last executing test programs: 4m1.383093963s ago: executing program 2 (id=162): socket(0x2, 0x80805, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000002000000000000164000009500000000b4b0fd613d9f8013ad472dfc8025000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xffffffffffffffec, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1c}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000740)={0x1f, 0x4, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x3, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x2}, 0x100202, 0xfffffffffffffffe, 0xfffffffb, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 4m1.056888519s ago: executing program 2 (id=167): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000000)=@ethtool_dump={0x3e, 0x7fff, 0x7}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x14558, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="e4e647c9d9b8e9a2f2ab30da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r3], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffff001}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000220001260000000000000000050000b7"], 0x1c}], 0x1}, 0x0) splice(r8, 0x0, r10, 0x0, 0x88000cc, 0x0) write$eventfd(r9, &(0x7f0000000240), 0xffffff14) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) 4m0.175879106s ago: executing program 2 (id=188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 4m0.147076857s ago: executing program 2 (id=189): ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1a9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x3) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3m59.780917314s ago: executing program 2 (id=192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) fgetxattr(r0, &(0x7f0000000340)=@known='security.apparmor\x00', &(0x7f0000000600)=""/218, 0xda) 3m59.066952878s ago: executing program 2 (id=199): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80000800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)="cc4c58efb3352aefbf423bd6684645e23b372bc0bda991054646abe0a3fc9dee1a2d09703e8a0589d269df4695f882f43289a02b37ce3739cd2b70585e6ef3c2d43268f5e6c10bf47f3f533a18e6b57505e3593dc67b1bd7eb627df3664e0bb662c42abf9d8f3e626a0abf4cba8d663e2f9c3befdbdb31a5bcce7bb2b9ba831808fbdbd856a566ff94d23e77d18e337bab515f0be7d024fd5c533f06df0f36a77ff49b81b6ad8b688062cef61669bb31c4eefedb6a56cf5d21a7db1abd2fab45ebfbf6d2cbc607e4915d171ff22998d5dd659974772c28b4bd3e94ea9f6fae9141d33277d38f40d2dd5cecc32f41548dd039960dd5caabdd15a0b99eb9cada28f5bc2fbba5837a5c920c9bb2d3d16a54c4c54417288349eeb6077e9b2eadaadf12b322fe8463ac6b67f0130fefb9e2d07ca1f3d3bd3444d139749011b4dddbbf02d3ddcb8eb25a3a7c8b626c708bd294eab23ae1b877184485a036b4b902568773a865d204c6bae93586b7f30bfb2a1097212a530ce22759ad56e1a9d35ffe820dd954f8c08e71ad5eb74bea7f8868021286f4faf1b449d12b53451cd60922a7fed24fd8cc08f4746870725b346cf1398c87900d7bae757eb68e7dee191bd595f75b8afab8bea870e4805190e17645ee7786f04a5cc227c153c1edd6a94cdd74a8b8dfc15c4e2d5e24aaa0d31cb1734f543eb4b7ef89864ffb8baaff30588ec783a644fd390bd0fcd9593721829f91a2d3755eed6e9fb210f33e557ed9106619bac063a960333a1e9e562ee3392332251c32a9daf0c9dc234bc214cc3923883321f4ad4f2136085a9f76f6b82e71fcffa713eb15fcf9f3a07678f084ec88cd9fe143a1ee16e367d786c1769efafee491bf9e69237c96cc002fe0665bf0a9ea443ea19268de116cf9c28d9d77a25553300bae048bc7f7c73ed8ce0fa959724a3c347b7bdbbcfda8c8117f8e5e038b7e288b57101553e7dfdfd6e664d9aa3f2353fdb7462e9cba10e08876da377b7f5a0432334a66d5ea64643e5f330b4a658e4eea535f46f0c2c1bc949239be65ddc888c508c3c692814c8ab163b180e25358f344f0c06b647af106b2c982c169ec8952b58181ae540968f2a3b574f5502ee57c9eca482ab37583436d0a5e48a772e5437f5335dad589e7f85d3241ce53e8b573f94fa97c6a319bb9803886430d8db1596cb702831acc131dfb5814b083099af2bcd7ce9098775586ad112ac45557dd9265265bca7260d11ddf055ca54ca4ddf644e19cee87280233f143f05514d27966e53274509d23e3a56e529f51547d145504e97a923e213244ca3a3b80352c0735ee6f5c3452d5412e69473347605913f2d0f02a15dc0dd014658eda70d4d450bb75270b5210c313be36691fae977a0268dd862b0bf44797c31b894ab293b367a1d4de4e50fa3994ed10daaf0fc88784c65a15e08fcf86f5b5fa24bfe5ecd48ce57ad5fd3c19d9f9a7952fb79cdc3e8281ad407b3a6dfc794c72f545566b961c5d038e14a4ecdb37d7055be1079484e68efc5f15922903e70ca3fd065e7fc63809b2ad069905f08196442b37b69b9b553400b0b53c8eeac8ed77327a975014ac6d681bc43d304a8849c4038f04d4bc719753c9cfbcfead7f70740ee996c87ecafa28edbc8db7634c4ef6050f29799d059a5b93819586a57d831b640bcdc3517dbc69effe778b31c2a8bcbbbf270903cce879905e7317b9adc8efe0e62d4645ebd2903a14a6aba90e00f5cce9cb19bf198f5c0790ea647dbcd64bd4e0c203ebab0e17e212f303bc856f912b33a325deef9c1d50b90b4ea301a56c9e38b39b46b00f1d6b2b3377ae65cc9c") write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x98) 3m59.042372408s ago: executing program 32 (id=199): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80000800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)="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") write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x98) 2m40.49009453s ago: executing program 4 (id=1751): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xfffffffffffff001}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) 2m40.086217958s ago: executing program 4 (id=1755): futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x14ffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000001600)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0c009900000400006a0000003600c7000402920305020b0703070905410481020f0273070a0605060f03080101020603070201070300060602070f8a3894147422cf00001200c70008070c047607c66a33f62a7f4bc800000c00c700a2ee09f4210c5c1b2400c7007f01080603030b02a002bc046f07ff0002030902030006074b19d7aeb0211a412600c700f604e1070c01050004000701fe06c4060b00010201020903c00228095d2be38eb5ab00000c00c7004e8935685e6e5f71"], 0xd8}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x1000, 0xd703}, 0x90) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) lstat(&(0x7f0000000040)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) umount2(0x0, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x83, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000) 2m39.190065735s ago: executing program 4 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r2, r3, 0x0) 2m38.761330433s ago: executing program 4 (id=1795): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x204019, &(0x7f0000000240)=ANY=[@ANYBLOB="757466382c63727566742c6d6f64653d3078303030303030303030303030303037642c686964652c636865636b3d72656c617865642c757466382c757466382c007850bebd8d7d036618c1146a34cfd146c5861d8bd4466228f0bc2de3f77e11157c389fc315c06b7ba5db6a0be20cefe83f41117225bf80377cd9f3f8ce47ac8bf58ed6e8a5f46c37d64ff6e2fb871053a53f8747dada0e0a13c5a2c79eb2bada5d986d2d2899a7"], 0xfd, 0x564, &(0x7f0000001f80)="$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") r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}], 0x1, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000180)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r7, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) 2m38.585389107s ago: executing program 4 (id=1799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getsockopt(r0, 0xdbba, 0x2, &(0x7f0000000180)=""/114, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000080)='./file0\x00', 0x1c2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmmsg$inet6(r1, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x81) 2m38.526841758s ago: executing program 4 (id=1801): futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x14ffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000001600)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0c009900000400006a0000003600c7000402920305020b0703070905410481020f0273070a0605060f03080101020603070201070300060602070f8a3894147422cf00001200c70008070c047607c66a33f62a7f4bc800000c00c700a2ee09f4210c5c1b2400c7007f01080603030b02a002bc046f07ff0002030902030006074b19d7aeb0211a412600c700f604e1070c01050004000701fe06c4060b00010201020903c00228095d2be38eb5ab00000c00c7004e8935685e6e5f71"], 0xd8}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x1000, 0xd703}, 0x90) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) lstat(&(0x7f0000000040)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) umount2(0x0, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x83, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000) 2m38.526499728s ago: executing program 33 (id=1801): futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x14ffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000001600)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0c009900000400006a0000003600c7000402920305020b0703070905410481020f0273070a0605060f03080101020603070201070300060602070f8a3894147422cf00001200c70008070c047607c66a33f62a7f4bc800000c00c700a2ee09f4210c5c1b2400c7007f01080603030b02a002bc046f07ff0002030902030006074b19d7aeb0211a412600c700f604e1070c01050004000701fe06c4060b00010201020903c00228095d2be38eb5ab00000c00c7004e8935685e6e5f71"], 0xd8}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x1000, 0xd703}, 0x90) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) lstat(&(0x7f0000000040)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) umount2(0x0, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x83, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000) 16.139148403s ago: executing program 6 (id=5051): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000680), 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB]) 16.114689384s ago: executing program 6 (id=5052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 16.066386904s ago: executing program 6 (id=5055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000000000008, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000c80)='gtA\x00\xe4\xaa\xaf\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5f\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x05\x00D\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf2\b(\xe4\xa3\xdbH*\xde\r\xde_\xffU\x82gt{\x83#\xbe\xc6\b\x9c3\x11\xb0{\xaf]\xca\xefy?