last executing test programs: 7m42.059063844s ago: executing program 1 (id=1026): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 7m41.994270385s ago: executing program 1 (id=1027): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, r1, 0x6a98047402e98331, 0x4, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40010) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xfff2, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x5, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x100010, &(0x7f0000000000)={[{@debug}, {@dax_inode}, {@init_itable_val={'init_itable', 0x3d, 0x671}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noblock_validity}, {@dax}, {@bh}, {@noload}]}, 0x4, 0x4d7, &(0x7f0000000a40)="$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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000004000000000a006060", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000000004000000000000000000000ffff7f"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7m41.868694808s ago: executing program 1 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r6], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='cq_poll\x00', r4, 0x0, 0x101}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x36, 0x0, &(0x7f0000000280)="daf9e846ab156efc71b59652333536bd9226a6d85463904cf0d5bce1751889c98ffc0abf5ff75dfd73bf4ed0a1f00d4c5fc149b21097", 0x0, 0x2}, 0x50) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCGETD(r9, 0x5424, &(0x7f00000004c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d04000000000000000000000200000000040000008807fdcb010b716656f70b31fc0000001203000000000000006100"], 0x0, 0x52}, 0x28) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e78697d0bdcb28730acefcf50e4509ddbb5a", 0x5c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f000801}, 0x240000c0) 7m41.682873821s ago: executing program 1 (id=1033): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r2 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000002200)=""/4100, 0x1004}], 0x1, 0x3ff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) 7m40.245083489s ago: executing program 1 (id=1040): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, r1, 0x6a98047402e98331, 0x4, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40010) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xfff2, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x5, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x100010, &(0x7f0000000000)={[{@debug}, {@dax_inode}, {@init_itable_val={'init_itable', 0x3d, 0x671}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noblock_validity}, {@dax}, {@bh}, {@noload}]}, 0x4, 0x4d7, &(0x7f0000000a40)="$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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000004000000000a006060", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000000004000000000000000000000ffff7f"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7m37.686913849s ago: executing program 1 (id=1061): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 7m37.571263882s ago: executing program 32 (id=1061): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 6m27.820504665s ago: executing program 5 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r7], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='cq_poll\x00', r5, 0x0, 0x101}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x36, 0x0, &(0x7f0000000280)="daf9e846ab156efc71b59652333536bd9226a6d85463904cf0d5bce1751889c98ffc0abf5ff75dfd73bf4ed0a1f00d4c5fc149b21097", 0x0, 0x2}, 0x50) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCGETD(r10, 0x5424, &(0x7f00000004c0)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d04000000000000000000000200000000040000008807fdcb010b716656f70b31fc0000001203000000000000006100"], 0x0, 0x52}, 0x28) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e78697d0bdcb28730acefcf50e4509ddbb5a", 0x5c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f000801}, 0x240000c0) 6m27.694614028s ago: executing program 5 (id=2035): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, r1, 0x6a98047402e98331, 0x4, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40010) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0xfff2, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x5, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x100010, &(0x7f0000000000)={[{@debug}, {@dax_inode}, {@init_itable_val={'init_itable', 0x3d, 0x671}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noblock_validity}, {@dax}, {@bh}, {@noload}]}, 0x4, 0x4d7, &(0x7f0000000a40)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000004000000000a006060", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000000004000000000000000000000ffff7f"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 6m27.609329899s ago: executing program 5 (id=2036): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x113}], 0x1) 6m27.57060061s ago: executing program 5 (id=2038): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = gettid() r3 = eventfd2(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = accept(r1, 0x0, &(0x7f0000000000)) sendmsg$rds(r6, &(0x7f00000035c0)={&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f0000000840)=""/69, 0x45}], 0x4, &(0x7f0000003300)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xeac}, &(0x7f0000000900)=0xffff, &(0x7f0000000940)=0x2, 0x6, 0x10001, 0x4, 0x7, 0x0, 0x8000000000000000}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x7}, &(0x7f0000000980)=0xfb54, &(0x7f00000009c0)=0x3, 0x5d, 0xfffffffffffff84e, 0x7, 0x6, 0x3f, 0x369}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000a00)=""/152, 0x98}, &(0x7f0000000ac0), 0x28}}, @fadd={0x58, 0x114, 0x6, {{0x9dca}, &(0x7f0000000b00)=0x3, &(0x7f0000000b40)=0xffffffffffffffff, 0x1274a6ab, 0x8c7a, 0x5, 0x1000000000000000, 0x6, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0x81, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7}, &(0x7f0000000b80)=0x81, &(0x7f0000000bc0)=0x8, 0x9, 0x8, 0x0, 0x100000000, 0x2, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0xaa81, 0x3}, &(0x7f0000000c00)=0x2, &(0x7f0000000c40)=0x8, 0x6, 0xff, 0x4, 0x4, 0xc, 0xf30}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0xf}, {&(0x7f0000000c80)=""/38, 0x26}, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/243, 0xf3}], 0x1, 0x0, 0xfffffffffffffffe}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x4}, {&(0x7f0000000e00)=""/135, 0x87}, &(0x7f0000003280)=[{&(0x7f0000000ec0)=""/62, 0x3e}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/97, 0x61}, {&(0x7f0000002f80)=""/243, 0xf3}, {&(0x7f0000003080)=""/205, 0xcd}, {&(0x7f0000003180)=""/222, 0xde}], 0x7, 0x27, 0x1}}], 0x290, 0x4000004}, 0x10) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='fd\x00') getdents(r7, &(0x7f0000000180)=""/33, 0x21) getdents(r7, 0xffffffffffffffff, 0x5a) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000003600)={0xd, 0x1}) unshare(0x2040400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r8, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 6m27.345046544s ago: executing program 5 (id=2042): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x10000, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) dup(r5) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x12020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000380)=ANY=[], 0xfb, 0x1216, &(0x7f0000002480)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0x4) 6m27.206962057s ago: executing program 5 (id=2044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x9) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='xdp_cpumap_enqueue\x00', r1}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000400)={0x2, {{0x2, 0x4, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f00000004c0)={0xbae, {{0x2, 0x4e23, @remote}}}, 0x88) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r11, 0x0, 0x800000000006}, 0x6e) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240), &(0x7f0000000340)) unshare(0x8040600) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r12, 0x84, 0x15, &(0x7f00000000c0), 0x1) 6m27.206721557s ago: executing program 33 (id=2044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x9) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='xdp_cpumap_enqueue\x00', r1}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000400)={0x2, {{0x2, 0x4, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f00000004c0)={0xbae, {{0x2, 0x4e23, @remote}}}, 0x88) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r11, 0x0, 0x800000000006}, 0x6e) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240), &(0x7f0000000340)) unshare(0x8040600) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r12, 0x84, 0x15, &(0x7f00000000c0), 0x1) 4.287364486s ago: executing program 6 (id=7193): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x3c, 0x26, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x9}, {0xffff, 0xfcacb606a5e126d}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40448d4}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.10346521s ago: executing program 6 (id=7197): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r1], 0x18, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x48, '\x00', 0x0, @fallback=0x1e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) getpid() socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 4.08308739s ago: executing program 6 (id=7198): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x7, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x2000}, 0x50) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000300)={0x9}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000000484773a17075e312c7845858e25b72489206623a5baccbae235dc4dc377edb4c05c85d2644b68dbb37a6146ef995f54fba21b30efa0d32986f1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f0000000280)='./file1\x00', 0x10fcc2, 0x10) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0x200) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bc27, 0x25dfdbfc}, 0x14}}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe0001009a"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f00000002c0)=0x1) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x1}, 0x40) 4.005735872s ago: executing program 6 (id=7200): r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) fallocate(r2, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x8, 0x4, 0xd5, 0x7}, &(0x7f0000000380)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000def4ca5d0000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) r5 = signalfd(r4, &(0x7f0000000000)={[0x7]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000005000000020000000700000041"], 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000031ee6f98d4079e6e800", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) 3.847499875s ago: executing program 0 (id=7202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3.549599411s ago: executing program 0 (id=7206): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) fcntl$lock(r3, 0x26, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) 2.700928247s ago: executing program 0 (id=7212): bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x8, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) lseek(0xffffffffffffffff, 0x0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x42c8, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0x0, 0x16f}, 0x0, &(0x7f00000001c0)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2.598962299s ago: executing program 2 (id=7213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) tkill(r3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f100000030b00000003000000090008"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) r6 = socket(0x80000000000000a, 0x5, 0x2) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0xffffffff, {{0xa, 0x4e22, 0x0, @mcast2, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast2, 0xc}}, {{0xa, 0x0, 0x0, @local, 0x3}}}, 0x108) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000580)={0x2f, 0x10, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x62, 0x7b, "a00a8326ba3414f2f155a8fcf0f404cfd401840ec603e594e61cef82b73440cdff7ee62b77b95762ef903c98fbd92daf3753847197883a14401bff8ff6838387642993aaeaa46a8fea1d3e275a0b8a30f0128a2a21f31fe009b53a2da2c3a47459e5c624748ccce9431ff8f11361eb72e821454e3e6af615f48b39"}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x20000}, 0x18) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0) poll(0x0, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='rxrpc_recvmsg\x00'}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000008e105e085000000a8000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 2.438779632s ago: executing program 6 (id=7216): socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x1000) fallocate(r1, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x8, 0x4, 0xd5, 0x7}, &(0x7f0000000380)=0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 2.430896073s ago: executing program 2 (id=7217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.213623437s ago: executing program 2 (id=7218): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setresuid(0xee00, 0xee00, 0x0) 2.147307838s ago: executing program 2 (id=7219): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) preadv2(r1, &(0x7f0000000180)=[{&(0x7f0000002200)=""/4100, 0x1004}], 0x1, 0x3ff, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) 2.06280284s ago: executing program 4 (id=7220): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r1], 0x18, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x48, '\x00', 0x0, @fallback=0x1e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) getpid() socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 1.972619111s ago: executing program 4 (id=7221): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@rnullb, 0xffffffffffffffff, &(0x7f0000000200)='./cgroup\x00') 1.945805632s ago: executing program 4 (id=7222): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) fcntl$lock(r3, 0x26, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1.774873245s ago: executing program 0 (id=7223): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x80, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000034) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r3, 0x0, 0x4}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) syz_read_part_table(0x5b2, &(0x7f00000005c0)="$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") sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c001980"], 0x44}}, 0x0) 1.610583628s ago: executing program 3 (id=7224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe3d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000e47f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x6204bc91505481a1, 0x189) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xe2840480, 0x0, 0x0, 0x0, 0x0, 0x0) 986.39693ms ago: executing program 4 (id=7225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) tkill(r3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f100000030b00000003000000090008"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) r6 = socket(0x80000000000000a, 0x5, 0x2) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0xffffffff, {{0xa, 0x4e22, 0x0, @mcast2, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast2, 0xc}}, {{0xa, 0x0, 0x0, @local, 0x3}}}, 0x108) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000580)={0x2f, 0x10, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x62, 0x7b, "a00a8326ba3414f2f155a8fcf0f404cfd401840ec603e594e61cef82b73440cdff7ee62b77b95762ef903c98fbd92daf3753847197883a14401bff8ff6838387642993aaeaa46a8fea1d3e275a0b8a30f0128a2a21f31fe009b53a2da2c3a47459e5c624748ccce9431ff8f11361eb72e821454e3e6af615f48b39"}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x20000}, 0x18) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, 0x0) poll(0x0, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='rxrpc_recvmsg\x00'}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000008e105e085000000a8000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)={0x58, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0000c1}, 0x5) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 903.984342ms ago: executing program 0 (id=7226): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x7, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x2000}, 