7f00000000c0)={0x6, 0x2, 0x933, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) unshare(0x26000400) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000200), 0x1) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x492, &(0x7f0000001600)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYRESHEX=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 671.498307ms ago: executing program 3 (id=3814): r0 = getpgrp(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0xd1, &(0x7f00000007c0)={0x0, 0x8a73, 0x40, 0x2, 0x376}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1, 0x4, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='kfree\x00', r7, 0x0, 0x4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x102809, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107a7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xb2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1000000, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) readv(r9, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x3, @empty, 0x4}}, 0x0, 0x0, 0x22, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) 609.961053ms ago: executing program 1 (id=3817): unshare(0x62040200) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 608.674103ms ago: executing program 4 (id=3818): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) pipe2$9p(0x0, 0x160b4fa3253610b4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r1) 591.648474ms ago: executing program 4 (id=3819): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_setup(0x332b, &(0x7f0000000400)={0x0, 0xb350, 0x800, 0x5, 0x10039}, &(0x7f0000000080), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x7f, 0x2, {{0x25, 0x4, 0x3, 0x18, 0x94, 0x66, 0x0, 0x52, 0x2f, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0x13, 0x69, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x10, 0x47, 0x0, 0x9, [0x0, 0x7, 0x9]}, @ssrr={0x89, 0x7, 0x55, [@broadcast]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "01bf5859"}]}, @lsrr={0x83, 0x1f, 0x8b, [@empty, @remote, @loopback, @empty, @multicast1, @rand_addr=0x64010100, @private=0xa010101]}, @noop, @generic={0x88, 0x5, "4ba65b"}, @timestamp_addr={0x44, 0x24, 0xe, 0x1, 0x8, [{@rand_addr=0x64010102, 0x7ff}, {@loopback, 0x101}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xffff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') read$rfkill(r4, &(0x7f00000004c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x13) mknodat$loop(r7, &(0x7f00000001c0)='./file1\x00', 0xca10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x1d, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x284, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x35, r4, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x8, 0x1, 0x7}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r6], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 502.873943ms ago: executing program 0 (id=3821): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000a3f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 501.400373ms ago: executing program 0 (id=3822): io_setup(0x8f0, &(0x7f0000002400)) 478.505555ms ago: executing program 1 (id=3824): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") alarm(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="a96fe552ab58b087110b3d267e6a586facd587af70e2c487666da42c6c4b11a2f44c70354dc75dbaa229f0039fafb0629e38711097b9c5efcbe2bc355a1d827ca6e00fc0f9e57b2eacbb", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000340)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000340)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='svc_unregister\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000004080)={{{@in=@multicast1, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000004180)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000004080)={{{@in=@multicast1, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000004180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r7, 0x2f, 0x1, 0x7f, 0xfffffff3, 0x44, @remote, @local, 0x10, 0x20, 0x59361537, 0x7}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)={0x198, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x84}, 0x48004) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81, 0xffffffff}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x400000, 0x0, 0x0, 0xd1, 0x7}) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x400000, 0x0, 0x0, 0xd1, 0x7}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r11, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r11, 0x200, 0x70bd25, 0x25dfdc00, {{}, {@void, @void}}}, 0x14}}, 0x4008040) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r11, 0x200, 0x70bd25, 0x25dfdc00, {{}, {@void, @void}}}, 0x14}}, 0x4008040) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYRES64=r6], 0x50) 460.345437ms ago: executing program 0 (id=3826): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 443.914758ms ago: executing program 0 (id=3827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x167e, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={{0x14, 0x3f8}, [], {0x14, 0x3f2, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) (fail_nth: 2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) sendmmsg$inet(r4, &(0x7f00000033c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)}}, {{&(0x7f0000000580)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x881) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 361.997466ms ago: executing program 5 (id=3828): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x400000000000000, 0x4000) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 361.846595ms ago: executing program 5 (id=3829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) setresuid(0xee00, 0xee00, 0x0) 343.494348ms ago: executing program 5 (id=3830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r1) 319.43711ms ago: executing program 5 (id=3831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x167e, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={{0x14, 0x3f8}, [], {0x14, 0x3f2, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) sendmmsg$inet(r4, &(0x7f00000033c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)}}, {{&(0x7f0000000580)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x881) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 220.743049ms ago: executing program 0 (id=3832): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x167e, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000f803010000000000000400000000000a140000007203010000000000000000000110000a"], 0x28}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) sendmmsg$inet(r4, &(0x7f00000033c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)}}, {{&(0x7f0000000580)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x881) mknodat$loop(0xffffffffffffff9c, 0x0, 0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 130.908427ms ago: executing program 5 (id=3833): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 114.632869ms ago: executing program 1 (id=3834): unshare(0x62040200) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 111.965819ms ago: executing program 5 (id=3835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRESDEC], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r10 = getpid() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {r6}}, './file0\x00'}) setsockopt$MRT_ADD_MFC(r11, 0x0, 0xcc, &(0x7f00000002c0)={@private=0xa010101, @empty, 0x1, "89b13744dc17ae4480d3ff735f4bfcdd49a99208c45e317d97628a0bcd7049f9", 0x1, 0x4, 0xbe94}, 0x3c) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r9, @ANYBLOB="08001c00", @ANYRES32=r10, @ANYBLOB="b1b58955993967f81589ff7155938981407488335feb88adfc83f7415c608572b01df0015f3e1e1b12a274b9552cf730f584d680403df1e1f9e2366668cd0bff8352ce16d655822bbe755286a95dae6b7dbc6483ebbbe113204b81cf3aa66c88c15b0cebf0dfd47d757e04d0"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='mlxsw_sp_acl_tcam_vregion_rehash\x00', r6}, 0x18) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) msync(&(0x7f0000b36000/0x1000)=nil, 0x1000, 0x5) syz_open_dev$hidraw(&(0x7f00000000c0), 0x10, 0x28742) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0xffff, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000005a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000020000020c000000180001801400020076657468305f746f5f626f6e6400000004000380"], 0x30}}, 0x20000000) 29.866117ms ago: executing program 0 (id=3836): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x4, 0x110, r0, 0xaf48c000) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000140)='GPL\x00', 0x7167, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xe, 0x8, 0xbc2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x1], &(0x7f0000000180)=[{0x1, 0x2, 0xf, 0x6}, {0x5, 0x2, 0x9, 0x2}, {0x2, 0x4, 0xe, 0xa}]}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb3c002b800800030000000000080003000700000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030000000000080003000300000008000800", @ANYRES32, @ANYBLOB="756c6aab427098ac9f19c8f16e5de60da8f717c226d4b991d3ec97916ca3c0464531c2956f274f1336cd40d796ff9cefd18b0a0e067e3da1cf6ee13d6b884629e664747d36424d14e6c8996e18534ebccc2b0be6201673ceebb6723c54a3cab89fd51fe285da76069ba32646213252c4b08095d27d0e582807d27025afcd6e433dba15807556e04236005e16c71cb4f27249bba785869b4393ced93871edde2266cff8aa52151f49dc5736f87ca17baa6e"], 0x78}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb3c002b800800030000000000080003000700000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030000000000080003000300000008000800", @ANYRES32, @ANYBLOB="756c6aab427098ac9f19c8f16e5de60da8f717c226d4b991d3ec97916ca3c0464531c2956f274f1336cd40d796ff9cefd18b0a0e067e3da1cf6ee13d6b884629e664747d36424d14e6c8996e18534ebccc2b0be6201673ceebb6723c54a3cab89fd51fe285da76069ba32646213252c4b08095d27d0e582807d27025afcd6e433dba15807556e04236005e16c71cb4f27249bba785869b4393ced93871edde2266cff8aa52151f49dc5736f87ca17baa6e"], 0x78}, 0x1, 0x2}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r5, 0x25, 0x18, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) ptrace(0x10, 0x0) (async) ptrace(0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) gettid() (async) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000040)={&(0x7f00000000c0)=""/97, 0x61}) (async) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000040)={&(0x7f00000000c0)=""/97, 0x61}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='name', &(0x7f0000000200)='\xe4%~\xe6)\f\x16#\xde}\a\n)+\x15\xba\xf0}P\xbb[A\x84DW\xa3\'\xf8\xf8\x89Z\x84\x96\xdb\x8fpu\xe4v\xaa\xac\xe8\xee\xd9\x81\x8cm`\x00\x00\x00\x02\x00'/62, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000080)='name', &(0x7f0000000200)='\xe4%~\xe6)\f\x16#\xde}\a\n)+\x15\xba\xf0}P\xbb[A\x84DW\xa3\'\xf8\xf8\x89Z\x84\x96\xdb\x8fpu\xe4v\xaa\xac\xe8\xee\xd9\x81\x8cm`\x00\x00\x00\x02\x00'/62, 0x0) readv(r10, &(0x7f0000000140)=[{&(0x7f0000002300)=""/4064, 0xfe0}], 0x1) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x3, 0x5) (async) socket$inet6(0xa, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 0s ago: executing program 4 (id=3837): io_setup(0x8f0, &(0x7f0000002400)) kernel console output (not intermixed with test programs): ring removed oldalloc option [ 245.193711][T20519] EXT4-fs (loop5): 1 truncate cleaned up [ 245.250765][T20519] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.3347: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 245.281463][T20519] EXT4-fs (loop5): Remounting filesystem read-only [ 245.348791][ T29] kauditd_printk_skb: 2767 callbacks suppressed [ 245.348811][ T29] audit: type=1326 audit(501.330:47612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.384392][T20538] loop0: detected capacity change from 0 to 512 [ 245.391701][T20538] EXT4-fs: Ignoring removed oldalloc option [ 245.398406][ T29] audit: type=1326 audit(501.360:47613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.407138][T20535] loop3: detected capacity change from 0 to 1024 [ 245.421804][ T29] audit: type=1326 audit(501.360:47614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.451439][ T29] audit: type=1326 audit(501.360:47615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.457211][T20538] EXT4-fs (loop0): 1 truncate cleaned up [ 245.474728][ T29] audit: type=1326 audit(501.360:47616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.503851][ T29] audit: type=1326 audit(501.360:47617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.527273][ T29] audit: type=1326 audit(501.360:47618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.550431][ T29] audit: type=1326 audit(501.360:47619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.573715][ T29] audit: type=1326 audit(501.360:47620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.597192][ T29] audit: type=1326 audit(501.360:47621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.0.