&\xf60\ri%J\x92\x15\x8d\x11\xc5\xfc\xbb\xbf\a\x1e\x99\x97\xf9\xbb1T\x93 \xe70\x92m\x9b\xd9\x90\x83\x8c\xb5Kq\xce\xd5\x00\xa0v\xac@\xca\x9c\x87\xcf26R\x9b6\x80\xc6<\x11Sz\x00\xae\xb7\x8b\xb8\xd0\x11\x94\x1c\x03d\x1c\x0e,D\xe45\xd0^\xfe\xf0EU\xc9+w\xdd\xc5\x88\x8a\x03\x00\x00\x00\x00\x00\x00\x001\x97\x8f\xfel\x95\x02l\xe6\xcf\xeb\x05\x81q\\\xe5kL\x19\xc6s\xaa\xd6\x1d\x94-\x06\xbby\x05\x1d\f\xe8P\x03f\x02d\xac\x83\x1dd6\xea\xdc~\xcb\xa9\x1f\xff\f\xa3#|\x92\x9c\xf1\x9d\x92Ph6\xb4\xde?\xa4\x8b\xc5\xcd\xe8#\xcf\x90\xa2\xee\xaa\xcb\xc8U\x04w\xc6sj\xaaj\x99\xf9\xe1\xeb\x8e\x18\xd9Z[\x9e\x8b\'g\x83sQ\xc5\x14\x19\xf9\xee\xea\xba\x16\x97!M:\xfbt\x98\xd9N~\x14\xd9\xd3\xc20x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r6, 0x0, 0xf3a, 0x0) tee(r5, r9, 0xf3a, 0x4) write$binfmt_elf64(r7, &(0x7f0000000380)=ANY=[], 0x18c6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "11d3d5a97d6d940e", "8b9b6c074e947b01d500", "7192dbae", "fef22ed2c9a187b9"}, 0x28) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r10], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='memory.events\x00') 15.154459832s ago: executing program 6 (id=5070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x5f}, 0x18) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) iopl(0x3) r3 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f00000037c0)='posixacl\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x2e, 0x2, "569879fe6e3f8f034194a599b8fa16ee3714bacf5788813edbc11f6f899c48ac669889edd8dd21da0df9"}]}}}]}, 0x7c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f2ff", 0x10, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2, 0x3ff, 0x3, 0x5}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5, 0xf4, 0xfff, 0x8}, 0x3}, 0x20, 0x0, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.732501797s ago: executing program 7 (id=5332): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f00000066c0)={[{@orlov}, {@errors_continue}]}, 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000108500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 1.731566647s ago: executing program 1 (id=5334): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x60040) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000380)={0x6, 0xff, 0x7, 0x2, 0xec2, 0x9}) socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1}], 0x20) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r8, 0x80000000004, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="ec", 0x1}], 0x1}}], 0x1, 0x3404c8d4) syz_open_dev$tty1(0xc, 0x4, 0x2) r9 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16], 0x1000f) 1.661622728s ago: executing program 1 (id=5335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x2, 0x7, {{0x31, 0x4, 0x1, 0x2, 0xc4, 0x64, 0x0, 0x7, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0x88, 0x0, 0x7, [0x10, 0xfffffff9, 0x9, 0xd61]}, @rr={0x7, 0xf, 0xd1, [@loopback, @empty, @multicast2]}, @rr={0x7, 0x17, 0x2e, [@rand_addr=0x64010102, @loopback, @local, @private=0xa010101, @remote]}, @timestamp={0x44, 0x14, 0xa9, 0x0, 0x7, [0x10000, 0x454319fc, 0x5, 0x10001]}, @cipso={0x86, 0x60, 0x0, [{0x0, 0x9, "d8e3ffdaefd6ab"}, {0x0, 0x3, "f8"}, {0x0, 0x4, "6e15"}, {0x7, 0x9, "a4295d91ffdad6"}, {0x0, 0x12, "6a3b084b2f63f35802818cb795d065fb"}, {0x5, 0xb, "5489ed39c71efe0581"}, {0x0, 0xa, "42d6e9c370fbf385"}, {0x5, 0x8, "8155b97ced1d"}, {0x7, 0x12, "beeb5560dac8f451c0fd97108c62734d"}]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/32, 0x173, 0x20, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1d0000006d010000100000000a00000020100400", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="03000000010000000500"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000eb000f000095000000000000000000000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpgrp(0xffffffffffffffff) rt_sigqueueinfo(r8, 0x16, &(0x7f00000001c0)={0x4, 0x7, 0xffffffd0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x6, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x633, 0x5, 0x1}, {0xdf, 0x0, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffb}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0x4, 0x4, 0x30c4}, {0x40000007, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x802, 0xfffffffd, 0x9, 0x474, 0x594}, {0x40, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x35ed492d}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x3, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x0, 0x10008, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xfffb, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x5, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x9, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x103, 0x7}, {0x7, 0x1, 0x2, 0x70f, 0x8001, 0x3}, {0x5, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x40, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x7, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x7}, {0x2, 0x3, 0x9, 0x50e, 0x80055ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0xb, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x10000602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x800, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x4, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x10}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c94, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x352, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0x1000b7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x5, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x5}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x8, 0x9}, {0x201, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x2}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xa636, 0x8}, {0xcfb7, 0x0, 0x101, 0x82, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x40000008, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x802, 0xffffffff, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0x6}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x4, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x5, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x5370, 0x80b, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}], 0x3, 0x101, &(0x7f0000000480)={[0x7fffffffffffffff]}, 0x8) bind$unix(r11, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r11, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept(r11, 0x0, 0x0) 1.53753355s ago: executing program 7 (id=5338): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x63, 0xc, 0x0, 0x3, 0x0, 0x8, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x500, 0x1}, 0x1075, 0x4, 0x0, 0x6, 0xffffffffffffbbfe, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, r2, 0x8000000000009, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'gre0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) syz_io_uring_complete(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x8, 0x2, 0x1, 0x1000, 0xffffffffffffffff, 0x2, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) 1.445567392s ago: executing program 7 (id=5340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) socket$kcm(0x2, 0xa, 0x2) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000f688cc19000000000000000e00000044749f4bdd54", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = getpid() r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="ec0d5666f3a9d8185a98c4"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x8}]}) munlockall() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000800000000000000000018010000202070250800afa1000000000000070100825df4b297ba1a230008090000b703000000000000850000002d00003c009500"/82], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.394846923s ago: executing program 3 (id=5342): unshare(0x2c020400) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~Ee\xfd-\xe9t\xc0\xde\xcc\x9fx\xc8\x19\xa4\xdd\xec\xac\xae\xb4\xfb\xc0\xc1\x1a7\xca\x91\xaa\xfd\xe1\xba\xb6\x13\r\x95-B\x96\t\x1edj\xe6\x04J\x89*\x8c\xacI\xb8>2\xd2754o\x96\xb0\xf7]t5\x92\xc9\xe6=l,v]\x81\x99\x82\xe1\xbe^=\xadD\xe3YG+\xb5\xd9\xe5(\x00\x00\x00\x00l2\x12\xe3\xfd\xbd\x16Gz\xfa\xc5\xd5\x88vz:D\x80\xcbv9\xb8\xefI\xf2\xad\a>UQNtU\x00cNx\x19\x02\x1e\xcb\xff2%\x02\x04\xd9F\xf5\x00\bt\xe6\x93\xa5\xc0\x7f\x1d\xe8\x13\x9a+\xb9\x90\x03\xb6\xa1\xe6z\xf0*\xddr\xb9(d?