0x50) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000300)={0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000000484773a17075e312c7845858e25b72489206623a5baccbae235dc4dc377edb4c05c85d2644b68dbb37a6146ef995f54fba21b30efa0d32986f1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f0000000280)='./file1\x00', 0x10fcc2, 0x10) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000040)='./file1\x00', 0x200) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bc27, 0x25dfdbfc}, 0x14}}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe0001009a"], 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x1}, 0x40) 903.359832ms ago: executing program 0 (id=7227): r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) fallocate(r2, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x8, 0x4, 0xd5, 0x7}, &(0x7f0000000380)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000def4ca5d0000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) r5 = signalfd(r4, &(0x7f0000000000)={[0x7]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000005000000020000000700000041"], 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000031ee6f98d4079e6e800", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) 815.771734ms ago: executing program 4 (id=7228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000002b00)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x1}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000240)="f1", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x7, @private1, 0x2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000680)="cb", 0x1}], 0x1}}], 0x2, 0x2004c0d0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) unshare(0x24020400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000150001002dbd7080fbdbdf2502207aff", @ANYRES32=0x0, @ANYBLOB="089691c64689201db9440da916ed2200"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xdbd8, 0x2, 0x2, 0xf2}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x80000}, 0x18) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r10, 0x407, 0x10005) write$tun(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="016f1800010027000000270000a862f1"], 0xfd6c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 724.080546ms ago: executing program 3 (id=7229): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setresuid(0xee00, 0xee00, 0x0) 688.345537ms ago: executing program 3 (id=7230): r0 = gettid() openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000000) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="efffffffffffffff00000000000000000000deff", @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x4fff, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000740)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000580)='percpu_free_percpu\x00', r5}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x118002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@user_xattr}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@i_version}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000880)={0x7, 0x8000000003ff, 0x5, 0x6}) close(r2) 504.61927ms ago: executing program 4 (id=7231): bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) lseek(0xffffffffffffffff, 0x0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x42c8, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0x0, 0x16f}, 0x0, &(0x7f00000001c0)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 362.333393ms ago: executing program 3 (id=7232): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r1], 0x18, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x48, '\x00', 0x0, @fallback=0x1e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) getpid() socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 281.031874ms ago: executing program 6 (id=7233): bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) lseek(0xffffffffffffffff, 0x0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x42c8, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0x0, 0x16f}, 0x0, &(0x7f00000001c0)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 236.489335ms ago: executing program 3 (id=7234): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rmdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) inotify_init1(0x0) 188.577297ms ago: executing program 3 (id=7235): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) fcntl$lock(r3, 0x26, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) 76.625188ms ago: executing program 2 (id=7236): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) 0s ago: executing program 2 (id=7237): r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) kernel console output (not intermixed with test programs): t: type=1326 audit(1758757752.363:30649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.2.6550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef3727eec9 code=0x0 [ 491.367307][T24107] netlink: 'syz.3.6552': attribute type 2 has an invalid length. [ 491.381801][T24110] loop2: detected capacity change from 0 to 128 [ 491.476077][ T29] audit: type=1326 audit(1758757752.533:30650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24118 comm="syz.3.6555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x0 [ 491.530325][T24121] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 491.540808][T24121] netlink: '+}[@': attribute type 11 has an invalid length. [ 491.685027][T24127] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 491.734207][T24127] SELinux: failed to load policy [ 491.757513][T24131] netlink: 'syz.0.6560': attribute type 30 has an invalid length. [ 491.878346][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.923293][T24136] FAULT_INJECTION: forcing a failure. [ 491.923293][T24136] name failslab, interval 1, probability 0, space 0, times 0 [ 491.935981][T24136] CPU: 1 UID: 0 PID: 24136 Comm: syz.0.6562 Not tainted syzkaller #0 PREEMPT(voluntary) [ 491.936010][T24136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.936021][T24136] Call Trace: [ 491.936027][T24136] [ 491.936034][T24136] __dump_stack+0x1d/0x30 [ 491.936053][T24136] dump_stack_lvl+0xe8/0x140 [ 491.936070][T24136] dump_stack+0x15/0x1b [ 491.936159][T24136] should_fail_ex+0x265/0x280 [ 491.936180][T24136] should_failslab+0x8c/0xb0 [ 491.936201][T24136] kmem_cache_alloc_noprof+0x50/0x310 [ 491.936226][T24136] ? audit_log_start+0x365/0x6c0 [ 491.936277][T24136] audit_log_start+0x365/0x6c0 [ 491.936305][T24136] audit_seccomp+0x48/0x100 [ 491.936326][T24136] ? __seccomp_filter+0x68c/0x10d0 [ 491.936346][T24136] __seccomp_filter+0x69d/0x10d0 [ 491.936423][T24136] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 491.936449][T24136] ? vfs_write+0x7e8/0x960 [ 491.936470][T24136] ? __rcu_read_unlock+0x4f/0x70 [ 491.936491][T24136] ? __fget_files+0x184/0x1c0 [ 491.936512][T24136] __secure_computing+0x82/0x150 [ 491.936524][T24136] syscall_trace_enter+0xcf/0x1e0 [ 491.936538][T24136] do_syscall_64+0xac/0x200 [ 491.936556][T24136] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 491.936603][T24136] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 491.936636][T24136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.936648][T24136] RIP: 0033:0x7f1ea98ceec9 [ 491.936657][T24136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.936668][T24136] RSP: 002b:00007f1ea832f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 491.936680][T24136] RAX: ffffffffffffffda RBX: 00007f1ea9b25fa0 RCX: 00007f1ea98ceec9 [ 491.936734][T24136] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 00007f1ea82fe000 [ 491.936741][T24136] RBP: 00007f1ea832f090 R08: 0000000000000000 R09: 0000000000000000 [ 491.936748][T24136] R10: 00002000000019c0 R11: 0000000000000246 R12: 0000000000000001 [ 491.936755][T24136] R13: 00007f1ea9b26038 R14: 00007f1ea9b25fa0 R15: 00007ffd7ae84788 [ 491.936766][T24136] [ 492.200988][T24137] loop4: detected capacity change from 0 to 1024 [ 492.207917][T24137] EXT4-fs: Ignoring removed i_version option [ 492.231636][T24137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.337527][T24151] lo speed is unknown, defaulting to 1000 [ 492.371756][T24151] loop3: detected capacity change from 0 to 512 [ 492.386258][T24151] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.6565: error while reading EA inode 32 err=-116 [ 492.399732][T24151] EXT4-fs (loop3): Remounting filesystem read-only [ 492.406240][T24151] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 492.416682][T24151] EXT4-fs (loop3): 1 orphan inode deleted [ 492.422830][T24151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.451608][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.478113][T24155] loop2: detected capacity change from 0 to 1024 [ 492.485011][T24155] EXT4-fs: Ignoring removed i_version option [ 492.517566][T24155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.554124][T24161] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6568'. [ 492.577568][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.612011][T24164] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 492.646511][T24167] netlink: 19 bytes leftover after parsing attributes in process `syz.6.6571'. [ 492.776347][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.840395][T24180] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6574'. [ 493.029717][T24190] lo speed is unknown, defaulting to 1000 [ 493.072027][T24192] loop2: detected capacity change from 0 to 512 [ 493.094249][T24192] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.6577: error while reading EA inode 32 err=-116 [ 493.151756][T24192] EXT4-fs (loop2): Remounting filesystem read-only [ 493.158365][T24192] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 493.207817][T24201] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 493.215495][T24192] EXT4-fs (loop2): 1 orphan inode deleted [ 493.222636][T24192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.288412][T24201] SELinux: failed to load policy [ 493.341011][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.473738][T24212] netlink: 380 bytes leftover after parsing attributes in process `syz.2.6585'. [ 493.527215][T24210] loop4: detected capacity change from 0 to 1024 [ 493.539530][T24210] EXT4-fs: Ignoring removed i_version option [ 493.546145][T24214] lo speed is unknown, defaulting to 1000 [ 493.568663][T24210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.885445][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6590'. [ 493.895571][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6590'. [ 493.905143][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6590'. [ 494.014429][T24234] netlink: 'syz.6.6592': attribute type 30 has an invalid length. [ 494.096898][T24236] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 494.157061][T24236] SELinux: failed to load policy [ 494.280764][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.457980][T24266] lo speed is unknown, defaulting to 1000 [ 494.605803][T24271] netlink: 'syz.3.6604': attribute type 21 has an invalid length. [ 494.627520][T24273] bridge_slave_1: left allmulticast mode [ 494.633312][T24273] bridge_slave_1: left promiscuous mode [ 494.639011][T24273] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.651745][T24273] bridge_slave_0: left allmulticast mode [ 494.657396][T24273] bridge_slave_0: left promiscuous mode [ 494.663084][T24273] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.191203][T24286] netlink: '+}[@': attribute type 10 has an invalid length. [ 495.198511][T24286] __nla_validate_parse: 4 callbacks suppressed [ 495.198523][T24286] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 496.013146][T24306] lo speed is unknown, defaulting to 1000 [ 496.188812][T24310] netlink: 'syz.2.6616': attribute type 21 has an invalid length. [ 496.206790][T24310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6616'. [ 496.293816][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 496.293830][ T29] audit: type=1326 audit(1758757757.353:30924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24313 comm="syz.2.6618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef3727eec9 code=0x0 [ 496.361897][T24319] loop2: detected capacity change from 0 to 128 [ 496.416835][T24328] lo speed is unknown, defaulting to 1000 [ 496.445171][T24333] bio_check_eod: 472 callbacks suppressed [ 496.445185][T24333] syz.2.6618: attempt to access beyond end of device [ 496.445185][T24333] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 496.470790][T24333] syz.2.6618: attempt to access beyond end of device [ 496.470790][T24333] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 496.486896][T24333] syz.2.6618: attempt to access beyond end of device [ 496.486896][T24333] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 496.501491][T24333] syz.2.6618: attempt to access beyond end of device [ 496.501491][T24333] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 496.549161][T24333] syz.2.6618: attempt to access beyond end of device [ 496.549161][T24333] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 496.565280][ T29] audit: type=1326 audit(1758757757.603:30925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24342 comm="syz.0.6630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x0 [ 496.590111][T24333] syz.2.6618: attempt to access beyond end of device [ 496.590111][T24333] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 496.604175][T24333] syz.2.6618: attempt to access beyond end of device [ 496.604175][T24333] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 496.620154][T24333] syz.2.6618: attempt to access beyond end of device [ 496.620154][T24333] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 496.633681][T24344] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 496.634880][T24333] syz.2.6618: attempt to access beyond end of device [ 496.634880][T24333] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 496.658522][T24349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6631'. [ 496.691943][T24333] syz.2.6618: attempt to access beyond end of device [ 496.691943][T24333] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 496.799712][T24355] loop4: detected capacity change from 0 to 8192 [ 496.821229][T24355] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 496.829168][T24355] FAT-fs (loop4): Filesystem has been set read-only [ 496.838230][T24363] program syz.3.6635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.882411][T24363] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 496.891644][T24366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6635'. [ 496.913252][T24366] team0 (unregistering): Port device team_slave_0 removed [ 496.929691][T24366] team0 (unregistering): Port device team_slave_1 removed [ 497.024738][T24367] loop4: detected capacity change from 0 to 1024 [ 497.043821][T24367] EXT4-fs: Ignoring removed i_version option [ 497.083233][T24367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.381048][T24383] netlink: '+}[@': attribute type 10 has an invalid length. [ 497.388934][T24383] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 497.398328][T24383] batman_adv: batadv0: Adding interface: veth1_vlan [ 497.404970][T24383] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.430799][T24383] batman_adv: batadv0: Interface activated: veth1_vlan [ 497.451589][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6643'. [ 497.562709][T24393] loop2: detected capacity change from 0 to 1024 [ 497.571125][T24393] EXT4-fs: Ignoring removed i_version option [ 497.595325][T24393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.637014][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.654753][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6647'. [ 497.671254][T24399] team0 (unregistering): Port device team_slave_0 removed [ 497.681002][T24399] team0 (unregistering): Port device team_slave_1 removed [ 497.690259][T24399] team0 (unregistering): Port device dummy0 removed [ 497.743987][T24401] loop2: detected capacity change from 0 to 1024 [ 497.758864][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.809195][T24401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.901042][T24401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.925798][T24406] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6649'. [ 497.985985][ T29] audit: type=1400 audit(1758757759.033:30926): avc: denied { write } for pid=24400 comm="syz.2.6648" path="socket:[77227]" dev="sockfs" ino=77227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 498.097046][ T29] audit: type=1326 audit(1758757759.133:30927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.6.6653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f126614eec9 code=0x0 [ 498.133651][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.265415][T24428] netlink: 'syz.3.6655': attribute type 10 has an invalid length. [ 498.273343][T24428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6655'. [ 498.285141][T24428] veth1_vlan: left promiscuous mode [ 498.294169][T24428] batman_adv: batadv0: Interface activated: veth1_vlan [ 498.370289][T24429] hub 9-0:1.0: USB hub found [ 498.392485][T24429] hub 9-0:1.0: 8 ports detected [ 498.448973][ T29] audit: type=1326 audit(1758757759.493:30928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.2.