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 245.764905][T20552] loop0: detected capacity change from 0 to 512 [ 245.771546][T20552] SELinux: security_context_str_to_sid (uncon) failed with errno=-22 [ 245.836772][T20560] syzkaller1: entered allmulticast mode [ 245.874334][T20569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3367'. [ 245.883409][T20569] netem: unknown loss type 13 [ 245.888137][T20569] netem: change failed [ 245.899560][T20569] loop4: detected capacity change from 0 to 512 [ 245.919692][T20569] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 245.934933][T20569] EXT4-fs (loop4): mount failed [ 245.964642][T20575] $Hÿ: renamed from bond0 (while UP) [ 245.972268][T20575] $Hÿ: entered promiscuous mode [ 245.977432][T20575] bond_slave_0: entered promiscuous mode [ 245.983268][T20575] bond_slave_1: entered promiscuous mode [ 245.999576][T20559] Alternate GPT is invalid, using primary GPT. [ 246.005876][T20559] loop3: p1 p2 p3 [ 246.005977][T20575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.009707][T20559] loop3: partition table partially beyond EOD, truncated [ 246.027158][T20577] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20577 comm=syz.1.3369 [ 246.042779][T20575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3368'. [ 246.051934][T20575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3368'. [ 246.613301][T20594] $Hÿ: renamed from bond0 (while UP) [ 246.621473][T20594] $Hÿ: entered promiscuous mode [ 246.626885][T20594] bond_slave_0: entered promiscuous mode [ 246.632765][T20594] bond_slave_1: entered promiscuous mode [ 246.689121][T20594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.709257][T20596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3374'. [ 246.718526][T20596] netem: unknown loss type 13 [ 246.723230][T20596] netem: change failed [ 246.759052][T20594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'. [ 246.768113][T20594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'. [ 246.800855][T20596] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 246.816031][T20596] EXT4-fs (loop4): mount failed [ 246.867465][T20612] FAULT_INJECTION: forcing a failure. [ 246.867465][T20612] name failslab, interval 1, probability 0, space 0, times 0 [ 246.880414][T20612] CPU: 0 UID: 0 PID: 20612 Comm: syz.3.3380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.880513][T20612] Tainted: [W]=WARN [ 246.880520][T20612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.880532][T20612] Call Trace: [ 246.880538][T20612] [ 246.880545][T20612] __dump_stack+0x1d/0x30 [ 246.880570][T20612] dump_stack_lvl+0x95/0xd0 [ 246.880591][T20612] dump_stack+0x15/0x1b [ 246.880672][T20612] should_fail_ex+0x265/0x280 [ 246.880702][T20612] should_failslab+0x8c/0xb0 [ 246.880755][T20612] kmem_cache_alloc_noprof+0x69/0x4b0 [ 246.880781][T20612] ? security_file_alloc+0x32/0x100 [ 246.880811][T20612] security_file_alloc+0x32/0x100 [ 246.880892][T20612] init_file+0x5c/0x1c0 [ 246.880918][T20612] alloc_empty_file+0x8b/0x200 [ 246.880972][T20612] alloc_file_pseudo+0xc6/0x160 [ 246.881003][T20612] __shmem_file_setup+0x1de/0x210 [ 246.881027][T20612] shmem_file_setup+0x3b/0x50 [ 246.881102][T20612] __se_sys_memfd_create+0x2f7/0x6b0 [ 246.881167][T20612] __x64_sys_memfd_create+0x31/0x40 [ 246.881197][T20612] x64_sys_call+0x28cb/0x3000 [ 246.881220][T20612] do_syscall_64+0xca/0x2b0 [ 246.881270][T20612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.881296][T20612] RIP: 0033:0x7f057189f749 [ 246.881314][T20612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.881335][T20612] RSP: 002b:00007f0570306e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 246.881360][T20612] RAX: ffffffffffffffda RBX: 00000000000004e0 RCX: 00007f057189f749 [ 246.881374][T20612] RDX: 00007f0570306ef0 RSI: 0000000000000000 RDI: 00007f0571924960 [ 246.881435][T20612] RBP: 0000200000001a40 R08: 00007f0570306bb7 R09: 00007f0570306e40 [ 246.881449][T20612] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 246.881463][T20612] R13: 00007f0570306ef0 R14: 00007f0570306eb0 R15: 0000200000000440 [ 246.881485][T20612] [ 247.182213][T20621] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 247.196785][T20627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.208581][T20621] EXT4-fs (loop4): invalid journal inode [ 247.214393][T20621] EXT4-fs (loop4): can't get journal size [ 247.267222][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 247.286955][T20621] EXT4-fs (loop4): 1 truncate cleaned up [ 247.370921][T20639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20639 comm=syz.4.3391 [ 247.507554][T20631] Alternate GPT is invalid, using primary GPT. [ 247.514363][T20631] loop5: p1 p2 p3 [ 247.518142][T20631] loop5: partition table partially beyond EOD, truncated [ 247.739412][T20655] __nla_validate_parse: 1 callbacks suppressed [ 247.739445][T20655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3394'. [ 247.754685][T20655] netem: unknown loss type 13 [ 247.759394][T20655] netem: change failed [ 247.879231][T20661] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.945028][T20661] EXT4-fs (loop1): mount failed [ 247.997206][T20669] FAULT_INJECTION: forcing a failure. [ 247.997206][T20669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.010341][T20669] CPU: 0 UID: 0 PID: 20669 Comm: syz.0.3400 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.010408][T20669] Tainted: [W]=WARN [ 248.010518][T20669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.010528][T20669] Call Trace: [ 248.010533][T20669] [ 248.010538][T20669] __dump_stack+0x1d/0x30 [ 248.010555][T20669] dump_stack_lvl+0x95/0xd0 [ 248.010611][T20669] dump_stack+0x15/0x1b [ 248.010749][T20669] should_fail_ex+0x265/0x280 [ 248.010797][T20669] should_fail+0xb/0x20 [ 248.010811][T20669] should_fail_usercopy+0x1a/0x20 [ 248.010827][T20669] _copy_from_user+0x1c/0xb0 [ 248.010846][T20669] ___sys_sendmsg+0xc1/0x1d0 [ 248.010943][T20669] __x64_sys_sendmsg+0xd4/0x160 [ 248.010964][T20669] x64_sys_call+0x17ba/0x3000 [ 248.010981][T20669] do_syscall_64+0xca/0x2b0 [ 248.011064][T20669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.011079][T20669] RIP: 0033:0x7f5063c9f749 [ 248.011090][T20669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.011104][T20669] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.011161][T20669] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 248.011170][T20669] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 248.011179][T20669] RBP: 00007f5062707090 R08: 0000000000000000 R09: 0000000000000000 [ 248.011188][T20669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.011268][T20669] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 248.011287][T20669] [ 248.227279][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 248.397604][T20690] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3408: invalid block [ 248.440490][T20690] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3408: invalid indirect mapped block 4294967295 (level 1) [ 248.475979][T20690] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3408: invalid indirect mapped block 4294967295 (level 1) [ 248.531161][T20690] EXT4-fs (loop4): 2 truncates cleaned up [ 248.567962][T20704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3412'. [ 248.577117][T20704] netem: unknown loss type 13 [ 248.581832][T20704] netem: change failed [ 248.590750][T20690] FAULT_INJECTION: forcing a failure. [ 248.590750][T20690] name failslab, interval 1, probability 0, space 0, times 0 [ 248.603775][T20690] CPU: 1 UID: 0 PID: 20690 Comm: syz.4.3408 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.603815][T20690] Tainted: [W]=WARN [ 248.603823][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.603849][T20690] Call Trace: [ 248.603931][T20690] [ 248.603941][T20690] __dump_stack+0x1d/0x30 [ 248.603972][T20690] dump_stack_lvl+0x95/0xd0 [ 248.604054][T20690] dump_stack+0x15/0x1b [ 248.604076][T20690] should_fail_ex+0x265/0x280 [ 248.604099][T20690] should_failslab+0x8c/0xb0 [ 248.604123][T20690] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 248.604151][T20690] ? __alloc_skb+0x2ff/0x4b0 [ 248.604215][T20690] __alloc_skb+0x2ff/0x4b0 [ 248.604274][T20690] ? __alloc_skb+0x228/0x4b0 [ 248.604299][T20690] netlink_alloc_large_skb+0xbf/0xf0 [ 248.604367][T20690] netlink_sendmsg+0x3cf/0x6b0 [ 248.604406][T20690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.604508][T20690] __sock_sendmsg+0x145/0x180 [ 248.604532][T20690] ____sys_sendmsg+0x31e/0x4a0 [ 248.604565][T20690] ___sys_sendmsg+0x17b/0x1d0 [ 248.604682][T20690] __x64_sys_sendmsg+0xd4/0x160 [ 248.604793][T20690] x64_sys_call+0x17ba/0x3000 [ 248.604923][T20690] do_syscall_64+0xca/0x2b0 [ 248.604958][T20690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.604980][T20690] RIP: 0033:0x7f240ddaf749 [ 248.605003][T20690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.605026][T20690] RSP: 002b:00007f240c817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.605049][T20690] RAX: ffffffffffffffda RBX: 00007f240e005fa0 RCX: 00007f240ddaf749 [ 248.605065][T20690] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 000000000000000c [ 248.605080][T20690] RBP: 00007f240c817090 R08: 0000000000000000 R09: 0000000000000000 [ 248.605093][T20690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.605107][T20690] R13: 00007f240e006038 R14: 00007f240e005fa0 R15: 00007ffeda5a3808 [ 248.605126][T20690] [ 248.820312][T20704] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 248.835464][T20704] EXT4-fs (loop0): mount failed [ 248.877509][T20696] Alternate GPT is invalid, using primary GPT. [ 248.883878][T20696] loop1: p1 p2 p3 [ 248.887679][T20696] loop1: partition table partially beyond EOD, truncated [ 248.899327][T20713] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3415: invalid block [ 248.912090][T20713] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3415: invalid indirect mapped block 4294967295 (level 1) [ 248.928966][T20713] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3415: invalid indirect mapped block 4294967295 (level 1) [ 248.943610][T20713] EXT4-fs (loop3): 2 truncates cleaned up [ 248.987896][T20713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3415'. [ 249.002191][T20721] 9p: Bad value for 'port' [ 249.257392][T20742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3425'. [ 249.266660][T20742] netem: unknown loss type 13 [ 249.271493][T20742] netem: change failed [ 249.297757][T20742] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 249.315014][T20742] EXT4-fs (loop3): mount failed [ 249.935775][T20759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.036720][T20756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20756 comm=syz.3.3429 [ 250.048971][T20765] set_capacity_and_notify: 15 callbacks suppressed [ 250.049003][T20765] loop0: detected capacity change from 0 to 512 [ 250.080891][T20765] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3431: invalid block [ 250.115365][T20765] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3431: invalid indirect mapped block 4294967295 (level 1) [ 250.141314][T20765] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3431: invalid indirect mapped block 4294967295 (level 1) [ 250.166260][T20765] EXT4-fs (loop0): 2 truncates cleaned up [ 250.172803][T20765] EXT4-fs mount: 74 callbacks suppressed [ 250.172820][T20765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.207800][T20765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.225196][T20765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3431'. [ 250.310258][T20754] loop5: detected capacity change from 0 to 2048 [ 250.367661][T20789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3439'. [ 250.376760][T20789] netem: unknown loss type 13 [ 250.377549][T20754] Alternate GPT is invalid, using primary GPT. [ 250.381603][T20789] netem: change failed [ 250.388098][T20754] loop5: p1 p2 p3 [ 250.392119][ T29] kauditd_printk_skb: 1805 callbacks suppressed [ 250.392192][ T29] audit: type=1326 audit(506.340:49420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc69fbf749 code=0x7ffc0000 [ 250.395780][T20754] loop5: partition table partially beyond EOD, [ 250.402099][ T29] audit: type=1326 audit(506.340:49421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc69fbdf90 code=0x7ffc0000 [ 250.425037][T20754] truncated [ 250.431359][ T29] audit: type=1326 audit(506.340:49422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcc69fc0f77 code=0x7ffc0000 [ 250.480745][ T29] audit: type=1326 audit(506.340:49423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc69fbf749 code=0x7ffc0000 [ 250.483730][T20791] loop1: detected capacity change from 0 to 512 [ 250.504194][ T29] audit: type=1326 audit(506.340:49424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcc69fc0f77 code=0x7ffc0000 [ 250.533771][ T29] audit: type=1326 audit(506.340:49425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcc69fbe3aa code=0x7ffc0000 [ 250.556718][ T29] audit: type=1326 audit(506.340:49426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc69fbf749 code=0x7ffc0000 [ 250.579929][ T29] audit: type=1326 audit(506.340:49427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc69fbf749 code=0x7ffc0000 [ 250.603362][ T29] audit: type=1326 audit(506.340:49428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc69fbf749 code=0x7ffc0000 [ 250.627316][ T29] audit: type=1326 audit(506.340:49429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc69fbf749 code=0x7ffc0000 [ 250.686839][T20786] loop0: detected capacity change from 0 to 2048 [ 250.697745][T20791] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 250.724063][T20791] EXT4-fs (loop1): mount failed [ 250.730779][T20786] Alternate GPT is invalid, using primary GPT. [ 250.737184][T20786] loop0: p1 p2 p3 [ 250.741161][T20786] loop0: partition table partially beyond EOD, truncated [ 250.818011][T20809] loop5: detected capacity change from 0 to 512 [ 250.839909][T20809] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 250.865500][T20809] EXT4-fs (loop5): mount failed [ 250.899060][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3446'. [ 250.908353][T20820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.915760][T20820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.923753][T20820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.931246][T20820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.023414][T20834] loop0: detected capacity change from 0 to 1024 [ 251.044412][T20834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.065899][T20839] loop1: detected capacity change from 0 to 512 [ 251.075044][T20839] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 251.084222][T20839] EXT4-fs (loop1): invalid journal inode [ 251.084472][T20057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.099716][T20839] EXT4-fs (loop1): can't get journal size [ 251.117146][T20839] EXT4-fs (loop1): 1 truncate cleaned up [ 251.123996][T20839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.175956][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.200214][T20852] FAULT_INJECTION: forcing a failure. [ 251.200214][T20852] name failslab, interval 1, probability 0, space 0, times 0 [ 251.213130][T20852] CPU: 1 UID: 0 PID: 20852 Comm: syz.1.3455 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.213166][T20852] Tainted: [W]=WARN [ 251.213174][T20852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.213229][T20852] Call Trace: [ 251.213237][T20852] [ 251.213244][T20852] __dump_stack+0x1d/0x30 [ 251.213272][T20852] dump_stack_lvl+0x95/0xd0 [ 251.213342][T20852] dump_stack+0x15/0x1b [ 251.213365][T20852] should_fail_ex+0x265/0x280 [ 251.213387][T20852] should_failslab+0x8c/0xb0 [ 251.213463][T20852] __kmalloc_cache_noprof+0x65/0x4c0 [ 251.213492][T20852] ? sctp_add_bind_addr+0x71/0x1e0 [ 251.213523][T20852] sctp_add_bind_addr+0x71/0x1e0 [ 251.213588][T20852] sctp_do_bind+0x427/0x4b0 [ 251.213624][T20852] sctp_connect_new_asoc+0x153/0x3a0 [ 251.213683][T20852] sctp_sendmsg+0xf10/0x18d0 [ 251.213716][T20852] ? selinux_socket_sendmsg+0x111/0x1b0 [ 251.213820][T20852] ? __pfx_sctp_sendmsg+0x10/0x10 [ 251.213927][T20852] inet_sendmsg+0xc5/0xd0 [ 251.213961][T20852] __sock_sendmsg+0x102/0x180 [ 251.213981][T20852] __sys_sendto+0x268/0x330 [ 251.214068][T20852] __x64_sys_sendto+0x76/0x90 [ 251.214091][T20852] x64_sys_call+0x29a7/0x3000 [ 251.214114][T20852] do_syscall_64+0xca/0x2b0 [ 251.214209][T20852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.214236][T20852] RIP: 0033:0x7fcc69fbf749 [ 251.214253][T20852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.214346][T20852] RSP: 002b:00007fcc68a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 251.214368][T20852] RAX: ffffffffffffffda RBX: 00007fcc6a215fa0 RCX: 00007fcc69fbf749 [ 251.214383][T20852] RDX: 000000000000fffd RSI: 0000200000000400 RDI: 0000000000000003 [ 251.214398][T20852] RBP: 00007fcc68a1f090 R08: 0000200000000080 