\xac\x10N\nD\xa8\xef\x04') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0xfffffffffffffff0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4000010, 0xffffffffffffffff, 0x0) close(r2) r5 = socket(0x28, 0x5, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e0701000100007ff3dfc8"], 0xe) socket$tipc(0x1e, 0x7, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r2, 0x1) socket(0x28, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="27000000000000000b85"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10) unshare(0x80) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0xe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000000000e8b21fbccc8272f1d95873981f782a684d37a63ad406ee4066aa2097ffc1d781fc632b912f31bd233e49210abb15bd8020a7b3880de78611c2d7c7ec43365210e6dff021939ba19214891d39471537d8acfc716638cb715645f03c8c3ace83fb581308b2a773e9"], 0x48) 1.301108075s ago: executing program 0 (id=5343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x9, 0xa, 0x9, 0xffffff01, 0xae1, 0xa5, 0x2c, 0x2, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0xd6eb, 0x4, 0x0, 0x0, 0x80000001, 0x9, 0x4, r3}, 0x20) r4 = io_uring_setup(0x17, &(0x7f0000000680)={0x0, 0x5b23, 0x0, 0x1, 0x351}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r9) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x19, &(0x7f0000000300), 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1.122178338s ago: executing program 3 (id=5346): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:updpwd_exec_t system_u:system_'], 0x56) 1.121755879s ago: executing program 5 (id=5347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.121458398s ago: executing program 3 (id=5348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x2, 0x0, 0x0) 1.088942849s ago: executing program 3 (id=5349): creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.077561029s ago: executing program 5 (id=5350): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x9, 0xa, 0x9, 0xffffff01, 0xae1, 0xa5, 0x2c, 0x2, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0xd6eb, 0x4, 0x0, 0x0, 0x80000001, 0x9, 0x4, r3}, 0x20) r4 = io_uring_setup(0x17, &(0x7f0000000680)={0x0, 0x5b23, 0x0, 0x1, 0x351}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r9) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x19, &(0x7f0000000300), 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1.059910429s ago: executing program 3 (id=5351): unshare(0x2c020400) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2c020400) (fail_nth: 2) 755.654506ms ago: executing program 3 (id=5352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r2, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void, @void}}}, 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='module_request\x00', r5}, 0x18) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000002180)=0xff) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="46000000040008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r9) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 754.517426ms ago: executing program 1 (id=5353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) memfd_secret(0x80000) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r4 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440)=r3, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8955, &(0x7f0000007680)={'ip6tnl0\x00', 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) socket$nl_rdma(0x10, 0x3, 0x14) 634.641538ms ago: executing program 1 (id=5354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000010701020000000000000000020000081c000780080001"], 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x4000844) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0x6}}}, 0x24}}, 0x0) sendmmsg$inet(r4, &(0x7f00000035c0)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="05fd63649ccc048b68400032e1936368594961b7302d362db355eff36d5f01af7b836394bd", 0x25}, {&(0x7f00000003c0)="3d0809377c9e2c1d3b1735679e70364bbb0d8bec25d6283403779da397ab31233ad9b0744562e0287cdd6f56050aa1442bab81ed3efdf551760d663f191d40245960f39371141ea3615815381e03d2dfec894183551b", 0x56}, {&(0x7f0000000580)="cf9d651aca6808d3e925a2a2cb3e5382ae5648514488673b5040fdbc3019ff6f2f244bb5331c12ec073ae4fdc70e63e420b869fe2906407c05ebdf2ddffd815c7b4ac2bfa0bd66306afe587df58e4b13a53764a1a1b9a9124e8cd629d71cce522fc29c9e7f1d7ed2ee6dbfdc97f8acf4694c576967740ed5737b742b5581060291b791bf0c74cc8e", 0x88}, {&(0x7f0000000840)="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", 0x1000}], 0x4, &(0x7f0000001840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x88, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x20, 0x28, 0x0, 0x2, [0xfffffff9, 0x1eacafd4, 0x5821, 0x8, 0x2, 0x6, 0x82]}, @end, @ssrr={0x89, 0x1b, 0x28, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_prespec={0x44, 0x24, 0xb1, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x5c}, {@broadcast, 0xb0}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x2}]}, @timestamp={0x44, 0x14, 0xd0, 0x0, 0x9, [0xf86, 0x950a, 0x9, 0x7]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd2}}], 0xb8}}, {{&(0x7f0000000440)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001900)=[{&(0x7f00000004c0)="f208701151e2d87de942ba6f36949fec8383f2836506a21ce360889c3fff61ec5cb214710a0f20bd487d3b42a73717e2d23f6b1a5de91670c5b7b0154f048765adffdccc995717", 0x47}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001940)="126bee62d57fa1c260ec0b29f8dc5ce92e8ce18a9e77596f2c5f7e8d7ee487e450e62824886736c2cb2bbebc6e87985dfe18104e915c37d3046db41fbfc726448ea0c3780a4332b8d3260deed7f2e96312231f729b2fe7f53574179629752c11df9c84952a6afae415ca249f225ef90359816e556f58978dc8cf6c2e8ebd0dfe10dc670c22237547dddb21a239585f183968c651322ef02417151bf07348ed1447bbe503e2176e691c5e8734864b9a97b61e7ff9101ec1e92ffc526f7f88ae916734fba4559c555c8f62f707e085fd68b61a85a86c4fad6ca7bee0153d7a874cfc38c9a0d9939e72f37778dca2d55545e3176d72a0bced32d4bf1a26637ebdf1bcc3ecac14bec06c82ea05df8a78af40cb513276cbc04bfe7af374eab3f44e29f3a0f152986125aae501224bf1c3346e067e6a3a97985768a6a450bc1b4a20c81ae444053a608b357f02679da857736dbc7432b25c4c62faf3d2541df5a3a59311de4f41d0862950948525dcf9f56c2331ee5b60f30b0e8653765ba6ecac751b2814be8ffe25883a15e3e6e19d1a79a7b3fd0bb699c29ac07bcf8ecdd2679b0c293508d1f90838f8ae378d70884010ac69406141898b03315f22fa4b8f6026dd9547bc044383ca9b57a788d54ed3a4d23482d3bddc1d87680bab6d6c4e4d2895146f767a818849d27d632ef79914ee4151687576be0e794f7055c89d75666a71d61efa0d6f6a7a37ecfd8fc68f01219a39afcc5cbe65a099e96b2cc04ec10c4f2c4fd424f930c7ed1b5d53fd87f2f4af164f5306c3a37046672d7f5e8e99fa4b50d9bdd655f4816dd86b5c00d16a4fa82dc8e420d1d3b7a332b893c381a7c486d8abd60831fd0ec3e6fffc4cf9528dd320f369edb829f655af1313a3c181d9bd0a5a13e4c72acddab11133ca2d850a733338624feb36f98da7ca03a6a8c45e0847767515facc7a6ee788be65c0bbcaae2f49a8a401e1fe6d6cc5ceb7e6b451f048edd68bac846f19fc83c21caa8863805f039c2c5ddb10936bc3d616925bd1b5ae9c8ef6e0516565442d4ea7c4ae6561fddbc1a8a871ad61e89953a240872935fd376b588d2c7895adf78a4ee810fd209055170a2b3053a9343e6c0f4e3d9388ce355321f914c130fce0720c454c29c269b2f74174a69c6eabfc7291780e3ff0e7e0f02c9a621563bddf092134e3dfdd62bd4b5e934226562df292bf7f8e5c0c6c1a74f8df923f3a8d38971d3b30e790d70a21a1c97dfc88b65beab041477c81741246014eded4db57d25f0566f5f0e03b7594aa7d1e92747e02ce4e144e4d2458783e9caf776b79900e67acfe1c311b7c7a28d2625dc66e403ba5b309664fdc8c7e8b792b2b3193f392a2c7ac52d782dea44dc997ba0ac38f572aaec91fa38b941d939b52e615267751a574300b0285b3ba5228b97b11e135d3fb200f60ba8f9706adbbb1e1695b997609dce2513392765e78f5e3905ed8b8a84319ae0fee92674c5a5b8df6ccaa50bc13bae2f310c80ba2f32f3e817dcddc6a4cc15a6ee23e32e02c79cabe791ad2daf40ca6665091595d56af3b13b186b9867d7f879e55b5fc5ccabbc80d7a1354bcb921c1a02895bb3877335e802c29a5b9f8e6de487f13dfab2f1ad2906b18e50a5972a335f792d1c7190aa5bf253b08d630ed9e614040b9f94be99fff8c6bdfdb029fb964f67bec3c980f70671b9e3123d2e853c2a20ac653835ad07020ad6e3d879f06973a6fd0f66c44a22180e1a6063663498610e2ddf28915f46494bbd5c3215734d393d7c4f66d7fd14b74bdf07bf84e388f144afb28d04df434e9f869f338bbdcd90eead940abae9daf4ed621672def9033417c7f4cea257953aa5a5b7ac4eda1128f4d960479b8379e8a376e26d3a616b4a9bf649999d481a4e7c1fa2a12116fc0cfe019f488d5ea771f61b3267c3493cf9c4ec8c5b6e4dbb4a95e7d43d4658f85bee60b1367f6eb1bb6ae52c0cc085f5529f7ca0f5970471fb0280918c63e32080be9c6d7eda4c16ffe1714589bd181e226df73c1f4b36cba23e21b12f865d17d3fa2fe0558de2bc555b95e719a812e15706295613578a1afa2a8d6c9410d183b537a14e8f54cd7ccf8d70958edc8e78318ae8116f8ba2377fcd7b3050b