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 498.472825][ T29] audit: type=1326 audit(1758757759.493:30929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.2.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 498.496698][ T29] audit: type=1326 audit(1758757759.493:30930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.2.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 498.520412][ T29] audit: type=1326 audit(1758757759.493:30931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.2.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 498.692630][ T29] audit: type=1326 audit(1758757759.603:30932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.2.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 498.716754][ T29] audit: type=1326 audit(1758757759.603:30933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.2.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 498.825207][T24440] loop3: detected capacity change from 0 to 1024 [ 498.832517][T24440] EXT4-fs: Ignoring removed i_version option [ 498.906794][T24440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.026279][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.094706][T24455] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 499.213834][T24461] loop3: detected capacity change from 0 to 128 [ 499.239722][T20689] Buffer I/O error on dev loop3, logical block 568, lost async page write [ 499.356288][T24466] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6666'. [ 499.664144][T24476] FAULT_INJECTION: forcing a failure. [ 499.664144][T24476] name failslab, interval 1, probability 0, space 0, times 0 [ 499.676827][T24476] CPU: 1 UID: 0 PID: 24476 Comm: syz.0.6669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 499.676855][T24476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.676866][T24476] Call Trace: [ 499.676872][T24476] [ 499.676881][T24476] __dump_stack+0x1d/0x30 [ 499.676902][T24476] dump_stack_lvl+0xe8/0x140 [ 499.676922][T24476] dump_stack+0x15/0x1b [ 499.676994][T24476] should_fail_ex+0x265/0x280 [ 499.677019][T24476] should_failslab+0x8c/0xb0 [ 499.677073][T24476] kmem_cache_alloc_node_noprof+0x57/0x320 [ 499.677103][T24476] ? __alloc_skb+0x101/0x320 [ 499.677133][T24476] __alloc_skb+0x101/0x320 [ 499.677156][T24476] netlink_alloc_large_skb+0xba/0xf0 [ 499.677241][T24476] netlink_sendmsg+0x3cf/0x6b0 [ 499.677284][T24476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.677311][T24476] __sock_sendmsg+0x142/0x180 [ 499.677341][T24476] ____sys_sendmsg+0x31e/0x4e0 [ 499.677439][T24476] ___sys_sendmsg+0x17b/0x1d0 [ 499.677515][T24476] __x64_sys_sendmsg+0xd4/0x160 [ 499.677541][T24476] x64_sys_call+0x191e/0x2ff0 [ 499.677561][T24476] do_syscall_64+0xd2/0x200 [ 499.677587][T24476] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 499.677648][T24476] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 499.677707][T24476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.677729][T24476] RIP: 0033:0x7f1ea98ceec9 [ 499.677780][T24476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.677796][T24476] RSP: 002b:00007f1ea832f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.677815][T24476] RAX: ffffffffffffffda RBX: 00007f1ea9b25fa0 RCX: 00007f1ea98ceec9 [ 499.677826][T24476] RDX: 0000000000040014 RSI: 0000200000000140 RDI: 0000000000000003 [ 499.677837][T24476] RBP: 00007f1ea832f090 R08: 0000000000000000 R09: 0000000000000000 [ 499.677847][T24476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.677858][T24476] R13: 00007f1ea9b26038 R14: 00007f1ea9b25fa0 R15: 00007ffd7ae84788 [ 499.677874][T24476] [ 499.982275][T24470] veth0_to_team: left promiscuous mode [ 500.041128][T24470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.074183][T24470] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 500.119358][T24470] geneve0: left allmulticast mode [ 500.142010][T24481] lo speed is unknown, defaulting to 1000 [ 500.158547][ T5853] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.175450][ T5853] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.193258][ T5853] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.232130][ T5853] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.267928][T24490] loop4: detected capacity change from 0 to 512 [ 500.277876][T24490] EXT4-fs warning (device loop4): ext4_xattr_inode_get:542: inode #11: comm syz.4.6672: ea_inode file size=0 entry size=6 [ 500.290741][T24490] ------------[ cut here ]------------ [ 500.296212][T24490] EA inode 11 i_nlink=2 [ 500.296453][T24490] WARNING: CPU: 1 PID: 24490 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 500.311065][T24490] Modules linked in: [ 500.315089][T24490] CPU: 1 UID: 0 PID: 24490 Comm: syz.4.6672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 500.324926][T24490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.335063][T24490] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 500.341714][T24490] Code: 90 49 8d 7e 40 e8 9c f8 b7 ff 4d 8b 6e 40 4c 89 e7 e8 b0 f3 b7 ff 41 8b 56 48 48 c7 c7 09 a7 54 86 4c 89 ee e8 fd de 66 ff 90 <0f> 0b 90 90 e9 58 fe ff ff e8 0e 9d ad 03 66 66 66 66 66 2e 0f 1f [ 500.361420][T24490] RSP: 0018:ffffc9000218b7c8 EFLAGS: 00010246 [ 500.367521][T24490] RAX: 2f29624995de7b00 RBX: ffff88811a468a58 RCX: 0000000000080000 [ 500.375520][T24490] RDX: ffffc9000644d000 RSI: 0000000000004caa RDI: 0000000000004cab [ 500.383522][T24490] RBP: 0000000000000002 R08: 0001c9000218b63f R09: 0000000000000000 [ 500.391540][T24490] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a468a08 [ 500.399614][T24490] R13: 000000000000000b R14: ffff88811a4689c0 R15: 0000000000000001 [ 500.407656][T24490] FS: 00007f38c309e6c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 500.416662][T24490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.423250][T24490] CR2: 00007f38bacbd000 CR3: 00000001393fc000 CR4: 00000000003506f0 [ 500.431271][T24490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.439416][T24490] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 500.447383][T24490] Call Trace: [ 500.450682][T24490] [ 500.453647][T24490] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 500.459583][T24490] ? errseq_check+0x2c/0x50 [ 500.464096][T24490] ext4_xattr_delete_inode+0x6b7/0x790 [ 500.469615][T24490] ? ext4_truncate+0x92e/0xae0 [ 500.474402][T24490] ext4_evict_inode+0xa6a/0xd90 [ 500.479286][T24490] ? __pfx_ext4_evict_inode+0x10/0x10 [ 500.484728][T24490] evict+0x2e3/0x550 [ 500.488677][T24490] ? __dquot_initialize+0x146/0x7c0 [ 500.494367][T24490] iput+0x447/0x5b0 [ 500.498182][T24490] ext4_process_orphan+0x1a9/0x1c0 [ 500.503335][T24490] ext4_orphan_cleanup+0x6a8/0xa00 [ 500.508451][T24490] ext4_fill_super+0x3260/0x35d0 [ 500.513462][T24490] ? set_blocksize+0x1a8/0x310 [ 500.518225][T24490] ? sb_set_blocksize+0xe3/0x100 [ 500.523187][T24490] ? setup_bdev_super+0x30e/0x370 [ 500.528212][T24490] ? __pfx_ext4_fill_super+0x10/0x10 [ 500.533729][T24490] get_tree_bdev_flags+0x28e/0x300 [ 500.538988][T24490] ? __pfx_ext4_fill_super+0x10/0x10 [ 500.544289][T24490] get_tree_bdev+0x1f/0x30 [ 500.548771][T24490] ext4_get_tree+0x1c/0x30 [ 500.553292][T24490] vfs_get_tree+0x57/0x1d0 [ 500.557818][T24490] do_new_mount+0x207/0x5e0 [ 500.562434][T24490] ? security_capable+0x83/0x90 [ 500.567321][T24490] path_mount+0x4a4/0xb20 [ 500.571773][T24490] ? user_path_at+0x109/0x130 [ 500.576505][T24490] __se_sys_mount+0x28f/0x2e0 [ 500.581210][T24490] ? do_mkdirat+0x3ac/0x3f0 [ 500.585786][T24490] __x64_sys_mount+0x67/0x80 [ 500.590430][T24490] x64_sys_call+0x2b4d/0x2ff0 [ 500.595254][T24490] do_syscall_64+0xd2/0x200 [ 500.599796][T24490] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 500.605933][T24490] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 500.611685][T24490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.617647][T24490] RIP: 0033:0x7f38c466066a [ 500.622087][T24490] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.641791][T24490] RSP: 002b:00007f38c309de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 500.650217][T24490] RAX: ffffffffffffffda RBX: 00007f38c309def0 RCX: 00007f38c466066a [ 500.658246][T24490] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f38c309deb0 [ 500.666231][T24490] RBP: 0000200000000180 R08: 00007f38c309def0 R09: 0000000000800700 [ 500.674230][T24490] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 500.682222][T24490] R13: 00007f38c309deb0 R14: 0000000000000473 R15: 0000200000000680 [ 500.690299][T24490] [ 500.693317][T24490] ---[ end trace 0000000000000000 ]--- [ 500.701155][T24490] EXT4-fs (loop4): 1 orphan inode deleted [ 500.707366][T24490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.917625][T24506] hub 9-0:1.0: USB hub found [ 500.922403][T24506] hub 9-0:1.0: 8 ports detected [ 501.024183][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.080064][T24518] loop2: detected capacity change from 0 to 128 [ 501.305571][T24525] FAULT_INJECTION: forcing a failure. [ 501.305571][T24525] name failslab, interval 1, probability 0, space 0, times 0 [ 501.318294][T24525] CPU: 0 UID: 0 PID: 24525 Comm: syz.4.6684 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 501.318325][T24525] Tainted: [W]=WARN [ 501.318348][T24525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.318358][T24525] Call Trace: [ 501.318364][T24525] [ 501.318371][T24525] __dump_stack+0x1d/0x30 [ 501.318389][T24525] dump_stack_lvl+0xe8/0x140 [ 501.318433][T24525] dump_stack+0x15/0x1b [ 501.318451][T24525] should_fail_ex+0x265/0x280 [ 501.318520][T24525] should_failslab+0x8c/0xb0 [ 501.318546][T24525] __kmalloc_noprof+0xa5/0x3e0 [ 501.318573][T24525] ? alloc_pipe_info+0x1c9/0x350 [ 501.318706][T24525] alloc_pipe_info+0x1c9/0x350 [ 501.318730][T24525] splice_direct_to_actor+0x592/0x680 [ 501.318751][T24525] ? kstrtouint_from_user+0x9f/0xf0 [ 501.318777][T24525] ? __pfx_direct_splice_actor+0x10/0x10 [ 501.318799][T24525] ? __rcu_read_unlock+0x4f/0x70 [ 501.318872][T24525] ? get_pid_task+0x96/0xd0 [ 501.318888][T24525] ? avc_policy_seqno+0x15/0x30 [ 501.318935][T24525] ? selinux_file_permission+0x1e4/0x320 [ 501.318959][T24525] do_splice_direct+0xda/0x150 [ 501.318981][T24525] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 501.319073][T24525] do_sendfile+0x380/0x650 [ 501.319102][T24525] __x64_sys_sendfile64+0x105/0x150 [ 501.319135][T24525] x64_sys_call+0x2bb0/0x2ff0 [ 501.319167][T24525] do_syscall_64+0xd2/0x200 [ 501.319194][T24525] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 501.319217][T24525] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 501.319297][T24525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.319345][T24525] RIP: 0033:0x7f38c465eec9 [ 501.319360][T24525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.319374][T24525] RSP: 002b:00007f38c30bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 501.319390][T24525] RAX: ffffffffffffffda RBX: 00007f38c48b5fa0 RCX: 00007f38c465eec9 [ 501.319402][T24525] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 501.319413][T24525] RBP: 00007f38c30bf090 R08: 0000000000000000 R09: 0000000000000000 [ 501.319506][T24525] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 501.319519][T24525] R13: 00007f38c48b6038 R14: 00007f38c48b5fa0 R15: 00007ffd492dc1f8 [ 501.319539][T24525] [ 501.701447][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 501.701505][ T29] audit: type=1326 audit(1758757762.763:31028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.767771][ T29] audit: type=1326 audit(1758757762.793:31029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.791461][ T29] audit: type=1326 audit(1758757762.793:31030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.815025][ T29] audit: type=1326 audit(1758757762.793:31031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.838723][ T29] audit: type=1326 audit(1758757762.793:31032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.862378][ T29] audit: type=1326 audit(1758757762.793:31033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.885912][ T29] audit: type=1326 audit(1758757762.793:31034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.909530][ T29] audit: type=1326 audit(1758757762.793:31035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.933086][ T29] audit: type=1326 audit(1758757762.793:31036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 501.956681][ T29] audit: type=1326 audit(1758757762.793:31037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.0.6685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 502.075336][T24541] lo speed is unknown, defaulting to 1000 [ 502.390542][T24547] hub 9-0:1.0: USB hub found [ 502.395205][T24547] hub 9-0:1.0: 8 ports detected [ 502.615689][T24554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6693'. [ 502.634318][T24556] netlink: 'syz.0.6694': attribute type 2 has an invalid length. [ 502.699070][T24563] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 502.716820][T24561] loop4: detected capacity change from 0 to 1024 [ 502.724174][T24561] EXT4-fs: Ignoring removed i_version option [ 502.769834][T24563] SELinux: failed to load policy [ 502.787643][T24561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.829560][T24570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6697'. [ 502.872629][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.988303][T24580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6699'. [ 502.997401][T24580] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6699'. [ 503.031543][T24580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6699'. [ 503.054249][T24583] loop4: detected capacity change from 0 to 512 [ 503.060737][T24580] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6699'. [ 503.079912][T24583] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 503.090811][T24583] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 503.100921][T24583] EXT4-fs (loop4): group descriptors corrupted! [ 503.157958][T24585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.211841][T24585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.236613][T24585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.246062][T24585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.258663][T24591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6705'. [ 503.260198][T24585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.267834][T24591] bridge_slave_1: left allmulticast mode [ 503.281574][T24591] bridge_slave_1: left promiscuous mode [ 503.287289][T24591] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.295167][T24585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.319399][T24585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.330433][T24585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.331582][T24591] bridge_slave_0: left allmulticast mode [ 503.344016][T24591] bridge_slave_0: left promiscuous mode [ 503.349805][T24591] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.375881][T24602] loop4: detected capacity change from 0 to 1024 [ 503.382915][T24602] EXT4-fs: Ignoring removed i_version option [ 503.400554][T24602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.400608][T24597] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 503.456040][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.618407][T24614] loop3: detected capacity change from 0 to 512 [ 503.629089][T24614] EXT4-fs: Ignoring removed oldalloc option [ 503.635089][T24614] EXT4-fs: inline encryption not supported [ 