R09: 000000000000001c [ 251.214430][T20852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.214443][T20852] R13: 00007fcc6a216038 R14: 00007fcc6a215fa0 R15: 00007ffebddc5818 [ 251.214484][T20852] [ 251.494450][T20864] FAULT_INJECTION: forcing a failure. [ 251.494450][T20864] name failslab, interval 1, probability 0, space 0, times 0 [ 251.507295][T20864] CPU: 1 UID: 0 PID: 20864 Comm: syz.3.3461 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.507402][T20864] Tainted: [W]=WARN [ 251.507409][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.507422][T20864] Call Trace: [ 251.507429][T20864] [ 251.507439][T20864] __dump_stack+0x1d/0x30 [ 251.507468][T20864] dump_stack_lvl+0x95/0xd0 [ 251.507494][T20864] dump_stack+0x15/0x1b [ 251.507512][T20864] should_fail_ex+0x265/0x280 [ 251.507583][T20864] should_failslab+0x8c/0xb0 [ 251.507603][T20864] kmem_cache_alloc_noprof+0x69/0x4b0 [ 251.507673][T20864] ? security_inode_alloc+0x37/0x100 [ 251.507694][T20864] security_inode_alloc+0x37/0x100 [ 251.507713][T20864] inode_init_always_gfp+0x4b7/0x500 [ 251.507734][T20864] ? __pfx_sock_alloc_inode+0x10/0x10 [ 251.507831][T20864] alloc_inode+0x58/0x170 [ 251.507849][T20864] __sock_create+0x120/0x580 [ 251.507869][T20864] __sys_socket+0xb0/0x180 [ 251.507901][T20864] __x64_sys_socket+0x3f/0x50 [ 251.507919][T20864] x64_sys_call+0x127b/0x3000 [ 251.508024][T20864] do_syscall_64+0xca/0x2b0 [ 251.508211][T20864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.508231][T20864] RIP: 0033:0x7f05718a1667 [ 251.508246][T20864] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.508279][T20864] RSP: 002b:00007f0570305fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 251.508395][T20864] RAX: ffffffffffffffda RBX: 00007f0571af5fa0 RCX: 00007f05718a1667 [ 251.508408][T20864] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 251.508420][T20864] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 251.508431][T20864] R10: 0000200000000740 R11: 0000000000000286 R12: 0000000000000001 [ 251.508443][T20864] R13: 00007f0571af6038 R14: 00007f0571af5fa0 R15: 00007ffca2ccf7f8 [ 251.508460][T20864] [ 251.508530][T20864] socket: no more sockets [ 251.727791][T20879] FAULT_INJECTION: forcing a failure. [ 251.727791][T20879] name failslab, interval 1, probability 0, space 0, times 0 [ 251.740614][T20879] CPU: 1 UID: 0 PID: 20879 Comm: syz.4.3465 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.740651][T20879] Tainted: [W]=WARN [ 251.740658][T20879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.740670][T20879] Call Trace: [ 251.740738][T20879] [ 251.740746][T20879] __dump_stack+0x1d/0x30 [ 251.740771][T20879] dump_stack_lvl+0x95/0xd0 [ 251.740791][T20879] dump_stack+0x15/0x1b [ 251.740825][T20879] should_fail_ex+0x265/0x280 [ 251.740852][T20879] should_failslab+0x8c/0xb0 [ 251.740935][T20879] __kmalloc_cache_noprof+0x65/0x4c0 [ 251.740985][T20879] ? snd_seq_pool_new+0x32/0xe0 [ 251.741070][T20879] ? snd_seq_pool_init+0x55/0x210 [ 251.741152][T20879] snd_seq_pool_new+0x32/0xe0 [ 251.741199][T20879] snd_seq_fifo_resize+0x4b/0x1c0 [ 251.741224][T20879] snd_seq_ioctl_set_client_pool+0x24c/0x310 [ 251.741319][T20879] snd_seq_ioctl+0x177/0x300 [ 251.741358][T20879] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 251.741390][T20879] __se_sys_ioctl+0xce/0x140 [ 251.741451][T20879] __x64_sys_ioctl+0x43/0x50 [ 251.741486][T20879] x64_sys_call+0x14b0/0x3000 [ 251.741513][T20879] do_syscall_64+0xca/0x2b0 [ 251.741609][T20879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.741633][T20879] RIP: 0033:0x7f240ddaf749 [ 251.741651][T20879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.741672][T20879] RSP: 002b:00007f240c817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.741704][T20879] RAX: ffffffffffffffda RBX: 00007f240e005fa0 RCX: 00007f240ddaf749 [ 251.741741][T20879] RDX: 0000200000000180 RSI: 000000004058534c RDI: 000000000000000d [ 251.741756][T20879] RBP: 00007f240c817090 R08: 0000000000000000 R09: 0000000000000000 [ 251.741791][T20879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.741806][T20879] R13: 00007f240e006038 R14: 00007f240e005fa0 R15: 00007ffeda5a3808 [ 251.741827][T20879] [ 251.974330][T20887] FAULT_INJECTION: forcing a failure. [ 251.974330][T20887] name failslab, interval 1, probability 0, space 0, times 0 [ 251.987035][T20887] CPU: 0 UID: 0 PID: 20887 Comm: syz.0.3467 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.987075][T20887] Tainted: [W]=WARN [ 251.987084][T20887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.987134][T20887] Call Trace: [ 251.987141][T20887] [ 251.987150][T20887] __dump_stack+0x1d/0x30 [ 251.987177][T20887] dump_stack_lvl+0x95/0xd0 [ 251.987203][T20887] dump_stack+0x15/0x1b [ 251.987224][T20887] should_fail_ex+0x265/0x280 [ 251.987256][T20887] should_failslab+0x8c/0xb0 [ 251.987297][T20887] __kmalloc_cache_noprof+0x65/0x4c0 [ 251.987326][T20887] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 251.987408][T20887] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 251.987440][T20887] sctp_association_new+0xde5/0x1190 [ 251.987481][T20887] sctp_connect_new_asoc+0x1a8/0x3a0 [ 251.987578][T20887] sctp_sendmsg+0xf10/0x18d0 [ 251.987633][T20887] ? selinux_socket_sendmsg+0x111/0x1b0 [ 251.987661][T20887] ? __pfx_sctp_sendmsg+0x10/0x10 [ 251.987687][T20887] inet_sendmsg+0xc5/0xd0 [ 251.987714][T20887] __sock_sendmsg+0x102/0x180 [ 251.987760][T20887] ____sys_sendmsg+0x31e/0x4a0 [ 251.987796][T20887] ___sys_sendmsg+0x17b/0x1d0 [ 251.987842][T20887] __x64_sys_sendmsg+0xd4/0x160 [ 251.987889][T20887] x64_sys_call+0x17ba/0x3000 [ 251.987918][T20887] do_syscall_64+0xca/0x2b0 [ 251.987958][T20887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.987983][T20887] RIP: 0033:0x7f5063c9f749 [ 251.988038][T20887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.988060][T20887] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.988096][T20887] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 251.988112][T20887] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000007 [ 251.988127][T20887] RBP: 00007f5062707090 R08: 0000000000000000 R09: 0000000000000000 [ 251.988139][T20887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.988155][T20887] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 251.988177][T20887] [ 252.271520][T20895] loop0: detected capacity change from 0 to 1024 [ 252.300269][T20895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.320540][T20889] loop4: detected capacity change from 0 to 2048 [ 252.346115][T20057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.362696][T20907] loop3: detected capacity change from 0 to 1024 [ 252.378137][T20889] Alternate GPT is invalid, using primary GPT. [ 252.378711][T20907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.384439][T20889] loop4: p1 p2 p3 [ 252.400195][T20889] loop4: partition table partially beyond EOD, truncated [ 252.433994][T18681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.469049][T20913] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 252.478244][T20913] EXT4-fs (loop1): invalid journal inode [ 252.484041][T20913] EXT4-fs (loop1): can't get journal size [ 252.491965][T20913] EXT4-fs (loop1): 1 truncate cleaned up [ 252.498168][T20913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.541367][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.691285][T20929] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 252.711467][T20923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3479'. [ 252.729768][T20932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20932 comm=syz.1.3482 [ 252.753568][T20929] EXT4-fs (loop3): invalid journal inode [ 252.764885][T20929] EXT4-fs (loop3): can't get journal size [ 252.774827][T20929] EXT4-fs (loop3): 1 truncate cleaned up [ 252.783380][T20929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.830475][T18681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.863439][T20940] netlink: 'syz.5.3485': attribute type 12 has an invalid length. [ 253.517433][T20967] FAULT_INJECTION: forcing a failure. [ 253.517433][T20967] name failslab, interval 1, probability 0, space 0, times 0 [ 253.518069][T20953] Alternate GPT is invalid, using primary GPT. [ 253.530329][T20967] CPU: 1 UID: 0 PID: 20967 Comm: syz.0.3496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.530363][T20967] Tainted: [W]=WARN [ 253.530371][T20967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.530383][T20967] Call Trace: [ 253.530392][T20967] [ 253.530401][T20967] __dump_stack+0x1d/0x30 [ 253.530427][T20967] dump_stack_lvl+0x95/0xd0 [ 253.530449][T20967] dump_stack+0x15/0x1b [ 253.530555][T20967] should_fail_ex+0x265/0x280 [ 253.530579][T20967] should_failslab+0x8c/0xb0 [ 253.530603][T20967] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 253.530678][T20967] ? __alloc_skb+0x2ff/0x4b0 [ 253.530703][T20967] __alloc_skb+0x2ff/0x4b0 [ 253.530783][T20967] ? __alloc_skb+0x228/0x4b0 [ 253.530807][T20967] netlink_alloc_large_skb+0xbf/0xf0 [ 253.530835][T20967] netlink_sendmsg+0x3cf/0x6b0 [ 253.530883][T20967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.530983][T20967] __sock_sendmsg+0x145/0x180 [ 253.531004][T20967] ____sys_sendmsg+0x31e/0x4a0 [ 253.531034][T20967] ___sys_sendmsg+0x17b/0x1d0 [ 253.531072][T20967] __x64_sys_sendmsg+0xd4/0x160 [ 253.531178][T20967] x64_sys_call+0x17ba/0x3000 [ 253.531208][T20967] do_syscall_64+0xca/0x2b0 [ 253.531242][T20967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.531298][T20967] RIP: 0033:0x7f5063c9f749 [ 253.531316][T20967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.531335][T20967] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.531356][T20967] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 253.531369][T20967] RDX: 0000000024048840 RSI: 00002000000002c0 RDI: 0000000000000006 [ 253.531383][T20967] RBP: 00007f5062707090 R08: 0000000000000000 R09: 0000000000000000 [ 253.531396][T20967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.531480][T20967] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 253.531499][T20967] [ 253.738825][T20953] loop3: p1 p2 p3 [ 253.742589][T20953] loop3: partition table partially beyond EOD, truncated [ 253.872200][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 253.900822][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 253.914025][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 253.926002][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 253.935331][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 253.980228][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 253.996515][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 254.032037][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 254.041647][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 254.058534][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 254.070678][T20992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.140216][T21001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21001 comm=syz.4.3510 [ 254.178812][T20057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.233928][ T3424] hid_parser_main: 48 callbacks suppressed [ 254.233949][ T3424] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.257090][ T3424] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.268583][T20997] Alternate GPT is invalid, using primary GPT. [ 254.274902][T20997] loop5: p1 p2 p3 [ 254.278888][T20997] loop5: partition table partially beyond EOD, truncated [ 254.924468][T21018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 254.933344][T21018] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.950304][T21018] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.3514: Allocating blocks 41-42 which overlap fs metadata [ 254.976979][T21018] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3514: Failed to acquire dquot type 1 [ 255.006614][T21018] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 255.036430][T21018] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.3514: corrupted inode contents [ 255.048780][T21018] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.3514: mark_inode_dirty error [ 255.060621][T21018] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.3514: corrupted inode contents [ 255.072840][T21027] set_capacity_and_notify: 6 callbacks suppressed [ 255.072857][T21027] loop3: detected capacity change from 0 to 1024 [ 255.077775][T21029] loop4: detected capacity change from 0 to 1024 [ 255.079340][T21018] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.3514: mark_inode_dirty error [ 255.103758][T21018] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.3514: corrupted inode contents [ 255.108508][T21027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.129659][T21018] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 255.139287][T21018] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.3514: corrupted inode contents [ 255.153464][T21018] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.3514: mark_inode_dirty error [ 255.165286][T21018] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 255.174862][T21018] EXT4-fs (loop5): 1 truncate cleaned up [ 255.175540][T21029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.181168][T21018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.229010][T18681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.269831][T21040] FAULT_INJECTION: forcing a failure. [ 255.269831][T21040] name failslab, interval 1, probability 0, space 0, times 0 [ 255.282556][T21040] CPU: 1 UID: 0 PID: 21040 Comm: syz.3.3521 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 255.282633][T21040] Tainted: [W]=WARN [ 255.282693][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.282708][T21040] Call Trace: [ 255.282783][T21040] [ 255.282791][T21040] __dump_stack+0x1d/0x30 [ 255.282819][T21040] dump_stack_lvl+0x95/0xd0 [ 255.282844][T21040] dump_stack+0x15/0x1b [ 255.282898][T21040] should_fail_ex+0x265/0x280 [ 255.282924][T21040] should_failslab+0x8c/0xb0 [ 255.282949][T21040] kmem_cache_alloc_noprof+0x69/0x4b0 [ 255.282974][T21040] ? skb_clone+0x151/0x1f0 [ 255.283007][T21040] skb_clone+0x151/0x1f0 [ 255.283161][T21040] __netlink_deliver_tap+0x2c9/0x500 [ 255.283258][T21040] netlink_unicast+0x66b/0x690 [ 255.283307][T21040] netlink_sendmsg+0x58b/0x6b0 [ 255.283467][T21040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.283663][T21040] __sock_sendmsg+0x145/0x180 [ 255.283692][T21040] ____sys_sendmsg+0x31e/0x4a0 [ 255.283726][T21040] ___sys_sendmsg+0x17b/0x1d0 [ 255.283769][T21040] __x64_sys_sendmsg+0xd4/0x160 [ 255.283855][T21040] x64_sys_call+0x17ba/0x3000 [ 255.283932][T21040] do_syscall_64+0xca/0x2b0 [ 255.284049][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.284075][T21040] RIP: 0033:0x7f057189f749 [ 255.284093][T21040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.284114][T21040] RSP: 002b:00007f0570307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.284167][T21040] RAX: ffffffffffffffda RBX: 00007f0571af5fa0 RCX: 00007f057189f749 [ 255.284182][T21040] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 255.284197][T21040] RBP: 00007f0570307090 R08: 0000000000000000 R09: 0000000000000000 [ 255.284211][T21040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.284284][T21040] R13: 00007f0571af6038 R14: 00007f0571af5fa0 R15: 00007ffca2ccf7f8 [ 255.284301][T21040] [ 255.527118][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 255.527208][ T29] audit: type=1400 audit(527.517:49781): avc: denied { accept } for pid=21043 comm="syz.0.