9c5939664b57719c063486d813bda31236a582f8eb4f02931df73cc404cb5727f66a69ab91c524fb32aabba22a330fa742222bb69b6964b9d6dace424168c32fda4268b62021cd1681df83173ab186298e0c459e236a2a9fcb9e4dc40289139a04b2193a5c79b7c2524f92851c94f54b2171294f67e7c6af3ab654d2b8d7bd025f85c76113ad41ba9a753a8d6107c05c83757d172632666ff5edb7c6076b657baefb701d3499be3f98f2c4ed8d9256d921ac14463dc9f350b7623b89d0f108654138d1747f3cca7130c61e40dc6998917f0327333bffc9c020eca5d9a97617925c2257ab2c9b0d9493f8cdd84762cfaf1f56984f32264403c8dc42e5dee162ca90fdde15e9769a209d7a48b204aee4f3aafe997a2045a35a3b05c0f2b8eec043cc9a9cfde528e812038412daf6289d3f7bb80d7371e4487ecba2cb681168bbafadda5c9b8691d5a95cf85ab0e9489f277861524b9312aae30ae6743fecfdd3dd5e629f1c631ad7a97017130ab47e8161d394c66435844a04b686398bef10cdb128fb7f1329a892754ce9052bf32005ad9392c744e160976634ee1f94e8dbcbadfd9605cbae2bac1ea79378ef342e3e0c9263a42f81ce3292c03dd986e8b7a46748e17cf4603152c83b2e829c3df66e3df910d5203c44f2ae4ce46f7dbe1f3dfe2105c20d3e4f66bfab3ca3542b6a421ff2b14c4e763bf47edbb3a8f6e260280de1286181150a13e8c437da5af9377c344b7324bd89ab6a4d8d589d2bce17a649c5283d3c78259d8286015a7a5029894171e10aff93465d60b4b326bab1bf69ab58b60b88885ada9456989ba2716955839630f20a1d9d8a90ccd3f43264ef543b80b2c79ea205aeb01791bf88fd90100983e05a8b6b66adf4a0addb18d60ca577cc3c3f57295a807caf712964bfffb710d454b11a7d8d61694f1b2c4794b74fdfeffb49e765af761946b8055a466e055aba43342935d8ca77bdf4587b7847c943beab9d00a9389085e153c2f51bde03c6d87231e3dc27e18c7f90003b74faf9cdc3c171e8cd7eff8c248671d0847e7bc1749f1ce940a4be5bad6302aabf91e6f11a62ce81e8347a8d70a0a03589383a49b9f66f9f4b085bca4b00c0ab4b029cbe6d1de7a3fa531c9a14ab997a9467a9264dec5b793c41e5be6e2cda04f067bce564c98d379aa0dbf158828b6e1c806f8901f1053eaecc5da270997d7a83d434e6817446db80b7be270a1586f9e148e2ff3a1a2ce7e3455feab6d8837877bdd3dca31fdd3fb35478b179b288d240744c2130dab0b13c71d94b1e7bda3acc7aae65ea30ef38ac5237be61aacc158f33dec8414246dcf910928100baf7f257194c63bc5a5f97430d823b8ed0ff0df9f9a99cd7850fd385f43d470b1bdfb105e98f2bc158865a8b6e9c2e7584bbf45b79a78c608a05534865e4347a441b5aac502c7957796acb14ecc365ef255237d8fe9d7855bf92504f1bc63bca492688ed2da0832b35ebcfd09dd196f8ce9cfda2ba3f95ce423e24e8ec02697f84295799d265ca2b10f99ac8a20191fa1181056f3386ae96b01703728e1eb7a401786ecf458e51b163721b49c1b522d94bf377b10009805aa532d087eb054c80a84054108892a7277857a40d80c8e6eb1152d4a100ff44beae1f708611b42c64a06d3a92aa1fa5d83c62380b16062fe4ba1d4ba422fe4496dd3b0cd636e2039155dd3004e46f5f7b08e0e9e1a8c1aa13bf43f5826823cf4317e5cbfef10122e96ae9d5199f7175d817dc392d0670ecb9357f9eb1bdf9647f737303e8edd8ec49a2cb4fabab599787a9726b02bf7e2bec809e61c9b2aae6bc8ca3a0a4df64805a47a0cb7fa2425c24f2c03c89e0a0a88e8d3e4167f1f479f55c19c7f6b2295026f90911f89b880357402b0ba2e87927eff154add61594da6a48f93a3f86feaef4fdbc41965624a11165310037ed1c8e57453701a7098f47472002be23a48c01229af63f794ebe769e41492c23a38619f81922d5bbb9aedf9483f194e6f23e3613c615423b5ee6640e4be5b91062020daef00f8abb01332196de7a100568b976c96134a120d80980b9ddb9bcc4945eed18184fbe78e7e3a97aa7f0c32f419277829737bab35544c7ef2057991f76a27bd5723c294966c0a15089c819ab07518f68936f4c195f22e4946fab1f551fab399615b75b828a749ad9ce866b7c94417ee5e472f67b161567411c24e6ad261bf25159559ac4283e19e134c64630c628abc36e3f442af71db5d17bb6a53693e09fd5e2ee648b9f27e98d5c937370871cf46b0b4b01fd028eec54d5140d2602ecedd44735953f34ce7961a3b5811bfd29e6d77dce252f478cba7d33f0d35bf43a85cfbf9898fab9e48db9dc663219260c059d2171bba72184daef8d1db937e783394894cc8575c20d7c15264e58482e19a70e275eded04952e58509f9c4d2bb8a93c1bcd8e6a229596326ecad40a7c9e0de96586c5f460b8e0b21d24cfd44f7287e88d46bd9bab39a02750e91deaad3a3071b43acced4690b98ddb2c1d330b137354985df146f18a4b8c2cf7c825638223d8f7345bc40f1eaefa3b9b768143d3e543e29d9f45e9ee6597f26e722d8af49055c3a2e6f39369e1730be6df44ca0b3e1e0430cf001245b9d28457f9e930e7f2a41a0319a10e537af9200c89633efb208740a6d15b4a8e94b78f775b8ed8a8346357412b4378190f36c21e03e62bba6b77316bf351623c0821796fae7858445617fd8d0903382bc3bcee5e7091a934dfcf6f2ce47d13cfbee23e9c85d403595783705d562db9a641ee24626864564bd70ec462805e85f909a0687c71d685ebcad2db8fc523460a0f7a46f19d1e42de3d8f7b82e2819f5eb238e136632f0832e3b449e17a737a117a84d5bc8a140ade052f72acd68d0088ba17658c2c63ce92700977e2700ec78985d957b8b4016b4263a55de32bea3249b6596947de7a9a7b4c1ec76e38d49a265d679d7c006997b2a1e77996478d5f9d7eea0f8d818fb9d301b755090264f2309ef0cd465d5bd3f481640f8fcb4258480107d196c442b746e98ede700e82bc9102a689dde22de087dd4a08a0ed7dc759b7227326810058a676926b25bea2c34d992fecd3c317a66231a436d3d5b305b6c4a98625858913688b90742f4cc4a60284fc337f6ee5f2c236abf6c9a1597aa14c5c297c842836f4b94eeba6b574c741a0ecdf75b2212a3e38b6cc651f60b19ee5ad30ba132f7f03381fa6874d5499dcfdbb1accc9d1a73bc76d010248d69451d2cce9cb410d05954ef7955099db123ed10ab701c9581c77ce9bd7064c92946dbbe4a43bc330af793bc93c23e78c9322fbd37e292c1ded2253d95584f9e40e4a5dbe40bb56bda3c834662246838e2e192b4a061cc08c932d379a15564ff3ef3dccbbf8856bb0ddf7cd88986b43ca5107323c9358180816ac9acc1c7db5e87112390514fbfb6d1270dda0ecefa480d7b8dcc319526b4b1b96c47ad32a35c0f87d102d87d6bcf3ff99065bb75084d40670afe4a60f88b47443ffdc37558a87534aba04739f0e479e27359dfd220d197289d80e7a3d62afd2927bfabadf0827b0df731a4c8dee1a7570463643c568579c754bd3fbb14bcc645ed2a74c9b04511458cf3c4790a0dd3", 0x1000}, {&(0x7f0000002940)="7ba673ff27cd640073f522fa758dc94135a15bf1fd42bdf498728d84f33e74aaa2b9c2992aca3d802e6314a061eed08a75c2ea576db455bed09e1582440c0e6adcacff873f578cf337adacf618bb8e7a712f8c38406d82090d632808f2f1336bf7c9555177d75172474bc96d70341ad2b7bc44586041750ab8461c2a27362bb522a5542501ede79d6712565832fc4685747247cf42e5692dc509ad2252e1d4e2983e59f2801876ded63d52290e880fd05db7292dd2c0788818b6a52300b5dc2ce4c35d8372865f133d255bceecf7b713e4eeaafd47329bc5b24fb3dcb464934d7206971cb654a0f5ffe1f95847cb7148d0a298", 0xf3}, {&(0x7f0000002a40)="12ed1f9813a5f34efff56c6996faa53a95502bbb686a3af61aac6016bc0aa93b9327983b37a669c022b8fca1f9a86618508bebf4959f27d7c9e070f3b0ceb21924108bd0950c91956fcbf3e99834f43d90066b9d3b2ff60183de7a003a68cc5d845b8febbd7d4f6daa07d07acd3e5b2e7e2d7a29f8aacf6fdbf1db5b937f9752959bb5047ed36503f1ae95f5340e8a90feadec4a08fbfd4d74c10d72439409a6c9cca81d7d3095b542a8a9dcaa29b0d49a0a8f91127755265b7637fc3d97e65de436672df960098b60995712f4cf3d45e441bd9937268ec9629ef3c022e5959616b163fddc", 0xe5}, {&(0x7f0000002b40)="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", 0xfa}, {&(0x7f0000002c40)="5e5db97e854348e524d27d337ec3b9550e293c7f45382aae789ce102c4d608fc564669034480d908e4c01a662db6c594bec262a98ee4e706c29a6773fc13f23c2411c65f2f86c84885928e651801e5e98bd804c134e7297e2f86ce0c6eca7e4a1b9964ddf2d4fd08dac9565249d64e221c0769750bd0b54f590ea8f4f6fcdf447faa51742c4d2a9dd4e40ed15c0fe7dfe405f98f551541f9aa9dca58f53388584ef42dd1aa82a3d4d2e3d1a40e0a35a7d6c4b3248a725a6ca7d76ee55e9494d536753101", 0xc4}, {&(0x7f0000002d40)="b341e053e5b96c87", 0x8}], 0x6, &(0x7f0000002e00)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x1c, 0x3, [{0x7, 0x10, "02972b002ea574711a156158d066"}, {0x5, 0x6, "d30ce508"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}], 0x60}}, {{&(0x7f0000002e80)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000002ec0)="87ddefca9b4adb9b40eaebc46ce52921e2535f4d37eb9156e880517ca1e03a41bd70ee41a450cd5aaf259d4a23fb00a0d9b643077ea931954a19caed736553f0a8adde1ba93fc815dd12df85aac9a4131de1f604859a6648cee3df3c46a65d0838a4ac6320d0c5b4878774f4389633e4c08e3f44f305420e213a2eb2f613def05f36cc26beea5a77aec92c9256f30ed6fd952cf15945226499bc28de74fb3797a6188a2f2dc7f8d8df719f0300e14152eb8403aeaed3b0fd21f027b5341696247fb22cc211a8652f179611a7428a6f205209acf73d6843dad06bdc7cb178d52c9a70f58a3d2b01607f534cae8dc4240ba39156b9dbc9d1", 0xf7}, {&(0x7f0000002fc0)="c637fbec42725a2d6ed434deac3eb5ddddcc6322e898f10aca86649bc430afd5d70ef420bd5f37ceea922bde594af0ede9d90df420c88f73e02610d1d1fdf519b9c1a83b519c0b2ec6f6571b320b5aa977836cf8a99bd5cc7f5b4e2702826bec3c1c05ef01cec1967ed7064a716e44242a493f8b2636101c64c7c94d868a49464ad69dc67b1aea8228a6b8ef18354a454bf4112699a639e4c95a8bd7ec3f613aa130548ada37542d1cfafdc810a0afb4568cbb67d034a081e1e181779e46fafc7908780bb1f7a14593aba2a4d08f42a09b78296063c1c254963b946eb74d0efc", 0xe0}, {&(0x7f00000030c0)="98a0b11afca6764f339ccb331f5f0a4e5cfa78006c54c72f4c3636085518ffd317367f784b69c59e395e66230c55f8397c3c4b269c0d", 0x36}, {&(0x7f0000003100)="4b3470782b68b69574900eb8ea3b798d87fc0112d86e3af44e63d4a8e8fff384afc0ad5a612f537aa3f3d4747be4f99502d102f6863f939b49dc470014d5579303c2e11b5548fef8f03079c5971ba629c3426d56b0a9012e11e42220e3b5c398a05aee95a0cc2a7acce3a7fe5d091797a836afe6906dd29d6654d12e8aa750e985634e1533be596516425317ff729954ecc95240c04cfaf99df8194a31a2956410df838ff19c32186f08d94ce402b1472c25ce6ff1b19eabf07186e08a86b1e5b3f1ca7053928c0851c3f88f7a5525eee566163b8ef2fe456e9e4746edffbb729736885bfdd30686f3a0908a9b81", 0xee}, {&(0x7f0000003200)="16a8a75818e0156921037bf917984f367f564bc18a0ecfa1bbfd535f1f6a201d62ca8220", 0x24}, {&(0x7f0000003240)="b6c699bab027a4bc685868de8f8ae60f21e8d4ca33252bf5e42e14f909eef3788646842b2d56", 