503.641082][T24614] EXT4-fs: Ignoring removed mblk_io_submit option [ 503.650967][T24614] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 503.694688][T24622] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6713'. [ 503.840715][T24614] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6714: bg 0: block 64: padding at end of block bitmap is not set [ 503.858307][T24614] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.6714: Failed to acquire dquot type 0 [ 503.871783][T24614] EXT4-fs (loop3): 1 truncate cleaned up [ 503.878175][T24614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.977398][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.163165][T24632] netlink: '+}[@': attribute type 10 has an invalid length. [ 504.170555][T24632] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 504.190401][T24636] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 504.235825][T24636] SELinux: failed to load policy [ 504.302918][T24643] serio: Serial port ttyS3 [ 504.342512][T24642] loop3: detected capacity change from 0 to 1024 [ 504.350724][T24642] EXT4-fs: Ignoring removed i_version option [ 504.430194][T24642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.430937][T24650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6724'. [ 504.483825][T24654] lo speed is unknown, defaulting to 1000 [ 504.571410][T24654] loop4: detected capacity change from 0 to 512 [ 504.583207][T24654] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.6726: error while reading EA inode 32 err=-116 [ 504.584593][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.781566][T24654] EXT4-fs (loop4): Remounting filesystem read-only [ 504.788097][T24654] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 504.893837][T24663] team0 (unregistering): Port device team_slave_0 removed [ 505.005498][T24663] team0 (unregistering): Port device team_slave_1 removed [ 505.037309][T24654] EXT4-fs (loop4): 1 orphan inode deleted [ 505.043935][T24654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.070848][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.131013][T24667] team0 (unregistering): Port device team_slave_0 removed [ 505.161099][T24667] team0 (unregistering): Port device team_slave_1 removed [ 505.180765][T24667] team0 (unregistering): Port device dummy0 removed [ 505.205462][T24674] netlink: 'syz.0.6733': attribute type 1 has an invalid length. [ 505.223937][T24674] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 505.236075][ T5853] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 505.236332][T24674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.349033][T20644] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 505.362244][T24674] veth3: entered promiscuous mode [ 505.379774][T24674] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 505.433509][T24679] hub 9-0:1.0: USB hub found [ 505.438183][T24679] hub 9-0:1.0: 8 ports detected [ 505.499294][T24689] random: crng reseeded on system resumption [ 505.531304][T24692] lo speed is unknown, defaulting to 1000 [ 505.648594][T24702] loop2: detected capacity change from 0 to 128 [ 505.687339][ T5853] bio_check_eod: 192 callbacks suppressed [ 505.687354][ T5853] kworker/u8:11: attempt to access beyond end of device [ 505.687354][ T5853] loop2: rw=1, sector=128, nr_sectors = 1 limit=128 [ 505.706621][ T5853] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 505.742113][T24702] syz.2.6741: attempt to access beyond end of device [ 505.742113][T24702] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 505.764050][T24702] syz.2.6741: attempt to access beyond end of device [ 505.764050][T24702] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 505.785017][T24702] syz.2.6741: attempt to access beyond end of device [ 505.785017][T24702] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 505.798718][T24702] syz.2.6741: attempt to access beyond end of device [ 505.798718][T24702] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 505.812463][T24702] syz.2.6741: attempt to access beyond end of device [ 505.812463][T24702] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 505.832891][T24702] syz.2.6741: attempt to access beyond end of device [ 505.832891][T24702] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 505.847351][T24702] syz.2.6741: attempt to access beyond end of device [ 505.847351][T24702] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 505.879407][T24702] syz.2.6741: attempt to access beyond end of device [ 505.879407][T24702] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 505.893575][T24702] syz.2.6741: attempt to access beyond end of device [ 505.893575][T24702] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 505.909746][ T5853] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 506.396965][T24716] lo speed is unknown, defaulting to 1000 [ 506.599602][T24722] loop2: detected capacity change from 0 to 512 [ 506.632314][T24722] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 506.656648][T24730] lo speed is unknown, defaulting to 1000 [ 506.666806][T24722] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6748: invalid indirect mapped block 4294967295 (level 0) [ 506.692566][T24722] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.6748: invalid indirect mapped block 4294967295 (level 1) [ 506.710479][T24722] EXT4-fs (loop2): 1 orphan inode deleted [ 506.716267][T24722] EXT4-fs (loop2): 1 truncate cleaned up [ 506.942839][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 506.942855][ T29] audit: type=1326 audit(1758757768.003:31282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 506.972769][ T29] audit: type=1326 audit(1758757768.003:31283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 506.996475][ T29] audit: type=1326 audit(1758757768.003:31284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 507.020058][ T29] audit: type=1326 audit(1758757768.003:31285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 507.043626][ T29] audit: type=1326 audit(1758757768.003:31286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 507.067182][ T29] audit: type=1326 audit(1758757768.003:31287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 507.090668][ T29] audit: type=1326 audit(1758757768.003:31288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 507.114424][ T29] audit: type=1326 audit(1758757768.003:31289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 507.137894][ T29] audit: type=1326 audit(1758757768.003:31290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 507.161499][ T29] audit: type=1326 audit(1758757768.003:31291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24741 comm="syz.3.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 507.749278][T24762] lo speed is unknown, defaulting to 1000 [ 508.137803][T24761] netlink: 'syz.2.6760': attribute type 30 has an invalid length. [ 508.207459][T24767] lo speed is unknown, defaulting to 1000 [ 508.430495][T24771] loop2: detected capacity change from 0 to 2048 [ 508.437215][T24771] EXT4-fs: Ignoring removed i_version option [ 508.518821][T24771] EXT4-fs mount: 2 callbacks suppressed [ 508.518837][T24771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.571831][T24795] loop4: detected capacity change from 0 to 128 [ 508.603722][T24795] FAT-fs (loop4): Directory bread(block 162) failed [ 508.611981][T24795] FAT-fs (loop4): Directory bread(block 163) failed [ 508.618992][T24795] FAT-fs (loop4): Directory bread(block 164) failed [ 508.636000][T24795] FAT-fs (loop4): Directory bread(block 165) failed [ 508.648839][T24795] FAT-fs (loop4): Directory bread(block 166) failed [ 508.658256][T24795] FAT-fs (loop4): Directory bread(block 167) failed [ 508.665446][T24795] FAT-fs (loop4): Directory bread(block 168) failed [ 508.672505][T24795] FAT-fs (loop4): Directory bread(block 169) failed [ 508.721038][T24795] FAULT_INJECTION: forcing a failure. [ 508.721038][T24795] name failslab, interval 1, probability 0, space 0, times 0 [ 508.733743][T24795] CPU: 1 UID: 0 PID: 24795 Comm: syz.4.6771 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 508.733834][T24795] Tainted: [W]=WARN [ 508.733841][T24795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.733854][T24795] Call Trace: [ 508.733860][T24795] [ 508.733868][T24795] __dump_stack+0x1d/0x30 [ 508.733929][T24795] dump_stack_lvl+0xe8/0x140 [ 508.733945][T24795] dump_stack+0x15/0x1b [ 508.733959][T24795] should_fail_ex+0x265/0x280 [ 508.733981][T24795] should_failslab+0x8c/0xb0 [ 508.734012][T24795] kmem_cache_alloc_noprof+0x50/0x310 [ 508.734058][T24795] ? alloc_empty_file+0x76/0x200 [ 508.734137][T24795] alloc_empty_file+0x76/0x200 [ 508.734179][T24795] path_openat+0x68/0x2170 [ 508.734196][T24795] ? _parse_integer_limit+0x170/0x190 [ 508.734301][T24795] ? _parse_integer+0x27/0x40 [ 508.734319][T24795] ? kstrtoull+0x111/0x140 [ 508.734387][T24795] ? kstrtouint+0x76/0xc0 [ 508.734412][T24795] do_filp_open+0x109/0x230 [ 508.734441][T24795] do_sys_openat2+0xa6/0x110 [ 508.734534][T24795] __x64_sys_creat+0x65/0x90 [ 508.734554][T24795] x64_sys_call+0x2d94/0x2ff0 [ 508.734574][T24795] do_syscall_64+0xd2/0x200 [ 508.734600][T24795] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 508.734630][T24795] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 508.734656][T24795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.734676][T24795] RIP: 0033:0x7f38c465eec9 [ 508.734693][T24795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.734718][T24795] RSP: 002b:00007f38c30bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 508.734738][T24795] RAX: ffffffffffffffda RBX: 00007f38c48b5fa0 RCX: 00007f38c465eec9 [ 508.734753][T24795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 508.734765][T24795] RBP: 00007f38c30bf090 R08: 0000000000000000 R09: 0000000000000000 [ 508.734777][T24795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.734791][T24795] R13: 00007f38c48b6038 R14: 00007f38c48b5fa0 R15: 00007ffd492dc1f8 [ 508.734811][T24795] [ 508.737091][T24771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.016921][T24812] hub 9-0:1.0: USB hub found [ 509.022010][T24812] hub 9-0:1.0: 8 ports detected [ 509.184726][T24771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.307140][T24809] lo speed is unknown, defaulting to 1000 [ 509.381295][T24808] netlink: 'syz.6.6766': attribute type 10 has an invalid length. [ 509.417286][T24771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.557756][T24771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.659565][T20644] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.678225][T20644] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.698198][T20644] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.720781][T20644] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.771045][T24839] netlink: 'syz.0.6784': attribute type 2 has an invalid length. [ 509.789273][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.361245][T24853] hub 9-0:1.0: USB hub found [ 510.368665][T24853] hub 9-0:1.0: 8 ports detected [ 511.747300][T24865] __nla_validate_parse: 6 callbacks suppressed [ 511.747317][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6791'. [ 511.988767][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 511.988780][ T29] audit: type=1326 audit(1758757773.033:31395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24876 comm="syz.4.6795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38c465eec9 code=0x0 [ 512.022885][T24878] loop4: detected capacity change from 0 to 128 [ 512.046496][T24881] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 512.069416][T20639] bio_check_eod: 162 callbacks suppressed [ 512.069430][T20639] kworker/u8:15: attempt to access beyond end of device [ 512.069430][T20639] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 512.096251][T20639] kworker/u8:15: attempt to access beyond end of device [ 512.096251][T20639] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 512.163562][T24887] netlink: 'syz.6.6798': attribute type 21 has an invalid length. [ 512.165657][T24878] syz.4.6795: attempt to access beyond end of device [ 512.165657][T24878] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 512.171554][T24887] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6798'. [ 512.194195][T24887] netlink: 'syz.6.6798': attribute type 1 has an invalid length. [ 512.221873][ T29] audit: type=1326 audit(1758757773.283:31396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24873 comm="syz.3.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 512.232140][T24888] lo speed is unknown, defaulting to 1000 [ 512.245501][ T29] audit: type=1326 audit(1758757773.283:31397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24873 comm="syz.3.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 512.245527][ T29] audit: type=1326 audit(1758757773.283:31398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24873 comm="syz.3.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 512.298696][ T29] audit: type=1326 audit(1758757773.283:31399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24873 comm="syz.3.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 512.324896][ T29] audit: type=1326 audit(1758757773.383:31400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24873 comm="syz.3.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 512.338699][T24878] syz.4.6795: attempt to access beyond end of device [ 512.338699][T24878] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 512.348571][ T29] audit: type=1326 audit(1758757773.383:31401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24873 comm="syz.3.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820199eec9 code=0x7ffc0000 [ 512.479079][ T29] audit: type=1326 audit(1758757773.483:31402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24893 comm="syz.6.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 512.502830][ T29] audit: type=1326 audit(1758757773.483:31403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24893 comm="syz.6.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 512.526551][ T29] audit: type=1326 audit(1758757773.483:31404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24893 comm="syz.6.