last executing test programs: 1m57.495645387s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000300)=r3}, 0x20) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x63}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x44080) 1m56.757736946s ago: executing program 4 (id=14): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @local}, 0x14) 1m54.630554975s ago: executing program 3 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m54.618700406s ago: executing program 3 (id=41): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0xb, 0x80, 0x4, 0x0, 0xfc, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f00000002c0)}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'wg1\x00'}}, 0x1e) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) 1m54.603110788s ago: executing program 3 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x21, 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000340)={0x87, 0x21, '\x00', [@generic={0x4, 0xfd, "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"}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x1dcd}]}, 0x110) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7c}}, @TCA_RATE={0x6}]}, 0x34}}, 0x20000000) 1m54.583846619s ago: executing program 3 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000300)=r3}, 0x20) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x63}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x44080) 1m54.440732291s ago: executing program 3 (id=45): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<20\t||') 1m53.976789068s ago: executing program 4 (id=54): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f8) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 1m53.973314538s ago: executing program 32 (id=54): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f8) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 1m53.801168401s ago: executing program 3 (id=59): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\', 0x3a, './file0'}, 0x29) 1m53.800954442s ago: executing program 33 (id=59): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\', 0x3a, './file0'}, 0x29) 1m47.1810017s ago: executing program 2 (id=168): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f00000002c0)}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'wg1\x00'}}, 0x1e) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) 1m47.1771598s ago: executing program 2 (id=170): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f00000002c0)}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'wg1\x00'}}, 0x1e) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) 1m47.116849805s ago: executing program 2 (id=172): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0xc, 0x5, 0x18, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x7, 0x4, 0xd}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="48010000100001005d6a98a7db72f2f7da28bd70", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673"], 0x148}}, 0x40) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_user}, {@access_any}, {@cache_readahead}], [], 0x6b}}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x1000, 0x4000, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x10) getpid() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m46.562866439s ago: executing program 2 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000300)=r3}, 0x20) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x63}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x44080) 1m46.156527341s ago: executing program 2 (id=185): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000008c0)={0xffff, {{0xa, 0x4e20, 0x3, @remote, 0x475d81fc}}, {{0xa, 0x4e21, 0x5f, @empty, 0xc5bc}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000093c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000009500)={0x0, 0x0, &(0x7f00000094c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf252b00000008000200", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 1m45.153051271s ago: executing program 2 (id=208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x8040) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040840) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1m45.144697552s ago: executing program 34 (id=208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x8040) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040840) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r5, 0x1, 0x0, 0x6, @local}, 0x14) 4.00790564s ago: executing program 6 (id=2145): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0xa, &(0x7f00000002c0)=[{0x3, 0x10, 0x4, 0xffffff7f}, {0x5, 0x78, 0x7, 0x7ff}, {0x5, 0xa, 0x9, 0x80000001}, {0x1, 0x6, 0x4, 0x8}, {0x7, 0x4, 0x1, 0x4}, {0x40, 0x19, 0x5, 0x8}, {0x5, 0x2, 0xd, 0x7f58}, {0x3, 0x2, 0x1, 0x4927}, {0x390, 0xb, 0x5, 0xada18e6d}, {0x4, 0xa, 0x78, 0x92c}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0xc00) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 2.777787359s ago: executing program 6 (id=2168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x9}, 0x8) 2.691207855s ago: executing program 6 (id=2170): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 2.645998989s ago: executing program 6 (id=2172): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007a7d0e4b6e2659a6d9cbfe36418b892ff096ab68c4b942d4ea4d82e318f525d2"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=r3, 0x4) openat$incfs(0xffffffffffffff9c, &(0x7f0000000840)='.log\x00', 0x341482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x5, 0x5e9a}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 2.260378359s ago: executing program 1 (id=2179): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0xa, &(0x7f00000002c0)=[{0x3, 0x10, 0x4, 0xffffff7f}, {0x5, 0x78, 0x7, 0x7ff}, {0x5, 0xa, 0x9, 0x80000001}, {0x1, 0x6, 0x4, 0x8}, {0x7, 0x4, 0x1, 0x4}, {0x40, 0x19, 0x5, 0x8}, {0x5, 0x2, 0xd, 0x7f58}, {0x3, 0x2, 0x1, 0x4927}, {0x390, 0xb, 0x5, 0xada18e6d}, {0x4, 0xa, 0x78, 0x92c}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0xc00) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 1.814001216s ago: executing program 5 (id=2182): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.644667619s ago: executing program 7 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(0x0, r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 1.540427837s ago: executing program 7 (id=2187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0xa, &(0x7f00000002c0)=[{0x3, 0x10, 0x4, 0xffffff7f}, {0x5, 0x78, 0x7, 0x7ff}, {0x5, 0xa, 0x9, 0x80000001}, {0x1, 0x6, 0x4, 0x8}, {0x7, 0x4, 0x1, 0x4}, {0x40, 0x19, 0x5, 0x8}, {0x5, 0x2, 0xd, 0x7f58}, {0x3, 0x2, 0x1, 0x4927}, {0x390, 0xb, 0x5, 0xada18e6d}, {0x4, 0xa, 0x78, 0x92c}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 1.404202898s ago: executing program 7 (id=2189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, r1, 0x2) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r8, r8, 0x200000000000000) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x60, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "21872b20c62a66b8"}}, 0x48}}, 0x81) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.117016481s ago: executing program 1 (id=2191): pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', &(0x7f0000001280)='./bus\x00', 0x41, &(0x7f00000012c0)={[], [{@obj_user={'obj_user', 0x3d, '\\'}}, {@obj_type={'obj_type', 0x3d, 'cdg\x00'}}, {@fowner_eq}]}, 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0xfffffff8) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x8106, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000182f0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x7}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382c00fe800000000000000000000000000000ff02000000000000000000000000000189"], 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x20) gettid() read$hiddev(r6, &(0x7f0000001100)=""/234, 0xea) 1.086241323s ago: executing program 5 (id=2192): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x9}, 0x8) 1.038804567s ago: executing program 1 (id=2193): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1832b, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) recvmsg$can_bcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000180)=""/75, 0x4b}], 0x1}, 0x2000) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r8, &(0x7f0000001440)="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", 0x5ad, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 1.020417898s ago: executing program 0 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 1.0046076s ago: executing program 0 (id=2196): socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.00054013s ago: executing program 5 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(0x0, r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 974.256852ms ago: executing program 5 (id=2198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 953.064244ms ago: executing program 5 (id=2199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0xa, &(0x7f00000002c0)=[{0x3, 0x10, 0x4, 0xffffff7f}, {0x5, 0x78, 0x7, 0x7ff}, {0x5, 0xa, 0x9, 0x80000001}, {0x1, 0x6, 0x4, 0x8}, {0x7, 0x4, 0x1, 0x4}, {0x40, 0x19, 0x5, 0x8}, {0x5, 0x2, 0xd, 0x7f58}, {0x3, 0x2, 0x1, 0x4927}, {0x390, 0xb, 0x5, 0xada18e6d}, {0x4, 0xa, 0x78, 0x92c}]}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/59}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 776.243778ms ago: executing program 6 (id=2200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd060000", 0x5}], 0x1, 0x0, 0x4) 686.358935ms ago: executing program 6 (id=2201): socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 684.810345ms ago: executing program 0 (id=2202): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0xa, &(0x7f00000002c0)=[{0x3, 0x10, 0x4, 0xffffff7f}, {0x5, 0x78, 0x7, 0x7ff}, {0x5, 0xa, 0x9, 0x80000001}, {0x1, 0x6, 0x4, 0x8}, {0x7, 0x4, 0x1, 0x4}, {0x40, 0x19, 0x5, 0x8}, {0x5, 0x2, 0xd, 0x7f58}, {0x3, 0x2, 0x1, 0x4927}, {0x390, 0xb, 0x5, 0xada18e6d}, {0x4, 0xa, 0x78, 0x92c}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0xc00) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 650.255598ms ago: executing program 0 (id=2203): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 553.422896ms ago: executing program 7 (id=2204): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000800)={0x4, 0x8, 0xfa00, {r1, 0xf7c}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200010000000000000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_open(0x0, 0x42, 0x1f0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f00000006c0), 0x1, 0x1}) io_uring_enter(r5, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000016c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000016c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000001680)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@xdp={0x2c, 0x9, 0x0, 0x1b}}) io_uring_enter(r10, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) lsm_get_self_attr(0x68, &(0x7f0000000640)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000100)=0x1020, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 211.578083ms ago: executing program 0 (id=2205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x34, &(0x7f0000000640)={0x6, 0x0, 0x4}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76) r5 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) 188.967125ms ago: executing program 1 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 153.625558ms ago: executing program 7 (id=2207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xa, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 135.782319ms ago: executing program 1 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 82.626363ms ago: executing program 1 (id=2209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x9}, 0x8) 81.258523ms ago: executing program 7 (id=2210): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x512, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="4f1002f8839db50f6b17361b58", 0xd) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x78, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2a3}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x49fd}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x76f2}, 0x90) 11.130959ms ago: executing program 5 (id=2211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0xff, 0x2, 0x0, 0x8c}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 0s ago: executing program 0 (id=2212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd060000", 0x5}], 0x1, 0x0, 0x4) kernel console output (not intermixed with test programs): -fs (loop7): dirty_blocks=15176 [ 87.017411][ T387] EXT4-fs (loop7): Block reservation details [ 87.023518][ T387] EXT4-fs (loop7): i_reserved_data_blocks=15176 [ 87.043346][ T387] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 87.080812][ T6896] loop6: detected capacity change from 0 to 8192 [ 87.170582][ T6990] loop0: detected capacity change from 0 to 2048 [ 87.195135][ T6990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.252652][ T6990] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.262935][ T6996] vhci_hcd: invalid port number 96 [ 87.268170][ T6996] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 87.289622][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.407735][ T7008] vhci_hcd: invalid port number 96 [ 87.412908][ T7008] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 87.558867][ T7014] loop7: detected capacity change from 0 to 8192 [ 87.972295][ T7028] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 87.994064][ T7028] SELinux: failed to load policy [ 88.123078][ T7030] loop7: detected capacity change from 0 to 2048 [ 88.142986][ T7030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.203751][ T7030] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 88.243754][ T4222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.314460][ T7039] __nla_validate_parse: 4 callbacks suppressed [ 88.314475][ T7039] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1130'. [ 88.393182][ T7049] SELinux: failed to load policy [ 88.399998][ T7050] netlink: 'syz.6.1132': attribute type 10 has an invalid length. [ 88.408682][ T7050] team0: Device hsr_slave_0 failed to register rx_handler [ 88.508442][ T7062] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.522007][ T7062] SELinux: failed