0x26}, {&(0x7f0000003280)="d7b2c82d822bd50ea409b6d448b403d2b8a0bfe8b86be691e13a434cfcb76a5972184465a4c9bf8d48b30db30f931de29047d86faec04a425b5787246edbe9949d5069a838a9243a71839825e1c382f5df0dc5999fb70300ec0fd3734e9a9cd658b58f5dc53bfcc85f8e972238ec06d25503add83027584e80253e14ad4f37d1756b19468f7719c6dbf4af874275ca1afe37156564b826af8ba8c1ea052c112e47a1b86be37dd97dc3cb6341ebc8cc1246eadee8b93bd6bb9421726c1df82d6f1f1222afd124920c0b6796279cbc69df7920f2c4ebeb7290640f948ef38e226d2c5e67", 0xe3}, {&(0x7f0000003380)="94d7d0c34030", 0x6}, {&(0x7f00000033c0)="879b77c7e8dee6e087225428926371612ced842df8dc0629f7ff92edf1cc8f0c3006e407c066ff6720344017788f37ff374331cb289f4ee0779f99247ec58a3e", 0x40}, {&(0x7f0000003400)="f0b39f99172262f19b0ca79342de90eba908c329633d17cfd26c1d03ddbb9793d7a93bd4f3008171976e7c75c645d7fb620e9798a7337ab2a6ef19775dde44af66385ef34de0ea80714ce6d18c61c1eba47903abf43cf57e83472c45f76e815cfb87182dde6e970a7e56d82bfb2d68136ad4bfc9cf6802a2a834845919db8187610466dc", 0x84}], 0xa, &(0x7f0000003580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @empty}}}], 0x20}}], 0x4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000240)="f05f0d1c7e76f8bf27c2f7b0397657305062f55fdfbbe90641dd519553afee166b24e7034bfa072ba7862d4220a2238b527fc201833b382312746a44eea7cef7997c02f02ed6539a61c9574dfbff8891958db0f8d3e4a8a3ddbc12493d33f524a679fa660e3a79b4c35bfe37", &(0x7f0000000740)=""/216}, 0x20) r8 = syz_io_uring_setup(0x30a6, &(0x7f0000000080)={0x0, 0x7c76, 0x4000, 0x3, 0x159}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r8, 0x2490, 0xc852, 0x44, &(0x7f0000000140), 0x8) 594.948808ms ago: executing program 0 (id=5355): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4", 0x7e, 0x0, 0x0, 0x0) 555.144789ms ago: executing program 0 (id=5356): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0xc10, 0x6, 0x4, 0x2}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x5e7a}}, './file0\x00'}) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) getresuid(&(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)) add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)={0x0, 0x0, @d}, 0x18, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 517.19008ms ago: executing program 5 (id=5357): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@void, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x79}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0xc10, 0x6, 0x4, 0x2}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x5e7a}}, './file0\x00'}) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) getresuid(&(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)) add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)={0x0, 0x0, @d}, 0x18, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 458.633831ms ago: executing program 7 (id=5358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) mount$9p_fd(0x0, 0x0, 0x0, 0x400, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000430000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_mballoc_prealloc\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000008c7c183a49f3e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x1, 0x1009, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r4, 0xa) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2226000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7}, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000880)=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x91, 0x401, 0x19eb, 0x4000, r8, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xe}, 0x50) 457.014551ms ago: executing program 0 (id=5359): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='irq_noise\x00', r1, 0x0, 0x2}, 0x18) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r3, 0xffffffffffffffff, 0x100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x9, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x54) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r6, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 200.635796ms ago: executing program 5 (id=5360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x2, 0x0, 0x0) 102.963848ms ago: executing program 1 (id=5361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 102.185318ms ago: executing program 5 (id=5362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000100)}, {&(0x7f0000000240)="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", 0x214}], 0x3) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061001400da4683b30398b2baf97c8c369cad53bc2b157e63f40bd20239db311793a98bb6c5c1d9e7b8f07a17540d494a97efd1bba09931cd28801efde6d4eb84090191224169b329ec1f87731ae7fc2d1d1a2665d4d367ecdedd8abb5729ae862698c43ea642b5585839c795f17cfbca0f9e91b3f7309dbd67280ac0d48b541f9c940debf25f4b1a45fb6ec8171179e08f3a15b346da4188df1503b859dfa95814207004"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000008c0), &(0x7f0000000b40), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES8, @ANYBLOB="0000000000000000b7030706c7faf4295c0000008500000071181f44d2f8b1f57a6e1b0000"], &(0x7f0000000b00)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0x5, 0xffffffc0, 0x1, 0xa0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x26, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc84, 0x0, 0x0, 0x0, 0xf68}, [@alu={0x4, 0x1, 0x4, 0x4, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000240)='GPL\x00', 0x57e1, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x1f, r3, 0x8, &(0x7f0000000500)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x9, &(0x7f0000000780)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r8, r9], &(0x7f00000007c0)=[{0x0, 0x2, 0xd, 0xa}, {0x2, 0x4, 0xe, 0x2}, {0x4, 0x5, 0x3, 0x2}, {0x4, 0x5, 0x4, 0x6}, {0x3, 0x1, 0x8, 0x9}, {0x2, 0x5, 0x8, 0xa}, {0x4, 0x1, 0x7, 0x2}, {0x3, 0x4, 0xc, 0x9}, {0x5, 0x3, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) bind$inet(r11, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r11, &(0x7f00000014c0)=[{{&(0x7f0000000000)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0xc044) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="34a831387cab0442496e5b31440b263635c3d84f73bc3ee26687ec8fbf9c6d14edd7f558b65d68a73894cb899f8e14b24fce8a8c72c6b49d79eee9726be801d0888fcfa02d9814851a8278bd94cafb8a0673a8aff458b4b212b4c6a3f517f155ad6b733f592b0d30ce6872e65c7f3e62482b0936c1d20a205ad7395a5ef2a1f2fe77a69e3035d1980782000c52e0f36c1ed5844062b08885ee"], 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x11) 60.462469ms ago: executing program 1 (id=5363): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x3, 0x5, 0xffffff2d, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x96, 0x6}}, 0x20) epoll_create1(0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r5, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@lazytime}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") (fail_nth: 10) 0s ago: executing program 5 (id=5364): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4886) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) (fail_nth: 8) kernel console output (not intermixed with test programs): 00 audit(1759562120.794:26768): avc: denied { setopt } for pid=21987 comm="syz.0.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.088858][ T29] audit: type=1326 audit(1759562121.124:26769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.112601][ T29] audit: type=1326 audit(1759562121.124:26770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.136275][ T29] audit: type=1326 audit(1759562121.124:26771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.159896][ T29] audit: type=1326 audit(1759562121.124:26772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.183574][ T29] audit: type=1326 audit(1759562121.124:26773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.207230][ T29] audit: type=1326 audit(1759562121.124:26774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.230961][ T29] audit: type=1326 audit(1759562121.124:26775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.254796][ T29] audit: type=1326 audit(1759562121.124:26776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.278410][ T29] audit: type=1326 audit(1759562121.124:26777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc94ceec9 code=0x7ffc0000 [ 263.308103][T22012] __nla_validate_parse: 13 callbacks suppressed [ 263.308146][T22012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4914'. [ 263.328347][T22009] loop0: detected capacity change from 0 to 128 [ 263.374719][T22021] netlink: 'syz.1.4917': attribute type 195 has an invalid length. [ 263.395700][T22009] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 263.404710][T22009] FAT-fs (loop0): Filesystem has been set read-only [ 263.413614][T22009] bio_check_eod: 1107 callbacks suppressed [ 263.413731][T22009] syz.0.4913: attempt to access beyond end of device [ 263.413731][T22009] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 