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 512.550777][T20639] kworker/u8:15: attempt to access beyond end of device [ 512.550777][T20639] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 512.566756][T24888] loop2: detected capacity change from 0 to 512 [ 512.580858][T24878] syz.4.6795: attempt to access beyond end of device [ 512.580858][T24878] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 512.614793][T24888] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.6799: error while reading EA inode 32 err=-116 [ 512.636448][T24888] EXT4-fs (loop2): Remounting filesystem read-only [ 512.643073][T24888] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 512.659103][T20639] kworker/u8:15: attempt to access beyond end of device [ 512.659103][T20639] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 512.679345][T24888] EXT4-fs (loop2): 1 orphan inode deleted [ 512.685305][T24878] syz.4.6795: attempt to access beyond end of device [ 512.685305][T24878] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 512.696705][T24888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.708707][T24878] syz.4.6795: attempt to access beyond end of device [ 512.708707][T24878] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 512.739940][T20639] kworker/u8:15: attempt to access beyond end of device [ 512.739940][T20639] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 512.838821][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.926422][T24911] netlink: 'syz.4.6803': attribute type 10 has an invalid length. [ 512.934428][T24911] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6803'. [ 513.682002][T24948] lo speed is unknown, defaulting to 1000 [ 514.027943][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6821'. [ 514.036944][T24961] netlink: 'syz.4.6821': attribute type 30 has an invalid length. [ 514.070755][T20644] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.084993][T24962] loop2: detected capacity change from 0 to 1024 [ 514.091630][T20644] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.100855][ T5853] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.112310][ T5853] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.124082][T24962] EXT4-fs: Ignoring removed i_version option [ 514.161940][T24962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.297713][T24973] netlink: 'syz.4.6824': attribute type 21 has an invalid length. [ 514.305589][T24973] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6824'. [ 514.324572][T24973] loop4: detected capacity change from 0 to 1764 [ 514.425071][T24973] 9pnet: Could not find request transport: bio_remap [ 514.511779][T24985] FAULT_INJECTION: forcing a failure. [ 514.511779][T24985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.524946][T24985] CPU: 0 UID: 0 PID: 24985 Comm: syz.4.6828 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.525027][T24985] Tainted: [W]=WARN [ 514.525033][T24985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.525054][T24985] Call Trace: [ 514.525060][T24985] [ 514.525066][T24985] __dump_stack+0x1d/0x30 [ 514.525084][T24985] dump_stack_lvl+0xe8/0x140 [ 514.525165][T24985] dump_stack+0x15/0x1b [ 514.525178][T24985] should_fail_ex+0x265/0x280 [ 514.525197][T24985] should_fail+0xb/0x20 [ 514.525213][T24985] should_fail_usercopy+0x1a/0x20 [ 514.525304][T24985] _copy_to_user+0x20/0xa0 [ 514.525328][T24985] simple_read_from_buffer+0xb5/0x130 [ 514.525352][T24985] proc_fail_nth_read+0x10e/0x150 [ 514.525374][T24985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.525471][T24985] vfs_read+0x1a5/0x770 [ 514.525488][T24985] ? __rcu_read_unlock+0x4f/0x70 [ 514.525540][T24985] ? __fget_files+0x184/0x1c0 [ 514.525561][T24985] ksys_read+0xda/0x1a0 [ 514.525579][T24985] __x64_sys_read+0x40/0x50 [ 514.525597][T24985] x64_sys_call+0x27bc/0x2ff0 [ 514.525672][T24985] do_syscall_64+0xd2/0x200 [ 514.525697][T24985] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 514.525716][T24985] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 514.525770][T24985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.525808][T24985] RIP: 0033:0x7f38c465d8dc [ 514.525822][T24985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 514.525835][T24985] RSP: 002b:00007f38c30bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.525894][T24985] RAX: ffffffffffffffda RBX: 00007f38c48b5fa0 RCX: 00007f38c465d8dc [ 514.525905][T24985] RDX: 000000000000000f RSI: 00007f38c30bf0a0 RDI: 0000000000000004 [ 514.525917][T24985] RBP: 00007f38c30bf090 R08: 0000000000000000 R09: 0000000000000000 [ 514.525927][T24985] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 514.525937][T24985] R13: 00007f38c48b6038 R14: 00007f38c48b5fa0 R15: 00007ffd492dc1f8 [ 514.525952][T24985] [ 514.811364][T24986] 9p: Unknown access argument ¿: -22 [ 514.827504][T24988] FAULT_INJECTION: forcing a failure. [ 514.827504][T24988] name failslab, interval 1, probability 0, space 0, times 0 [ 514.840180][T24988] CPU: 0 UID: 0 PID: 24988 Comm: syz.4.6829 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.840208][T24988] Tainted: [W]=WARN [ 514.840213][T24988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.840240][T24988] Call Trace: [ 514.840247][T24988] [ 514.840255][T24988] __dump_stack+0x1d/0x30 [ 514.840274][T24988] dump_stack_lvl+0xe8/0x140 [ 514.840362][T24988] dump_stack+0x15/0x1b [ 514.840380][T24988] should_fail_ex+0x265/0x280 [ 514.840406][T24988] should_failslab+0x8c/0xb0 [ 514.840432][T24988] __kmalloc_noprof+0xa5/0x3e0 [ 514.840519][T24988] ? sock_kmalloc+0x85/0xc0 [ 514.840544][T24988] sock_kmalloc+0x85/0xc0 [ 514.840570][T24988] ipv6_sock_ac_join+0x1ea/0x540 [ 514.840596][T24988] do_ipv6_setsockopt+0x1938/0x2160 [ 514.840621][T24988] ? kstrtoull+0x111/0x140 [ 514.840677][T24988] ? avc_has_perm_noaudit+0x1b1/0x200 [ 514.840705][T24988] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 514.840740][T24988] ipv6_setsockopt+0x59/0x130 [ 514.840834][T24988] udpv6_setsockopt+0x99/0xb0 [ 514.840853][T24988] sock_common_setsockopt+0x69/0x80 [ 514.840928][T24988] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 514.840997][T24988] __sys_setsockopt+0x181/0x200 [ 514.841022][T24988] __x64_sys_setsockopt+0x64/0x80 [ 514.841042][T24988] x64_sys_call+0x20ec/0x2ff0 [ 514.841085][T24988] do_syscall_64+0xd2/0x200 [ 514.841115][T24988] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 514.841140][T24988] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 514.841168][T24988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.841217][T24988] RIP: 0033:0x7f38c465eec9 [ 514.841230][T24988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.841247][T24988] RSP: 002b:00007f38c30bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 514.841268][T24988] RAX: ffffffffffffffda RBX: 00007f38c48b5fa0 RCX: 00007f38c465eec9 [ 514.841282][T24988] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 514.841295][T24988] RBP: 00007f38c30bf090 R08: 0000000000000014 R09: 0000000000000000 [ 514.841347][T24988] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 514.841418][T24988] R13: 00007f38c48b6038 R14: 00007f38c48b5fa0 R15: 00007ffd492dc1f8 [ 514.841434][T24988] [ 515.109048][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.297292][T25009] loop2: detected capacity change from 0 to 512 [ 515.343685][T25009] EXT4-fs: Ignoring removed oldalloc option [ 515.349700][T25009] EXT4-fs: inline encryption not supported [ 515.355583][T25009] EXT4-fs: Ignoring removed mblk_io_submit option [ 515.370974][T25009] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 515.389371][T25011] hub 9-0:1.0: USB hub found [ 515.394180][T25011] hub 9-0:1.0: 8 ports detected [ 515.415874][T25009] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6837: bg 0: block 64: padding at end of block bitmap is not set [ 515.434597][T25009] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6837: Failed to acquire dquot type 0 [ 515.460032][T25009] EXT4-fs (loop2): 1 truncate cleaned up [ 515.490659][T25009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.521783][T25025] netlink: 'syz.6.6840': attribute type 10 has an invalid length. [ 515.609932][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.770811][T25030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6842'. [ 515.783638][T25030] netlink: 'syz.2.6842': attribute type 10 has an invalid length. [ 515.791509][T25030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6842'. [ 515.898847][T25033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6843'. [ 516.128987][T25041] FAULT_INJECTION: forcing a failure. [ 516.128987][T25041] name failslab, interval 1, probability 0, space 0, times 0 [ 516.141670][T25041] CPU: 1 UID: 0 PID: 25041 Comm: syz.0.6847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 516.141722][T25041] Tainted: [W]=WARN [ 516.141728][T25041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.141747][T25041] Call Trace: [ 516.141754][T25041] [ 516.141761][T25041] __dump_stack+0x1d/0x30 [ 516.141781][T25041] dump_stack_lvl+0xe8/0x140 [ 516.141881][T25041] dump_stack+0x15/0x1b [ 516.141900][T25041] should_fail_ex+0x265/0x280 [ 516.141993][T25041] should_failslab+0x8c/0xb0 [ 516.142015][T25041] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 516.142044][T25041] ? shmem_alloc_inode+0x34/0x50 [ 516.142080][T25041] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 516.142135][T25041] shmem_alloc_inode+0x34/0x50 [ 516.142155][T25041] alloc_inode+0x40/0x170 [ 516.142178][T25041] new_inode+0x1d/0xe0 [ 516.142225][T25041] shmem_get_inode+0x244/0x750 [ 516.142247][T25041] __shmem_file_setup+0x113/0x210 [ 516.142277][T25041] shmem_file_setup+0x3b/0x50 [ 516.142296][T25041] __se_sys_memfd_create+0x2c3/0x590 [ 516.142320][T25041] __x64_sys_memfd_create+0x31/0x40 [ 516.142355][T25041] x64_sys_call+0x2abe/0x2ff0 [ 516.142374][T25041] do_syscall_64+0xd2/0x200 [ 516.142399][T25041] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 516.142424][T25041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 516.142457][T25041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.142475][T25041] RIP: 0033:0x7f1ea98ceec9 [ 516.142489][T25041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.142516][T25041] RSP: 002b:00007f1ea832ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 516.142536][T25041] RAX: ffffffffffffffda RBX: 00000000000004ea RCX: 00007f1ea98ceec9 [ 516.142550][T25041] RDX: 00007f1ea832eef0 RSI: 0000000000000000 RDI: 00007f1ea9952960 [ 516.142564][T25041] RBP: 00002000000006c0 R08: 00007f1ea832ebb7 R09: 00007f1ea832ee40 [ 516.142578][T25041] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 516.142639][T25041] R13: 00007f1ea832eef0 R14: 00007f1ea832eeb0 R15: 0000200000000000 [ 516.142660][T25041] [ 516.433034][T25037] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 516.463517][T25037] netlink: '+}[@': attribute type 10 has an invalid length. [ 516.470906][T25037] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 516.511795][T25037] veth1_vlan: left promiscuous mode [ 516.517535][T25037] batman_adv: batadv0: Interface activated: veth1_vlan [ 516.762597][T25067] __nla_validate_parse: 1 callbacks suppressed [ 516.762615][T25067] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 516.804011][T25067] netlink: '+}[@': attribute type 10 has an invalid length. [ 516.811381][T25067] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 516.925242][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6858'. [ 516.999040][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 516.999054][ T29] audit: type=1326 audit(1758757778.063:31666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.047326][T25083] loop2: detected capacity change from 0 to 128 [ 517.102203][T20647] bio_check_eod: 36 callbacks suppressed [ 517.102219][T20647] kworker/u8:23: attempt to access beyond end of device [ 517.102219][T20647] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 517.123139][ T29] audit: type=1326 audit(1758757778.093:31667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.146868][ T29] audit: type=1326 audit(1758757778.093:31668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.170698][ T29] audit: type=1326 audit(1758757778.093:31669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.194716][ T29] audit: type=1326 audit(1758757778.093:31670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.218286][ T29] audit: type=1326 audit(1758757778.093:31671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.241905][ T29] audit: type=1326 audit(1758757778.093:31672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.265580][ T29] audit: type=1326 audit(1758757778.093:31673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.289223][ T29] audit: type=1326 audit(1758757778.093:31674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.290707][T25083] syz.2.6860: attempt to access beyond end of device [ 517.290707][T25083] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 517.312857][ T29] audit: type=1326 audit(1758757778.093:31675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.6.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f126614eec9 code=0x7ffc0000 [ 517.330005][T20647] kworker/u8:23: attempt to access beyond end of device [ 517.330005][T20647] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 517.395619][T20647] kworker/u8:23: attempt to access beyond end of device [ 517.395619][T20647] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 517.419628][T25083] syz.2.6860: attempt to access beyond end of device [ 517.419628][T25083] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 517.440811][T25083] syz.2.6860: attempt to access beyond end of device [ 517.440811][T25083] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 517.455512][T20647] kworker/u8:23: attempt to access beyond end of device [ 517.455512][T20647] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 517.470969][T25083] syz.2.6860: attempt to access beyond end of device [ 517.470969][T25083] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 517.486177][T20647] kworker/u8:23: attempt to access beyond end of device [ 517.486177][T20647] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 517.501438][T25083] syz.2.6860: attempt to access beyond end of device [ 517.501438][T25083] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 517.970799][T25100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6867'. [ 518.249717][T25122] loop2: detected capacity change from 0 to 128 [ 518.381696][T25128] lo speed is unknown, defaulting to 1000 [ 518.425438][T25126] netlink: '+}[@': attribute type 10 has an invalid length. [ 518.432791][T25126] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 518.822751][T25156] program syz.3.6889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.832514][T25156] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 518.952387][T25156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6889'. [ 519.501057][T25181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6895'. [ 519.521800][ T7927] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 519.529226][ T7927] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 519.536886][T25183] FAULT_INJECTION: forcing a failure. [ 519.536886][T25183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.549979][T25183] CPU: 1 UID: 0 PID: 25183 Comm: syz.0.6896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 519.550075][T25183] Tainted: [W]=WARN [ 519.550083][T25183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.550110][T25183] Call Trace: [ 519.550118][T25183] [ 519.550127][T25183] __dump_stack+0x1d/0x30 [ 519.550149][T25183] dump_stack_lvl+0xe8/0x140 [ 519.550166][T25183] dump_stack+0x15/0x1b [ 519.550180][T25183] should_fail_ex+0x265/0x280 [ 519.550277][T25183] should_fail+0xb/0x20 [ 519.550297][T25183] should_fail_usercopy+0x1a/0x20 [ 519.550323][T25183] _copy_from_user+0x1c/0xb0 [ 519.550352][T25183] uhid_char_write+0xef/0x650 [ 519.550388][T25183] ? __pfx_uhid_char_write+0x10/0x10 [ 519.550410][T25183] vfs_write+0x266/0x960 [ 519.550428][T25183] ? __rcu_read_unlock+0x4f/0x70 [ 519.550448][T25183] ? __fget_files+0x184/0x1c0 [ 519.550522][T25183] ksys_write+0xda/0x1a0 [ 519.550545][T25183] __x64_sys_write+0x40/0x50 [ 519.550568][T25183] x64_sys_call+0x27fe/0x2ff0 [ 519.550590][T25183] do_syscall_64+0xd2/0x200 [ 519.550673][T25183] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 519.550698][T25183] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 519.550721][T25183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.550757][T25183] RIP: 0033:0x7f1ea98ceec9 [ 519.550772][T25183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.550787][T25183] RSP: 002b:00007f1ea832f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 519.550807][T25183] RAX: ffffffffffffffda RBX: 00007f1ea9b25fa0 RCX: 00007f1ea98ceec9 [ 519.550821][T25183] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 519.550914][T25183] RBP: 00007f1ea832f090 R08: 0000000000000000 R09: 0000000000000000 [ 519.551007][T25183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.551020][T25183] R13: 00007f1ea9b26038 R14: 00007f1ea9b25fa0 R15: 00007ffd7ae84788 [ 519.551100][T25183] [ 519.551517][ T7927] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.03 Device [syz0] on syz0 [ 519.805137][T25186] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 520.256001][T25204] loop2: detected capacity change from 0 to 1024 [ 520.308387][T25204] EXT4-fs: Ignoring removed i_version option [ 520.355731][T25208] lo speed is unknown, defaulting to 1000 [ 520.382024][T25213] loop4: detected capacity change from 0 to 128 [ 520.403018][T20643] Buffer I/O error on dev loop4, logical block 424, lost async page write [ 520.405984][T25204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.455370][T20643] Buffer I/O error on dev loop4, logical block 752, lost async page write [ 520.506593][T20643] Buffer I/O error on dev loop4, logical block 417, lost async page write [ 520.540474][T20643] Buffer I/O error on dev loop4, logical block 418, lost async page write [ 520.555844][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.579421][T20643] Buffer I/O error on dev loop4, logical block 419, lost async page write [ 520.588111][T20643] Buffer I/O error on dev loop4, logical block 420, lost async page write [ 520.604546][T25225] netlink: 'syz.2.6907': attribute type 30 has an invalid length. [ 520.612742][T25223] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 