to load policy [ 88.572696][ T7065] vhci_hcd: invalid port number 96 [ 88.577964][ T7065] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 88.722850][ T7077] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1145'. [ 88.772733][ T7081] vhci_hcd: invalid port number 96 [ 88.777960][ T7081] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 88.792058][ T7079] loop5: detected capacity change from 0 to 512 [ 88.810629][ T7079] EXT4-fs: Ignoring removed nobh option [ 88.829294][ T7079] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1147: iget: bad i_size value: 38620345925642 [ 88.876995][ T7079] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1147: couldn't read orphan inode 15 (err -117) [ 88.910524][ T7079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.936624][ T7086] loop0: detected capacity change from 0 to 512 [ 88.959183][ T7086] EXT4-fs: Ignoring removed nobh option [ 88.989534][ T7086] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1149: iget: bad i_size value: 38620345925642 [ 89.018004][ T7086] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1149: couldn't read orphan inode 15 (err -117) [ 89.030969][ T7086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.114879][ T148] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 89.155923][ T148] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 89.165141][ T7033] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 89.168382][ T148] EXT4-fs (loop5): This should not happen!! Data will be lost [ 89.168382][ T148] [ 89.190359][ T148] EXT4-fs (loop5): Total free blocks count 0 [ 89.196236][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 89.196363][ T148] EXT4-fs (loop5): Free/Dirty block details [ 89.208763][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.208763][ T51] [ 89.214727][ T148] EXT4-fs (loop5): free_blocks=0 [ 89.214739][ T148] EXT4-fs (loop5): dirty_blocks=1 [ 89.214749][ T148] EXT4-fs (loop5): Block reservation details [ 89.214758][ T148] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 89.246516][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 89.252612][ T51] EXT4-fs (loop0): Free/Dirty block details [ 89.258588][ T51] EXT4-fs (loop0): free_blocks=0 [ 89.263581][ T51] EXT4-fs (loop0): dirty_blocks=4728 [ 89.268175][ T3621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.269082][ T51] EXT4-fs (loop0): Block reservation details [ 89.269094][ T51] EXT4-fs (loop0): i_reserved_data_blocks=4728 [ 89.304780][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 89.336621][ T7093] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 89.351477][ T7091] vhci_hcd: invalid port number 96 [ 89.356853][ T7091] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 89.410401][ T7093] SELinux: failed to load policy [ 89.415467][ T7095] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 89.430487][ T7095] SELinux: failed to load policy [ 89.530313][ T7105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1157'. [ 89.565743][ T7107] vhci_hcd: invalid port number 96 [ 89.570932][ T7107] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 89.631868][ T7115] vhci_hcd: invalid port number 96 [ 89.637092][ T7115] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 89.727377][ T7121] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 89.763779][ T7121] SELinux: failed to load policy [ 89.775150][ T7119] SELinux: ebitmap: truncated map [ 89.779600][ T7056] loop1: detected capacity change from 0 to 8192 [ 89.817095][ T7119] SELinux: failed to load policy [ 89.854090][ T7129] loop6: detected capacity change from 0 to 512 [ 89.877894][ T7129] EXT4-fs: Ignoring removed nobh option [ 89.891165][ T7129] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1168: iget: bad i_size value: 38620345925642 [ 89.904934][ T7129] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1168: couldn't read orphan inode 15 (err -117) [ 89.954204][ T7129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.037826][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1171'. [ 90.127078][ T7141] loop1: detected capacity change from 0 to 2048 [ 90.155774][ T7144] loop5: detected capacity change from 0 to 512 [ 90.193734][ T7144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1173: bg 0: block 16: invalid block bitmap [ 90.221434][ T7141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.294180][ T7144] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 90.320615][ T7144] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1173: attempt to clear invalid blocks 1669132790 len 1 [ 90.354707][ T7144] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1173: invalid indirect mapped block 4294967295 (level 1) [ 90.369730][ T7141] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.413082][ T7144] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1173: invalid indirect mapped block 4294967295 (level 2) [ 90.458803][ T7144] EXT4-fs (loop5): 1 truncate cleaned up [ 90.475615][ T7144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.527808][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.543722][ T148] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 90.575802][ T148] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 90.588551][ T148] EXT4-fs (loop6): This should not happen!! Data will be lost [ 90.588551][ T148] [ 90.598293][ T148] EXT4-fs (loop6): Total free blocks count 0 [ 90.604426][ T148] EXT4-fs (loop6): Free/Dirty block details [ 90.610388][ T148] EXT4-fs (loop6): free_blocks=0 [ 90.612878][ T3621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.615324][ T148] EXT4-fs (loop6): dirty_blocks=16000 [ 90.615338][ T148] EXT4-fs (loop6): Block reservation details [ 90.635858][ T148] EXT4-fs (loop6): i_reserved_data_blocks=16000 [ 90.652081][ T148] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 90.673438][ T7150] vhci_hcd: invalid port number 96 [ 90.678603][ T7150] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 90.720260][ T7152] vhci_hcd: invalid port number 96 [ 90.725423][ T7152] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 90.992917][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1184'. [ 91.006353][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 91.006366][ T29] audit: type=1400 audit(1756177408.385:5332): avc: denied { create } for pid=7170 comm="syz.1.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.122615][ T29] audit: type=1326 audit(1756177408.395:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 91.146187][ T29] audit: type=1326 audit(1756177408.395:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 91.169709][ T29] audit: type=1400 audit(1756177408.485:5335): avc: denied { ioctl } for pid=7170 comm="syz.1.1185" path="socket:[18538]" dev="sockfs" ino=18538 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.571878][ T29] audit: type=1326 audit(1756177408.585:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 91.595565][ T29] audit: type=1326 audit(1756177408.585:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 91.619353][ T29] audit: type=1326 audit(1756177408.585:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 91.643111][ T29] audit: type=1326 audit(1756177408.585:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 91.666795][ T29] audit: type=1326 audit(1756177408.585:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 91.690461][ T29] audit: type=1326 audit(1756177408.585:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7170 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 91.754313][ T7195] loop0: detected capacity change from 0 to 2048 [ 91.798178][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1197'. [ 91.833818][ T7195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.912019][ T7195] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.986048][ T7215] SELinux: ebitmap: truncated map [ 92.007435][ T7215] SELinux: failed to load policy [ 92.014316][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.054780][ T7219] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 92.068774][ T7219] SELinux: failed to load policy [ 92.122750][ T7225] loop1: detected capacity change from 0 to 512 [ 92.221573][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1209'. [ 92.423130][ T7247] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 92.434696][ T7255] loop5: detected capacity change from 0 to 2048 [ 92.449076][ T7247] SELinux: failed to load policy [ 92.456057][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1221'. [ 92.508738][ T7255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.533465][ T7255] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.663090][ T3621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.752712][ T7285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1234'. [ 92.755126][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1236'. [ 92.805416][ T7292] loop7: detected capacity change from 0 to 1024 [ 92.877410][ T7292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.904069][ T7293] loop5: detected capacity change from 0 to 8192 [ 93.009320][ T7306] loop6: detected capacity change from 0 to 2048 [ 93.037749][ T7310] loop1: detected capacity change from 0 to 2048 [ 93.047250][ T7306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.112480][ T7310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.149276][ T7306] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 93.166038][ T7310] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 93.198655][ T7317] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 93.218520][ T7317] SELinux: failed to load policy [ 93.235974][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.278278][ T7319] loop1: detected capacity change from 0 to 512 [ 93.285348][ T7319] EXT4-fs: Ignoring removed nobh option [ 93.291733][ T3636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.307734][ T7319] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1244: iget: bad i_size value: 38620345925642 [ 93.324391][ T7319] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1244: couldn't read orphan inode 15 (err -117) [ 93.337281][ T7319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.701835][ T7339] __nla_validate_parse: 1 callbacks suppressed [ 93.701851][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1253'. [ 93.809707][ T7343] loop7: detected capacity change from 0 to 512 [ 93.838756][ T7343] EXT4-fs: Ignoring removed nobh option [ 93.858341][ T7343] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1254: iget: bad i_size value: 38620345925642 [ 93.922540][ T7343] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1254: couldn't read orphan inode 15 (err -117) [ 94.123541][ T387] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 94.170898][ T387] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 94.183517][ T387] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.183517][ T387] [ 94.193205][ T387] EXT4-fs (loop1): Total free blocks count 0 [ 94.199333][ T387] EXT4-fs (loop1): Free/Dirty block details [ 94.205255][ T387] EXT4-fs (loop1): free_blocks=0 [ 94.210216][ T387] EXT4-fs (loop1): dirty_blocks=15076 [ 94.215578][ T387] EXT4-fs (loop1): Block reservation details [ 94.221581][ T387] EXT4-fs (loop1): i_reserved_data_blocks=15076 [ 94.237041][ T5048] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 94.401140][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1259'. [ 94.521770][ T7359] loop1: detected capacity change from 0 to 2048 [ 94.658080][ T7359] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 94.717978][ T51] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 94.799110][ T51] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 94.811768][ T51] EXT4-fs (loop7): This should not happen!! Data will be lost [ 94.811768][ T51] [ 94.821494][ T51] EXT4-fs (loop7): Total free blocks count 0 [ 94.827944][ T51] EXT4-fs (loop7): Free/Dirty block details [ 94.833839][ T51] EXT4-fs (loop7): free_blocks=0 [ 94.838897][ T51] EXT4-fs (loop7): dirty_blocks=13012 [ 94.844444][ T51] EXT4-fs (loop7): Block reservation details [ 94.850461][ T51] EXT4-fs (loop7): i_reserved_data_blocks=13012 [ 94.871468][ T7370] loop5: detected capacity change from 0 to 512 [ 94.888620][ T5048] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 94.901854][ T5048] EXT4-fs (loop7): This should not happen!! Data will be lost [ 94.901854][ T5048] [ 94.952265][ T7326] loop6: detected capacity change from 0 to 8192 [ 95.032972][ T7378] vhci_hcd: invalid port number 96 [ 95.038239][ T7378] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 95.194701][ T7390] netlink: 'syz.6.1270': attribute type 10 has an invalid length. [ 95.207370][ T7390] team0: Device hsr_slave_0 failed to register rx_handler [ 95.265001][ T7397] SELinux: failed to load policy [ 95.287201][ T7399] loop0: detected capacity change from 0 to 512 [ 95.294060][ T7399] EXT4-fs: Ignoring removed nobh option [ 95.320138][ T7399] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1273: iget: bad i_size value: 38620345925642 [ 95.334734][ T7399] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1273: couldn't read orphan inode 15 (err -117) [ 95.949078][ T51] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 95.997198][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 96.010001][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.010001][ T51] [ 96.019779][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 96.026006][ T51] EXT4-fs (loop0): Free/Dirty block details [ 96.032138][ T51] EXT4-fs (loop0): free_blocks=0 [ 96.037502][ T51] EXT4-fs (loop0): dirty_blocks=16008 [ 96.042963][ T51] EXT4-fs (loop0): Block reservation details [ 96.049002][ T51] EXT4-fs (loop0): i_reserved_data_blocks=16008 [ 96.056046][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 96.056057][ T29] audit: type=1326 audit(96.023:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.085697][ T29] audit: type=1326 audit(96.023:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.107201][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 96.108820][ T29] audit: type=1326 audit(96.023:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.121803][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.121803][ T51] [ 96.144562][ T29] audit: type=1326 audit(96.023:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa04ffdd550 