263.443873][T22009] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 263.452692][T22009] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 263.527745][T22041] netlink: 'syz.0.4921': attribute type 3 has an invalid length. [ 263.536508][T22041] program syz.0.4921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.547260][T22043] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4922'. [ 263.591314][T22049] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4925'. [ 263.700623][T22060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4928'. [ 263.767869][T22066] FAULT_INJECTION: forcing a failure. [ 263.767869][T22066] name failslab, interval 1, probability 0, space 0, times 0 [ 263.780694][T22066] CPU: 1 UID: 0 PID: 22066 Comm: syz.0.4930 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.780731][T22066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.780815][T22066] Call Trace: [ 263.780823][T22066] [ 263.780834][T22066] __dump_stack+0x1d/0x30 [ 263.780882][T22066] dump_stack_lvl+0xe8/0x140 [ 263.780919][T22066] dump_stack+0x15/0x1b [ 263.780985][T22066] should_fail_ex+0x265/0x280 [ 263.781016][T22066] ? io_manage_buffers_legacy+0x188/0x6c0 [ 263.781039][T22066] should_failslab+0x8c/0xb0 [ 263.781080][T22066] __kmalloc_cache_noprof+0x4c/0x4a0 [ 263.781190][T22066] io_manage_buffers_legacy+0x188/0x6c0 [ 263.781355][T22066] __io_issue_sqe+0xfb/0x2e0 [ 263.781382][T22066] ? io_assign_file+0x56/0x200 [ 263.781467][T22066] io_issue_sqe+0x56/0xa80 [ 263.781503][T22066] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 263.781549][T22066] io_submit_sqes+0x675/0x1060 [ 263.781596][T22066] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 263.781637][T22066] ? 0xffffffff81000000 [ 263.781650][T22066] ? __rcu_read_unlock+0x4f/0x70 [ 263.781688][T22066] ? get_pid_task+0x96/0xd0 [ 263.781717][T22066] ? proc_fail_nth_write+0x13b/0x160 [ 263.781810][T22066] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.781889][T22066] ? vfs_write+0x7e8/0x960 [ 263.781918][T22066] ? __rcu_read_unlock+0x4f/0x70 [ 263.781949][T22066] ? __fget_files+0x184/0x1c0 [ 263.781985][T22066] ? fput+0x8f/0xc0 [ 263.782103][T22066] __x64_sys_io_uring_enter+0x78/0x90 [ 263.782199][T22066] x64_sys_call+0x2df0/0x3000 [ 263.782227][T22066] do_syscall_64+0xd2/0x200 [ 263.782255][T22066] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 263.782283][T22066] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 263.782335][T22066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.782363][T22066] RIP: 0033:0x7fbcc94ceec9 [ 263.782377][T22066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.782396][T22066] RSP: 002b:00007fbcc7f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 263.782492][T22066] RAX: ffffffffffffffda RBX: 00007fbcc9725fa0 RCX: 00007fbcc94ceec9 [ 263.782516][T22066] RDX: 00000000fffffffe RSI: 000000000000471b RDI: 0000000000000005 [ 263.782533][T22066] RBP: 00007fbcc7f37090 R08: 0000000000000000 R09: ffffffffffffff68 [ 263.782550][T22066] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 263.782567][T22066] R13: 00007fbcc9726038 R14: 00007fbcc9725fa0 R15: 00007ffe37024ce8 [ 263.782590][T22066] [ 264.218769][T22070] loop1: detected capacity change from 0 to 128 [ 264.298003][T22084] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4936'. [ 264.314129][T22070] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 264.325569][T22070] FAT-fs (loop1): Filesystem has been set read-only [ 264.351525][T22070] syz.1.4932: attempt to access beyond end of device [ 264.351525][T22070] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 264.368404][T22070] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 264.377263][T22070] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 264.389767][T22070] syz.1.4932: attempt to access beyond end of device [ 264.389767][T22070] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.406041][T22070] syz.1.4932: attempt to access beyond end of device [ 264.406041][T22070] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 264.499871][T22103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4940'. [ 264.573408][T22108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 264.579995][T22108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.587597][T22108] vhci_hcd vhci_hcd.0: Device attached [ 264.616647][T22110] usbip_core: unknown command [ 264.621441][T22110] vhci_hcd: unknown pdu 0 [ 264.625789][T22110] usbip_core: unknown command [ 264.635250][T22115] $H: renamed from bond0 (while UP) [ 264.640968][T21725] vhci_hcd: stop threads [ 264.645245][T21725] vhci_hcd: release socket [ 264.649731][T21725] vhci_hcd: disconnect device [ 264.656081][T22115] $H: entered promiscuous mode [ 264.661260][T22115] bond_slave_0: entered promiscuous mode [ 264.667071][T22115] bond_slave_1: entered promiscuous mode [ 264.847050][T22133] netlink: 264 bytes leftover after parsing attributes in process `syz.1.4949'. [ 264.912083][T22141] netlink: 14528 bytes leftover after parsing attributes in process `syz.6.4952'. [ 264.993570][T22153] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4956'. [ 265.184653][T22162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4959'. [ 265.274213][T15241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.302081][T22171] loop5: detected capacity change from 0 to 128 [ 265.312273][T22171] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 265.320268][T22171] FAT-fs (loop5): Filesystem has been set read-only [ 265.327202][T22171] syz.5.4961: attempt to access beyond end of device [ 265.327202][T22171] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 265.341448][T22171] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 265.349374][T22171] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 265.357667][T22171] syz.5.4961: attempt to access beyond end of device [ 265.357667][T22171] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.372477][T22171] syz.5.4961: attempt to access beyond end of device [ 265.372477][T22171] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.387179][T22171] syz.5.4961: attempt to access beyond end of device [ 265.387179][T22171] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 265.401217][T22175] syz.5.4961: attempt to access beyond end of device [ 265.401217][T22175] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 265.414775][T22175] buffer_io_error: 10 callbacks suppressed [ 265.414794][T22175] Buffer I/O error on dev loop5, logical block 2065, async page read [ 265.430366][T22175] syz.5.4961: attempt to access beyond end of device [ 265.430366][T22175] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 265.443696][T22175] Buffer I/O error on dev loop5, logical block 2066, async page read [ 265.452019][T22175] Buffer I/O error on dev loop5, logical block 2067, async page read [ 265.460259][T22175] Buffer I/O error on dev loop5, logical block 2068, async page read [ 265.468605][T22175] Buffer I/O error on dev loop5, logical block 2069, async page read [ 265.476887][T22175] Buffer I/O error on dev loop5, logical block 2070, async page read [ 265.485659][T22175] Buffer I/O error on dev loop5, logical block 2071, async page read [ 265.494548][T22175] Buffer I/O error on dev loop5, logical block 2072, async page read [ 265.502994][T22171] Buffer I/O error on dev loop5, logical block 2065, async page read [ 265.511228][T22171] Buffer I/O error on dev loop5, logical block 2066, async page read [ 265.766369][T22195] FAULT_INJECTION: forcing a failure. [ 265.766369][T22195] name failslab, interval 1, probability 0, space 0, times 0 [ 265.779253][T22195] CPU: 1 UID: 0 PID: 22195 Comm: syz.1.4966 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.779300][T22195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.779313][T22195] Call Trace: [ 265.779320][T22195] [ 265.779331][T22195] __dump_stack+0x1d/0x30 [ 265.779379][T22195] dump_stack_lvl+0xe8/0x140 [ 265.779495][T22195] dump_stack+0x15/0x1b [ 265.779525][T22195] should_fail_ex+0x265/0x280 [ 265.779576][T22195] ? audit_log_d_path+0x8d/0x150 [ 265.779601][T22195] should_failslab+0x8c/0xb0 [ 265.779635][T22195] __kmalloc_cache_noprof+0x4c/0x4a0 [ 265.779754][T22195] audit_log_d_path+0x8d/0x150 [ 265.779778][T22195] audit_log_d_path_exe+0x42/0x70 [ 265.779805][T22195] audit_log_task+0x1e9/0x250 [ 265.779924][T22195] ? kstrtouint+0x76/0xc0 [ 265.779954][T22195] audit_seccomp+0x61/0x100 [ 265.779992][T22195] ? __seccomp_filter+0x82d/0x1250 [ 265.780021][T22195] __seccomp_filter+0x83e/0x1250 [ 265.780077][T22195] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 265.780112][T22195] ? vfs_write+0x7e8/0x960 [ 265.780171][T22195] ? __rcu_read_unlock+0x4f/0x70 [ 265.780203][T22195] ? __fget_files+0x184/0x1c0 [ 265.780274][T22195] __secure_computing+0x82/0x150 [ 265.780339][T22195] syscall_trace_enter+0xcf/0x1e0 [ 265.780409][T22195] do_syscall_64+0xac/0x200 [ 265.780435][T22195] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 265.780470][T22195] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 265.780517][T22195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.780614][T22195] RIP: 0033:0x7f557694eec9 [ 265.780630][T22195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.780649][T22195] RSP: 002b:00007f55753af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 265.780670][T22195] RAX: ffffffffffffffda RBX: 00007f5576ba5fa0 RCX: 00007f557694eec9 [ 265.780692][T22195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 265.780705][T22195] RBP: 00007f55753af090 R08: 0000000000000000 R09: 0000000000000000 [ 265.780772][T22195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.780789][T22195] R13: 00007f5576ba6038 R14: 00007f5576ba5fa0 R15: 00007ffcb2f93a38 [ 265.780811][T22195] [ 266.053874][T22199] $H: renamed from bond0 (while UP) [ 266.068420][T22199] $H: entered promiscuous mode [ 266.073758][T22199] bond_slave_0: entered promiscuous mode [ 266.079542][T22199] bond_slave_1: entered promiscuous mode [ 266.101680][T22201] loop1: detected capacity change from 0 to 512 [ 266.183952][T22201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.199494][T22201] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.230866][T12624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.326727][T22248] SELinux: Context system_u:object is not valid (left unmapped). [ 266.337868][T22248] netdevsim netdevsim3: Direct firmware load for ./bus failed with error -2 [ 266.372655][T22231] 8021q: adding VLAN 0 to HW filter on device $H [ 266.383583][T22231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.399938][T22254] macvtap0: refused to change device tx_queue_len [ 266.493759][T22266] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 266.659761][T22276] netlink: 'syz.3.4990': attribute type 4 has an invalid length. [ 266.671519][T22276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22276 comm=syz.3.4990 [ 267.067430][T22334] loop3: detected capacity change from 0 to 128 [ 267.175527][T22345] FAULT_INJECTION: forcing a failure. [ 267.175527][T22345] name failslab, interval 1, probability 0, space 0, times 0 [ 267.188372][T22345] CPU: 1 UID: 0 PID: 22345 Comm: syz.0.5006 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.188409][T22345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.188427][T22345] Call Trace: [ 267.188437][T22345] [ 267.188447][T22345] __dump_stack+0x1d/0x30 [ 267.188611][T22345] dump_stack_lvl+0xe8/0x140 [ 267.188664][T22345] dump_stack+0x15/0x1b [ 267.188705][T22345] should_fail_ex+0x265/0x280 [ 267.188765][T22345] should_failslab+0x8c/0xb0 [ 267.188795][T22345] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 267.188823][T22345] ? __d_alloc+0x3d/0x340 [ 267.188862][T22345] __d_alloc+0x3d/0x340 [ 267.189005][T22345] ? mpol_shared_policy_init+0xbd/0x4c0 [ 267.189034][T22345] d_alloc_pseudo+0x1e/0x80 [ 267.189066][T22345] alloc_file_pseudo+0x71/0x160 [ 267.189102][T22345] __shmem_file_setup+0x1de/0x210 [ 267.189177][T22345] shmem_file_setup+0x3b/0x50 [ 267.189210][T22345] __se_sys_memfd_create+0x2c3/0x590 [ 267.189270][T22345] __x64_sys_memfd_create+0x31/0x40 [ 267.189301][T22345] x64_sys_call+0x2ac2/0x3000 [ 267.189438][T22345] do_syscall_64+0xd2/0x200 [ 267.189467][T22345] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 267.189506][T22345] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 267.189661][T22345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.189692][T22345] RIP: 0033:0x7fbcc94ceec9 [ 267.189768][T22345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.189787][T22345] RSP: 002b:00007fbcc7f36e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 267.189837][T22345] RAX: ffffffffffffffda RBX: 0000000000000539 RCX: 00007fbcc94ceec9 [ 267.189906][T22345] RDX: 00007fbcc7f36ef0 RSI: 0000000000000000 RDI: 00007fbcc9552960 [ 267.189924][T22345] RBP: 00002000000005c0 R08: 00007fbcc7f36bb7 R09: 00007fbcc7f36e40 [ 267.189998][T22345] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 267.190015][T22345] R13: 00007fbcc7f36ef0 R14: 00007fbcc7f36eb0 R15: 0000200000000140 [ 267.190039][T22345] [ 267.775867][ T29] kauditd_printk_skb: 886 callbacks suppressed [ 267.775885][ T29] audit: type=1400 audit(1759562125.814:27662): avc: denied { create } for pid=22359 comm="syz.3.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 267.881731][T22365] FAULT_INJECTION: forcing a failure. [ 267.881731][T22365] name failslab, interval 1, probability 0, space 0, times 0 [ 267.884449][ T29] audit: type=1326 audit(1759562125.924:27663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22339 comm="syz.6.5005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c22eec9 code=0x7ffc0000 [ 267.894526][T22365] CPU: 1 UID: 0 PID: 22365 Comm: syz.0.5009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.894567][T22365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.894586][T22365] Call Trace: [ 267.894595][T22365] [ 267.894606][T22365] __dump_stack+0x1d/0x30 [ 267.894659][T22365] dump_stack_lvl+0xe8/0x140 [ 267.894767][T22365] dump_stack+0x15/0x1b [ 267.894811][T22365] should_fail_ex+0x265/0x280 [ 267.894873][T22365] should_failslab+0x8c/0xb0 [ 267.894918][T22365] kmem_cache_alloc_noprof+0x50/0x480 [ 267.894955][T22365] ? skb_clone+0x151/0x1f0 [ 267.894999][T22365] skb_clone+0x151/0x1f0 [ 267.895086][T22365] __netlink_deliver_tap+0x2c9/0x500 [ 267.895134][T22365] netlink_unicast+0x66b/0x690 [ 267.895173][T22365] netlink_sendmsg+0x58b/0x6b0 [ 267.895245][T22365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.895287][T22365] __sock_sendmsg+0x142/0x180 [ 267.895316][T22365] ____sys_sendmsg+0x31e/0x4e0 [ 267.895418][T22365] ___sys_sendmsg+0x17b/0x1d0 [ 267.895477][T22365] __x64_sys_sendmsg+0xd4/0x160 [ 267.895526][T22365] x64_sys_call+0x191e/0x3000 [ 267.895556][T22365] do_syscall_64+0xd2/0x200 [ 267.895699][T22365] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 267.895739][T22365] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 267.895789][T22365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.895821][T22365] RIP: 0033:0x7fbcc94ceec9 [ 267.895843][T22365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.895888][T22365] RSP: 002b:00007fbcc7f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.895938][T22365] RAX: ffffffffffffffda RBX: 00007fbcc9725fa0 RCX: 00007fbcc94ceec9 [ 267.895959][T22365] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000005 [ 267.895977][T22365] RBP: 00007fbcc7f37090 R08: 0000000000000000 R09: 0000000000000000 [ 267.895997][T22365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.896014][T22365] R13: 00007fbcc9726038 R14: 00007fbcc9725fa0 R15: 00007ffe37024ce8 [ 267.896103][T22365] [ 268.077885][T22373] loop3: detected capacity change from 0 to 164 [ 268.080548][ T29] audit: type=1326 audit(1759562125.924:27664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22339 comm="syz.6.5005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c22eec9 code=0x7ffc0000 [ 268.153821][T22346] veth0_to_bridge: entered promiscuous mode [ 268.154010][T22346] veth0_to_bridge: left promiscuous mode [ 268.189129][T22373] iso9660: Unknown parameter '' [ 268.214141][ T29] audit: type=1326 audit(1759562126.194:27665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22351 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 268.237898][ T29] audit: type=1326 audit(1759562126.194:27666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22351 comm="syz.1.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 268.301943][ T29] audit: type=1326 audit(1759562126.344:27667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22384 comm="syz.6.5015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd15c22eec9 code=0x0 [ 268.380995][T22382] netlink: 'syz.3.5014': attribute type 18 has an invalid length. [ 268.389128][T22382] __nla_validate_parse: 10 callbacks suppressed [ 268.389175][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5014'. [ 268.409245][ T29] audit: type=1326 audit(1759562126.444:27668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22390 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 268.410600][T22396] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5019'. [ 268.482675][T22393] loop1: detected capacity change from 0 to 128 [ 268.534363][ T29] audit: type=1326 audit(1759562126.474:27669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22390 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 268.558209][ T29] audit: type=1326 audit(1759562126.484:27670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22390 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 268.582105][ T29] audit: type=1326 audit(1759562126.484:27671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22390 comm="syz.1.