520.619266][T25223] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 520.626933][T25223] vhci_hcd vhci_hcd.0: Device attached [ 520.628076][T20643] Buffer I/O error on dev loop4, logical block 421, lost async page write [ 520.647255][T25226] vhci_hcd: connection closed [ 520.647544][T20689] vhci_hcd: stop threads [ 520.656583][T20689] vhci_hcd: release socket [ 520.661017][T20689] vhci_hcd: disconnect device [ 520.712008][T20643] Buffer I/O error on dev loop4, logical block 422, lost async page write [ 520.720668][T20643] Buffer I/O error on dev loop4, logical block 423, lost async page write [ 520.729415][T20643] Buffer I/O error on dev loop4, logical block 424, lost async page write [ 521.232826][T25248] netlink: 'syz.0.6914': attribute type 2 has an invalid length. [ 521.297540][T25252] netlink: 'syz.4.6917': attribute type 2 has an invalid length. [ 521.394521][T25258] netlink: 'syz.3.6919': attribute type 2 has an invalid length. [ 521.534558][T25260] hub 9-0:1.0: USB hub found [ 521.539286][T25260] hub 9-0:1.0: 8 ports detected [ 521.778237][T25263] lo speed is unknown, defaulting to 1000 [ 522.021693][T25273] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 522.028316][T25273] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.035985][T25273] vhci_hcd vhci_hcd.0: Device attached [ 522.058935][T25274] vhci_hcd: connection closed [ 522.059108][ T5853] vhci_hcd: stop threads [ 522.068064][ T5853] vhci_hcd: release socket [ 522.072565][ T5853] vhci_hcd: disconnect device [ 522.224394][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 522.224410][ T29] audit: type=1400 audit(1758757783.283:32040): avc: denied { write } for pid=25278 comm="syz.0.6926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 522.251761][T25279] SELinux: policydb table sizes (68,2147483647) do not match mine (8,7) [ 522.260291][T25279] SELinux: failed to load policy [ 522.290155][T25283] FAULT_INJECTION: forcing a failure. [ 522.290155][T25283] name failslab, interval 1, probability 0, space 0, times 0 [ 522.297308][T25281] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 522.302821][T25283] CPU: 0 UID: 0 PID: 25283 Comm: syz.0.6928 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 522.302884][T25283] Tainted: [W]=WARN [ 522.302891][T25283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 522.302904][T25283] Call Trace: [ 522.302912][T25283] [ 522.302922][T25283] __dump_stack+0x1d/0x30 [ 522.302944][T25283] dump_stack_lvl+0xe8/0x140 [ 522.302963][T25283] dump_stack+0x15/0x1b [ 522.303043][T25283] should_fail_ex+0x265/0x280 [ 522.303067][T25283] ? __se_sys_mount+0xef/0x2e0 [ 522.303090][T25283] should_failslab+0x8c/0xb0 [ 522.303114][T25283] __kmalloc_cache_noprof+0x4c/0x320 [ 522.303148][T25283] ? memdup_user+0x99/0xd0 [ 522.303173][T25283] __se_sys_mount+0xef/0x2e0 [ 522.303194][T25283] ? fput+0x8f/0xc0 [ 522.303281][T25283] ? ksys_write+0x192/0x1a0 [ 522.303311][T25283] __x64_sys_mount+0x67/0x80 [ 522.303334][T25283] x64_sys_call+0x2b4d/0x2ff0 [ 522.303355][T25283] do_syscall_64+0xd2/0x200 [ 522.303445][T25283] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 522.303469][T25283] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 522.303498][T25283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.303519][T25283] RIP: 0033:0x7f1ea98ceec9 [ 522.303554][T25283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.303572][T25283] RSP: 002b:00007f1ea832f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 522.303591][T25283] RAX: ffffffffffffffda RBX: 00007f1ea9b25fa0 RCX: 00007f1ea98ceec9 [ 522.303603][T25283] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 522.303720][T25283] RBP: 00007f1ea832f090 R08: 0000200000000340 R09: 0000000000000000 [ 522.303732][T25283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.303745][T25283] R13: 00007f1ea9b26038 R14: 00007f1ea9b25fa0 R15: 00007ffd7ae84788 [ 522.303763][T25283] [ 522.562925][ T29] audit: type=1326 audit(1758757783.623:32041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.612165][T25281] SELinux: failed to load policy [ 522.617308][ T29] audit: type=1326 audit(1758757783.653:32042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.625881][T25291] netlink: 'syz.3.6932': attribute type 2 has an invalid length. [ 522.641091][ T29] audit: type=1326 audit(1758757783.653:32043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.672465][ T29] audit: type=1326 audit(1758757783.653:32044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.696297][ T29] audit: type=1326 audit(1758757783.653:32045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.720137][ T29] audit: type=1326 audit(1758757783.653:32046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.743780][ T29] audit: type=1326 audit(1758757783.653:32047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.767340][ T29] audit: type=1326 audit(1758757783.653:32048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.791035][ T29] audit: type=1326 audit(1758757783.653:32049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25287 comm="syz.0.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 522.911767][T25297] lo speed is unknown, defaulting to 1000 [ 523.022826][T25305] loop3: detected capacity change from 0 to 1024 [ 523.038777][T25305] EXT4-fs: Ignoring removed i_version option [ 523.065372][T25305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.152001][T25292] hub 9-0:1.0: USB hub found [ 523.156690][T25292] hub 9-0:1.0: 8 ports detected [ 523.175089][T25313] loop4: detected capacity change from 0 to 256 [ 523.285440][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.657273][T25322] lo speed is unknown, defaulting to 1000 [ 523.669598][T25327] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 523.670486][T25325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6943'. [ 523.745351][T25327] SELinux: failed to load policy [ 523.785134][T25335] lo speed is unknown, defaulting to 1000 [ 523.943386][T25347] netlink: '+}[@': attribute type 10 has an invalid length. [ 523.950790][T25347] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 524.025440][T25354] netlink: 'syz.6.6952': attribute type 30 has an invalid length. [ 524.058803][T25358] netlink: 'syz.0.6953': attribute type 30 has an invalid length. [ 524.251703][T25371] FAULT_INJECTION: forcing a failure. [ 524.251703][T25371] name failslab, interval 1, probability 0, space 0, times 0 [ 524.264392][T25371] CPU: 1 UID: 0 PID: 25371 Comm: syz.0.6958 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 524.264423][T25371] Tainted: [W]=WARN [ 524.264429][T25371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.264440][T25371] Call Trace: [ 524.264447][T25371] [ 524.264483][T25371] __dump_stack+0x1d/0x30 [ 524.264503][T25371] dump_stack_lvl+0xe8/0x140 [ 524.264596][T25371] dump_stack+0x15/0x1b [ 524.264614][T25371] should_fail_ex+0x265/0x280 [ 524.264646][T25371] should_failslab+0x8c/0xb0 [ 524.264667][T25371] kmem_cache_alloc_node_noprof+0x57/0x320 [ 524.264691][T25371] ? __alloc_skb+0x101/0x320 [ 524.264769][T25371] __alloc_skb+0x101/0x320 [ 524.264793][T25371] alloc_skb_with_frags+0x7d/0x470 [ 524.264815][T25371] ? avc_has_perm_noaudit+0x1b1/0x200 [ 524.264838][T25371] sock_alloc_send_pskb+0x43a/0x4f0 [ 524.264889][T25371] hci_sock_sendmsg+0x129/0x910 [ 524.264929][T25371] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 524.264979][T25371] __sock_sendmsg+0x142/0x180 [ 524.265023][T25371] sock_write_iter+0x165/0x1b0 [ 524.265083][T25371] aio_write+0x2e5/0x410 [ 524.265112][T25371] io_submit_one+0xacd/0x11d0 [ 524.265143][T25371] __se_sys_io_submit+0xfb/0x280 [ 524.265214][T25371] __x64_sys_io_submit+0x43/0x50 [ 524.265234][T25371] x64_sys_call+0x2d5d/0x2ff0 [ 524.265252][T25371] do_syscall_64+0xd2/0x200 [ 524.265410][T25371] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 524.265435][T25371] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 524.265459][T25371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.265477][T25371] RIP: 0033:0x7f1ea98ceec9 [ 524.265564][T25371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.265579][T25371] RSP: 002b:00007f1ea832f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 524.265596][T25371] RAX: ffffffffffffffda RBX: 00007f1ea9b25fa0 RCX: 00007f1ea98ceec9 [ 524.265609][T25371] RDX: 0000200000000340 RSI: 00000000000011ff RDI: 00007f1ea82eb000 [ 524.265620][T25371] RBP: 00007f1ea832f090 R08: 0000000000000000 R09: 0000000000000000 [ 524.265631][T25371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.265644][T25371] R13: 00007f1ea9b26038 R14: 00007f1ea9b25fa0 R15: 00007ffd7ae84788 [ 524.265694][T25371] [ 524.267079][T25369] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6957'. [ 524.630693][T25378] lo speed is unknown, defaulting to 1000 [ 524.683031][T25380] netlink: '+}[@': attribute type 10 has an invalid length. [ 524.690465][T25380] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 525.599932][T25428] netlink: '+}[@': attribute type 10 has an invalid length. [ 525.607302][T25428] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 525.620959][T25430] lo speed is unknown, defaulting to 1000 [ 525.637848][T25428] batman_adv: batadv0: Interface activated: veth1_vlan [ 525.726885][T25436] lo speed is unknown, defaulting to 1000 [ 525.729480][T25440] program syz.0.6981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.748737][T25440] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 525.783639][T25436] loop3: detected capacity change from 0 to 512 [ 525.801143][T25436] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.6979: error while reading EA inode 32 err=-116 [ 525.814734][T25436] EXT4-fs (loop3): Remounting filesystem read-only [ 525.821436][T25436] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 525.835469][T25436] EXT4-fs (loop3): 1 orphan inode deleted [ 525.842933][T25436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.870228][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.966042][T25454] program syz.3.6984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.976780][T25454] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 526.235453][T25457] hub 9-0:1.0: USB hub found [ 526.240360][T25457] hub 9-0:1.0: 8 ports detected [ 526.272730][T25459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6984'. [ 526.510518][T25461] hub 9-0:1.0: USB hub found [ 526.515440][T25461] hub 9-0:1.0: 8 ports detected [ 527.009109][T25469] netlink: 'syz.3.6989': attribute type 21 has an invalid length. [ 527.017104][T25469] netlink: 'syz.3.6989': attribute type 1 has an invalid length. [ 527.024965][T25469] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6989'. [ 527.108449][T25474] netlink: '+}[@': attribute type 10 has an invalid length. [ 527.115799][T25474] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 527.317727][T25482] program syz.4.6993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.401541][T25482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 527.468950][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 527.468966][ T29] audit: type=1326 audit(1758757788.493:32490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25479 comm="syz.0.6992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 527.498725][ T29] audit: type=1326 audit(1758757788.493:32491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25479 comm="syz.0.6992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 527.528985][T25488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6994'. [ 527.662655][T25493] lo speed is unknown, defaulting to 1000 [ 527.688951][T25499] Falling back ldisc for ttyS3. [ 527.757838][ T29] audit: type=1400 audit(1758757788.813:32492): avc: denied { append } for pid=25508 comm="syz.0.6999" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 527.818527][T25493] loop4: detected capacity change from 0 to 512 [ 527.923641][T25493] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.6996: error while reading EA inode 32 err=-116 [ 527.936774][T25509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6999'. [ 527.945861][T25493] EXT4-fs (loop4): Remounting filesystem read-only [ 527.952407][T25493] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 527.968378][T25493] EXT4-fs (loop4): 1 orphan inode deleted [ 527.969718][T25509] wireguard0: entered promiscuous mode [ 527.975067][T25493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.980058][T25509] wireguard0: entered allmulticast mode [ 528.039125][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.199550][T25521] hub 9-0:1.0: USB hub found [ 528.204402][T25521] hub 9-0:1.0: 8 ports detected [ 528.240588][ T29] audit: type=1326 audit(1758757789.213:32493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 528.264226][ T29] audit: type=1326 audit(1758757789.213:32494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 528.288001][ T29] audit: type=1326 audit(1758757789.213:32495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 528.311656][ T29] audit: type=1326 audit(1758757789.213:32496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 528.335299][ T29] audit: type=1326 audit(1758757789.213:32497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 528.358953][ T29] audit: type=1326 audit(1758757789.213:32498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 528.382466][ T29] audit: type=1326 audit(1758757789.213:32499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.4.7001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 528.877376][T25531] program syz.3.7007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.911524][T25531] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 529.045608][T25547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.055815][T25547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.151845][T25547] loop3: detected capacity change from 0 to 512 [ 529.508288][T25565] SELinux: failed to load policy [ 529.559980][T25569] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7016'. [ 529.596964][T25569] 0ªX¹¦À: renamed from caif0 [ 529.619194][T25569] 0ªX¹¦À: entered allmulticast mode [ 529.624414][T25569] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 529.781080][T25574] FAULT_INJECTION: forcing a failure. [ 529.781080][T25574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.794180][T25574] CPU: 1 UID: 0 PID: 25574 Comm: syz.2.7017 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 529.794218][T25574] Tainted: [W]=WARN [ 529.794224][T25574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 529.794235][T25574] Call Trace: [ 529.794242][T25574] [ 529.794255][T25574] __dump_stack+0x1d/0x30 [ 529.794276][T25574] dump_stack_lvl+0xe8/0x140 [ 529.794296][T25574] dump_stack+0x15/0x1b [ 529.794311][T25574] should_fail_ex+0x265/0x280 [ 529.794332][T25574] should_fail+0xb/0x20 [ 529.794352][T25574] should_fail_usercopy+0x1a/0x20 [ 529.794395][T25574] strncpy_from_user+0x25/0x230 [ 529.794427][T25574] ? kmem_cache_alloc_noprof+0x186/0x310 [ 529.794451][T25574] ? getname_flags+0x80/0x3b0 [ 529.794560][T25574] getname_flags+0xae/0x3b0 [ 529.794663][T25574] io_unlinkat_prep+0x14f/0x1b0 [ 529.794680][T25574] io_submit_sqes+0x5ec/0x1060 [ 529.794771][T25574] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 529.794823][T25574] ? 