code=0x7ffc0000 [ 96.176940][ T29] audit: type=1326 audit(96.023:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.199677][ T29] audit: type=1326 audit(96.023:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.222497][ T29] audit: type=1326 audit(96.023:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.245536][ T29] audit: type=1326 audit(96.023:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.268434][ T29] audit: type=1326 audit(96.023:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.291854][ T29] audit: type=1326 audit(96.023:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7411 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 96.437485][ T7416] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 96.467705][ T7416] SELinux: failed to load policy [ 96.695152][ T7429] loop1: detected capacity change from 0 to 1024 [ 96.725621][ T7402] loop7: detected capacity change from 0 to 8192 [ 96.728576][ T7437] loop5: detected capacity change from 0 to 2048 [ 96.745547][ T7439] loop6: detected capacity change from 0 to 512 [ 96.764710][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 96.788397][ T7439] EXT4-fs (loop6): bad s_min_extra_isize: 65312 [ 96.804933][ T7437] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.827200][ T7435] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 96.835071][ T7435] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1286'. [ 96.856013][ T7439] bond0: entered promiscuous mode [ 96.907672][ T7446] SELinux: failed to load policy [ 97.025280][ T7455] loop5: detected capacity change from 0 to 8192 [ 97.178722][ T7459] loop6: detected capacity change from 0 to 8192 [ 97.230325][ T7472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1303'. [ 97.485689][ T7500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1316'. [ 97.543569][ T7497] loop6: detected capacity change from 0 to 8192 [ 97.618451][ T7511] loop1: detected capacity change from 0 to 512 [ 97.832960][ T7521] SELinux: failed to load policy [ 97.965548][ T7532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1329'. [ 98.029398][ T7538] loop6: detected capacity change from 0 to 512 [ 98.081352][ T7541] loop6: detected capacity change from 0 to 512 [ 98.167987][ T7543] loop6: detected capacity change from 0 to 512 [ 98.184983][ T7543] EXT4-fs: Ignoring removed nobh option [ 98.206956][ T7543] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1334: iget: bad i_size value: 38620345925642 [ 98.220427][ T7543] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1334: couldn't read orphan inode 15 (err -117) [ 98.424736][ T7554] loop6: detected capacity change from 0 to 2048 [ 98.550961][ T7562] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1342'. [ 98.581736][ T7560] vhci_hcd: invalid port number 96 [ 98.587229][ T7560] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 98.658521][ T7570] Set syz1 is full, maxelem 65536 reached [ 98.814374][ T7586] loop6: detected capacity change from 0 to 2048 [ 98.908595][ T7597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1357'. [ 99.219333][ T7536] loop5: detected capacity change from 0 to 8192 [ 99.312159][ T7615] SELinux: failed to load policy [ 99.458648][ T7625] loop1: detected capacity change from 0 to 512 [ 100.477456][ T7650] loop5: detected capacity change from 0 to 512 [ 100.795356][ T7664] SELinux: failed to load policy [ 100.902713][ T7677] loop7: detected capacity change from 0 to 512 [ 101.179380][ T29] kauditd_printk_skb: 786 callbacks suppressed [ 101.179395][ T29] audit: type=1326 audit(101.175:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.208789][ T29] audit: type=1326 audit(101.175:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.347064][ T29] audit: type=1326 audit(101.225:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.370142][ T29] audit: type=1326 audit(101.225:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.393255][ T29] audit: type=1326 audit(101.225:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.416584][ T29] audit: type=1326 audit(101.225:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa04ffdd550 code=0x7ffc0000 [ 101.439496][ T29] audit: type=1326 audit(101.225:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.462449][ T29] audit: type=1326 audit(101.225:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.485612][ T29] audit: type=1326 audit(101.225:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.508815][ T29] audit: type=1326 audit(101.225:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 101.677872][ T7631] loop0: detected capacity change from 0 to 8192 [ 101.703167][ T7699] SELinux: failed to load policy [ 101.771852][ T7703] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1399'. [ 101.781043][ T7703] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1399'. [ 101.865694][ T7707] SELinux: failed to load policy [ 101.901400][ T7713] loop6: detected capacity change from 0 to 512 [ 102.031232][ T7721] smc: net device bond0 applied user defined pnetid SYZ0 [ 102.196100][ T7716] loop0: detected capacity change from 0 to 8192 [ 102.387635][ T7741] loop0: detected capacity change from 0 to 512 [ 102.406011][ T7738] SELinux: failed to load policy [ 102.415614][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1418'. [ 102.466810][ T7746] loop5: detected capacity change from 0 to 512 [ 102.483648][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1418'. [ 102.541203][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1422'. [ 102.712656][ T7765] loop5: detected capacity change from 0 to 8192 [ 102.788129][ T7771] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1430'. [ 102.797357][ T7771] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1430'. [ 102.851947][ T7779] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1433'. [ 103.170857][ T7799] loop6: detected capacity change from 0 to 2048 [ 103.264126][ T7799] Alternate GPT is invalid, using primary GPT. [ 103.270450][ T7799] loop6: p2 p3 p7 [ 103.536623][ T7807] loop5: detected capacity change from 0 to 512 [ 103.711785][ T7819] FAULT_INJECTION: forcing a failure. [ 103.711785][ T7819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.725204][ T7819] CPU: 0 UID: 0 PID: 7819 Comm: syz.5.1450 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.725226][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.725235][ T7819] Call Trace: [ 103.725240][ T7819] [ 103.725246][ T7819] __dump_stack+0x1d/0x30 [ 103.725266][ T7819] dump_stack_lvl+0xe8/0x140 [ 103.725285][ T7819] dump_stack+0x15/0x1b [ 103.725300][ T7819] should_fail_ex+0x265/0x280 [ 103.725321][ T7819] should_fail_alloc_page+0xf2/0x100 [ 103.725344][ T7819] __alloc_frozen_pages_noprof+0xff/0x360 [ 103.725371][ T7819] alloc_pages_mpol+0xb3/0x250 [ 103.725395][ T7819] alloc_pages_noprof+0x90/0x130 [ 103.725418][ T7819] __pud_alloc+0x47/0x4c0 [ 103.725442][ T7819] copy_page_range+0x3988/0x3c20 [ 103.725470][ T7819] ? __account_obj_stock+0x211/0x350 [ 103.725492][ T7819] ? mas_wr_walk_descend+0x36e/0x470 [ 103.725516][ T7819] ? obj_cgroup_charge_account+0x122/0x1a0 [ 103.725547][ T7819] ? mas_wr_store_type+0x630/0xd30 [ 103.725569][ T7819] ? mas_prealloc_calc+0x1bf/0x260 [ 103.725588][ T7819] ? mas_store+0x3c3/0x570 [ 103.725608][ T7819] dup_mmap+0x885/0xf20 [ 103.725634][ T7819] copy_mm+0x11a/0x370 [ 103.725660][ T7819] copy_process+0xd08/0x2000 [ 103.725686][ T7819] kernel_clone+0x16c/0x5c0 [ 103.725704][ T7819] ? vfs_write+0x7e8/0x960 [ 103.725726][ T7819] __x64_sys_clone+0xe6/0x120 [ 103.725757][ T7819] x64_sys_call+0x119c/0x2ff0 [ 103.725776][ T7819] do_syscall_64+0xd2/0x200 [ 103.725801][ T7819] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.725820][ T7819] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.725840][ T7819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.725856][ T7819] RIP: 0033:0x7ff3f4a2ebe9 [ 103.725869][ T7819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.725883][ T7819] RSP: 002b:00007ff3f348efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 103.725898][ T7819] RAX: ffffffffffffffda RBX: 00007ff3f4c55fa0 RCX: 00007ff3f4a2ebe9 [ 103.725909][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000400 [ 103.725927][ T7819] RBP: 00007ff3f348f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.725936][ T7819] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 103.725947][ T7819] R13: 00007ff3f4c56038 R14: 00007ff3f4c55fa0 R15: 00007ffc89630b18 [ 103.725963][ T7819] [ 103.971007][ T7821] loop0: detected capacity change from 0 to 512 [ 103.977698][ T7821] EXT4-fs: Ignoring removed nobh option [ 104.030051][ T7821] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1451: iget: bad i_size value: 38620345925642 [ 104.076132][ T7821] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1451: couldn't read orphan inode 15 (err -117) [ 104.136166][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1454'. [ 104.153806][ T7821] EXT4-fs mount: 22 callbacks suppressed [ 104.153821][ T7821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.304999][ T7836] SELinux: failed to load policy [ 104.352732][ T7839] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1458'. [ 104.470181][ T7786] loop7: detected capacity change from 0 to 8192 [ 104.542693][ T7828] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 104.582555][ T387] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 104.595276][ T387] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.595276][ T387] [ 104.604964][ T387] EXT4-fs (loop0): Total free blocks count 0 [ 104.610969][ T387] EXT4-fs (loop0): Free/Dirty block details [ 104.616911][ T387] EXT4-fs (loop0): free_blocks=0 [ 104.621847][ T387] EXT4-fs (loop0): dirty_blocks=10292 [ 104.627552][ T387] EXT4-fs (loop0): Block reservation details [ 104.633675][ T387] EXT4-fs (loop0): i_reserved_data_blocks=10292 [ 104.668934][ T7844] SELinux: failed to load policy [ 104.680644][ T1454] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 104.729985][ T7851] loop1: detected capacity change from 0 to 2048 [ 104.738993][ T7857] SELinux: failed to load policy [ 104.788586][ T7855] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1468'. [ 104.802897][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1468'. [ 104.830465][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1468'. [ 104.840011][ T7851] Alternate GPT is invalid, using primary GPT. [ 104.846135][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1468'. [ 104.846410][ T7851] loop1: p2 p3 p7 [ 104.874569][ T7876] netlink: 'syz.5.1473': attribute type 10 has an invalid length. [ 104.878598][ T2993] Alternate GPT is invalid, using primary GPT. [ 104.888694][ T2993] loop1: p2 p3 p7 [ 104.903748][ T7876] team0: Device hsr_slave_0 failed to register rx_handler [ 104.911449][ T7851] FAULT_INJECTION: forcing a failure. [ 104.911449][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 104.924263][ T7851] CPU: 1 UID: 0 PID: 7851 Comm: syz.1.1467 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.924287][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.924298][ T7851] Call Trace: [ 104.924305][ T7851] [ 104.924313][ T7851] __dump_stack+0x1d/0x30 [ 104.924331][ T7851] dump_stack_lvl+0xe8/0x140 [ 104.924356][ T7851] dump_stack+0x15/0x1b [ 104.924369][ T7851] should_fail_ex+0x265/0x280 [ 104.924389][ T7851] should_failslab+0x8c/0xb0 [ 104.924410][ T7851] kmem_cache_alloc_node_noprof+0x57/0x320 [ 104.924489][ T7851] ? __alloc_skb+0x101/0x320 [ 104.924506][ T7851] __alloc_skb+0x101/0x320 [ 104.924521][ T7851] ? audit_log_start+0x365/0x6c0 [ 104.924587][ T7851] audit_log_start+0x380/0x6c0 [ 104.924645][ T7851] audit_seccomp+0x48/0x100 [ 104.924670][ T7851] ? __seccomp_filter+0x68c/0x10d0 [ 104.924714][ T7851] __seccomp_filter+0x69d/0x10d0 [ 104.924846][ T7851] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.924868][ T7851] ? vfs_write+0x7e8/0x960 [ 104.924890][ T7851] ? __rcu_read_unlock+0x4f/0x70 [ 104.924982][ T7851] ? __fget_files+0x184/0x1c0 [ 104.925008][ T7851] __secure_computing+0x82/0x150 [ 104.925026][ T7851] syscall_trace_enter+0xcf/0x1e0 [ 104.925049][ T7851] do_syscall_64+0xac/0x200 [ 104.925128][ T7851] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.925147][ T7851] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.925167][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.925244][ T7851] RIP: 0033:0x7fcaac61ebe9 [ 104.925275][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.925290][ T7851] RSP: 002b:00007fcaab07f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff [ 104.925330][ T7851] RAX: ffffffffffffffda RBX: 00007fcaac845fa0 RCX: 00007fcaac61ebe9 [ 104.925342][ T7851] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 104.925353][ T7851] RBP: 00007fcaab07f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.925365][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.925378][ T7851] R13: 00007fcaac846038 R14: 00007fcaac845fa0 R15: 00007fff16e52068 [ 104.925396][ T7851] [ 104.944040][ T7855] loop7: detected capacity change from 0 to 512 [ 104.953780][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1468'. [ 104.996754][ T7873] loop6: detected capacity change from 0 to 8192 [ 105.081256][ T7855] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.174148][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1468'. [ 105.192985][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1468'. [ 105.215328][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1468'. [ 105.246620][ T4222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.323146][ T7892] SELinux: failed to load policy [ 105.462607][ T7897] loop7: detected capacity change from 0 to 8192 [ 105.474355][ T7907] SELinux: failed to load policy [ 105.516654][ T7909] loop1: detected capacity change from 0 to 512 [ 105.526730][ T7909] EXT4-fs: Ignoring removed nobh option [ 105.540298][ T7909] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1489: iget: bad i_size value: 38620345925642 [ 105.566955][ T7909] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1489: couldn't read orphan inode 15 (err -117) [ 105.579581][ T7909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.610875][ T7914] loop7: detected capacity change from 0 to 1024 [ 105.643282][ T7914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.698914][ T7914] bond1: entered promiscuous mode [ 105.704108][ T7914] bond1: entered allmulticast mode [ 105.715417][ T7914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.725862][ T7914] bond1 (unregistering): Released all slaves [ 105.744163][ T7922] SELinux: failed to load policy [ 105.767464][ T7925] FAULT_INJECTION: forcing a failure. [ 105.767464][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 105.780193][ T7925] CPU: 1 UID: 0 PID: 7925 Comm: syz.5.1494 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.780351][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.780362][ T7925] Call Trace: [ 105.780368][ T7925] [ 105.780375][ T7925] __dump_stack+0x1d/0x30 [ 105.780396][ T7925] dump_stack_lvl+0xe8/0x140 [ 105.780416][ T7925] dump_stack+0x15/0x1b [ 105.780433][ T7925] should_fail_ex+0x265/0x280 [ 105.780477][ T7925] should_failslab+0x8c/0xb0 [ 105.780497][ T7925] __kmalloc_cache_node_noprof+0x54/0x320 [ 105.780521][ T7925] ? page_pool_create_percpu+0x4d/0x630 [ 105.780603][ T7925] page_pool_create_percpu+0x4d/0x630 [ 105.780632][ T7925] ? bpf_test_run_xdp_live+0x114/0xfe0 [ 105.780720][ T7925] page_pool_create+0x1a/0x30 [ 105.780747][ T7925] bpf_test_run_xdp_live+0x12e/0xfe0 [ 105.780815][ T7925] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 105.780837][ T7925] ? __pfx_autoremove_wake_function+0x10/0x10 [ 105.780863][ T7925] ? 