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.566751][ T29] audit: type=1400 audit(527.517:49782): avc: denied { create } for pid=21043 comm="syz.0.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.585941][ T29] audit: type=1400 audit(527.517:49783): avc: denied { setopt } for pid=21043 comm="syz.0.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.605193][ T29] audit: type=1400 audit(527.517:49784): avc: denied { connect } for pid=21043 comm="syz.0.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.645418][ T29] audit: type=1400 audit(527.627:49785): avc: denied { append } for pid=21028 comm="syz.4.3518" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 255.683396][T19879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.704795][T21056] loop4: detected capacity change from 0 to 512 [ 255.711816][T21056] EXT4-fs: Ignoring removed oldalloc option [ 255.728607][T21056] EXT4-fs (loop4): 1 truncate cleaned up [ 255.734964][T21056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.780427][T21056] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.3527: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 255.799847][T21059] loop1: detected capacity change from 0 to 512 [ 255.807164][T21056] EXT4-fs (loop4): Remounting filesystem read-only [ 255.807604][T21059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.828709][T13081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.838959][T19879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.839285][T21059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.882781][ T29] audit: type=1400 audit(527.867:49786): avc: denied { name_connect } for pid=21063 comm="syz.5.3529" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 255.921356][T21068] loop3: detected capacity change from 0 to 512 [ 255.928247][T21068] ext3: Bad value for 'resgid' [ 255.933214][T21069] loop5: detected capacity change from 0 to 256 [ 255.933221][T21068] ext3: Bad value for 'resgid' [ 255.933279][ T29] audit: type=1400 audit(527.897:49787): avc: denied { setattr } for pid=21058 comm="syz.1.3528" path="/151/bus/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 255.954439][T21069] bio_check_eod: 101 callbacks suppressed [ 255.954456][T21069] syz.5.3529: attempt to access beyond end of device [ 255.954456][T21069] loop5: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 255.981593][ T29] audit: type=1400 audit(527.927:49788): avc: denied { mount } for pid=21063 comm="syz.5.3529" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 255.991806][T21069] syz.5.3529: attempt to access beyond end of device [ 255.991806][T21069] loop5: rw=2049, sector=352, nr_sectors = 36 limit=256 [ 256.081030][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.107615][ T29] audit: type=1400 audit(528.097:49789): avc: denied { lock } for pid=21078 comm="syz.1.3535" path="socket:[47104]" dev="sockfs" ino=47104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 256.152988][T21082] loop3: detected capacity change from 0 to 164 [ 256.160718][ T29] audit: type=1400 audit(528.147:49790): avc: denied { mount } for pid=21081 comm="syz.3.3536" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 256.183117][T21072] loop4: detected capacity change from 0 to 2048 [ 256.187410][T21082] FAULT_INJECTION: forcing a failure. [ 256.187410][T21082] name failslab, interval 1, probability 0, space 0, times 0 [ 256.202300][T21082] CPU: 0 UID: 0 PID: 21082 Comm: syz.3.3536 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 256.202330][T21082] Tainted: [W]=WARN [ 256.202335][T21082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.202343][T21082] Call Trace: [ 256.202348][T21082] [ 256.202353][T21082] __dump_stack+0x1d/0x30 [ 256.202371][T21082] dump_stack_lvl+0x95/0xd0 [ 256.202452][T21082] dump_stack+0x15/0x1b [ 256.202465][T21082] should_fail_ex+0x265/0x280 [ 256.202513][T21082] should_failslab+0x8c/0xb0 [ 256.202529][T21082] __kmalloc_noprof+0xb9/0x5a0 [ 256.202548][T21082] ? rock_continue+0xf4/0x2e0 [ 256.202564][T21082] rock_continue+0xf4/0x2e0 [ 256.202658][T21082] get_rock_ridge_filename+0x503/0x5b0 [ 256.202676][T21082] isofs_readdir+0x692/0xb40 [ 256.202760][T21082] iterate_dir+0x114/0x330 [ 256.202782][T21082] __se_sys_getdents64+0x88/0x1b0 [ 256.202845][T21082] ? __pfx_filldir64+0x10/0x10 [ 256.202859][T21082] __x64_sys_getdents64+0x43/0x50 [ 256.202880][T21082] x64_sys_call+0x2f27/0x3000 [ 256.202896][T21082] do_syscall_64+0xca/0x2b0 [ 256.202991][T21082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.203039][T21082] RIP: 0033:0x7f057189f749 [ 256.203057][T21082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.203078][T21082] RSP: 002b:00007f0570307038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 256.203093][T21082] RAX: ffffffffffffffda RBX: 00007f0571af5fa0 RCX: 00007f057189f749 [ 256.203102][T21082] RDX: 0000000000000ff6 RSI: 0000200000000f80 RDI: 0000000000000004 [ 256.203112][T21082] RBP: 00007f0570307090 R08: 0000000000000000 R09: 0000000000000000 [ 256.203120][T21082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.203165][T21082] R13: 00007f0571af6038 R14: 00007f0571af5fa0 R15: 00007ffca2ccf7f8 [ 256.203177][T21082] [ 256.203713][T21082] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 256.259735][T21072] Alternate GPT is invalid, using primary GPT. [ 256.408936][T21072] loop4: p1 p2 p3 [ 256.412668][T21072] loop4: partition table partially beyond EOD, truncated [ 256.446113][T21089] loop3: detected capacity change from 0 to 164 [ 256.486550][T21089] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 256.564278][T21096] loop4: detected capacity change from 0 to 512 [ 256.585253][T21096] EXT4-fs: Ignoring removed oldalloc option [ 256.596987][T21096] EXT4-fs (loop4): 1 truncate cleaned up [ 256.603319][T21096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.621632][T21104] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 256.630537][T19879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.656127][T21115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21115 comm=syz.0.3547 [ 256.895277][T21134] FAULT_INJECTION: forcing a failure. [ 256.895277][T21134] name failslab, interval 1, probability 0, space 0, times 0 [ 256.908373][T21134] CPU: 1 UID: 0 PID: 21134 Comm: syz.1.3551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 256.908454][T21134] Tainted: [W]=WARN [ 256.908463][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.908513][T21134] Call Trace: [ 256.908521][T21134] [ 256.908531][T21134] __dump_stack+0x1d/0x30 [ 256.908556][T21134] dump_stack_lvl+0x95/0xd0 [ 256.908638][T21134] dump_stack+0x15/0x1b [ 256.908677][T21134] should_fail_ex+0x265/0x280 [ 256.908704][T21134] should_failslab+0x8c/0xb0 [ 256.908731][T21134] kmem_cache_alloc_noprof+0x69/0x4b0 [ 256.908808][T21134] ? alloc_vfsmnt+0x2d/0x300 [ 256.908837][T21134] alloc_vfsmnt+0x2d/0x300 [ 256.908895][T21134] clone_mnt+0x30/0x5d0 [ 256.908929][T21134] copy_tree+0x2cd/0x8c0 [ 256.908967][T21134] copy_mnt_ns+0x136/0x6a0 [ 256.908987][T21134] ? kmem_cache_alloc_noprof+0x2c5/0x4b0 [ 256.909065][T21134] ? create_new_namespaces+0x3c/0x400 [ 256.909096][T21134] create_new_namespaces+0x83/0x400 [ 256.909124][T21134] unshare_nsproxy_namespaces+0xe8/0x120 [ 256.909162][T21134] ksys_unshare+0x3d0/0x6d0 [ 256.909184][T21134] ? ksys_write+0x192/0x1a0 [ 256.909205][T21134] __x64_sys_unshare+0x1f/0x30 [ 256.909227][T21134] x64_sys_call+0x2ae6/0x3000 [ 256.909269][T21134] do_syscall_64+0xca/0x2b0 [ 256.909316][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.909416][T21134] RIP: 0033:0x7fcc69fbf749 [ 256.909436][T21134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.909458][T21134] RSP: 002b:00007fcc689fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 256.909483][T21134] RAX: ffffffffffffffda RBX: 00007fcc6a216090 RCX: 00007fcc69fbf749 [ 256.909579][T21134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 256.909595][T21134] RBP: 00007fcc689fe090 R08: 0000000000000000 R09: 0000000000000000 [ 256.909608][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.909619][T21134] R13: 00007fcc6a216128 R14: 00007fcc6a216090 R15: 00007ffebddc5818 [ 256.909637][T21134] [ 257.256554][T21140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.264011][T21140] IPv6: NLM_F_CREATE should be set when creating new route [ 257.280839][T21142] EXT4-fs: Ignoring removed oldalloc option [ 257.298471][T21142] EXT4-fs (loop1): 1 truncate cleaned up [ 257.305817][T21142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.319066][T21145] netlink: 'syz.4.3557': attribute type 4 has an invalid length. [ 257.337826][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.339724][T21146] netlink: 'syz.4.3557': attribute type 4 has an invalid length. [ 257.393929][T21157] FAULT_INJECTION: forcing a failure. [ 257.393929][T21157] name failslab, interval 1, probability 0, space 0, times 0 [ 257.406867][T21157] CPU: 0 UID: 0 PID: 21157 Comm: syz.4.3561 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.406899][T21157] Tainted: [W]=WARN [ 257.406906][T21157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.406992][T21157] Call Trace: [ 257.407001][T21157] [ 257.407011][T21157] __dump_stack+0x1d/0x30 [ 257.407046][T21157] dump_stack_lvl+0x95/0xd0 [ 257.407072][T21157] dump_stack+0x15/0x1b [ 257.407093][T21157] should_fail_ex+0x265/0x280 [ 257.407119][T21157] should_failslab+0x8c/0xb0 [ 257.407147][T21157] kmem_cache_alloc_noprof+0x69/0x4b0 [ 257.407306][T21157] ? getname_kernel+0x3c/0x1f0 [ 257.407388][T21157] getname_kernel+0x3c/0x1f0 [ 257.407457][T21157] kern_path+0x23/0x130 [ 257.407484][T21157] autofs_dev_ioctl_ismountpoint+0x12d/0x4c0 [ 257.407525][T21157] ? __pfx_autofs_dev_ioctl_ismountpoint+0x10/0x10 [ 257.407598][T21157] autofs_dev_ioctl+0x354/0x6a0 [ 257.407624][T21157] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 257.407648][T21157] __se_sys_ioctl+0xce/0x140 [ 257.407697][T21126] Alternate GPT is invalid, using primary GPT. [ 257.407709][T21157] __x64_sys_ioctl+0x43/0x50 [ 257.407740][T21157] x64_sys_call+0x14b0/0x3000 [ 257.407764][T21157] do_syscall_64+0xca/0x2b0 [ 257.407805][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.407827][T21157] RIP: 0033:0x7f240ddaf749 [ 257.407845][T21157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.407864][T21157] RSP: 002b:00007f240c817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.407938][T21157] RAX: ffffffffffffffda RBX: 00007f240e005fa0 RCX: 00007f240ddaf749 [ 257.407952][T21157] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000006 [ 257.407966][T21157] RBP: 00007f240c817090 R08: 0000000000000000 R09: 0000000000000000 [ 257.407979][T21157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.407992][T21157] R13: 00007f240e006038 R14: 00007f240e005fa0 R15: 00007ffeda5a3808 [ 257.408110][T21157] [ 257.611729][T21126] loop3: p1 p2 p3 [ 257.615442][T21126] loop3: partition table partially beyond EOD, truncated [ 257.679911][ T3500] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 257.688695][ T3500] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.741622][T21169] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.757594][T21174] EXT4-fs: Ignoring removed oldalloc option [ 257.808260][T21176] FAULT_INJECTION: forcing a failure. [ 257.808260][T21176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.820544][T21169] FAULT_INJECTION: forcing a failure. [ 257.820544][T21169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.821665][T21176] CPU: 1 UID: 0 PID: 21176 Comm: syz.1.3569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.821700][T21176] Tainted: [W]=WARN [ 257.821707][T21176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.821720][T21176] Call Trace: [ 257.821728][T21176] [ 257.821737][T21176] __dump_stack+0x1d/0x30 [ 257.821763][T21176] dump_stack_lvl+0x95/0xd0 [ 257.821819][T21176] dump_stack+0x15/0x1b [ 257.821904][T21176] should_fail_ex+0x265/0x280 [ 257.821942][T21176] should_fail+0xb/0x20 [ 257.821962][T21176] should_fail_usercopy+0x1a/0x20 [ 257.822064][T21176] _copy_to_iter+0xd2/0xe70 [ 257.822090][T21176] ? chacha_block_generic+0x218/0x240 [ 257.822120][T21176] get_random_bytes_user+0x12d/0x290 [ 257.822228][T21176] ? import_ubuf+0xe8/0x120 [ 257.822256][T21176] __x64_sys_getrandom+0xcf/0x1a0 [ 257.822357][T21176] x64_sys_call+0x1beb/0x3000 [ 257.822381][T21176] do_syscall_64+0xca/0x2b0 [ 257.822505][T21176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.822527][T21176] RIP: 0033:0x7fcc69fbf749 [ 257.822544][T21176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.822621][T21176] RSP: 002b:00007fcc68a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 257.822642][T21176] RAX: ffffffffffffffda RBX: 00007fcc6a215fa0 RCX: 00007fcc69fbf749 [ 257.822657][T21176] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 257.822670][T21176] RBP: 00007fcc68a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.822683][T21176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.822696][T21176] R13: 00007fcc6a216038 R14: 00007fcc6a215fa0 R15: 00007ffebddc5818 [ 257.822715][T21176] [ 257.865136][T21174] EXT4-fs (loop4): 1 truncate cleaned up [ 257.866923][T21169] CPU: 0 UID: 0 PID: 21169 Comm: syz.0.3567 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.866960][T21169] Tainted: [W]=WARN [ 257.866967][T21169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.867047][T21169] Call Trace: [ 257.867056][T21169] [ 257.867112][T21169] __dump_stack+0x1d/0x30 [ 257.867138][T21169] dump_stack_lvl+0x95/0xd0 [ 257.867160][T21169] dump_stack+0x15/0x1b [ 257.867225][T21169] should_fail_ex+0x265/0x280 [ 257.867265][T21169] should_fail+0xb/0x20 [ 257.867285][T21169] should_fail_usercopy+0x1a/0x20 [ 257.867310][T21169] strncpy_from_user+0x27/0x260 [ 257.867441][T21169] getname_flags+0xae/0x3b0 [ 257.867467][T21169] do_sys_openat2+0x60/0x150 [ 257.867497][T21169] __x64_sys_openat+0xf2/0x120 [ 257.867564][T21169] x64_sys_call+0x2b07/0x3000 [ 257.867657][T21169] do_syscall_64+0xca/0x2b0 [ 257.867690][T21169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.867715][T21169] RIP: 0033:0x7f5063c9f749 [ 257.867732][T21169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.867751][T21169] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.867772][T21169] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 