0xffffffff81000000 [ 529.794836][T25574] ? __rcu_read_unlock+0x4f/0x70 [ 529.794863][T25574] ? get_pid_task+0x96/0xd0 [ 529.794991][T25574] ? proc_fail_nth_write+0x13b/0x160 [ 529.795019][T25574] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 529.795051][T25574] ? vfs_write+0x7e8/0x960 [ 529.795074][T25574] ? __rcu_read_unlock+0x4f/0x70 [ 529.795096][T25574] ? __fget_files+0x184/0x1c0 [ 529.795136][T25574] ? fput+0x8f/0xc0 [ 529.795161][T25574] __x64_sys_io_uring_enter+0x78/0x90 [ 529.795264][T25574] x64_sys_call+0x2de1/0x2ff0 [ 529.795282][T25574] do_syscall_64+0xd2/0x200 [ 529.795310][T25574] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 529.795393][T25574] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 529.795462][T25574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.795509][T25574] RIP: 0033:0x7fef3727eec9 [ 529.795522][T25574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.795537][T25574] RSP: 002b:00007fef35cdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 529.795554][T25574] RAX: ffffffffffffffda RBX: 00007fef374d5fa0 RCX: 00007fef3727eec9 [ 529.795636][T25574] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 529.795650][T25574] RBP: 00007fef35cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 529.795663][T25574] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 529.795674][T25574] R13: 00007fef374d6038 R14: 00007fef374d5fa0 R15: 00007ffda361d788 [ 529.795689][T25574] [ 530.365442][T25588] loop2: detected capacity change from 0 to 8192 [ 530.621407][T25594] netlink: 'syz.3.7025': attribute type 30 has an invalid length. [ 530.670127][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7023'. [ 530.873483][T25599] SELinux: failed to load policy [ 530.910310][T25609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7031'. [ 530.940696][T25610] loop3: detected capacity change from 0 to 128 [ 530.965326][T25609] wireguard0: entered promiscuous mode [ 530.970987][T25609] wireguard0: entered allmulticast mode [ 530.977233][ T9214] bio_check_eod: 429 callbacks suppressed [ 530.977247][ T9214] kworker/u8:12: attempt to access beyond end of device [ 530.977247][ T9214] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 531.040394][T25610] syz.3.7030: attempt to access beyond end of device [ 531.040394][T25610] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 531.064417][T25610] syz.3.7030: attempt to access beyond end of device [ 531.064417][T25610] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 531.079141][ T9214] kworker/u8:12: attempt to access beyond end of device [ 531.079141][ T9214] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 531.093014][T25610] syz.3.7030: attempt to access beyond end of device [ 531.093014][T25610] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 531.109587][ T9214] kworker/u8:12: attempt to access beyond end of device [ 531.109587][ T9214] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 531.123459][ T9214] kworker/u8:12: attempt to access beyond end of device [ 531.123459][ T9214] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 531.137112][T25610] syz.3.7030: attempt to access beyond end of device [ 531.137112][T25610] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 531.160629][T25610] syz.3.7030: attempt to access beyond end of device [ 531.160629][T25610] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 531.174591][ T9214] kworker/u8:12: attempt to access beyond end of device [ 531.174591][ T9214] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 531.233112][T25617] FAULT_INJECTION: forcing a failure. [ 531.233112][T25617] name failslab, interval 1, probability 0, space 0, times 0 [ 531.245768][T25617] CPU: 1 UID: 0 PID: 25617 Comm: syz.2.7033 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 531.245853][T25617] Tainted: [W]=WARN [ 531.245928][T25617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.245938][T25617] Call Trace: [ 531.245946][T25617] [ 531.245954][T25617] __dump_stack+0x1d/0x30 [ 531.245976][T25617] dump_stack_lvl+0xe8/0x140 [ 531.245999][T25617] dump_stack+0x15/0x1b [ 531.246016][T25617] should_fail_ex+0x265/0x280 [ 531.246122][T25617] should_failslab+0x8c/0xb0 [ 531.246211][T25617] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 531.246300][T25617] ? __d_alloc+0x3d/0x340 [ 531.246325][T25617] __d_alloc+0x3d/0x340 [ 531.246421][T25617] ? mpol_shared_policy_init+0xbd/0x4c0 [ 531.246513][T25617] d_alloc_pseudo+0x1e/0x80 [ 531.246539][T25617] alloc_file_pseudo+0x71/0x160 [ 531.246622][T25617] __shmem_file_setup+0x1de/0x210 [ 531.246723][T25617] shmem_file_setup+0x3b/0x50 [ 531.246742][T25617] __se_sys_memfd_create+0x2c3/0x590 [ 531.246767][T25617] __x64_sys_memfd_create+0x31/0x40 [ 531.246787][T25617] x64_sys_call+0x2abe/0x2ff0 [ 531.246890][T25617] do_syscall_64+0xd2/0x200 [ 531.246951][T25617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 531.246972][T25617] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 531.247084][T25617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.247104][T25617] RIP: 0033:0x7fef3727eec9 [ 531.247126][T25617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.247141][T25617] RSP: 002b:00007fef35cdee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 531.247161][T25617] RAX: ffffffffffffffda RBX: 000000000000046e RCX: 00007fef3727eec9 [ 531.247174][T25617] RDX: 00007fef35cdeef0 RSI: 0000000000000000 RDI: 00007fef37302960 [ 531.247188][T25617] RBP: 0000200000000c40 R08: 00007fef35cdebb7 R09: 00007fef35cdee40 [ 531.247201][T25617] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 531.247274][T25617] R13: 00007fef35cdeef0 R14: 00007fef35cdeeb0 R15: 0000200000000600 [ 531.247294][T25617] [ 531.593055][T25635] loop2: detected capacity change from 0 to 128 [ 531.618821][T25635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 531.635162][T25635] System zones: 1-3, 19-19, 35-36 [ 531.642806][T25635] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 531.670927][T25647] FAULT_INJECTION: forcing a failure. [ 531.670927][T25647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.684594][T25647] CPU: 1 UID: 0 PID: 25647 Comm: syz.0.7045 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 531.684695][T25647] Tainted: [W]=WARN [ 531.684702][T25647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.684713][T25647] Call Trace: [ 531.684719][T25647] [ 531.684726][T25647] __dump_stack+0x1d/0x30 [ 531.684801][T25647] dump_stack_lvl+0xe8/0x140 [ 531.684824][T25647] dump_stack+0x15/0x1b [ 531.684875][T25647] should_fail_ex+0x265/0x280 [ 531.684900][T25647] should_fail+0xb/0x20 [ 531.684918][T25647] should_fail_usercopy+0x1a/0x20 [ 531.685022][T25647] _copy_from_user+0x1c/0xb0 [ 531.685050][T25647] memdup_user_nul+0x5f/0xe0 [ 531.685151][T25647] sel_commit_bools_write+0xd2/0x270 [ 531.685178][T25647] vfs_writev+0x406/0x8b0 [ 531.685203][T25647] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 531.685262][T25647] ? mutex_lock+0xd/0x30 [ 531.685327][T25647] do_writev+0xe7/0x210 [ 531.685353][T25647] __x64_sys_writev+0x45/0x50 [ 531.685375][T25647] x64_sys_call+0x1e9a/0x2ff0 [ 531.685449][T25647] do_syscall_64+0xd2/0x200 [ 531.685476][T25647] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 531.685542][T25647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.685582][T25647] RIP: 0033:0x7f1ea98ceec9 [ 531.685597][T25647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.685613][T25647] RSP: 002b:00007f1ea832f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 531.685630][T25647] RAX: ffffffffffffffda RBX: 00007f1ea9b25fa0 RCX: 00007f1ea98ceec9 [ 531.685642][T25647] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000007 [ 531.685688][T25647] RBP: 00007f1ea832f090 R08: 0000000000000000 R09: 0000000000000000 [ 531.685699][T25647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.685709][T25647] R13: 00007f1ea9b26038 R14: 00007f1ea9b25fa0 R15: 00007ffd7ae84788 [ 531.685775][T25647] [ 531.903334][T25635] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 533.069775][T22923] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 533.104080][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 533.104095][ T29] audit: type=1326 audit(1758759330.372:32931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.168850][ T29] audit: type=1326 audit(1758759330.372:32932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.192514][ T29] audit: type=1326 audit(1758759330.372:32933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.216155][ T29] audit: type=1326 audit(1758759330.372:32934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.239981][ T29] audit: type=1326 audit(1758759330.372:32935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.263659][ T29] audit: type=1326 audit(1758759330.372:32936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.287274][ T29] audit: type=1326 audit(1758759330.372:32937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.310867][ T29] audit: type=1326 audit(1758759330.372:32938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.334476][ T29] audit: type=1326 audit(1758759330.424:32939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.358029][ T29] audit: type=1326 audit(1758759330.424:32940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz.0.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 533.453000][T25706] loop2: detected capacity change from 0 to 1024 [ 533.480903][T25706] EXT4-fs: Ignoring removed i_version option [ 533.544351][T25706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.639962][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.698398][T25727] hub 9-0:1.0: USB hub found [ 533.704316][T25727] hub 9-0:1.0: 8 ports detected [ 533.752538][T25726] program syz.0.7071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.773936][T25733] program syz.2.7074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.786981][T25733] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 533.833357][T25733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7074'. [ 534.068352][T25747] hub 9-0:1.0: USB hub found [ 534.073034][T25747] hub 9-0:1.0: 8 ports detected [ 534.820408][T25766] loop4: detected capacity change from 0 to 512 [ 534.828863][T25766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 534.866274][T25766] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7085: invalid indirect mapped block 4294967295 (level 0) [ 534.882334][T25766] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7085: invalid indirect mapped block 4294967295 (level 1) [ 534.898190][T25766] EXT4-fs (loop4): 1 orphan inode deleted [ 534.903957][T25766] EXT4-fs (loop4): 1 truncate cleaned up [ 534.910325][T25766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.960960][T25766] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.7085: iget: bad extra_isize 46 (inode size 256) [ 534.975786][T25766] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.7085: iget: bad extra_isize 46 (inode size 256) [ 535.228472][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.244929][T25781] program syz.3.7089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.277459][T25782] lo speed is unknown, defaulting to 1000 [ 535.426792][T25781] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 535.516295][T25786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7089'. [ 535.641849][T25792] loop4: detected capacity change from 0 to 128 [ 535.762118][T25792] bio_check_eod: 32 callbacks suppressed [ 535.762135][T25792] syz.4.7090: attempt to access beyond end of device [ 535.762135][T25792] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 535.793100][T25792] syz.4.7090: attempt to access beyond end of device [ 535.793100][T25792] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 535.820607][T25792] syz.4.7090: attempt to access beyond end of device [ 535.820607][T25792] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 535.836449][T25792] syz.4.7090: attempt to access beyond end of device [ 535.836449][T25792] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 535.871720][T25792] syz.4.7090: attempt to access beyond end of device [ 535.871720][T25792] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 535.892563][T25792] syz.4.7090: attempt to access beyond end of device [ 535.892563][T25792] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 535.916891][T25792] syz.4.7090: attempt to access beyond end of device [ 535.916891][T25792] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 535.940804][T25792] syz.4.7090: attempt to access beyond end of device [ 535.940804][T25792] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 535.955748][T25792] syz.4.7090: attempt to access beyond end of device [ 535.955748][T25792] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 535.971175][T25792] syz.4.7090: attempt to access beyond end of device [ 535.971175][T25792] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 536.051059][T25813] netlink: 'syz.3.7095': attribute type 30 has an invalid length. [ 536.094666][T25819] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 536.149267][T25827] netlink: 'syz.6.7102': attribute type 30 has an invalid length. [ 536.233411][T25832] program syz.3.7104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.245995][T25832] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 536.273835][T25832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7104'. [ 536.360686][T25844] FAULT_INJECTION: forcing a failure. [ 536.360686][T25844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.373789][T25844] CPU: 0 UID: 0 PID: 25844 Comm: syz.3.7108 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 536.373816][T25844] Tainted: [W]=WARN [ 536.373822][T25844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 536.373838][T25844] Call Trace: [ 536.373845][T25844] [ 536.373853][T25844] __dump_stack+0x1d/0x30 [ 536.373873][T25844] dump_stack_lvl+0xe8/0x140 [ 536.373894][T25844] dump_stack+0x15/0x1b [ 536.373911][T25844] should_fail_ex+0x265/0x280 [ 536.373980][T25844] should_fail+0xb/0x20 [ 536.373997][T25844] should_fail_usercopy+0x1a/0x20 [ 536.374091][T25844] _copy_to_user+0x20/0xa0 [ 536.374121][T25844] simple_read_from_buffer+0xb5/0x130 [ 536.374180][T25844] proc_fail_nth_read+0x10e/0x150 [ 536.374205][T25844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.374244][T25844] vfs_read+0x1a5/0x770 [ 536.374264][T25844] ? __rcu_read_unlock+0x4f/0x70 [ 536.374286][T25844] ? __fget_files+0x184/0x1c0 [ 536.374309][T25844] ? selinux_task_setrlimit+0x138/0x150 [ 536.374402][T25844] ksys_read+0xda/0x1a0 [ 536.374425][T25844] __x64_sys_read+0x40/0x50 [ 536.374445][T25844] x64_sys_call+0x27bc/0x2ff0 [ 536.374508][T25844] do_syscall_64+0xd2/0x200 [ 536.374585][T25844] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 536.374606][T25844] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 536.374635][T25844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.374769][T25845] netlink: 'syz.6.7107': attribute type 16 has an invalid length. [ 536.374834][T25844] RIP: 0033:0x7f820199d8dc [ 536.374852][T25844] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 536.374869][T25844] RSP: 002b:00007f82003ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.374896][T25844] RAX: ffffffffffffffda RBX: 00007f8201bf5fa0 RCX: 00007f820199d8dc [ 536.374909][T25844] RDX: 000000000000000f RSI: 00007f82003ff0a0 RDI: 0000000000000003 [ 536.374922][T25844] RBP: 00007f82003ff090 R08: 0000000000000000 R09: 0000000000000000 [ 536.374934][T25844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.374947][T25844] R13: 00007f8201bf6038 R14: 00007f8201bf5fa0 R15: 00007fff4d9b97d8 [ 536.374965][T25844] [ 536.591546][T25845] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7107'. [ 536.661774][T25855] loop3: detected capacity change from 0 to 1024 [ 536.668726][T25855] EXT4-fs: Ignoring removed i_version option [ 536.695040][T25860] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 536.737302][T25860] SELinux: failed to load policy [ 536.744028][T25855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.914481][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.970220][T25866] netlink: 'syz.2.7116': attribute type 1 has an invalid length. [ 537.005944][T25868] lo speed is unknown, defaulting to 1000 [ 537.185766][T25866] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 537.305253][ T9214] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 537.316151][T25866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.341972][T25866] veth3: entered promiscuous mode [ 537.348505][T25866] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 537.399401][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7120'. [ 537.416729][T20644] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 537.416957][T25888] loop3: detected capacity change from 0 to 128 [ 537.655322][T25901] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 537.700644][T25901] SELinux: failed to load policy [ 538.177474][T25926] netlink: 'syz.3.7134': attribute type 1 has an invalid length. [ 538.202215][T25926] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 538.213128][T25926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.222031][T20644] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 538.342218][T20639] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 538.482635][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 538.482647][ T29] audit: type=1326 audit(1758759336.010:33306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25930 comm="syz.0.