0xffffffffa02054c0 [ 105.780875][ T7925] ? synchronize_rcu+0x45/0x320 [ 105.780961][ T7925] ? 0xffffffffa02054c0 [ 105.780972][ T7925] ? 0xffffffffa02054c0 [ 105.780982][ T7925] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 105.781020][ T7925] ? 0xffffffffa0209598 [ 105.781041][ T7925] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 105.781130][ T7925] bpf_prog_test_run_xdp+0x4f5/0x910 [ 105.781152][ T7925] ? __rcu_read_unlock+0x4f/0x70 [ 105.781175][ T7925] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 105.781266][ T7925] bpf_prog_test_run+0x22a/0x390 [ 105.781298][ T7925] __sys_bpf+0x4b9/0x7b0 [ 105.781323][ T7925] __x64_sys_bpf+0x41/0x50 [ 105.781343][ T7925] x64_sys_call+0x2aea/0x2ff0 [ 105.781359][ T7925] do_syscall_64+0xd2/0x200 [ 105.781426][ T7925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.781445][ T7925] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.781464][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.781549][ T7925] RIP: 0033:0x7ff3f4a2ebe9 [ 105.781564][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.781642][ T7925] RSP: 002b:00007ff3f348f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.781659][ T7925] RAX: ffffffffffffffda RBX: 00007ff3f4c55fa0 RCX: 00007ff3f4a2ebe9 [ 105.781675][ T7925] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 105.781687][ T7925] RBP: 00007ff3f348f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.781698][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.781787][ T7925] R13: 00007ff3f4c56038 R14: 00007ff3f4c55fa0 R15: 00007ffc89630b18 [ 105.781805][ T7925] [ 106.068716][ T4222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.199309][ T29] kauditd_printk_skb: 830 callbacks suppressed [ 106.199323][ T29] audit: type=1326 audit(106.198:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.234538][ T29] audit: type=1326 audit(106.228:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.237375][ T1454] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 106.257382][ T29] audit: type=1326 audit(106.228:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.293014][ T29] audit: type=1326 audit(106.228:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.302948][ T1454] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 106.316084][ T29] audit: type=1326 audit(106.228:7264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.328506][ T1454] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.328506][ T1454] [ 106.351459][ T29] audit: type=1326 audit(106.228:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.361328][ T1454] EXT4-fs (loop1): Total free blocks count 0 [ 106.384078][ T29] audit: type=1326 audit(106.228:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.390147][ T1454] EXT4-fs (loop1): Free/Dirty block details [ 106.412792][ T29] audit: type=1326 audit(106.228:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.412816][ T29] audit: type=1326 audit(106.228:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.412835][ T29] audit: type=1326 audit(106.228:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.7.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f31caebe9 code=0x7ffc0000 [ 106.418718][ T1454] EXT4-fs (loop1): free_blocks=0 [ 106.493705][ T1454] EXT4-fs (loop1): dirty_blocks=16020 [ 106.499145][ T1454] EXT4-fs (loop1): Block reservation details [ 106.505142][ T1454] EXT4-fs (loop1): i_reserved_data_blocks=16020 [ 106.567174][ T7936] loop7: detected capacity change from 0 to 8192 [ 106.588144][ T7940] SELinux: failed to load policy [ 106.610567][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 106.712000][ T7952] loop0: detected capacity change from 0 to 256 [ 106.947391][ T7974] SELinux: failed to load policy [ 107.004461][ T7975] loop5: detected capacity change from 0 to 8192 [ 107.057246][ T7983] loop1: detected capacity change from 0 to 512 [ 107.096638][ T7983] EXT4-fs: Ignoring removed nobh option [ 107.111245][ T7983] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1520: iget: bad i_size value: 38620345925642 [ 107.192445][ T7983] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1520: couldn't read orphan inode 15 (err -117) [ 107.254114][ T7983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.678800][ T51] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap [ 107.737858][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 107.750346][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.750346][ T51] [ 107.760056][ T51] EXT4-fs (loop1): Total free blocks count 0 [ 107.766099][ T51] EXT4-fs (loop1): Free/Dirty block details [ 107.772367][ T51] EXT4-fs (loop1): free_blocks=0 [ 107.777301][ T51] EXT4-fs (loop1): dirty_blocks=16000 [ 107.782780][ T51] EXT4-fs (loop1): Block reservation details [ 107.788747][ T51] EXT4-fs (loop1): i_reserved_data_blocks=16000 [ 107.823116][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 108.035063][ T8013] SELinux: failed to load policy [ 108.310772][ T7972] loop7: detected capacity change from 0 to 8192 [ 108.337323][ T7972] vfat: Unknown parameter '' [ 108.505948][ T8037] loop0: detected capacity change from 0 to 512 [ 108.521686][ T8037] EXT4-fs: Ignoring removed nobh option [ 108.583485][ T8037] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1541: iget: bad i_size value: 38620345925642 [ 108.602673][ T8041] SELinux: failed to load policy [ 108.645693][ T8037] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1541: couldn't read orphan inode 15 (err -117) [ 108.684478][ T8037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.718807][ T8054] C: renamed from team_slave_0 (while UP) [ 108.790647][ T8057] can0: slcan on ttyS3. [ 108.860881][ T8054] can0 (unregistered): slcan off ttyS3. [ 108.874193][ T8057] can0: slcan on ttyS3. [ 108.888673][ T8054] netlink: 'syz.5.1548': attribute type 1 has an invalid length. [ 109.043285][ T8053] can0 (unregistered): slcan off ttyS3. [ 109.319295][ T8083] loop1: detected capacity change from 0 to 8192 [ 109.325961][ T8095] __nla_validate_parse: 12 callbacks suppressed [ 109.326107][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1557'. [ 109.406189][ T148] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 109.453949][ T148] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 109.466744][ T148] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.466744][ T148] [ 109.476978][ T148] EXT4-fs (loop0): Total free blocks count 0 [ 109.483093][ T148] EXT4-fs (loop0): Free/Dirty block details [ 109.489134][ T148] EXT4-fs (loop0): free_blocks=0 [ 109.494102][ T148] EXT4-fs (loop0): dirty_blocks=10436 [ 109.499511][ T148] EXT4-fs (loop0): Block reservation details [ 109.505632][ T148] EXT4-fs (loop0): i_reserved_data_blocks=10436 [ 109.584048][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1562'. [ 109.626817][ T148] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 109.703728][ T8120] loop5: detected capacity change from 0 to 512 [ 109.740668][ T8120] EXT4-fs: Ignoring removed nobh option [ 109.752656][ T8122] sel_write_load: 1 callbacks suppressed [ 109.752670][ T8122] SELinux: failed to load policy [ 109.786755][ T8120] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 109.801815][ T8120] EXT4-fs (loop5): orphan cleanup on readonly fs [ 109.816009][ T8120] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1563: bad orphan inode 15 [ 109.862947][ T8120] ext4_test_bit(bit=14, block=18) = 1 [ 109.868413][ T8120] is_bad_inode(inode)=0 [ 109.872767][ T8120] NEXT_ORPHAN(inode)=1023 [ 109.877133][ T8120] max_ino=32 [ 109.880388][ T8120] i_nlink=0 [ 109.895701][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1569'. [ 109.926153][ T8120] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1563: bg 0: block 161: padding at end of block bitmap is not set [ 109.978639][ T8120] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 109.979539][ T8137] loop7: detected capacity change from 0 to 512 [ 110.003497][ T8120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.009947][ T8137] EXT4-fs: Ignoring removed nobh option [ 110.041209][ T8137] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1570: iget: bad i_size value: 38620345925642 [ 110.065102][ T8137] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1570: couldn't read orphan inode 15 (err -117) [ 110.103401][ T8137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.194914][ T8070] loop6: detected capacity change from 0 to 8192 [ 110.212823][ T8070] vfat: Unknown parameter '' [ 110.353087][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1575'. [ 110.383619][ T8148] FAULT_INJECTION: forcing a failure. [ 110.383619][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 110.396306][ T8148] CPU: 1 UID: 0 PID: 8148 Comm: syz.6.1575 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.396333][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.396345][ T8148] Call Trace: [ 110.396352][ T8148] [ 110.396360][ T8148] __dump_stack+0x1d/0x30 [ 110.396386][ T8148] dump_stack_lvl+0xe8/0x140 [ 110.396405][ T8148] dump_stack+0x15/0x1b [ 110.396421][ T8148] should_fail_ex+0x265/0x280 [ 110.396499][ T8148] should_failslab+0x8c/0xb0 [ 110.396524][ T8148] kmem_cache_alloc_noprof+0x50/0x310 [ 110.396622][ T8148] ? skb_clone+0x151/0x1f0 [ 110.396646][ T8148] skb_clone+0x151/0x1f0 [ 110.396667][ T8148] __netlink_deliver_tap+0x2c9/0x500 [ 110.396818][ T8148] ? netlink_attachskb+0x2d0/0x610 [ 110.396856][ T8148] netlink_sendskb+0x126/0x150 [ 110.396960][ T8148] netlink_unicast+0x2a2/0x690 [ 110.396992][ T8148] netlink_ack+0x4c8/0x500 [ 110.397011][ T8148] netlink_rcv_skb+0x192/0x220 [ 110.397026][ T8148] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.397091][ T8148] rtnetlink_rcv+0x1c/0x30 [ 110.397110][ T8148] netlink_unicast+0x5bd/0x690 [ 110.397142][ T8148] netlink_sendmsg+0x58b/0x6b0 [ 110.397166][ T8148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.397248][ T8148] __sock_sendmsg+0x145/0x180 [ 110.397275][ T8148] ____sys_sendmsg+0x31e/0x4e0 [ 110.397300][ T8148] ___sys_sendmsg+0x17b/0x1d0 [ 110.397332][ T8148] __x64_sys_sendmsg+0xd4/0x160 [ 110.397406][ T8148] x64_sys_call+0x191e/0x2ff0 [ 110.397427][ T8148] do_syscall_64+0xd2/0x200 [ 110.397460][ T8148] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.397481][ T8148] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.397519][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.397541][ T8148] RIP: 0033:0x7fa04ffdebe9 [ 110.397556][ T8148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.397572][ T8148] RSP: 002b:00007fa04ea47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.397643][ T8148] RAX: ffffffffffffffda RBX: 00007fa050205fa0 RCX: 00007fa04ffdebe9 [ 110.397656][ T8148] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 110.397669][ T8148] RBP: 00007fa04ea47090 R08: 0000000000000000 R09: 0000000000000000 [ 110.397682][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.397694][ T8148] R13: 00007fa050206038 R14: 00007fa050205fa0 R15: 00007fff03e46e08 [ 110.397712][ T8148] [ 110.701946][ T7881] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 110.738217][ T148] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 110.751083][ T148] EXT4-fs (loop7): This should not happen!! Data will be lost [ 110.751083][ T148] [ 110.760912][ T148] EXT4-fs (loop7): Total free blocks count 0 [ 110.766987][ T148] EXT4-fs (loop7): Free/Dirty block details [ 110.773226][ T148] EXT4-fs (loop7): free_blocks=0 [ 110.778332][ T148] EXT4-fs (loop7): dirty_blocks=12268 [ 110.783733][ T148] EXT4-fs (loop7): Block reservation details [ 110.789726][ T148] EXT4-fs (loop7): i_reserved_data_blocks=12268 [ 110.803713][ T148] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 110.831787][ T3621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.939873][ T8169] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1584'. [ 111.200606][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 111.200618][ T29] audit: type=1326 audit(111.200:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.306230][ T29] audit: type=1326 audit(111.200:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.329139][ T29] audit: type=1326 audit(111.200:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.352105][ T29] audit: type=1326 audit(111.200:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.375106][ T29] audit: type=1326 audit(111.200:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.398190][ T29] audit: type=1326 audit(111.200:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.421463][ T29] audit: type=1326 audit(111.200:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.444388][ T29] audit: type=1326 audit(111.200:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.467350][ T29] audit: type=1326 audit(111.200:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.490593][ T29] audit: type=1326 audit(111.200:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 111.595109][ T8190] loop6: detected capacity change from 0 to 512 [ 111.602550][ T8188] delete_channel: no stack [ 111.621030][ T8190] EXT4-fs: Ignoring removed nobh option [ 111.639755][ T8190] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1592: iget: bad i_size value: 38620345925642 [ 111.673542][ T8190] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1592: couldn't read orphan inode 15 (err -117) [ 111.689227][ T8190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.747951][ T8194] siw: device registration error -23 [ 111.980099][ T8197] hub 6-0:1.0: USB hub found [ 111.985790][ T8197] hub 6-0:1.0: 8 ports detected [ 112.225314][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1596'. [ 112.245526][ T148] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 112.277133][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1596'. [ 112.295898][ T148] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 112.308471][ T148] EXT4-fs (loop6): This should not happen!! Data will be lost [ 112.308471][ T148] [ 112.318305][ T148] EXT4-fs (loop6): Total free blocks count 0 [ 112.324642][ T148] EXT4-fs (loop6): Free/Dirty block details [ 112.330656][ T148] EXT4-fs (loop6): free_blocks=0 [ 112.335746][ T148] EXT4-fs (loop6): dirty_blocks=16000 [ 112.341145][ T148] EXT4-fs (loop6): Block reservation details [ 112.347289][ T148] EXT4-fs (loop6): i_reserved_data_blocks=16000 [ 112.383930][ T41] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 112.459460][ T8142] loop1: detected capacity change from 0 to 8192 [ 112.484576][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1598'. [ 112.763784][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1604'. [ 112.832593][ T8167] loop0: detected capacity change from 0 to 8192 [ 112.864163][ T8167] vfat: Unknown parameter '' [ 112.872312][ T8228] SELinux: failed to load policy [ 112.902686][ T8233] loop6: detected capacity change from 0 to 1024 [ 112.936818][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'. [ 112.948448][ T8233] EXT4-fs: Ignoring removed orlov option [ 112.963285][ T8233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.032064][ T8233] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 113.200861][ T8255] FAULT_INJECTION: forcing a failure. [ 113.200861][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 113.213576][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.0.1616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.213604][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.213616][ T8255] Call Trace: [ 113.213622][ T8255] [ 113.213630][ T8255] __dump_stack+0x1d/0x30 [ 113.213648][ T8255] dump_stack_lvl+0xe8/0x140 [ 113.213681][ T8255] dump_stack+0x15/0x1b [ 113.213734][ T8255] should_fail_ex+0x265/0x280 [ 113.213751][ T8255] should_failslab+0x8c/0xb0 [ 113.213772][ T8255] kmem_cache_alloc_node_noprof+0x57/0x320 [ 113.213813][ T8255] ? __alloc_skb+0x101/0x320 [ 113.213883][ T8255] __alloc_skb+0x101/0x320 [ 113.213902][ T8255] netlink_alloc_large_skb+0xba/0xf0 [ 113.214086][ T8255] netlink_sendmsg+0x3cf/0x6b0 [ 113.214109][ T8255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.214131][ T8255] __sock_sendmsg+0x145/0x180 [ 113.214227][ T8255] ____sys_sendmsg+0x31e/0x4e0 [ 113.214386][ T8255] ___sys_sendmsg+0x17b/0x1d0 [ 113.214413][ T8255] __x64_sys_sendmsg+0xd4/0x160 [ 113.214433][ T8255] x64_sys_call+0x191e/0x2ff0 [ 113.214497][ T8255] do_syscall_64+0xd2/0x200 [ 113.214554][ T8255] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.214573][ T8255] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.214593][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.214610][ T8255] RIP: 0033:0x7fc0fd14ebe9 [ 113.214624][ T8255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.214639][ T8255] RSP: 002b:00007fc0fbbaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.214713][ T8255] RAX: ffffffffffffffda RBX: 00007fc0fd375fa0 RCX: 00007fc0fd14ebe9 [ 113.214725][ T8255] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 113.214783][ T8255] RBP: 00007fc0fbbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 113.214793][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.214803][ T8255] R13: 00007fc0fd376038 R14: 00007fc0fd375fa0 R15: 00007fff5d561eb8 [ 113.214818][ T8255] [ 113.882620][ T3636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.200788][ T8265] Set syz1 is full, maxelem 65536 reached [ 114.409404][ T8285] SELinux: failed to load policy [ 114.524003][ T8235] loop7: detected capacity change from 0 to 8192 [ 114.549351][ T8293] netlink: 'syz.5.1631': attribute type 10 has an invalid length. [ 114.572390][ T8293] team0: Device hsr_slave_0 failed to register rx_handler [ 114.843534][ T8301] SELinux: ebitmap: truncated map [ 114.861536][ T8301] SELinux: failed to load policy [ 115.404165][ T8312] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 115.427042][ T8312] SELinux: failed to load policy [ 115.475434][ T8314] FAULT_INJECTION: forcing a failure. [ 115.475434][ T8314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.488877][ T8314] CPU: 1 UID: 0 PID: 8314 Comm: syz.6.1636 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.488901][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.488911][ T8314] Call Trace: [ 115.488918][ T8314] [ 115.488925][ T8314] __dump_stack+0x1d/0x30 [ 115.488947][ T8314] dump_stack_lvl+0xe8/0x140 [ 115.488965][ T8314] dump_stack+0x15/0x1b [ 115.489064][ T8314] should_fail_ex+0x265/0x280 [ 115.489081][ T8314] should_fail_alloc_page+0xf2/0x100 [ 115.489106][ T8314] __alloc_frozen_pages_noprof+0xff/0x360 [ 115.489207][ T8314] alloc_pages_mpol+0xb3/0x250 [ 115.489237][ T8314] vma_alloc_folio_noprof+0x1aa/0x300 [ 115.489268][ T8314] do_wp_page+0x5db/0x24e0 [ 115.489288][ T8314] ? __rcu_read_lock+0x37/0x50 [ 115.489365][ T8314] handle_mm_fault+0x77d/0x2c20 [ 115.489383][ T8314] ? __rcu_read_unlock+0x4f/0x70 [ 115.489409][ T8314] do_user_addr_fault+0x3fe/0x1090 [ 115.489458][ T8314] exc_page_fault+0x62/0xa0 [ 115.489530][ T8314] asm_exc_page_fault+0x26/0x30 [ 115.489547][ T8314] RIP: 0010:__put_user_4+0xd/0x20 [ 115.489570][ T8314] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 115.489585][ T8314] RSP: 0018:ffffc90003c53e10 EFLAGS: 00050202 [ 115.489642][ T8314] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040 [ 115.489654][ T8314] RDX: 00000000000003cb RSI: 0000000000000000 RDI: ffff888119a7c100 [ 115.489667][ T8314] RBP: 0000000000000000 R08: 0001888119a7c103 R09: 0000000000000000 [ 115.489677][ T8314] R10: 00000000c0481273 R11: 0000000000000000 R12: 0000000000000246 [ 115.489708][ T8314] R13: 0000200000000040 R14: ffff888119a7c030 R15: ffff88811869e500 [ 115.489724][ T8314] sg_ioctl+0xfe8/0x1360 [ 115.489755][ T8314] ? __pfx_sg_ioctl+0x10/0x10 [ 115.489894][ T8314] __se_sys_ioctl+0xce/0x140 [ 115.489913][ T8314] __x64_sys_ioctl+0x43/0x50 [ 115.489938][ T8314] x64_sys_call+0x1816/0x2ff0 [ 115.489955][ T8314] do_syscall_64+0xd2/0x200 [ 115.489975][ T8314] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.490089][ T8314] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.490108][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.490125][ T8314] RIP: 0033:0x7fa04ffdebe9 [ 115.490137][ T8314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.490150][ T8314] RSP: 002b:00007fa04ea47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.490214][ T8314] RAX: ffffffffffffffda RBX: 00007fa050205fa0 RCX: 00007fa04ffdebe9 [ 115.490227][ T8314] RDX: 0000200000000040 RSI: 000000000000227c RDI: 0000000000000003 [ 115.490239][ T8314] RBP: 00007fa04ea47090 R08: 0000000000000000 R09: 0000000000000000 [ 115.490249][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.490259][ T8314] R13: 00007fa050206038 R14: 00007fa050205fa0 R15: 00007fff03e46e08 [ 115.490297][ T8314] [ 115.902897][ T8325] SELinux: failed to load policy [ 116.007051][ T8323] loop5: detected capacity change from 0 to 8192 [ 116.149909][ T8336] loop9: detected capacity change from 0 to 7 [ 116.156284][ T8336] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.164191][ T8336] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.172051][ T8336] loop9: unable to read partition table [ 116.177751][ T8336] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 116.177751][ T8336] ) failed (rc=-5) [ 116.268990][ T3791] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.280555][ T8341] __nla_validate_parse: 3 callbacks suppressed [ 116.280639][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1645'. [ 116.376178][ T3791] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.442190][ T3791] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.450214][ T3791] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.458349][ T3791] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.487468][ T8343] SELinux: failed to load policy [ 116.490431][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1650'. [ 116.716133][ T8370] loop5: detected capacity change from 0 to 512 [ 116.727423][ T8370] EXT4-fs: Ignoring removed nobh option [ 116.742856][ T8370] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1659: iget: bad i_size value: 38620345925642 [ 116.767067][ T8370] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1659: couldn't read orphan inode 15 (err -117) [ 116.793669][ T8370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.859270][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1662'. [ 117.008448][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 117.008461][ T29] audit: type=1326 audit(117.013:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.083663][ T29] audit: type=1326 audit(117.013:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.106639][ T29] audit: type=1326 audit(117.043:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.107410][ T8395] netlink: 'syz.0.1665': attribute type 10 has an invalid length. [ 117.129623][ T29] audit: type=1326 audit(117.043:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.129649][ T29] audit: type=1326 audit(117.043:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.183329][ T29] audit: type=1326 audit(117.043:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.206310][ T29] audit: type=1326 audit(117.053:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.229254][ T29] audit: type=1326 audit(117.053:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.246505][ T8395] team0: Device hsr_slave_0 failed to register rx_handler [ 117.252099][ T29] audit: type=1326 audit(117.053:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.282063][ T29] audit: type=1326 audit(117.053:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 117.504079][ T8396] loop1: detected capacity change from 0 to 8192 [ 117.598888][ T1454] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 117.622400][ T1454] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 117.635074][ T1454] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.635074][ T1454] [ 117.644828][ T1454] EXT4-fs (loop5): Total free blocks count 0 [ 117.650838][ T1454] EXT4-fs (loop5): Free/Dirty block details [ 117.656792][ T1454] EXT4-fs (loop5): free_blocks=0 [ 117.661746][ T1454] EXT4-fs (loop5): dirty_blocks=10156 [ 117.667235][ T1454] EXT4-fs (loop5): Block reservation details [ 117.673356][ T1454] EXT4-fs (loop5): i_reserved_data_blocks=10156 [ 117.693677][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 117.852017][ T8431] SELinux: failed to load policy [ 118.008827][ T8445] FAULT_INJECTION: forcing a failure. [ 118.008827][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 118.021774][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.5.1685 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.021819][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.021832][ T8445] Call Trace: [ 118.021839][ T8445] [ 118.021847][ T8445] __dump_stack+0x1d/0x30 [ 118.021870][ T8445] dump_stack_lvl+0xe8/0x140 [ 118.021970][ T8445] dump_stack+0x15/0x1b [ 118.021988][ T8445] should_fail_ex+0x265/0x280 [ 118.022005][ T8445] should_failslab+0x8c/0xb0 [ 118.022025][ T8445] kmem_cache_alloc_noprof+0x50/0x310 [ 118.022108][ T8445] ? skb_clone+0x151/0x1f0 [ 118.022136][ T8445] skb_clone+0x151/0x1f0 [ 118.022157][ T8445] pfkey_sendmsg+0x2cc/0x900 [ 118.022179][ T8445] ? avc_has_perm+0xf7/0x180 [ 118.022230][ T8445] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 118.022253][ T8445] __sock_sendmsg+0x145/0x180 [ 118.022305][ T8445] ____sys_sendmsg+0x31e/0x4e0 [ 118.022327][ T8445] ___sys_sendmsg+0x17b/0x1d0 [ 118.022354][ T8445] __x64_sys_sendmsg+0xd4/0x160 [ 118.022379][ T8445] x64_sys_call+0x191e/0x2ff0 [ 118.022453][ T8445] do_syscall_64+0xd2/0x200 [ 118.022476][ T8445] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 118.022500][ T8445] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 118.022522][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.022591][ T8445] RIP: 0033:0x7ff3f4a2ebe9 [ 118.022605][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.022622][ T8445] RSP: 002b:00007ff3f348f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.022642][ T8445] RAX: ffffffffffffffda RBX: 00007ff3f4c55fa0 RCX: 00007ff3f4a2ebe9 [ 118.022655][ T8445] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000007 [ 118.022667][ T8445] RBP: 00007ff3f348f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.022677][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.022706][ T8445] R13: 00007ff3f4c56038 R14: 00007ff3f4c55fa0 R15: 00007ffc89630b18 [ 118.022720][ T8445] [ 118.279382][ T8448] loop5: detected capacity change from 0 to 512 [ 118.294977][ T8450] loop0: detected capacity change from 0 to 512 [ 118.326838][ T8448] EXT4-fs: Ignoring removed nobh option [ 118.351497][ T8448] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1686: iget: bad i_size value: 38620345925642 [ 118.631929][ T8448] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1686: couldn't read orphan inode 15 (err -117) [ 118.645457][ T8448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.750528][ T8458] netlink: 'syz.7.1689': attribute type 10 has an invalid length. [ 118.781563][ T8458] team0: Device hsr_slave_0 failed to register rx_handler [ 118.841704][ T8479] loop6: detected capacity change from 0 to 512 [ 118.859145][ T8479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.874676][ T8479] netlink: 'syz.6.1698': attribute type 13 has an invalid length. [ 118.882592][ T8479] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1698'. [ 118.917962][ T3636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.936536][ T8485] loop1: detected capacity change from 0 to 512 [ 118.992345][ T8490] loop1: detected capacity change from 0 to 512 [ 119.042535][ T8490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 119.129135][ T1454] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 119.181159][ T1454] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 119.193652][ T1454] EXT4-fs (loop5): This should not happen!! Data will be lost [ 119.193652][ T1454] [ 119.203522][ T1454] EXT4-fs (loop5): Total free blocks count 0 [ 119.210154][ T1454] EXT4-fs (loop5): Free/Dirty block details [ 119.216091][ T1454] EXT4-fs (loop5): free_blocks=0 [ 119.221034][ T1454] EXT4-fs (loop5): dirty_blocks=9484 [ 119.226344][ T1454] EXT4-fs (loop5): Block reservation details [ 119.232406][ T1454] EXT4-fs (loop5): i_reserved_data_blocks=9484 [ 119.248601][ T1454] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 119.465498][ T8519] loop0: detected capacity change from 0 to 512 [ 119.841581][ T8527] Set syz1 is full, maxelem 65536 reached [ 119.849421][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'. [ 119.880654][ T8540] pim6reg: entered allmulticast mode [ 119.909331][ T8540] pim6reg: left allmulticast mode [ 120.061439][ T8550] loop7: detected capacity change from 0 to 2048 [ 120.081770][ T8551] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 120.090819][ T8551] team0: Device hsr_slave_0 failed to register rx_handler [ 120.108597][ T3651] Alternate GPT is invalid, using primary GPT. [ 120.115063][ T3651] loop7: p2 p3 p7 [ 120.128906][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 120.157287][ T8550] Alternate GPT is invalid, using primary GPT. [ 120.163603][ T8550] loop7: p2 p3 p7 [ 120.196217][ T2993] Alternate GPT is invalid, using primary GPT. [ 120.202820][ T2993] loop7: p2 p3 p7 [ 120.254810][ T8562] loop1: detected capacity change from 0 to 512 [ 120.305638][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 120.319975][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 120.331280][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 120.367851][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 120.378565][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 120.384786][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 120.414342][ T8579] loop6: detected capacity change from 0 to 512 [ 120.428506][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 120.439864][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 120.451212][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 120.465946][ T8579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.100323][ T8594] loop0: detected capacity change from 0 to 1024 [ 121.134744][ T8594] EXT4-fs: Ignoring removed oldalloc option [ 121.141050][ T8594] EXT4-fs: Ignoring removed orlov option [ 121.155896][ T8594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.310413][ T8602] loop7: detected capacity change from 0 to 512 [ 121.344907][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.357736][ T3636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 121.369197][ T8602] EXT4-fs: Ignoring removed nobh option [ 121.391894][ T8604] loop0: detected capacity change from 0 to 512 [ 121.419873][ T8602] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1746: iget: bad i_size value: 38620345925642 [ 121.455068][ T8575] loop1: detected capacity change from 0 to 8192 [ 121.464004][ T8602] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1746: couldn't read orphan inode 15 (err -117) [ 121.489165][ T8602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.688663][ T8626] loop0: detected capacity change from 0 to 2048 [ 121.700530][ T8627] loop5: detected capacity change from 0 to 512 [ 121.712325][ T8631] loop1: detected capacity change from 0 to 2048 [ 121.755245][ T8631] Alternate GPT is invalid, using primary GPT. [ 121.761620][ T8631] loop1: p2 p3 p7 [ 121.774438][ T3651] Alternate GPT is invalid, using primary GPT. [ 121.780880][ T3651] loop0: p2 p3 p7 [ 121.832477][ T8626] Alternate GPT is invalid, using primary GPT. [ 121.839101][ T8626] loop0: p2 p3 p7 [ 121.908420][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 121.940459][ T8642] loop1: detected capacity change from 0 to 2048 [ 122.027248][ T8642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 122.093978][ T8641] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.128734][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 122.128748][ T29] audit: type=1326 audit(122.136:8355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.6.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 122.158506][ T29] audit: type=1326 audit(122.136:8356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.6.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04ffdebe9 code=0x7ffc0000 [ 122.228902][ T8657] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 122.275636][ T8657] team0: Device hsr_slave_0 failed to register rx_handler [ 122.303982][ T8641] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.316465][ T8641] EXT4-fs (loop1): This should not happen!! Data will be lost [ 122.316465][ T8641] [ 122.326111][ T8641] EXT4-fs (loop1): Total free blocks count 0 [ 122.332134][ T8641] EXT4-fs (loop1): Free/Dirty block details [ 122.338156][ T8641] EXT4-fs (loop1): free_blocks=2415919104 [ 122.343900][ T8641] EXT4-fs (loop1): dirty_blocks=16 [ 122.349006][ T8641] EXT4-fs (loop1): Block reservation details [ 122.354991][ T8641] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 122.394378][ T8377] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 122.428084][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 122.430341][ T5048] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 122.453212][ T5048] EXT4-fs (loop7): This should not happen!! Data will be lost [ 122.453212][ T5048] [ 122.463136][ T5048] EXT4-fs (loop7): Total free blocks count 0 [ 122.469229][ T5048] EXT4-fs (loop7): Free/Dirty block details [ 122.475212][ T5048] EXT4-fs (loop7): free_blocks=0 [ 122.480148][ T5048] EXT4-fs (loop7): dirty_blocks=8800 [ 122.485456][ T5048] EXT4-fs (loop7): Block reservation details [ 122.491503][ T5048] EXT4-fs (loop7): i_reserved_data_blocks=8800 [ 122.531106][ T5048] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 122.750382][ T29] audit: type=1326 audit(122.756:8357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.5.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3f4a2d69f code=0x7ffc0000 [ 122.869483][ T29] audit: type=1326 audit(122.876:8358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.5.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff3f4a2ec77 code=0x7ffc0000 [ 122.897333][ T8639] loop5: detected capacity change from 0 to 8192 [ 122.944268][ T29] audit: type=1326 audit(122.906:8359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.5.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3f4a2d550 code=0x7ffc0000 [ 122.967109][ T29] audit: type=1326 audit(122.906:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.5.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3f4a2e7eb code=0x7ffc0000 [ 122.972220][ T8687] loop0: detected capacity change from 0 to 512 [ 122.990219][ T29] audit: type=1326 audit(122.916:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.5.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff3f4a2d84a code=0x7ffc0000 [ 123.019097][ T29] audit: type=1326 audit(122.916:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.5.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff3f4a2d84a code=0x7ffc0000 [ 123.042124][ T29] audit: type=1326 audit(122.916:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.5.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff3f4a2d457 code=0x7ffc0000 [ 123.065178][ T29] audit: type=1326 audit(122.916:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8638 comm="syz.5.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff3f4a3038a code=0x7ffc0000 [ 123.073447][ T8687] EXT4-fs: Ignoring removed nobh option [ 123.115722][ T8687] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1781: iget: bad i_size value: 38620345925642 [ 123.128831][ T8687] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1781: couldn't read orphan inode 15 (err -117) [ 123.142443][ T8687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.167813][ T8690] netlink: 'syz.1.1782': attribute type 10 has an invalid length. [ 123.338879][ T8695] loop5: detected capacity change from 0 to 512 [ 123.347013][ T8695] EXT4-fs: Ignoring removed orlov option [ 123.352791][ T8695] EXT4-fs: Ignoring removed oldalloc option [ 123.361776][ T8695] ext4: Unknown parameter 'smackfstransmute' [ 123.412528][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1785'. [ 123.534501][ T8710] loop7: detected capacity change from 0 to 1024 [ 123.555374][ T8712] loop6: detected capacity change from 0 to 512 [ 123.594572][ T8710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.612581][ T8712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 123.691312][ T4222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.713393][ T5048] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 123.715966][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1797'. [ 123.737035][ T5048] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 123.749658][ T5048] EXT4-fs (loop0): This should not happen!! Data will be lost [ 123.749658][ T5048] [ 123.759479][ T5048] EXT4-fs (loop0): Total free blocks count 0 [ 123.765550][ T5048] EXT4-fs (loop0): Free/Dirty block details [ 123.771480][ T5048] EXT4-fs (loop0): free_blocks=0 [ 123.776585][ T5048] EXT4-fs (loop0): dirty_blocks=16028 [ 123.782042][ T5048] EXT4-fs (loop0): Block reservation details [ 123.788088][ T5048] EXT4-fs (loop0): i_reserved_data_blocks=16028 [ 123.810397][ T5048] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 123.869425][ T3636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 123.926734][ T8728] loop7: detected capacity change from 0 to 8192 [ 124.092468][ T8751] loop7: detected capacity change from 0 to 2048 [ 124.102044][ T8754] netlink: 'syz.6.1808': attribute type 1 has an invalid length. [ 124.109338][ T8754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.145114][ T3651] Alternate GPT is invalid, using primary GPT. [ 124.151548][ T3651] loop7: p2 p3 p7 [ 124.156360][ T8759] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1810'. [ 124.175719][ T8751] Alternate GPT is invalid, using primary GPT. [ 124.182067][ T8751] loop7: p2 p3 p7 [ 124.226545][ T2993] Alternate GPT is invalid, using primary GPT. [ 124.233011][ T2993] loop7: p2 p3 p7 [ 124.264147][ T8765] loop5: detected capacity change from 0 to 512 [ 124.298418][ T8765] EXT4-fs: Ignoring removed nobh option [ 124.328466][ T8765] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1811: iget: bad i_size value: 38620345925642 [ 124.346428][ T8765] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1811: couldn't read orphan inode 15 (err -117) [ 124.386275][ T8765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.735802][ T8778] loop1: detected capacity change from 0 to 512 [ 124.816112][ T8780] SELinux: failed to load policy [ 124.853959][ T8784] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 124.882304][ T8784] SELinux: failed to load policy [ 124.974211][ T8795] netlink: 'syz.1.1821': attribute type 10 has an invalid length. [ 124.996541][ T31] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 125.010723][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 125.023250][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 125.023250][ T31] [ 125.033014][ T31] EXT4-fs (loop5): Total free blocks count 0 [ 125.039089][ T31] EXT4-fs (loop5): Free/Dirty block details [ 125.045199][ T31] EXT4-fs (loop5): free_blocks=0 [ 125.051027][ T31] EXT4-fs (loop5): dirty_blocks=16020 [ 125.056564][ T31] EXT4-fs (loop5): Block reservation details [ 125.062634][ T31] EXT4-fs (loop5): i_reserved_data_blocks=16020 [ 125.085099][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 125.303087][ T8810] loop5: detected capacity change from 0 to 512 [ 125.337177][ T8810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 125.715363][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1829'. [ 125.744555][ T8821] loop1: detected capacity change from 0 to 512 [ 125.859133][ T8825] loop0: detected capacity change from 0 to 1024 [ 125.881196][ T8825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.954205][ T8825] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1832: lblock 0 mapped to illegal pblock 0 (length 4) [ 125.978428][ T8825] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 125.990803][ T8825] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.990803][ T8825] [ 126.083335][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.155912][ T8845] loop6: detected capacity change from 0 to 2048 [ 126.158420][ T8846] loop0: detected capacity change from 0 to 512 [ 126.169605][ T8846] EXT4-fs: Ignoring removed nobh option [ 126.176753][ T3651] loop6: p1 < > p4 < > [ 126.186185][ T8842] SELinux: failed to load policy [ 126.200535][ T8845] loop6: p1 < > p4 < > [ 126.215659][ T8845] FAULT_INJECTION: forcing a failure. [ 126.215659][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 126.228575][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.6.1838 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.228675][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.228687][ T8845] Call Trace: [ 126.228694][ T8845] [ 126.228702][ T8845] __dump_stack+0x1d/0x30 [ 126.228723][ T8845] dump_stack_lvl+0xe8/0x140 [ 126.228738][ T8845] dump_stack+0x15/0x1b [ 126.228807][ T8845] should_fail_ex+0x265/0x280 [ 126.228920][ T8845] should_failslab+0x8c/0xb0 [ 126.228941][ T8845] kmem_cache_alloc_noprof+0x50/0x310 [ 126.228968][ T8845] ? skb_clone+0x151/0x1f0 [ 126.228990][ T8845] skb_clone+0x151/0x1f0 [ 126.229009][ T8845] __netlink_deliver_tap+0x2c9/0x500 [ 126.229151][ T8845] netlink_unicast+0x66b/0x690 [ 126.229178][ T8845] netlink_sendmsg+0x58b/0x6b0 [ 126.229236][ T8845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.229254][ T8845] __sock_sendmsg+0x145/0x180 [ 126.229281][ T8845] ____sys_sendmsg+0x31e/0x4e0 [ 126.229363][ T8845] ___sys_sendmsg+0x17b/0x1d0 [ 126.229393][ T8845] __x64_sys_sendmsg+0xd4/0x160 [ 126.229413][ T8845] x64_sys_call+0x191e/0x2ff0 [ 126.229431][ T8845] do_syscall_64+0xd2/0x200 [ 126.229503][ T8845] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.229525][ T8845] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 126.229545][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.229564][ T8845] RIP: 0033:0x7fa04ffdebe9 [ 126.229597][ T8845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.229618][ T8845] RSP: 002b:00007fa04ea47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.229637][ T8845] RAX: ffffffffffffffda RBX: 00007fa050205fa0 RCX: 00007fa04ffdebe9 [ 126.229647][ T8845] RDX: 00000000200080c0 RSI: 0000200000000080 RDI: 0000000000000003 [ 126.229660][ T8845] RBP: 00007fa04ea47090 R08: 0000000000000000 R09: 0000000000000000 [ 126.229670][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.229681][ T8845] R13: 00007fa050206038 R14: 00007fa050205fa0 R15: 00007fff03e46e08 [ 126.229724][ T8845] [ 126.497683][ T8850] SELinux: failed to load policy [ 126.509162][ T8846] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1836: iget: bad i_size value: 38620345925642 [ 126.534506][ T8846] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1836: couldn't read orphan inode 15 (err -117) [ 126.541964][ T8644] udevd[8644]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 126.546721][ T8854] loop6: detected capacity change from 0 to 512 [ 126.572010][ T3621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.590808][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 126.603635][ T8846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.676986][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.870980][ T8877] loop6: detected capacity change from 0 to 2048 [ 126.927658][ T3651] Alternate GPT is invalid, using primary GPT. [ 126.934172][ T3651] loop6: p2 p3 p7 [ 126.950227][ T8883] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 126.965549][ T8877] Alternate GPT is invalid, using primary GPT. [ 126.971912][ T8877] loop6: p2 p3 p7 [ 127.072614][ T8883] SELinux: failed to load policy [ 127.188259][ T8885] loop0: detected capacity change from 0 to 512 [ 127.235602][ T8885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.264391][ T8891] loop6: detected capacity change from 0 to 512 [ 127.306420][ T8893] loop5: detected capacity change from 0 to 512 [ 127.336265][ T8891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.391716][ T8900] netlink: 'syz.5.1858': attribute type 10 has an invalid length. [ 127.831389][ T8918] netlink: 'syz.1.1864': attribute type 10 has an invalid length. [ 127.896244][ T8917] loop5: detected capacity change from 0 to 8192 [ 127.925626][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 127.925639][ T29] audit: type=1326 audit(127.939:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0f31cad69f code=0x7ffc0000 [ 127.972251][ T8917] loop5: p1 p2 p3 p4 [ 127.978912][ T8917] loop5: p3 start 331777 is beyond EOD, truncated [ 127.985665][ T8917] loop5: p4 size 262144 extends beyond EOD, truncated [ 128.172770][ T8923] SELinux: failed to load policy [ 128.178409][ T29] audit: type=1326 audit(128.189:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0f31caec77 code=0x7ffc0000 [ 128.208207][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 128.219835][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 128.231772][ T8644] udevd[8644]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 128.258892][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.278639][ T29] audit: type=1326 audit(128.289:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f31cad550 code=0x7ffc0000 [ 128.305403][ T8852] loop7: detected capacity change from 0 to 8192 [ 128.323788][ T29] audit: type=1326 audit(128.319:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f31cae7eb code=0x7ffc0000 [ 128.353378][ T29] audit: type=1326 audit(128.349:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0f31cad84a code=0x7ffc0000 [ 128.376151][ T29] audit: type=1326 audit(128.349:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0f31cad84a code=0x7ffc0000 [ 128.378087][ T8929] loop0: detected capacity change from 0 to 512 [ 128.398972][ T29] audit: type=1326 audit(128.359:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0f31cad457 code=0x7ffc0000 [ 128.428127][ T29] audit: type=1326 audit(128.359:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0f31cb038a code=0x7ffc0000 [ 128.465087][ T29] audit: type=1326 audit(128.479:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f31cad550 code=0x7ffc0000 [ 128.522507][ T29] audit: type=1326 audit(128.479:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="syz.7.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0f31cad937 code=0x7ffc0000 [ 128.564055][ T3636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.579692][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'. [ 128.664518][ T8946] C: renamed from team_slave_0 (while UP) [ 128.684150][ T8946] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1876'. [ 128.711861][ T8946] can0: slcan on ttyS3. [ 128.770385][ T8946] can0 (unregistered): slcan off ttyS3. [ 128.780594][ T8946] can0: slcan on ttyS3. [ 128.789884][ T8946] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 128.797865][ T8946] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1876'. [ 128.817402][ T8950] loop7: detected capacity change from 0 to 8192 [ 128.825925][ T8951] loop6: detected capacity change from 0 to 8192 [ 128.871190][ T3651] loop7: p1 p2 p3 p4 [ 128.881164][ T8945] can0 (unregistered): slcan off ttyS3. [ 128.895040][ T3651] loop7: p3 start 331777 is beyond EOD, truncated [ 128.901685][ T3651] loop7: p4 size 262144 extends beyond EOD, truncated [ 128.924430][ T8950] loop7: p1 p2 p3 p4 [ 128.946502][ T8950] loop7: p3 start 331777 is beyond EOD, truncated [ 128.953019][ T8950] loop7: p4 size 262144 extends beyond EOD, truncated [ 129.113910][ T8989] loop0: detected capacity change from 0 to 512 [ 129.138669][ T8644] udevd[8644]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 129.151348][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 129.162958][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 129.193697][ T8989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 129.289571][ T9003] netlink: 'syz.5.1885': attribute type 10 has an invalid length. [ 129.298160][ T9003] team0: Device hsr_slave_0 failed to register rx_handler [ 129.347612][ T9009] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1888'. [ 129.628951][ T8999] loop7: detected capacity change from 0 to 8192 [ 130.058251][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 130.122056][ T9037] SELinux: failed to load policy [ 130.216797][ T9053] loop7: detected capacity change from 0 to 512 [ 130.228543][ T9053] EXT4-fs: Ignoring removed nobh option [ 130.249749][ T9053] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1905: iget: bad i_size value: 38620345925642 [ 130.286678][ T9053] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1905: couldn't read orphan inode 15 (err -117) [ 130.322997][ T9053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.383446][ T4222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.524162][ T9066] loop6: detected capacity change from 0 to 512 [ 130.625780][ T9066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 130.702147][ T9073] FAULT_INJECTION: forcing a failure. [ 130.702147][ T9073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.715357][ T9073] CPU: 0 UID: 0 PID: 9073 Comm: syz.1.1911 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.715385][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.715397][ T9073] Call Trace: [ 130.715403][ T9073] [ 130.715411][ T9073] __dump_stack+0x1d/0x30 [ 130.715430][ T9073] dump_stack_lvl+0xe8/0x140 [ 130.715449][ T9073] dump_stack+0x15/0x1b [ 130.715533][ T9073] should_fail_ex+0x265/0x280 [ 130.715564][ T9073] should_fail+0xb/0x20 [ 130.715582][ T9073] should_fail_usercopy+0x1a/0x20 [ 130.715619][ T9073] _copy_from_user+0x1c/0xb0 [ 130.715646][ T9073] __sys_sendto+0x19e/0x330 [ 130.715675][ T9073] __x64_sys_sendto+0x76/0x90 [ 130.715693][ T9073] x64_sys_call+0x2d05/0x2ff0 [ 130.715734][ T9073] do_syscall_64+0xd2/0x200 [ 130.715761][ T9073] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.715786][ T9073] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.715822][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.715841][ T9073] RIP: 0033:0x7fcaac61ebe9 [ 130.715857][ T9073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.715874][ T9073] RSP: 002b:00007fcaab07f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 130.715894][ T9073] RAX: ffffffffffffffda RBX: 00007fcaac845fa0 RCX: 00007fcaac61ebe9 [ 130.715919][ T9073] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000005 [ 130.715932][ T9073] RBP: 00007fcaab07f090 R08: 0000200000000140 R09: 000000000000001c [ 130.715944][ T9073] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 130.715957][ T9073] R13: 00007fcaac846038 R14: 00007fcaac845fa0 R15: 00007fff16e52068 [ 130.715976][ T9073] [ 130.908422][ T9075] SELinux: failed to load policy [ 130.931221][ T9046] loop0: detected capacity change from 0 to 8192 [ 131.018664][ T9083] loop5: detected capacity change from 0 to 512 [ 131.090654][ T9087] delete_channel: no stack [ 131.093727][ T9088] loop5: detected capacity change from 0 to 512 [ 131.122309][ T9090] loop0: detected capacity change from 0 to 512 [ 131.161786][ T9090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 131.176503][ T9088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 131.177211][ T9092] SELinux: failed to load policy [ 131.385126][ T3636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 131.479488][ T9117] loop1: detected capacity change from 0 to 512 [ 131.598508][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1929'. [ 131.643444][ T9127] loop1: detected capacity change from 0 to 512 [ 131.672920][ T9127] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 131.697273][ T9127] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 131.784753][ T9135] SELinux: failed to load policy [ 131.845962][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1940'. [ 131.860238][ T9145] loop7: detected capacity change from 0 to 512 [ 131.887800][ T9146] netlink: 'syz.6.1937': attribute type 10 has an invalid length. [ 131.896079][ T9146] team0: Device hsr_slave_0 failed to register rx_handler [ 132.037958][ T9157] wireguard0: entered promiscuous mode [ 132.043644][ T9157] wireguard0: entered allmulticast mode [ 132.051343][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 132.087556][ T3621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 132.158939][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1952'. [ 132.210227][ T9175] loop5: detected capacity change from 0 to 2048 [ 132.275383][ T9185] loop7: detected capacity change from 0 to 512 [ 132.381510][ T9190] netlink: 'syz.5.1953': attribute type 3 has an invalid length. [ 132.395869][ T9190] netlink: 'syz.5.1953': attribute type 3 has an invalid length. [ 132.542791][ T9177] Set syz1 is full, maxelem 65536 reached [ 132.542834][ T9175] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.734997][ T9205] loop5: detected capacity change from 0 to 1024 [ 132.742355][ T9205] EXT4-fs: Ignoring removed orlov option [ 132.804298][ T9207] netlink: 'syz.6.1961': attribute type 10 has an invalid length. [ 132.812889][ T9207] team0: Device hsr_slave_0 failed to register rx_handler [ 132.824718][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1962'. [ 133.129924][ T9216] hub 6-0:1.0: USB hub found [ 133.147533][ T9216] hub 6-0:1.0: 8 ports detected [ 133.289645][ T9228] SELinux: failed to load policy [ 133.474646][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 133.474658][ T29] audit: type=1326 audit(133.481:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 133.478557][ T9243] netlink: 'syz.7.1971': attribute type 10 has an invalid length. [ 133.481351][ T29] audit: type=1326 audit(133.492:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 133.540330][ T9243] team0: Device hsr_slave_0 failed to register rx_handler [ 133.835914][ T9266] SELinux: failed to load policy [ 133.916853][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1987'. [ 133.967462][ T9281] loop6: detected capacity change from 0 to 164 [ 133.991661][ T9281] syz.6.1989: attempt to access beyond end of device [ 133.991661][ T9281] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 134.006063][ T9281] syz.6.1989: attempt to access beyond end of device [ 134.006063][ T9281] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.303046][ T9312] FAULT_INJECTION: forcing a failure. [ 134.303046][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 134.315775][ T9312] CPU: 1 UID: 0 PID: 9312 Comm: syz.5.2003 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.315803][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.315815][ T9312] Call Trace: [ 134.315822][ T9312] [ 134.315831][ T9312] __dump_stack+0x1d/0x30 [ 134.315852][ T9312] dump_stack_lvl+0xe8/0x140 [ 134.315895][ T9312] dump_stack+0x15/0x1b [ 134.315911][ T9312] should_fail_ex+0x265/0x280 [ 134.315933][ T9312] should_failslab+0x8c/0xb0 [ 134.316017][ T9312] kmem_cache_alloc_noprof+0x50/0x310 [ 134.316042][ T9312] ? security_file_alloc+0x32/0x100 [ 134.316142][ T9312] security_file_alloc+0x32/0x100 [ 134.316168][ T9312] init_file+0x5c/0x1d0 [ 134.316191][ T9312] alloc_empty_file+0x8b/0x200 [ 134.316276][ T9312] alloc_file_pseudo+0xc6/0x160 [ 134.316301][ T9312] hugetlb_file_setup+0x2a6/0x3d0 [ 134.316323][ T9312] ksys_mmap_pgoff+0x157/0x310 [ 134.316403][ T9312] x64_sys_call+0x14a3/0x2ff0 [ 134.316429][ T9312] do_syscall_64+0xd2/0x200 [ 134.316450][ T9312] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.316469][ T9312] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.316489][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.316584][ T9312] RIP: 0033:0x7ff3f4a2ebe9 [ 134.316597][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.316611][ T9312] RSP: 002b:00007ff3f348f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 134.316631][ T9312] RAX: ffffffffffffffda RBX: 00007ff3f4c55fa0 RCX: 00007ff3f4a2ebe9 [ 134.316643][ T9312] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 134.316653][ T9312] RBP: 00007ff3f348f090 R08: ffffffffffffffff R09: 0000000000000000 [ 134.316708][ T9312] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 134.316720][ T9312] R13: 00007ff3f4c56038 R14: 00007ff3f4c55fa0 R15: 00007ffc89630b18 [ 134.316736][ T9312] [ 134.535745][ T9314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4880 sclass=netlink_route_socket pid=9314 comm=syz.7.2004 [ 134.629513][ T9326] SELinux: failed to load policy [ 134.748740][ T9335] netlink: 'syz.6.2011': attribute type 10 has an invalid length. [ 134.772388][ T9335] team0: Device hsr_slave_0 failed to register rx_handler [ 134.910326][ T29] audit: type=1326 audit(134.922:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 134.933255][ T29] audit: type=1326 audit(134.922:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 135.243887][ T29] audit: type=1326 audit(135.252:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9353 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 135.515788][ T29] audit: type=1326 audit(135.282:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9353 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 135.539117][ T29] audit: type=1326 audit(135.282:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9353 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 135.562045][ T29] audit: type=1326 audit(135.282:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9353 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 135.585168][ T29] audit: type=1326 audit(135.282:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9353 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaac61ebe9 code=0x7ffc0000 [ 135.608152][ T29] audit: type=1326 audit(135.282:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9353 comm="syz.1.