257.867786][T21169] RDX: 0000000000101842 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 257.867816][T21169] RBP: 00007f5062707090 R08: 0000000000000000 R09: 0000000000000000 [ 257.867830][T21169] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 257.867843][T21169] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 257.867862][T21169] [ 257.928182][T21180] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 257.929227][T21174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.233475][T19879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.252398][T20057] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.262626][T21189] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.319531][T21199] FAULT_INJECTION: forcing a failure. [ 258.319531][T21199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.332892][T21199] CPU: 0 UID: 0 PID: 21199 Comm: syz.0.3573 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 258.332974][T21199] Tainted: [W]=WARN [ 258.332981][T21199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.332995][T21199] Call Trace: [ 258.333002][T21199] [ 258.333061][T21199] __dump_stack+0x1d/0x30 [ 258.333085][T21199] dump_stack_lvl+0x95/0xd0 [ 258.333110][T21199] dump_stack+0x15/0x1b [ 258.333132][T21199] should_fail_ex+0x265/0x280 [ 258.333213][T21199] should_fail+0xb/0x20 [ 258.333231][T21199] should_fail_usercopy+0x1a/0x20 [ 258.333253][T21199] _copy_from_user+0x1c/0xb0 [ 258.333288][T21199] __copy_msghdr+0x244/0x300 [ 258.333324][T21199] ___sys_sendmsg+0x109/0x1d0 [ 258.333368][T21199] __x64_sys_sendmsg+0xd4/0x160 [ 258.333404][T21199] x64_sys_call+0x17ba/0x3000 [ 258.333481][T21199] do_syscall_64+0xca/0x2b0 [ 258.333628][T21199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.333725][T21199] RIP: 0033:0x7f5063c9f749 [ 258.333743][T21199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.333764][T21199] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.333788][T21199] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 258.333803][T21199] RDX: 00000000000080c1 RSI: 0000200000000200 RDI: 0000000000000003 [ 258.333860][T21199] RBP: 00007f5062707090 R08: 0000000000000000 R09: 0000000000000000 [ 258.333874][T21199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.333887][T21199] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 258.333913][T21199] [ 258.536196][T21189] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 258.545446][T21192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.577425][T21192] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 258.592375][T21192] pim6reg1: entered promiscuous mode [ 258.597977][T21192] pim6reg1: entered allmulticast mode [ 258.639051][T21216] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 258.648238][T21216] EXT4-fs (loop0): invalid journal inode [ 258.654029][T21216] EXT4-fs (loop0): can't get journal size [ 258.697610][T19879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.739711][T13081] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.777171][T21221] EXT4-fs: Ignoring removed oldalloc option [ 258.784975][T21216] EXT4-fs (loop0): 1 truncate cleaned up [ 258.791529][T21221] EXT4-fs (loop5): 1 truncate cleaned up [ 258.803807][T21216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.817000][T21221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.831441][T21221] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.3582: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 258.851826][T21221] EXT4-fs (loop5): Remounting filesystem read-only [ 258.887597][T13081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.901203][ T3500] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 258.909222][ T3500] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.920831][T21209] Alternate GPT is invalid, using primary GPT. [ 258.927464][T21209] loop1: p1 p2 p3 [ 258.931257][T21209] loop1: partition table partially beyond EOD, truncated [ 258.973341][T21235] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 258.977449][T20057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.032635][T21237] __nla_validate_parse: 26 callbacks suppressed [ 259.032657][T21237] netlink: 32 bytes leftover after parsing attributes in process `;‡Õc¹Ø¡VFñc÷î'. [ 259.053336][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3586'. [ 259.150577][T21251] FAULT_INJECTION: forcing a failure. [ 259.150577][T21251] name failslab, interval 1, probability 0, space 0, times 0 [ 259.163373][T21251] CPU: 1 UID: 0 PID: 21251 Comm: syz.4.3584 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 259.163410][T21251] Tainted: [W]=WARN [ 259.163418][T21251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.163432][T21251] Call Trace: [ 259.163503][T21251] [ 259.163574][T21251] __dump_stack+0x1d/0x30 [ 259.163601][T21251] dump_stack_lvl+0x95/0xd0 [ 259.163624][T21251] dump_stack+0x15/0x1b [ 259.163644][T21251] should_fail_ex+0x265/0x280 [ 259.163697][T21251] should_failslab+0x8c/0xb0 [ 259.163720][T21251] kmem_cache_alloc_noprof+0x69/0x4b0 [ 259.163744][T21251] ? skb_clone+0x151/0x1f0 [ 259.163784][T21251] skb_clone+0x151/0x1f0 [ 259.163868][T21251] __netlink_deliver_tap+0x2c9/0x500 [ 259.163903][T21251] netlink_unicast+0x66b/0x690 [ 259.163972][T21251] netlink_sendmsg+0x58b/0x6b0 [ 259.164004][T21251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.164036][T21251] __sock_sendmsg+0x145/0x180 [ 259.164125][T21251] ____sys_sendmsg+0x31e/0x4a0 [ 259.164155][T21251] ___sys_sendmsg+0x17b/0x1d0 [ 259.164194][T21251] __x64_sys_sendmsg+0xd4/0x160 [ 259.164342][T21251] x64_sys_call+0x17ba/0x3000 [ 259.164368][T21251] do_syscall_64+0xca/0x2b0 [ 259.164433][T21251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.164501][T21251] RIP: 0033:0x7f240ddaf749 [ 259.164561][T21251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.164581][T21251] RSP: 002b:00007f240c7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.164602][T21251] RAX: ffffffffffffffda RBX: 00007f240e006090 RCX: 00007f240ddaf749 [ 259.164616][T21251] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 259.164644][T21251] RBP: 00007f240c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.164657][T21251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.164670][T21251] R13: 00007f240e006128 R14: 00007f240e006090 R15: 00007ffeda5a3808 [ 259.164690][T21251] [ 259.481448][T21262] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 259.534698][T21269] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 259.546176][T21269] EXT4-fs (loop5): invalid journal inode [ 259.552105][T21269] EXT4-fs (loop5): can't get journal size [ 259.558791][T21267] EXT4-fs: Ignoring removed oldalloc option [ 259.564589][T21262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.571783][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 259.577045][T21269] EXT4-fs (loop5): 1 truncate cleaned up [ 259.601361][T21269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.604754][T21267] EXT4-fs (loop0): 1 truncate cleaned up [ 259.622539][T21267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.641941][T21267] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.3596: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 259.662337][T21267] EXT4-fs (loop0): Remounting filesystem read-only [ 259.684266][T13081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.687934][T21278] xt_CT: No such helper "netbios-ns" [ 259.709883][T21283] FAULT_INJECTION: forcing a failure. [ 259.709883][T21283] name failslab, interval 1, probability 0, space 0, times 0 [ 259.722668][T21283] CPU: 0 UID: 0 PID: 21283 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 259.722702][T21283] Tainted: [W]=WARN [ 259.722710][T21283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.722736][T21283] Call Trace: [ 259.722744][T21283] [ 259.722754][T21283] __dump_stack+0x1d/0x30 [ 259.722786][T21283] dump_stack_lvl+0x95/0xd0 [ 259.722813][T21283] dump_stack+0x15/0x1b [ 259.722881][T21283] should_fail_ex+0x265/0x280 [ 259.722905][T21283] should_failslab+0x8c/0xb0 [ 259.722964][T21283] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 259.722993][T21283] ? __alloc_skb+0x2ff/0x4b0 [ 259.723019][T21283] __alloc_skb+0x2ff/0x4b0 [ 259.723039][T21283] ? __alloc_skb+0x228/0x4b0 [ 259.723134][T21283] netlink_alloc_large_skb+0xbf/0xf0 [ 259.723167][T21283] netlink_sendmsg+0x3cf/0x6b0 [ 259.723212][T21283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.723437][T21283] __sock_sendmsg+0x145/0x180 [ 259.723457][T21283] ____sys_sendmsg+0x31e/0x4a0 [ 259.723488][T21283] ___sys_sendmsg+0x17b/0x1d0 [ 259.723534][T21283] __x64_sys_sendmsg+0xd4/0x160 [ 259.723651][T21283] x64_sys_call+0x17ba/0x3000 [ 259.723716][T21283] do_syscall_64+0xca/0x2b0 [ 259.723830][T21283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.723855][T21283] RIP: 0033:0x7f48202cf749 [ 259.723873][T21283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.723895][T21283] RSP: 002b:00007f481ed2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.723920][T21283] RAX: ffffffffffffffda RBX: 00007f4820525fa0 RCX: 00007f48202cf749 [ 259.723935][T21283] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 259.723968][T21283] RBP: 00007f481ed2f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.723984][T21283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.723999][T21283] R13: 00007f4820526038 R14: 00007f4820525fa0 R15: 00007ffd63963d28 [ 259.724020][T21283] [ 259.772278][T20057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.946069][T21292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21292 comm=syz.0.3603 [ 259.987525][T21284] Alternate GPT is invalid, using primary GPT. [ 259.993906][T21284] loop4: p1 p2 p3 [ 259.997687][T21284] loop4: partition table partially beyond EOD, truncated [ 260.081670][T21297] set_capacity_and_notify: 13 callbacks suppressed [ 260.081690][T21297] loop5: detected capacity change from 0 to 512 [ 260.095396][T21297] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 260.106364][T21297] EXT4-fs (loop5): invalid journal inode [ 260.113830][T21297] EXT4-fs (loop5): can't get journal size [ 260.238344][T21297] EXT4-fs (loop5): 1 truncate cleaned up [ 260.250558][T21297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.360978][T13081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.537124][T21309] rtc_cmos 00:00: Alarms can be up to one day in the future [ 260.552569][T21308] loop1: detected capacity change from 0 to 512 [ 260.570819][T21308] EXT4-fs: Ignoring removed oldalloc option [ 260.581842][T21308] EXT4-fs (loop1): 1 truncate cleaned up [ 260.591603][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 260.591622][ T29] audit: type=1400 audit(532.577:49890): avc: denied { attach_queue } for pid=21316 comm="syz.3.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 260.605946][T21308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.644199][T21308] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.3613: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 260.663780][T21308] EXT4-fs (loop1): Remounting filesystem read-only [ 260.682630][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.768092][T21342] loop1: detected capacity change from 0 to 512 [ 260.776889][ T29] audit: type=1326 audit(532.767:49891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21327 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 260.810230][ T29] audit: type=1326 audit(532.767:49892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21327 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 260.833580][ T29] audit: type=1326 audit(532.767:49893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21327 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 260.856728][ T29] audit: type=1326 audit(532.767:49894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21327 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 260.879853][ T29] audit: type=1326 audit(532.767:49895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21327 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 260.904362][T21342] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 260.916219][ T29] audit: type=1326 audit(532.837:49896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21327 comm="syz.4.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 260.920885][T21342] EXT4-fs (loop1): invalid journal inode [ 260.962837][T21342] EXT4-fs (loop1): can't get journal size [ 260.969538][T21342] EXT4-fs (loop1): 1 truncate cleaned up [ 260.985775][T21342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.018449][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.096456][ T29] audit: type=1326 audit(533.077:49897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21353 comm="syz.1.3627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc69fbf749 code=0x0 [ 261.169575][T21361] loop4: detected capacity change from 0 to 512 [ 261.176299][T21361] EXT4-fs: Ignoring removed oldalloc option [ 261.185840][T21361] EXT4-fs (loop4): 1 truncate cleaned up [ 261.192089][T21361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.206082][T21361] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.3630: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 261.225490][T21361] EXT4-fs (loop4): Remounting filesystem read-only [ 261.247730][ T3424] rtc_cmos 00:00: Alarms can be up to one day in the future [ 261.255509][ T3424] rtc_cmos 00:00: Alarms can be up to one day in the future [ 261.263204][ T3424] rtc_cmos 00:00: Alarms can be up to one day in the future [ 261.271084][ T3424] rtc_cmos 00:00: Alarms can be up to one day in the future [ 261.278509][ T3424] rtc rtc0: __rtc_set_alarm: err=-22 [ 261.542608][T19879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.843422][T21374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21374 comm=syz.5.3635 [ 262.142817][T21392] loop1: detected capacity change from 0 to 512 [ 262.259755][T21392] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 262.330849][T21392] EXT4-fs (loop1): invalid journal inode [ 262.373691][T21392] EXT4-fs (loop1): can't get journal size [ 262.433980][ T29] audit: type=1326 audit(534.417:49898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21402 comm="syz.3.3642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f057189f749 code=0x0 [ 262.486170][T21405] FAULT_INJECTION: forcing a failure. [ 262.486170][T21405] name failslab, interval 1, probability 0, space 0, times 0 [ 262.486443][ T29] audit: type=1400 audit(534.467:49899): avc: denied { mount } for pid=21402 comm="syz.3.3642" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 262.499008][T21405] CPU: 1 UID: 0 PID: 21405 Comm: syz.3.3642 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 262.499091][T21405] Tainted: [W]=WARN [ 262.499098][T21405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.499112][T21405] Call Trace: [ 262.499119][T21405] [ 262.499128][T21405] __dump_stack+0x1d/0x30 [ 262.499154][T21405] dump_stack_lvl+0x95/0xd0 [ 262.499176][T21405] dump_stack+0x15/0x1b [ 262.499213][T21405] should_fail_ex+0x265/0x280 [ 262.499237][T21405] should_failslab+0x8c/0xb0 [ 262.499260][T21405] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 262.499284][T21405] ? __alloc_skb+0x2ff/0x4b0 [ 262.499309][T21405] __alloc_skb+0x2ff/0x4b0 [ 262.499390][T21405] ? __alloc_skb+0x228/0x4b0 [ 262.499456][T21405] netlink_alloc_large_skb+0xbf/0xf0 [ 262.499491][T21405] netlink_sendmsg+0x3cf/0x6b0 [ 262.499523][T21405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.499562][T21405] __sock_sendmsg+0x145/0x180 [ 262.499583][T21405] ____sys_sendmsg+0x31e/0x4a0 [ 262.499635][T21405] ___sys_sendmsg+0x17b/0x1d0 [ 262.499671][T21405] __x64_sys_sendmsg+0xd4/0x160 [ 262.499702][T21405] x64_sys_call+0x17ba/0x3000 [ 262.499749][T21405] do_syscall_64+0xca/0x2b0 [ 262.499782][T21405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.499804][T21405] RIP: 0033:0x7f057189f749 [ 262.499820][T21405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.499839][T21405] RSP: 002b:00007f05702e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.499877][T21405] RAX: ffffffffffffffda RBX: 00007f0571af6090 RCX: 00007f057189f749 [ 262.499891][T21405] RDX: 0000000024048840 RSI: 00002000000002c0 RDI: 0000000000000005 [ 262.499935][T21405] RBP: 00007f05702e6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.499949][T21405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.499962][T21405] R13: 00007f0571af6128 R14: 00007f0571af6090 R15: 00007ffca2ccf7f8 [ 262.500024][T21405] [ 262.509631][T21392] EXT4-fs (loop1): 1 truncate cleaned up [ 262.561339][T21408] serio: Serial port ptm0 [ 262.561975][T21392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.645093][T21403] loop4: detected capacity change from 0 to 2048 [ 262.727217][T21408] FAULT_INJECTION: forcing a failure. [ 262.727217][T21408] name failslab, interval 1, probability 0, space 0, times 0 [ 262.761759][T21408] CPU: 1 UID: 0 PID: 21408 Comm: syz.0.3643 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 262.761798][T21408] Tainted: [W]=WARN [ 262.761807][T21408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.761824][T21408] Call Trace: [ 262.761832][T21408] [ 262.761841][T21408] __dump_stack+0x1d/0x30 [ 262.761879][T21408] dump_stack_lvl+0x95/0xd0 [ 262.761902][T21408] dump_stack+0x15/0x1b [ 262.761922][T21408] should_fail_ex+0x265/0x280 [ 262.761945][T21408] should_failslab+0x8c/0xb0 [ 262.761986][T21408] __kmalloc_noprof+0xb9/0x5a0 [ 262.762009][T21408] ? kobject_get_path+0x92/0x1c0 [ 262.762032][T21408] kobject_get_path+0x92/0x1c0 [ 262.762054][T21408] kobject_uevent_env+0x1da/0x570 [ 262.762153][T21408] kobject_uevent+0x1d/0x30 [ 262.762177][T21408] device_del+0x710/0x790 [ 262.762279][T21408] ? serio_destroy_port+0x267/0x340 [ 262.762312][T21408] serio_destroy_port+0x293/0x340 [ 262.762418][T21408] ? device_release_driver_internal+0x4b9/0x4e0 [ 262.762448][T21408] serio_unregister_port+0xe1/0x130 [ 262.762495][T21408] serport_ldisc_read+0x2cd/0x300 [ 262.762579][T21408] ? __pfx_autoremove_wake_function+0x10/0x10 [ 262.762610][T21408] tty_read+0x154/0x4a0 [ 262.762636][T21408] ? rw_verify_area+0x8d/0x160 [ 262.762702][T21408] aio_read+0x1dd/0x2e0 [ 262.762735][T21408] io_submit_one+0xb00/0x1210 [ 262.762768][T21408] __se_sys_io_submit+0xfb/0x280 [ 262.762795][T21408] __x64_sys_io_submit+0x43/0x50 [ 262.762921][T21408] x64_sys_call+0x2e40/0x3000 [ 262.762946][T21408] do_syscall_64+0xca/0x2b0 [ 262.762979][T21408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.763022][T21408] RIP: 0033:0x7f5063c9f749 [ 262.763038][T21408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.763058][T21408] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 262.763137][T21408] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 262.763183][T21408] RDX: 0000200000000b40 RSI: 0000000000000001 RDI: 00007f5064a34000 [ 262.763197][T21408] RBP: 00007f5062707090 R08: 0000000000000000 R09: 0000000000000000 [ 262.763225][T21408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.763238][T21408] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 262.763277][T21408] [ 262.774297][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.787551][T21403] Alternate GPT is invalid, using primary GPT. [ 263.012004][T21403] loop4: p1 p2 p3 [ 263.015714][T21403] loop4: partition table partially beyond EOD, truncated [ 263.154823][T21423] loop1: detected capacity change from 0 to 512 [ 263.160981][T21419] FAULT_INJECTION: forcing a failure. [ 263.160981][T21419] name failslab, interval 1, probability 0, space 0, times 0 [ 263.173864][T21419] CPU: 1 UID: 0 PID: 21419 Comm: syz.0.3648 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 263.173964][T21419] Tainted: [W]=WARN [ 263.173971][T21419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.174007][T21419] Call Trace: [ 263.174016][T21419] [ 263.174026][T21419] __dump_stack+0x1d/0x30 [ 263.174098][T21419] dump_stack_lvl+0x95/0xd0 [ 263.174118][T21419] dump_stack+0x15/0x1b [ 263.174140][T21419] should_fail_ex+0x265/0x280 [ 263.174167][T21419] should_failslab+0x8c/0xb0 [ 263.174189][T21419] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 263.174231][T21419] ? __get_vm_area_node+0x106/0x1d0 [ 263.174263][T21419] ? xas_load+0x413/0x430 [ 263.174301][T21419] __get_vm_area_node+0x106/0x1d0 [ 263.174323][T21419] __vmalloc_node_range_noprof+0x28e/0x1310 [ 263.174348][T21419] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 263.174450][T21419] ? perf_tp_event+0x9b3/0x9f0 [ 263.174517][T21419] ? xas_load+0x413/0x430 [ 263.174554][T21419] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 263.174578][T21419] __vmalloc_noprof+0xa4/0xf0 [ 263.174649][T21419] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 263.174672][T21419] bpf_prog_alloc_no_stats+0x47/0x390 [ 263.174692][T21419] ? bpf_prog_alloc+0x2a/0x150 [ 263.174709][T21419] bpf_prog_alloc+0x3c/0x150 [ 263.174728][T21419] bpf_prog_create+0x73/0x130 [ 263.174763][T21419] bpf_mt_check+0x8d/0x110 [ 263.174788][T21419] xt_check_match+0x2ad/0x4f0 [ 263.174815][T21419] ? mutex_unlock+0x4f/0x90 [ 263.174919][T21419] ? xt_find_match+0x1d1/0x210 [ 263.174998][T21419] ? xt_find_match+0x1b5/0x210 [ 263.175025][T21419] translate_table+0xb4b/0x1070 [ 263.175058][T21419] ? _copy_from_user+0x89/0xb0 [ 263.175085][T21419] do_ip6t_set_ctl+0x678/0x840 [ 263.175110][T21419] nf_setsockopt+0x199/0x1b0 [ 263.175146][T21419] ipv6_setsockopt+0x11a/0x130 [ 263.175307][T21419] udpv6_setsockopt+0x99/0xb0 [ 263.175422][T21419] sock_common_setsockopt+0x69/0x80 [ 263.175521][T21419] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 263.175541][T21419] __sys_setsockopt+0x184/0x200 [ 263.175690][T21419] __x64_sys_setsockopt+0x64/0x80 [ 263.175719][T21419] x64_sys_call+0x21d5/0x3000 [ 263.175748][T21419] do_syscall_64+0xca/0x2b0 [ 263.175786][T21419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.175875][T21419] RIP: 0033:0x7f5063c9f749 [ 263.175893][T21419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.175957][T21419] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.175977][T21419] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 263.175989][T21419] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 263.176003][T21419] RBP: 00007f5062707090 R08: 0000000000000590 R09: 0000000000000000 [ 263.176033][T21419] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.176045][T21419] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 263.176064][T21419] [ 263.176074][T21419] syz.0.3648: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 263.211557][T21423] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.212454][T21419] ,cpuset= [ 263.473177][T21417] loop4: detected capacity change from 0 to 2048 [ 263.486291][T21419] /,mems_allowed=0 [ 263.486438][T21419] CPU: 1 UID: 0 PID: 21419 Comm: syz.0.3648 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 263.486469][T21419] Tainted: [W]=WARN [ 263.486476][T21419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.486489][T21419] Call Trace: [ 263.486497][T21419] [ 263.486515][T21419] __dump_stack+0x1d/0x30 [ 263.486542][T21419] dump_stack_lvl+0x95/0xd0 [ 263.486565][T21419] dump_stack+0x15/0x1b [ 263.486585][T21419] warn_alloc+0x12b/0x1a0 [ 263.486692][T21419] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 263.486718][T21419] ? perf_tp_event+0x9b3/0x9f0 [ 263.486745][T21419] ? xas_load+0x413/0x430 [ 263.486776][T21419] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 263.486819][T21419] __vmalloc_noprof+0xa4/0xf0 [ 263.486843][T21419] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 263.486863][T21419] bpf_prog_alloc_no_stats+0x47/0x390 [ 263.486958][T21419] ? bpf_prog_alloc+0x2a/0x150 [ 263.486978][T21419] bpf_prog_alloc+0x3c/0x150 [ 263.486997][T21419] bpf_prog_create+0x73/0x130 [ 263.487043][T21419] bpf_mt_check+0x8d/0x110 [ 263.487068][T21419] xt_check_match+0x2ad/0x4f0 [ 263.487096][T21419] ? mutex_unlock+0x4f/0x90 [ 263.487122][T21419] ? xt_find_match+0x1d1/0x210 [ 263.487174][T21419] ? xt_find_match+0x1b5/0x210 [ 263.487255][T21419] translate_table+0xb4b/0x1070 [ 263.487284][T21419] ? _copy_from_user+0x89/0xb0 [ 263.487332][T21419] do_ip6t_set_ctl+0x678/0x840 [ 263.487360][T21419] nf_setsockopt+0x199/0x1b0 [ 263.487383][T21419] ipv6_setsockopt+0x11a/0x130 [ 263.487417][T21419] udpv6_setsockopt+0x99/0xb0 [ 263.487486][T21419] sock_common_setsockopt+0x69/0x80 [ 263.487523][T21419] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 263.487545][T21419] __sys_setsockopt+0x184/0x200 [ 263.487572][T21419] __x64_sys_setsockopt+0x64/0x80 [ 263.487598][T21419] x64_sys_call+0x21d5/0x3000 [ 263.487644][T21419] do_syscall_64+0xca/0x2b0 [ 263.487688][T21419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.487710][T21419] RIP: 0033:0x7f5063c9f749 [ 263.487727][T21419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.487747][T21419] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.487767][T21419] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 263.487798][T21419] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 263.487812][T21419] RBP: 00007f5062707090 R08: 0000000000000590 R09: 0000000000000000 [ 263.487825][T21419] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.487838][T21419] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 263.487856][T21419] [ 263.487863][T21419] Mem-Info: [ 263.775644][T21419] active_anon:8552 inactive_anon:1 isolated_anon:0 [ 263.775644][T21419] active_file:21216 inactive_file:2535 isolated_file:0 [ 263.775644][T21419] unevictable:0 dirty:78 writeback:0 [ 263.775644][T21419] slab_reclaimable:3642 slab_unreclaimable:16896 [ 263.775644][T21419] mapped:33927 shmem:3462 pagetables:1032 [ 263.775644][T21419] sec_pagetables:0 bounce:0 [ 263.775644][T21419] kernel_misc_reclaimable:0 [ 263.775644][T21419] free:1883451 free_pcp:5544 free_cma:0 [ 263.777296][T21423] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 263.820905][T21419] Node 0 active_anon:34208kB inactive_anon:4kB active_file:84864kB inactive_file:10140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135708kB dirty:312kB writeback:0kB shmem:13848kB kernel_stack:3808kB pagetables:4128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 263.862974][T21419] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.892677][T21419] lowmem_reserve[]: 0 2880 7859 7859 [ 263.898214][T21419] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 263.907973][T21423] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3644: bg 0: block 248: padding at end of block bitmap is not set [ 263.929784][T21419] lowmem_reserve[]: 0 0 4978 4978 [ 263.945111][T21423] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3644: Failed to acquire dquot type 1 [ 263.949283][T21419] Node 0 Normal free:4571864kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35368kB inactive_anon:4kB active_file:84864kB inactive_file:10140kB unevictable:0kB writepending:312kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:18116kB local_pcp:13964kB free_cma:0kB [ 263.993928][T21419] lowmem_reserve[]: 0 0 0 0 [ 263.998604][T21419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.011378][T21419] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 264.027476][T21419] Node 0 Normal: 1914*4kB (UE) 2180*8kB (UME) 2620*16kB (UME) 2140*32kB (UME) 1532*64kB (UME) 917*128kB (UM) 537*256kB (UM) 339*512kB (UM) 160*1024kB (UM) 101*2048kB (UM) 864*4096kB (UME) = 4571592kB [ 264.036741][T21423] EXT4-fs (loop1): 1 truncate cleaned up [ 264.047617][T21419] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 264.047642][T21419] 27213 total pagecache pages [ 264.064166][T21423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 264.067320][T21419] 2 pages in swap cache [ 264.067330][T21419] Free swap = 124988kB [ 264.067339][T21419] Total swap = 124996kB [ 264.067396][T21419] 2097051 pages RAM [ 264.067406][T21419] 0 pages HighMem/MovableOnly [ 264.067413][T21419] 81272 pages reserved [ 264.067422][T21419] xt_bpf: check failed: parse error [ 264.292098][T21448] loop0: detected capacity change from 0 to 512 [ 264.300238][T21448] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 264.304048][T21451] loop3: detected capacity change from 0 to 512 [ 264.317217][T21448] EXT4-fs (loop0): invalid journal inode [ 264.335347][T21451] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 264.343511][T21448] EXT4-fs (loop0): can't get journal size [ 264.349878][T21451] EXT4-fs (loop3): orphan cleanup on readonly fs [ 264.358436][T21448] EXT4-fs (loop0): 1 truncate cleaned up [ 264.364447][T21448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.378056][T21451] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 264.396616][T21451] EXT4-fs (loop3): Remounting filesystem read-only [ 264.406144][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 264.418003][T21451] EXT4-fs (loop3): 1 truncate cleaned up [ 264.423942][T20369] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 264.434652][T20369] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 264.548782][T20369] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 264.559882][T21451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.567239][T20057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.821061][T21451] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 264.919924][T21459] Alternate GPT is invalid, using primary GPT. [ 264.926283][T21459] loop5: p1 p2 p3 [ 264.930069][T21459] loop5: partition table partially beyond EOD, truncated [ 265.350103][T21484] set_capacity_and_notify: 1 callbacks suppressed [ 265.350122][T21484] loop1: detected capacity change from 0 to 512 [ 265.399337][T21484] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 265.408453][T21484] EXT4-fs (loop1): invalid journal inode [ 265.426004][T21478] loop0: detected capacity change from 0 to 2048 [ 265.436400][T21484] EXT4-fs (loop1): can't get journal size [ 265.449218][T21484] EXT4-fs (loop1): 1 truncate cleaned up [ 265.465740][T21484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.488360][T21478] Alternate GPT is invalid, using primary GPT. [ 265.494742][T21478] loop0: p1 p2 p3 [ 265.498552][T21478] loop0: partition table partially beyond EOD, truncated [ 265.548454][T21484] syzkaller0: entered allmulticast mode [ 265.556098][T21484] syzkaller0 (unregistering): left allmulticast mode [ 265.607983][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 265.608002][ T29] audit: type=1326 audit(537.597:49966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 265.638486][T18681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.668516][ T29] audit: type=1326 audit(537.637:49967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 265.691872][ T29] audit: type=1326 audit(537.637:49968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 265.715272][ T29] audit: type=1326 audit(537.637:49969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 265.738462][ T29] audit: type=1326 audit(537.637:49970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 265.761876][ T29] audit: type=1326 audit(537.637:49971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f240ddadf90 code=0x7ffc0000 [ 265.761906][ T29] audit: type=1326 audit(537.637:49972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f240ddb0f77 code=0x7ffc0000 [ 265.761967][ T29] audit: type=1326 audit(537.637:49973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f240ddaf749 code=0x7ffc0000 [ 265.761991][ T29] audit: type=1326 audit(537.637:49974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f240ddb0f77 code=0x7ffc0000 [ 265.787918][T18415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.808568][ T29] audit: type=1326 audit(537.637:49975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.4.