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 538.544203][ T29] audit: type=1326 audit(1758759336.052:33307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25930 comm="syz.0.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 538.567814][ T29] audit: type=1326 audit(1758759336.052:33308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25930 comm="syz.0.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 538.591479][ T29] audit: type=1326 audit(1758759336.052:33309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25930 comm="syz.0.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 538.615146][ T29] audit: type=1326 audit(1758759336.052:33310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25930 comm="syz.0.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 538.638784][ T29] audit: type=1326 audit(1758759336.052:33311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25930 comm="syz.0.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 538.662351][ T29] audit: type=1326 audit(1758759336.052:33312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25930 comm="syz.0.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 538.686051][ T29] audit: type=1326 audit(1758759336.052:33313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25930 comm="syz.0.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 538.816952][ T29] audit: type=1326 audit(1758759336.346:33314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25940 comm="syz.4.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 538.840561][ T29] audit: type=1326 audit(1758759336.346:33315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25940 comm="syz.4.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f38c465eec9 code=0x7ffc0000 [ 538.935346][T25946] netdevsim netdevsim6: Direct firmware load for ..€ failed with error -2 [ 539.012709][T25948] SELinux: failed to load policy [ 539.116150][T25953] loop2: detected capacity change from 0 to 128 [ 539.119105][T25950] lo speed is unknown, defaulting to 1000 [ 539.414525][T25968] loop3: detected capacity change from 0 to 128 [ 539.690321][T25979] hub 9-0:1.0: USB hub found [ 539.695076][T25979] hub 9-0:1.0: 8 ports detected [ 539.941880][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7151'. [ 540.368589][T25992] veth3: entered promiscuous mode [ 540.390082][T25987] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 540.426871][T25987] SELinux: failed to load policy [ 540.488449][T26001] loop2: detected capacity change from 0 to 1024 [ 540.500152][T26001] EXT4-fs: Ignoring removed i_version option [ 540.547350][T26001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.580553][T26003] netlink: '+}[@': attribute type 10 has an invalid length. [ 540.587867][T26003] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 540.631303][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.701026][T26014] lo speed is unknown, defaulting to 1000 [ 540.862256][T26026] loop3: detected capacity change from 0 to 128 [ 540.882081][T26021] veth5: entered promiscuous mode [ 540.964417][T26028] hub 9-0:1.0: USB hub found [ 540.969389][T26028] hub 9-0:1.0: 8 ports detected [ 541.189059][T26038] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 541.279699][T26038] SELinux: failed to load policy [ 541.395026][T26046] netlink: 'syz.2.7170': attribute type 10 has an invalid length. [ 541.402937][T26046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7170'. [ 541.552696][T26057] netlink: 'syz.3.7173': attribute type 30 has an invalid length. [ 541.889975][T26072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7177'. [ 542.012231][T26074] lo speed is unknown, defaulting to 1000 [ 542.247541][T26080] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 542.291527][T26081] loop2: detected capacity change from 0 to 128 [ 542.329526][T26083] netlink: 'syz.3.7182': attribute type 30 has an invalid length. [ 542.377797][T26080] SELinux: failed to load policy [ 542.450603][T26081] bio_check_eod: 502 callbacks suppressed [ 542.450617][T26081] syz.2.7180: attempt to access beyond end of device [ 542.450617][T26081] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 542.472136][T26081] syz.2.7180: attempt to access beyond end of device [ 542.472136][T26081] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 542.494133][T26081] syz.2.7180: attempt to access beyond end of device [ 542.494133][T26081] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 542.515153][T26087] netlink: 'syz.4.7183': attribute type 10 has an invalid length. [ 542.516964][T26081] syz.2.7180: attempt to access beyond end of device [ 542.516964][T26081] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 542.523002][T26087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7183'. [ 542.548139][T26081] syz.2.7180: attempt to access beyond end of device [ 542.548139][T26081] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 542.561750][T26081] syz.2.7180: attempt to access beyond end of device [ 542.561750][T26081] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 542.578220][T26081] syz.2.7180: attempt to access beyond end of device [ 542.578220][T26081] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 542.605087][T26081] syz.2.7180: attempt to access beyond end of device [ 542.605087][T26081] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 542.619750][T26081] syz.2.7180: attempt to access beyond end of device [ 542.619750][T26081] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 542.633526][T26081] syz.2.7180: attempt to access beyond end of device [ 542.633526][T26081] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 542.696510][T26092] loop3: detected capacity change from 0 to 1024 [ 542.709998][T26097] netlink: 'syz.6.7187': attribute type 1 has an invalid length. [ 542.718629][T26092] EXT4-fs: Ignoring removed i_version option [ 542.730460][T26097] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 542.742678][T26092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.793340][T26109] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7190'. [ 542.887329][T26116] netlink: 'syz.6.7192': attribute type 1 has an invalid length. [ 542.904589][T26116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.916448][T26116] veth3: entered promiscuous mode [ 542.935610][T26119] netlink: 'syz.6.7193': attribute type 30 has an invalid length. [ 543.080936][T26127] netlink: 'syz.2.7196': attribute type 10 has an invalid length. [ 543.088814][T26127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7196'. [ 543.268059][T26144] loop2: detected capacity change from 0 to 1024 [ 543.275233][T26144] EXT4-fs: Ignoring removed i_version option [ 543.304827][T26144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.373258][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.398489][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 543.398504][ T29] audit: type=1326 audit(1758759341.175:33392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26148 comm="syz.0.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 543.428372][ T29] audit: type=1326 audit(1758759341.175:33393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26148 comm="syz.0.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 543.452025][ T29] audit: type=1326 audit(1758759341.175:33394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26148 comm="syz.0.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 543.475592][ T29] audit: type=1326 audit(1758759341.175:33395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26148 comm="syz.0.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 543.547045][T22923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.582417][ T29] audit: type=1326 audit(1758759341.375:33396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26148 comm="syz.0.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 543.657211][T26157] netlink: 'syz.2.7204': attribute type 1 has an invalid length. [ 543.667706][ T29] audit: type=1326 audit(1758759341.375:33397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26148 comm="syz.0.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea98ceec9 code=0x7ffc0000 [ 543.717811][T26157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.732659][T26157] veth7: entered promiscuous mode [ 543.974438][T26169] lo speed is unknown, defaulting to 1000 [ 544.022887][T26169] 9pnet_fd: Insufficient options for proto=fd [ 544.218944][T26172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7208'. [ 544.227897][T26172] netlink: 'syz.3.7208': attribute type 30 has an invalid length. [ 544.280492][ T5852] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.305345][ T5852] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.329214][ T5852] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.349056][ T5852] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.407530][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7210'. [ 544.487843][T26180] loop3: detected capacity change from 0 to 512 [ 544.507629][T26180] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 544.533378][ T29] audit: type=1326 audit(1758759342.372:33398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26182 comm="syz.0.7212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ea98ceec9 code=0x0 [ 544.535150][T26180] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7211: invalid indirect mapped block 4294967295 (level 0) [ 544.623356][T26180] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7211: invalid indirect mapped block 4294967295 (level 1) [ 544.650633][T26180] EXT4-fs (loop3): 1 orphan inode deleted [ 544.656423][T26180] EXT4-fs (loop3): 1 truncate cleaned up [ 544.666301][T26180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.687445][T26180] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.7211: iget: bad extra_isize 46 (inode size 256) [ 544.700930][T26180] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.7211: iget: bad extra_isize 46 (inode size 256) [ 544.735388][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.803569][ T29] audit: type=1326 audit(1758759342.656:33399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26198 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 544.827216][ T29] audit: type=1326 audit(1758759342.656:33400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26198 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 544.914833][T26194] loop4: detected capacity change from 0 to 1024 [ 544.921643][T26194] EXT4-fs: Ignoring removed i_version option [ 545.047660][T26194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.048434][ T29] audit: type=1326 audit(1758759342.708:33401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26198 comm="syz.2.7217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fef3727eec9 code=0x7ffc0000 [ 545.089264][T26207] loop2: detected capacity change from 0 to 128 [ 545.132666][T26207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 545.160309][T21636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.169282][T26207] System zones: 1-3, 19-19, 35-36 [ 545.179874][T26207] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 545.218779][T26207] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 545.858732][T26226] lo speed is unknown, defaulting to 1000 [ 546.518486][T26242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7228'. [ 546.623242][T26247] loop3: detected capacity change from 0 to 1024 [ 546.637186][T26247] EXT4-fs: Ignoring removed i_version option [ 546.685630][T26247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.868234][T26253] loop4: detected capacity change from 0 to 128 [ 546.878746][T22559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.130825][T22923] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 547.166685][T26268] netlink: 'syz.2.7236': attribute type 1 has an invalid length. [ 547.416875][T26234] ================================================================== [ 547.424968][T26234] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 547.432780][T26234] [ 547.435092][T26234] write to 0xffffea00048b3858 of 8 bytes by task 26238 on cpu 1: [ 547.442790][T26234] __filemap_remove_folio+0x1a5/0x2a0 [ 547.448162][T26234] filemap_remove_folio+0x6d/0x1d0 [ 547.453272][T26234] truncate_inode_folio+0x42/0x50 [ 547.458285][T26234] shmem_undo_range+0x244/0xa80 [ 547.463136][T26234] shmem_fallocate+0x799/0x840 [ 547.467893][T26234] vfs_fallocate+0x3b6/0x400 [ 547.472470][T26234] __x64_sys_fallocate+0x7a/0xd0 [ 547.477406][T26234] x64_sys_call+0x2514/0x2ff0 [ 547.482077][T26234] do_syscall_64+0xd2/0x200 [ 547.486577][T26234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.492452][T26234] [ 547.494762][T26234] read to 0xffffea00048b3858 of 8 bytes by task 26234 on cpu 0: [ 547.502372][T26234] folio_mapping+0xa1/0x120 [ 547.506881][T26234] evict_folios+0x2af4/0x3540 [ 547.511560][T26234] try_to_shrink_lruvec+0x5b5/0x950 [ 547.516763][T26234] shrink_lruvec+0x22e/0x1b50 [ 547.521439][T26234] shrink_node+0x686/0x2120 [ 547.525955][T26234] do_try_to_free_pages+0x3f6/0xcd0 [ 547.531152][T26234] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 547.537033][T26234] try_charge_memcg+0x358/0x9e0 [ 547.541871][T26234] obj_cgroup_charge_pages+0xa6/0x150 [ 547.547244][T26234] __memcg_kmem_charge_page+0x9f/0x170 [ 547.552703][T26234] __alloc_frozen_pages_noprof+0x188/0x360 [ 547.558505][T26234] alloc_pages_mpol+0xb3/0x250 [ 547.563272][T26234] alloc_pages_noprof+0x90/0x130 [ 547.568203][T26234] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 547.573990][T26234] __kvmalloc_node_noprof+0x30f/0x4e0 [ 547.579344][T26234] ip_set_alloc+0x1f/0x30 [ 547.583661][T26234] hash_netiface_create+0x282/0x740 [ 547.588857][T26234] ip_set_create+0x3cc/0x960 [ 547.593446][T26234] nfnetlink_rcv_msg+0x4c6/0x590 [ 547.598383][T26234] netlink_rcv_skb+0x120/0x220 [ 547.603134][T26234] nfnetlink_rcv+0x16b/0x1690 [ 547.607788][T26234] netlink_unicast+0x5c0/0x690 [ 547.612548][T26234] netlink_sendmsg+0x58b/0x6b0 [ 547.617301][T26234] __sock_sendmsg+0x142/0x180 [ 547.621961][T26234] ____sys_sendmsg+0x31e/0x4e0 [ 547.626703][T26234] ___sys_sendmsg+0x17b/0x1d0 [ 547.631530][T26234] __x64_sys_sendmsg+0xd4/0x160 [ 547.636360][T26234] x64_sys_call+0x191e/0x2ff0 [ 547.641101][T26234] do_syscall_64+0xd2/0x200 [ 547.645600][T26234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.651471][T26234] [ 547.653768][T26234] value changed: 0xffff888119e67640 -> 0x0000000000000000 [ 547.660936][T26234] [ 547.663234][T26234] Reported by Kernel Concurrency Sanitizer on: [ 547.669372][T26234] CPU: 0 UID: 0 PID: 26234 Comm: syz.0.7227 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 547.680715][T26234] Tainted: [W]=WARN [ 547.684492][T26234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 547.694519][T26234] ================================================================== [ 547.713583][T20644] bio_check_eod: 108 callbacks suppressed [ 547.713596][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.713596][T20644] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 547.734853][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.734853][T20644] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 547.748700][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.748700][T20644] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 547.775315][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.775315][T20644] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 547.790105][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.790105][T20644] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 547.803677][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.803677][T20644] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 547.819276][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.819276][T20644] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 547.832767][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.832767][T20644] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 547.847486][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.847486][T20644] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 547.873207][T20644] kworker/u8:20: attempt to access beyond end of device [ 547.873207][T20644] loop4: rw=1, sector=289, nr_sectors = 8 limit=128