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaac61d550 code=0x7ffc0000 [ 135.730987][ T9368] netlink: 336 bytes leftover after parsing attributes in process `+}[@'. [ 135.740470][ T9368] netlink: 336 bytes leftover after parsing attributes in process `+}[@'. [ 135.767618][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2026'. [ 135.789518][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'. [ 135.875994][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2031'. [ 136.194515][ T9406] loop1: detected capacity change from 0 to 2048 [ 136.216734][ T9409] pim6reg: entered allmulticast mode [ 136.226911][ T9409] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2041'. [ 136.236239][ T9409] pim6reg: left allmulticast mode [ 136.261744][ T9406] loop1: p2 p3 p7 [ 136.355599][ T3791] udevd[3791]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 136.369045][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 136.380935][ T8644] udevd[8644]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 136.631830][ T9436] loop5: detected capacity change from 0 to 512 [ 136.702820][ T9387] loop7: detected capacity change from 0 to 8192 [ 136.891222][ T9458] loop6: detected capacity change from 0 to 512 [ 136.924868][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2066'. [ 137.508142][ T9472] loop5: detected capacity change from 0 to 8192 [ 137.615615][ T9492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'. [ 138.058286][ T9515] netlink: 'syz.7.2084': attribute type 10 has an invalid length. [ 138.086382][ T9515] team0: Device hsr_slave_0 failed to register rx_handler [ 138.111481][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2088'. [ 138.510002][ T9530] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 138.521392][ T9530] SELinux: failed to load policy [ 138.572042][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 138.572056][ T29] audit: type=1326 audit(138.584:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.608455][ T29] audit: type=1326 audit(138.624:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.631383][ T29] audit: type=1326 audit(138.624:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.654409][ T29] audit: type=1326 audit(138.624:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.677397][ T29] audit: type=1326 audit(138.624:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.700437][ T29] audit: type=1326 audit(138.624:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.723630][ T29] audit: type=1326 audit(138.624:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.746846][ T29] audit: type=1326 audit(138.624:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.770214][ T29] audit: type=1326 audit(138.624:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.793414][ T29] audit: type=1326 audit(138.624:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9535 comm="syz.0.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0fd14ebe9 code=0x7ffc0000 [ 138.866755][ T9522] loop6: detected capacity change from 0 to 8192 [ 139.015204][ T9555] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 139.034284][ T9558] loop6: detected capacity change from 0 to 512 [ 139.042644][ T9555] SELinux: failed to load policy [ 139.211155][ T9569] netlink: 'syz.1.2108': attribute type 10 has an invalid length. [ 139.340140][ T9576] random: crng reseeded on system resumption [ 139.358821][ T9576] Restarting kernel threads ... [ 139.369463][ T9576] Done restarting kernel threads. [ 139.764197][ T9582] loop7: detected capacity change from 0 to 512 [ 139.919797][ T9561] loop6: detected capacity change from 0 to 8192 [ 140.024069][ T9591] loop1: detected capacity change from 0 to 512 [ 140.310287][ T9605] loop6: detected capacity change from 0 to 2048 [ 140.331743][ T9608] loop9: detected capacity change from 0 to 7 [ 140.338658][ T9608] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.346624][ T9608] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.354543][ T9608] loop9: unable to read partition table [ 140.360286][ T9608] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 140.360286][ T9608] ) failed (rc=-5) [ 140.418026][ T8644] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.442358][ T8644] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.471731][ T8644] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.500238][ T8644] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.522869][ T9601] loop7: detected capacity change from 0 to 8192 [ 140.530290][ T8644] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.873203][ T9619] netlink: 'syz.0.2127': attribute type 10 has an invalid length. [ 140.913114][ T9619] team0: Device hsr_slave_0 failed to register rx_handler [ 141.199698][ T9630] random: crng reseeded on system resumption [ 141.217851][ T9630] Restarting kernel threads ... [ 141.291200][ T9630] Done restarting kernel threads. [ 141.318488][ T9636] loop5: detected capacity change from 0 to 512 [ 141.328850][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'. [ 141.461297][ T9647] bond1: (slave gretap1): Releasing active interface [ 141.505843][ T9656] team0: Mode changed to "loadbalance" [ 141.545693][ T9639] team0: Device veth1_vlan failed to register rx_handler [ 141.657510][ T9669] loop9: detected capacity change from 0 to 7 [ 141.664521][ T9669] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.678513][ T9669] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.686526][ T9669] loop9: unable to read partition table [ 141.692525][ T9669] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 141.692525][ T9669] ) failed (rc=-5) [ 141.693538][ T3651] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.830423][ T9681] SELinux: ebitmap: truncated map [ 141.842843][ T9681] SELinux: failed to load policy [ 141.862622][ T9685] loop7: detected capacity change from 0 to 512 [ 141.967267][ T9695] loop7: detected capacity change from 0 to 512 [ 141.988291][ T9695] EXT4-fs mount: 6 callbacks suppressed [ 141.988306][ T9695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 142.375687][ T9707] loop9: detected capacity change from 0 to 7 [ 142.382938][ T3651] loop9: unable to read partition table [ 142.389375][ T9707] loop9: unable to read partition table [ 142.397335][ T9707] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 142.397335][ T9707] ) failed (rc=-5) [ 142.623856][ T9671] loop6: detected capacity change from 0 to 8192 [ 142.637323][ T9725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2166'. [ 142.650486][ T9720] netlink: 'syz.1.2164': attribute type 10 has an invalid length. [ 142.945151][ T9727] loop5: detected capacity change from 0 to 2048 [ 142.959567][ T4222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 142.986230][ T3651] Alternate GPT is invalid, using primary GPT. [ 142.992610][ T3651] loop5: p2 p3 p7 [ 143.005576][ T9727] Alternate GPT is invalid, using primary GPT. [ 143.011925][ T9727] loop5: p2 p3 p7 [ 143.427343][ T9754] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2178'. [ 143.573730][ T9759] tipc: Enabling of bearer rejected, failed to enable media [ 143.589040][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 143.589059][ T29] audit: type=1326 audit(143.607:9800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.652965][ T29] audit: type=1326 audit(143.607:9801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.675834][ T29] audit: type=1326 audit(143.607:9802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.698943][ T29] audit: type=1326 audit(143.607:9803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.722034][ T29] audit: type=1326 audit(143.607:9804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.745318][ T29] audit: type=1326 audit(143.607:9805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.769152][ T29] audit: type=1326 audit(143.607:9806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.792107][ T29] audit: type=1326 audit(143.607:9807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.815015][ T29] audit: type=1326 audit(143.607:9808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 143.838239][ T29] audit: type=1326 audit(143.607:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9758 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f4a2ebe9 code=0x7ffc0000 [ 144.345754][ T9783] netlink: 'syz.7.2189': attribute type 10 has an invalid length. [ 144.425044][ T9756] loop1: detected capacity change from 0 to 8192 [ 144.444472][ T9783] team0: Device hsr_slave_0 failed to register rx_handler [ 144.581114][ T9791] loop1: detected capacity change from 0 to 512 [ 144.591246][ T9791] ext4: Unknown parameter 'obj_user' [ 144.601440][ T9791] binfmt_misc: register: failed to install interpreter file ./file2 [ 145.188653][ T9827] loop7: detected capacity change from 0 to 2048 [ 145.249717][ T9827] Alternate GPT is invalid, using primary GPT. [ 145.256111][ T9827] loop7: p2 p3 p7 [ 145.565152][ T9811] loop5: detected capacity change from 0 to 8192 [ 145.609604][ T9843] loop7: detected capacity change from 0 to 512 [ 145.652585][ T9843] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 145.735696][ T9854] ================================================================== [ 145.744165][ T9854] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 145.751475][ T9854] [ 145.753906][ T9854] write to 0xffff88813df5b6ac of 4 bytes by task 9843 on cpu 0: [ 145.761539][ T9854] xas_set_mark+0x12b/0x140 [ 145.766084][ T9854] __folio_start_writeback+0x1dd/0x440 [ 145.771545][ T9854] ext4_bio_write_folio+0x5ad/0x9f0 [ 145.776738][ T9854] mpage_process_page_bufs+0x4a1/0x620 [ 145.782269][ T9854] mpage_prepare_extent_to_map+0x786/0xc00 [ 145.788153][ T9854] ext4_do_writepages+0x708/0x2750 [ 145.793356][ T9854] ext4_writepages+0x176/0x300 [ 145.798194][ T9854] do_writepages+0x1c3/0x310 [ 145.802774][ T9854] file_write_and_wait_range+0x156/0x2c0 [ 145.808547][ T9854] generic_buffers_fsync_noflush+0x45/0x120 [ 145.814443][ T9854] ext4_sync_file+0x1ab/0x690 [ 145.819117][ T9854] vfs_fsync_range+0x10d/0x130 [ 145.823870][ T9854] ext4_buffered_write_iter+0x34f/0x3c0 [ 145.829584][ T9854] ext4_file_write_iter+0x383/0xf00 [ 145.834964][ T9854] iter_file_splice_write+0x663/0xa60 [ 145.840381][ T9854] direct_splice_actor+0x153/0x2a0 [ 145.845479][ T9854] splice_direct_to_actor+0x30f/0x680 [ 145.851282][ T9854] do_splice_direct+0xda/0x150 [ 145.856046][ T9854] do_sendfile+0x380/0x650 [ 145.860513][ T9854] __x64_sys_sendfile64+0x105/0x150 [ 145.865809][ T9854] x64_sys_call+0x2bb0/0x2ff0 [ 145.870574][ T9854] do_syscall_64+0xd2/0x200 [ 145.875075][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.881315][ T9854] [ 145.883661][ T9854] read to 0xffff88813df5b6ac of 4 bytes by task 9854 on cpu 1: [ 145.891182][ T9854] xas_find_marked+0x5dc/0x620 [ 145.895941][ T9854] find_get_entry+0x5d/0x380 [ 145.900540][ T9854] filemap_get_folios_tag+0x92/0x210 [ 145.905806][ T9854] mpage_prepare_extent_to_map+0x320/0xc00 [ 145.911597][ T9854] ext4_do_writepages+0x708/0x2750 [ 145.916702][ T9854] ext4_writepages+0x176/0x300 [ 145.921477][ T9854] do_writepages+0x1c3/0x310 [ 145.926144][ T9854] file_write_and_wait_range+0x156/0x2c0 [ 145.931771][ T9854] generic_buffers_fsync_noflush+0x45/0x120 [ 145.937651][ T9854] ext4_sync_file+0x1ab/0x690 [ 145.942322][ T9854] vfs_fsync_range+0x10d/0x130 [ 145.947105][ T9854] ext4_buffered_write_iter+0x34f/0x3c0 [ 145.952670][ T9854] ext4_file_write_iter+0x383/0xf00 [ 145.957958][ T9854] iter_file_splice_write+0x663/0xa60 [ 145.963398][ T9854] direct_splice_actor+0x153/0x2a0 [ 145.968665][ T9854] splice_direct_to_actor+0x30f/0x680 [ 145.974043][ T9854] do_splice_direct+0xda/0x150 [ 145.978875][ T9854] do_sendfile+0x380/0x650 [ 145.983280][ T9854] __x64_sys_sendfile64+0x105/0x150 [ 145.988482][ T9854] x64_sys_call+0x2bb0/0x2ff0 [ 145.993168][ T9854] do_syscall_64+0xd2/0x200 [ 145.997677][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.003556][ T9854] [ 146.005863][ T9854] value changed: 0x0a000021 -> 0x04000021 [ 146.011646][ T9854] [ 146.013950][ T9854] Reported by Kernel Concurrency Sanitizer on: [ 146.020090][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.7.2210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.029902][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.040057][ T9854] ================================================================== [ 146.544822][ T9854] syz.7.2210 (9854) used greatest stack depth: 9080 bytes left [ 146.565712][ T4222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 146.731695][ T9856] loop5: detected capacity change from 0 to 8192