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f240ddae3aa code=0x7ffc0000 [ 265.867584][T21508] FAULT_INJECTION: forcing a failure. [ 265.867584][T21508] name failslab, interval 1, probability 0, space 0, times 0 [ 265.899591][T21508] CPU: 1 UID: 0 PID: 21508 Comm: syz.0.3675 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 265.899628][T21508] Tainted: [W]=WARN [ 265.899637][T21508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.899649][T21508] Call Trace: [ 265.899657][T21508] [ 265.899666][T21508] __dump_stack+0x1d/0x30 [ 265.899776][T21508] dump_stack_lvl+0x95/0xd0 [ 265.899799][T21508] dump_stack+0x15/0x1b [ 265.899824][T21508] should_fail_ex+0x265/0x280 [ 265.899858][T21508] should_failslab+0x8c/0xb0 [ 265.899889][T21508] kmem_cache_alloc_noprof+0x69/0x4b0 [ 265.899942][T21508] ? skb_clone+0x151/0x1f0 [ 265.900008][T21508] skb_clone+0x151/0x1f0 [ 265.900099][T21508] __netlink_deliver_tap+0x2c9/0x500 [ 265.900140][T21508] netlink_unicast+0x66b/0x690 [ 265.900234][T21508] netlink_sendmsg+0x58b/0x6b0 [ 265.900265][T21508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.900320][T21508] __sock_sendmsg+0x145/0x180 [ 265.900339][T21508] ____sys_sendmsg+0x31e/0x4a0 [ 265.900374][T21508] ___sys_sendmsg+0x17b/0x1d0 [ 265.900419][T21508] __x64_sys_sendmsg+0xd4/0x160 [ 265.900502][T21508] x64_sys_call+0x17ba/0x3000 [ 265.900532][T21508] do_syscall_64+0xca/0x2b0 [ 265.900596][T21508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.900622][T21508] RIP: 0033:0x7f5063c9f749 [ 265.900641][T21508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.900664][T21508] RSP: 002b:00007f5062707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.900745][T21508] RAX: ffffffffffffffda RBX: 00007f5063ef5fa0 RCX: 00007f5063c9f749 [ 265.900761][T21508] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 0000000000000006 [ 265.900775][T21508] RBP: 00007f5062707090 R08: 0000000000000000 R09: 0000000000000000 [ 265.900788][T21508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.900808][T21508] R13: 00007f5063ef6038 R14: 00007f5063ef5fa0 R15: 00007ffd87e61228 [ 265.900828][T21508] [ 266.118627][T21511] loop4: detected capacity change from 0 to 512 [ 266.125090][T21511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.158795][T21511] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.3676: path /103/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 266.198470][T21531] netlink: 24 bytes leftover after parsing attributes in process `ÿ'. [ 266.208820][T21527] loop0: detected capacity change from 0 to 512 [ 266.218708][T21527] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 266.266946][T21531] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 266.300481][T21539] loop0: detected capacity change from 0 to 512 [ 266.310703][T21539] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 266.321685][T21539] EXT4-fs (loop0): invalid journal inode [ 266.343482][T21539] EXT4-fs (loop0): can't get journal size [ 266.351495][T21539] EXT4-fs (loop0): 1 truncate cleaned up [ 266.392626][T21555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3690'. [ 266.422373][T21561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21561 comm=syz.1.3693 [ 266.688213][T21543] loop3: detected capacity change from 0 to 2048 [ 266.723655][T21576] FAULT_INJECTION: forcing a failure. [ 266.723655][T21576] name failslab, interval 1, probability 0, space 0, times 0 [ 266.736708][T21576] CPU: 0 UID: 0 PID: 21576 Comm: syz.4.3696 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.736742][T21576] Tainted: [W]=WARN [ 266.736751][T21576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.736763][T21576] Call Trace: [ 266.736769][T21576] [ 266.736778][T21576] __dump_stack+0x1d/0x30 [ 266.736804][T21576] dump_stack_lvl+0x95/0xd0 [ 266.736920][T21576] dump_stack+0x15/0x1b [ 266.736940][T21576] should_fail_ex+0x265/0x280 [ 266.736965][T21576] should_failslab+0x8c/0xb0 [ 266.737048][T21576] __kmalloc_noprof+0xb9/0x5a0 [ 266.737070][T21576] ? iter_file_splice_write+0xf7/0xa20 [ 266.737165][T21576] ? dev_map_hash_lookup_elem+0xae/0xd0 [ 266.737196][T21576] iter_file_splice_write+0xf7/0xa20 [ 266.737219][T21576] ? copy_splice_read+0x623/0x660 [ 266.737247][T21576] ? copy_splice_read+0x623/0x660 [ 266.737340][T21576] ? copy_splice_read+0x623/0x660 [ 266.737363][T21576] ? __pfx_iter_file_splice_write+0x10/0x10 [ 266.737384][T21576] direct_splice_actor+0x156/0x2a0 [ 266.737404][T21576] ? splice_grow_spd+0xc1/0xe0 [ 266.737422][T21576] splice_direct_to_actor+0x312/0x680 [ 266.737530][T21576] ? __pfx_direct_splice_actor+0x10/0x10 [ 266.737553][T21576] do_splice_direct+0xda/0x150 [ 266.737575][T21576] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 266.737603][T21576] do_sendfile+0x380/0x650 [ 266.737693][T21576] __x64_sys_sendfile64+0x105/0x150 [ 266.737718][T21576] x64_sys_call+0x2db1/0x3000 [ 266.737742][T21576] do_syscall_64+0xca/0x2b0 [ 266.737819][T21576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.737844][T21576] RIP: 0033:0x7f240ddaf749 [ 266.737861][T21576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.737879][T21576] RSP: 002b:00007f240c817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 266.737902][T21576] RAX: ffffffffffffffda RBX: 00007f240e005fa0 RCX: 00007f240ddaf749 [ 266.737983][T21576] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 266.737998][T21576] RBP: 00007f240c817090 R08: 0000000000000000 R09: 0000000000000000 [ 266.738011][T21576] R10: 0000000000fffa83 R11: 0000000000000246 R12: 0000000000000002 [ 266.738032][T21576] R13: 00007f240e006038 R14: 00007f240e005fa0 R15: 00007ffeda5a3808 [ 266.738122][T21576] [ 266.798411][T21543] Alternate GPT is invalid, using primary GPT. [ 266.974574][T21543] loop3: p1 p2 p3 [ 266.978363][T21543] loop3: partition table partially beyond EOD, truncated [ 267.316965][T21588] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 267.765399][T21618] FAULT_INJECTION: forcing a failure. [ 267.765399][T21618] name failslab, interval 1, probability 0, space 0, times 0 [ 267.778095][T21618] CPU: 0 UID: 0 PID: 21618 Comm: syz.0.3707 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 267.778195][T21618] Tainted: [W]=WARN [ 267.778203][T21618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.778217][T21618] Call Trace: [ 267.778223][T21618] [ 267.778230][T21618] __dump_stack+0x1d/0x30 [ 267.778254][T21618] dump_stack_lvl+0x95/0xd0 [ 267.778280][T21618] dump_stack+0x15/0x1b [ 267.778301][T21618] should_fail_ex+0x265/0x280 [ 267.778339][T21618] should_failslab+0x8c/0xb0 [ 267.778361][T21618] kmem_cache_alloc_noprof+0x69/0x4b0 [ 267.778384][T21618] ? dst_alloc+0xbd/0x100 [ 267.778428][T21618] ? __pfx_ip6_dst_gc+0x10/0x10 [ 267.778457][T21618] dst_alloc+0xbd/0x100 [ 267.778487][T21618] ip6_pol_route+0x71b/0xbe0 [ 267.778514][T21618] ? ip6_pol_route+0x389/0xbe0 [ 267.778572][T21618] ip6_pol_route_output+0x40/0x50 [ 267.778604][T21618] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 267.778695][T21618] fib6_rule_lookup+0x112/0x470 [ 267.778718][T21618] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 267.778743][T21618] ? rt6_score_route+0x2e0/0x380 [ 267.778900][T21618] ip6_route_output_flags+0x1e0/0x2c0 [ 267.778927][T21618] ip6_update_pmtu+0x13b/0x1b0 [ 267.778967][T21618] ip6gre_err+0x1d1/0x320 [ 267.778993][T21618] ? __pfx_ip6gre_err+0x10/0x10 [ 267.779020][T21618] icmpv6_notify+0x220/0x3c0 [ 267.779096][T21618] icmpv6_rcv+0xea5/0x12b0 [ 267.779118][T21618] ? ipv6_chk_mcast_addr+0x1fd/0x210 [ 267.779145][T21618] ? __pfx_icmpv6_rcv+0x10/0x10 [ 267.779178][T21618] ip6_protocol_deliver_rcu+0xb2a/0x10d0 [ 267.779243][T21618] ip6_input_finish+0xf0/0x1d0 [ 267.779265][T21618] ip6_input+0x5e/0x140 [ 267.779317][T21618] ? __pfx_ip6_input_finish+0x10/0x10 [ 267.779429][T21618] ip6_mc_input+0x27c/0x470 [ 267.779523][T21618] ip6_rcv_finish+0x336/0x340 [ 267.779614][T21618] ipv6_rcv+0x72/0x150 [ 267.779637][T21618] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 267.779668][T21618] __netif_receive_skb+0x9e/0x270 [ 267.779701][T21618] ? tun_rx_batched+0xc7/0x430 [ 267.779769][T21618] netif_receive_skb+0x4b/0x2e0 [ 267.779875][T21618] ? should_failslab+0x8c/0xb0 [ 267.779898][T21618] ? tun_rx_batched+0xc7/0x430 [ 267.779917][T21618] tun_rx_batched+0xfc/0x430 [ 267.780021][T21618] tun_get_user+0x1ed0/0x2670 [ 267.780052][T21618] ? ref_tracker_alloc+0x1f2/0x2f0 [ 267.780077][T21618] tun_chr_write_iter+0x15e/0x210 [ 267.780098][T21618] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 267.780119][T21618] vfs_write+0x52a/0x960 [ 267.780217][T21618] ksys_write+0xda/0x1a0 [ 267.780260][T21618] __x64_sys_write+0x40/0x50 [ 267.780333][T21618] x64_sys_call+0x2847/0x3000 [ 267.780355][T21618] do_syscall_64+0xca/0x2b0 [ 267.780422][T21618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.780448][T21618] RIP: 0033:0x7f5063c9e1ff [ 267.780467][T21618] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 267.780487][T21618] RSP: 002b:00007f50626e6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.780555][T21618] RAX: ffffffffffffffda RBX: 00007f5063ef6090 RCX: 00007f5063c9e1ff [ 267.780571][T21618] RDX: 000000000000006e RSI: 0000200000000640 RDI: 00000000000000c8 [ 267.780586][T21618] RBP: 00007f50626e6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.780647][T21618] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 267.780660][T21618] R13: 00007f5063ef6128 R14: 00007f5063ef6090 R15: 00007ffd87e61228 [ 267.780679][T21618] [ 268.301837][T21631] loop0: detected capacity change from 0 to 512 [ 268.328833][T21631] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 268.349685][T21631] EXT4-fs (loop0): invalid journal inode [ 268.355696][T21631] EXT4-fs (loop0): can't get journal size [ 268.363277][T21631] EXT4-fs (loop0): 1 truncate cleaned up [ 268.403215][T21631] syzkaller0: entered allmulticast mode [ 268.417994][T21631] syzkaller0 (unregistering): left allmulticast mode [ 268.483901][T21627] loop3: detected capacity change from 0 to 2048 [ 268.509037][T21650] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 268.518051][T21643] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3718'. [ 268.551426][T21653] loop1: detected capacity change from 0 to 512 [ 268.558461][T21627] Alternate GPT is invalid, using primary GPT. [ 268.564813][T21627] loop3: p1 p2 p3 [ 268.568624][T21627] loop3: partition table partially beyond EOD, truncated [ 268.577200][T21653] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 268.606530][T21653] EXT4-fs (loop1): invalid journal inode [ 268.612352][T21653] EXT4-fs (loop1): can't get journal size [ 268.619218][T21653] EXT4-fs (loop1): 1 truncate cleaned up [ 268.710289][T21661] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 268.810004][T21678] loop0: detected capacity change from 0 to 1024 [ 268.817456][T21678] EXT4-fs: Ignoring removed orlov option [ 268.823238][T21678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.833577][T21682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3733'. [ 268.849428][T21684] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21684 comm=syz.3.3734 [ 268.897001][T21682] FAULT_INJECTION: forcing a failure. [ 268.897001][T21682] name failslab, interval 1, probability 0, space 0, times 0 [ 268.909914][T21682] CPU: 0 UID: 0 PID: 21682 Comm: syz.1.3733 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 268.909989][T21682] Tainted: [W]=WARN [ 268.910050][T21682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.910063][T21682] Call Trace: [ 268.910072][T21682] [ 268.910082][T21682] __dump_stack+0x1d/0x30 [ 268.910113][T21682] dump_stack_lvl+0x95/0xd0 [ 268.910140][T21682] dump_stack+0x15/0x1b [ 268.910170][T21682] should_fail_ex+0x265/0x280 [ 268.910229][T21682] should_failslab+0x8c/0xb0 [ 268.910254][T21682] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 268.910286][T21682] ? nf_ct_ext_add+0x106/0x210 [ 268.910314][T21682] krealloc_node_align_noprof+0x124/0x300 [ 268.910389][T21682] nf_ct_ext_add+0x106/0x210 [ 268.910412][T21682] ctnetlink_new_conntrack+0xbea/0x1280 [ 268.910512][T21682] ? __nla_validate_parse+0x1652/0x1d00 [ 268.910572][T21682] ? __nla_parse+0x40/0x60 [ 268.910602][T21682] nfnetlink_rcv_msg+0x4c6/0x590 [ 268.910670][T21682] netlink_rcv_skb+0x123/0x220 [ 268.910704][T21682] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 268.910741][T21682] nfnetlink_rcv+0x167/0x16c0 [ 268.910787][T21682] ? kmem_cache_free+0xe3/0x3a0 [ 268.910813][T21682] ? __kfree_skb+0x109/0x150 [ 268.910836][T21682] ? nlmon_xmit+0x4f/0x60 [ 268.910962][T21682] ? consume_skb+0x49/0x150 [ 268.910991][T21682] ? nlmon_xmit+0x4f/0x60 [ 268.911009][T21682] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 268.911037][T21682] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 268.911085][T21682] ? __dev_queue_xmit+0x148/0x1ee0 [ 268.911116][T21682] ? refill_obj_stock+0x254/0x2e0 [ 268.911199][T21682] ? ref_tracker_free+0x37d/0x3e0 [ 268.911224][T21682] ? __netlink_deliver_tap+0x4dc/0x500 [ 268.911322][T21682] netlink_unicast+0x5c0/0x690 [ 268.911357][T21682] netlink_sendmsg+0x58b/0x6b0 [ 268.911394][T21682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.911450][T21682] __sock_sendmsg+0x145/0x180 [ 268.911474][T21682] ____sys_sendmsg+0x31e/0x4a0 [ 268.911509][T21682] ___sys_sendmsg+0x17b/0x1d0 [ 268.911554][T21682] __x64_sys_sendmsg+0xd4/0x160 [ 268.911667][T21682] x64_sys_call+0x17ba/0x3000 [ 268.911700][T21682] do_syscall_64+0xca/0x2b0 [ 268.911809][T21682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.911844][T21682] RIP: 0033:0x7fcc69fbf749 [ 268.911864][T21682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.911886][T21682] RSP: 002b:00007fcc68a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.911911][T21682] RAX: ffffffffffffffda RBX: 00007fcc6a215fa0 RCX: 00007fcc69fbf749 [ 268.911924][T21682] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 268.911971][T21682] RBP: 00007fcc68a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 268.911983][T21682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.911998][T21682] R13: 00007fcc6a216038 R14: 00007fcc6a215fa0 R15: 00007ffebddc5818 [ 268.912019][T21682] [ 269.465002][T21704] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 269.744975][T21712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3740'. [ 269.754078][T21712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3740'. [ 269.814120][T21712] SELinux: policydb version 2017303166 does not match my version range 15-35 [ 269.825413][T21712] SELinux: failed to load policy [ 269.886699][T21723] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3742'. [ 269.887099][T21723] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 269.887120][T21723] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 269.890434][T21695] Alternate GPT is invalid, using primary GPT. [ 269.890598][T21695] loop0: p1 p2 p3 [ 269.890606][T21695] loop0: partition table partially beyond EOD, truncated [ 270.867820][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 270.867915][ T29] audit: type=1326 audit(542.847:50070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21756 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 270.897493][ T29] audit: type=1326 audit(542.847:50071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21756 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 270.911615][T21760] set_capacity_and_notify: 3 callbacks suppressed [ 270.911634][T21760] loop5: detected capacity change from 0 to 512 [ 270.920480][ T29] audit: type=1326 audit(542.847:50072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21756 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 270.920514][ T29] audit: type=1326 audit(542.847:50073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21756 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 270.979471][ T29] audit: type=1326 audit(542.847:50074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21756 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5063c9f749 code=0x7ffc0000 [ 271.050794][T21762] FAULT_INJECTION: forcing a failure. [ 271.050794][T21762] name failslab, interval 1, probability 0, space 0, times 0 [ 271.063535][T21762] CPU: 1 UID: 0 PID: 21762 Comm: wÞ£ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.063598][T21762] Tainted: [W]=WARN [ 271.063605][T21762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.063618][T21762] Call Trace: [ 271.063626][T21762] [ 271.063635][T21762] __dump_stack+0x1d/0x30 [ 271.063683][T21762] dump_stack_lvl+0x95/0xd0 [ 271.063708][T21762] dump_stack+0x15/0x1b [ 271.063730][T21762] should_fail_ex+0x265/0x280 [ 271.063756][T21762] should_failslab+0x8c/0xb0 [ 271.063782][T21762] kmem_cache_alloc_noprof+0x69/0x4b0 [ 271.063849][T21762] ? audit_log_start+0x342/0x720 [ 271.064001][T21762] audit_log_start+0x342/0x720 [ 271.064024][T21762] ? kstrtouint+0x76/0xc0 [ 271.064046][T21762] audit_seccomp+0x48/0x100 [ 271.064081][T21762] ? __seccomp_filter+0x832/0x1260 [ 271.064129][T21762] __seccomp_filter+0x843/0x1260 [ 271.064159][T21762] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 271.064189][T21762] ? vfs_write+0x7e8/0x960 [ 271.064209][T21762] ? __rcu_read_unlock+0x4f/0x70 [ 271.064255][T21762] ? __fget_files+0x184/0x1c0 [ 271.064345][T21762] __secure_computing+0x82/0x150 [ 271.064374][T21762] syscall_trace_enter+0xcf/0x1e0 [ 271.064401][T21762] do_syscall_64+0xa4/0x2b0 [ 271.064441][T21762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.064502][T21762] RIP: 0033:0x7fcc69fbf749 [ 271.064521][T21762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.064541][T21762] RSP: 002b:00007fcc68a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063 [ 271.064590][T21762] RAX: ffffffffffffffda RBX: 00007fcc6a215fa0 RCX: 00007fcc69fbf749 [ 271.064605][T21762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 271.064651][T21762] RBP: 00007fcc68a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 271.064666][T21762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.064680][T21762] R13: 00007fcc6a216038 R14: 00007fcc6a215fa0 R15: 00007ffebddc5818 [ 271.064702][T21762] [ 271.064712][T21762] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 271.077963][T21760] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 271.079686][T21762] audit: out of memory in audit_log_start [ 271.243172][ T29] audit: type=1326 audit(543.037:50075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21761 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc69fbf749 code=0x7ffc0000 [ 271.314555][ T29] audit: type=1326 audit(543.037:50076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21761 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc69fbdf90 code=0x7ffc0000 [ 271.337810][ T29] audit: type=1326 audit(543.037:50077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21761 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc69fbe1ff code=0x7ffc0000 [ 271.422606][T21770] loop3: detected capacity change from 0 to 2048 [ 271.447708][T21764] binfmt_misc: register: failed to install interpreter file ./file0 [ 271.465475][T21772] netlink: 'syz.4.3758': attribute type 1 has an invalid length. [ 271.474791][T21770] Alternate GPT is invalid, using primary GPT. [ 271.481171][T21770] loop3: p1 p2 p3 [ 271.485035][T21770] loop3: partition table partially beyond EOD, truncated [ 271.498541][T21777] loop5: detected capacity change from 0 to 512 [ 271.514101][T21777] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 271.557610][T21777] EXT4-fs (loop5): invalid journal inode [ 271.563926][T21777] EXT4-fs (loop5): can't get journal size [ 271.587536][T21786] loop1: detected capacity change from 0 to 512 [ 271.635674][T21777] EXT4-fs (loop5): 1 truncate cleaned up [ 271.660121][T21785] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.3763: corrupted inode contents [ 271.716190][T21802] loop0: detected capacity change from 0 to 512 [ 271.733912][T21802] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 271.743004][T21802] EXT4-fs (loop0): invalid journal inode [ 271.779000][T21802] EXT4-fs (loop0): can't get journal size [ 271.788056][T21785] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.3763: mark_inode_dirty error [ 271.815167][T21802] EXT4-fs (loop0): 1 truncate cleaned up [ 271.947971][T21785] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.3763: corrupted inode contents [ 272.115048][T21809] loop3: detected capacity change from 0 to 128 [ 272.221555][T21809] syz.3.3768: attempt to access beyond end of device [ 272.221555][T21809] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 272.316041][T21813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21813 comm=gtp [ 272.374430][T21815] loop5: detected capacity change from 0 to 512 [ 272.381696][T21815] EXT4-fs: Ignoring removed nobh option [ 272.400076][T21819] loop1: detected capacity change from 0 to 512 [ 272.414083][T21819] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 272.422477][T21815] EXT4-fs: old and new quota format mixing [ 272.434790][T21819] EXT4-fs (loop1): invalid journal inode [ 272.440831][T21819] EXT4-fs (loop1): can't get journal size [ 272.457263][T21819] EXT4-fs (loop1): 1 truncate cleaned up [ 272.620757][T21819] syzkaller0: entered allmulticast mode [ 272.632943][T21819] syzkaller0 (unregistering): left allmulticast mode [ 272.742561][T21844] loop4: detected capacity change from 0 to 512 [ 272.750047][T21844] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 272.770132][T21844] EXT4-fs (loop4): invalid journal inode [ 272.775879][T21844] EXT4-fs (loop4): can't get journal size [ 272.798496][T21844] EXT4-fs (loop4): 1 truncate cleaned up [ 272.870956][T21847] xt_CT: No such helper "netbios-ns" [ 272.887309][T21838] loop3: detected capacity change from 0 to 2048 [ 272.941909][T21838] Alternate GPT is invalid, using primary GPT. [ 272.948509][T21838] loop3: p1 p2 p3 [ 272.952275][T21838] loop3: partition table partially beyond EOD, truncated [ 273.832367][T21885] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 273.855017][T21885] EXT4-fs (loop3): invalid journal inode [ 273.869465][T21885] EXT4-fs (loop3): can't get journal size [ 273.878833][T21884] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 273.898999][T21885] EXT4-fs (loop3): 1 truncate cleaned up [ 273.922283][T21896] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.936384][T21891] xt_CT: No such helper "netbios-ns" [ 274.042237][T21873] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 274.058413][T21873] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 274.071927][T21873] EXT4-fs (loop5): This should not happen!! Data will be lost [ 274.071927][T21873] [ 274.081788][T21873] EXT4-fs (loop5): Total free blocks count 0 [ 274.086482][T21903] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 274.088380][T21873] EXT4-fs (loop5): Free/Dirty block details [ 274.101782][T21873] EXT4-fs (loop5): free_blocks=2415919104 [ 274.107754][T21873] EXT4-fs (loop5): dirty_blocks=8208 [ 274.113081][T21873] EXT4-fs (loop5): Block reservation details [ 274.119163][T21873] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 274.202576][ T2762] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 274.215468][ T2762] EXT4-fs (loop5): This should not happen!! Data will be lost [ 274.215468][ T2762] [ 274.247869][T21914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.3803: iget: bad extra_isize 90 (inode size 256) [ 274.268563][T21914] EXT4-fs (loop3): Remounting filesystem read-only [ 274.278366][T21915] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 274.282007][T21914] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 274.295796][T21914] EXT4-fs (loop3): 1 orphan inode deleted [ 274.309065][T21920] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 274.318014][T21920] EXT4-fs (loop4): invalid journal inode [ 274.323682][T21920] EXT4-fs (loop4): can't get journal size [ 274.332763][T21920] EXT4-fs (loop4): 1 truncate cleaned up [ 274.420959][T21930] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 274.505296][T21948] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 274.595578][T21960] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 274.611430][T21961] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 274.621925][T21961] EXT4-fs (loop5): invalid journal inode [ 274.627859][T21961] EXT4-fs (loop5): can't get journal size [ 274.628024][T21960] serio: Serial port ttyS3 [ 274.634534][T21961] EXT4-fs (loop5): 1 truncate cleaned up [ 274.719765][T21978] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3827: invalid block [ 274.746010][T21978] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3827: invalid indirect mapped block 4294967295 (level 1) [ 274.789171][T21978] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3827: invalid indirect mapped block 4294967295 (level 1) [ 274.805804][T21978] EXT4-fs (loop0): 2 truncates cleaned up [ 274.832962][T21978] __nla_validate_parse: 1 callbacks suppressed [ 274.832981][T21978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3827'. [ 274.871370][T21987] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3831: invalid block [ 274.883779][T21987] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3831: invalid indirect mapped block 4294967295 (level 1) [ 274.899421][T21987] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3831: invalid indirect mapped block 4294967295 (level 1) [ 274.913288][T21990] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3832: invalid block [ 274.926750][T21987] EXT4-fs (loop5): 2 truncates cleaned up [ 274.928348][T21990] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3832: invalid indirect mapped block 4294967295 (level 1) [ 274.948081][T21971] loop1: p1 p2 p3 < p5 p6 > [ 274.960285][T21990] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3832: invalid indirect mapped block 4294967295 (level 1) [ 274.960843][T21990] EXT4-fs (loop0): 2 truncates cleaned up [ 274.975085][T21971] loop1: p2 size 16775168 extends beyond EOD, truncated [ 274.990777][T21987] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3831'. [ 275.002873][T21971] loop1: p5 start 4294970168 is beyond EOD, truncated [ 275.039713][T21990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=882 sclass=netlink_audit_socket pid=21990 comm=syz.0.3832 [ 275.054649][T21990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3832'. [ 275.085543][T22001] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 275.097110][T22001] EXT4-fs (loop0): 1 truncate cleaned up [ 275.160396][T22003] ================================================================== [ 275.168631][T22003] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 275.176038][T22003] [ 275.178394][T22003] write to 0xffff88810addf000 of 4096 bytes by task 22004 on cpu 0: [ 275.186466][T22003] _copy_from_iter+0x106/0xe70 [ 275.191362][T22003] copy_page_from_iter+0x178/0x2a0 [ 275.196593][T22003] process_vm_rw+0x659/0x960 [ 275.201206][T22003] __x64_sys_process_vm_writev+0x78/0x90 [ 275.206866][T22003] x64_sys_call+0x27ef/0x3000 [ 275.212078][T22003] do_syscall_64+0xca/0x2b0 [ 275.216596][T22003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.222492][T22003] [ 275.224823][T22003] write to 0xffff88810addf000 of 4096 bytes by task 22003 on cpu 1: [ 275.232985][T22003] _copy_from_iter+0x106/0xe70 [ 275.237804][T22003] copy_page_from_iter+0x178/0x2a0 [ 275.242925][T22003] process_vm_rw+0x659/0x960 [ 275.247523][T22003] __x64_sys_process_vm_writev+0x78/0x90 [ 275.253150][T22003] x64_sys_call+0x27ef/0x3000 [ 275.257852][T22003] do_syscall_64+0xca/0x2b0 [ 275.262377][T22003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.268265][T22003] [ 275.270585][T22003] Reported by Kernel Concurrency Sanitizer on: [ 275.276729][T22003] CPU: 1 UID: 0 PID: 22003 Comm: syz.0.3836 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.288095][T22003] Tainted: [W]=WARN [ 275.291904][T22003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.302080][T22003] ==================================================================