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 268.609139][T22393] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 268.617869][T22393] FAT-fs (loop1): Filesystem has been set read-only [ 268.631717][T22393] bio_check_eod: 35966 callbacks suppressed [ 268.631801][T22393] syz.1.5017: attempt to access beyond end of device [ 268.631801][T22393] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 268.656026][T22414] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.5020'. [ 268.660387][T22393] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 268.673961][T22393] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 268.844156][T22405] netlink: 'syz.5.5018': attribute type 8 has an invalid length. [ 268.852161][T22405] netem: change failed [ 269.424817][T22464] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5029'. [ 269.484699][T22466] FAULT_INJECTION: forcing a failure. [ 269.484699][T22466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.497857][T22466] CPU: 1 UID: 0 PID: 22466 Comm: syz.6.5031 Not tainted syzkaller #0 PREEMPT(voluntary) [ 269.497897][T22466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.497914][T22466] Call Trace: [ 269.497923][T22466] [ 269.497933][T22466] __dump_stack+0x1d/0x30 [ 269.498008][T22466] dump_stack_lvl+0xe8/0x140 [ 269.498052][T22466] dump_stack+0x15/0x1b [ 269.498148][T22466] should_fail_ex+0x265/0x280 [ 269.498188][T22466] should_fail+0xb/0x20 [ 269.498230][T22466] should_fail_usercopy+0x1a/0x20 [ 269.498276][T22466] _copy_from_user+0x1c/0xb0 [ 269.498303][T22466] __sys_sendto+0x19e/0x330 [ 269.498350][T22466] __x64_sys_sendto+0x76/0x90 [ 269.498385][T22466] x64_sys_call+0x2d14/0x3000 [ 269.498411][T22466] do_syscall_64+0xd2/0x200 [ 269.498436][T22466] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 269.498471][T22466] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 269.498642][T22466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.498672][T22466] RIP: 0033:0x7fd15c22eec9 [ 269.498722][T22466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.498747][T22466] RSP: 002b:00007fd15ac97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 269.498772][T22466] RAX: ffffffffffffffda RBX: 00007fd15c485fa0 RCX: 00007fd15c22eec9 [ 269.498803][T22466] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000006 [ 269.498820][T22466] RBP: 00007fd15ac97090 R08: 0000200000000140 R09: 000000000000001c [ 269.498836][T22466] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 269.498864][T22466] R13: 00007fd15c486038 R14: 00007fd15c485fa0 R15: 00007fff54220e88 [ 269.498889][T22466] [ 269.674065][T22426] delete_channel: no stack [ 269.744011][T22473] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.5034'. [ 269.796248][T22480] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 269.802923][T22480] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.810445][T22480] vhci_hcd vhci_hcd.0: Device attached [ 269.847063][T22481] usbip_core: unknown command [ 269.851961][T22481] vhci_hcd: unknown pdu 0 [ 269.856436][T22481] usbip_core: unknown command [ 269.868993][T21773] vhci_hcd: stop threads [ 269.873387][T21773] vhci_hcd: release socket [ 269.877835][T21773] vhci_hcd: disconnect device [ 269.961022][T22492] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5041'. [ 270.068370][T22498] loop1: detected capacity change from 0 to 1024 [ 270.080770][T22498] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.091823][T22498] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.103286][T22498] JBD2: no valid journal superblock found [ 270.109115][T22498] EXT4-fs (loop1): Could not load journal inode [ 270.137648][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5040'. [ 270.310146][T22504] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.436205][T22516] loop3: detected capacity change from 0 to 1024 [ 271.463744][T22516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.480253][T22504] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.671216][T22504] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.751991][T22542] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.5050'. [ 272.814607][T22504] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.843952][T14626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.864677][T22548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.890486][T22548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.911266][T22548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.932677][T22548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.945118][T22557] loop6: detected capacity change from 0 to 512 [ 272.954948][T22548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.979577][T21725] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.988718][T21773] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.997026][T21773] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.006755][T22548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.030850][T21773] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.080543][T22557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.099049][T22557] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.128730][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 273.128749][ T29] audit: type=1400 audit(1759562131.164:27886): avc: denied { setattr } for pid=22556 comm="syz.6.5056" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.157876][T22557] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #4: comm syz.6.5056: corrupted inode contents [ 273.183843][T22557] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #4: comm syz.6.5056: mark_inode_dirty error [ 273.205742][T22557] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #4: comm syz.6.5056: corrupted inode contents [ 273.234113][T22557] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #4: comm syz.6.5056: mark_inode_dirty error [ 273.251619][T22557] Quota error (device loop6): write_blk: dquota write failed [ 273.259172][T22557] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 273.269156][T22557] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.5056: Failed to acquire dquot type 1 [ 273.280632][T22581] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #4: comm syz.6.5056: corrupted inode contents [ 273.305872][T22581] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #4: comm syz.6.5056: mark_inode_dirty error [ 273.318657][ T29] audit: type=1400 audit(1759562131.354:27887): avc: denied { compute_member } for pid=22556 comm="syz.6.5056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 273.342872][T22581] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #4: comm syz.6.5056: corrupted inode contents [ 273.360138][T22581] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #4: comm syz.6.5056: mark_inode_dirty error [ 273.373349][T22581] Quota error (device loop6): write_blk: dquota write failed [ 273.380849][T22581] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 273.390075][T22581] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 273.400045][T22581] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.5056: Failed to acquire dquot type 1 [ 273.414446][T22584] Quota error (device loop6): write_blk: dquota write failed [ 273.421963][T22584] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 273.454913][T22590] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 273.461487][T22590] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 273.469050][T22590] vhci_hcd vhci_hcd.0: Device attached [ 273.489692][ T29] audit: type=1326 audit(1759562131.534:27888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22589 comm="syz.5.5059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 273.571168][T22591] usbip_core: unknown command [ 273.575940][T22591] vhci_hcd: unknown pdu 0 [ 273.580430][T22591] usbip_core: unknown command [ 273.597077][T21748] vhci_hcd: stop threads [ 273.601414][T21748] vhci_hcd: release socket [ 273.605874][T21748] vhci_hcd: disconnect device [ 273.648850][ T3399] vhci_hcd: vhci_device speed not set [ 273.671397][T22617] tmpfs: Bad value for 'mpol' [ 273.682709][T22619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=22619 comm=syz.0.5064 [ 273.716389][T22623] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 273.722988][T22623] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 273.730548][T22623] vhci_hcd vhci_hcd.0: Device attached [ 273.742041][T22586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.759424][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5068'. [ 273.761751][T22632] loop0: detected capacity change from 0 to 128 [ 273.783612][T21759] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.831713][T21759] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.861667][T22630] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.5068'. [ 273.871943][T22625] vhci_hcd: connection closed [ 273.872155][ T37] vhci_hcd: stop threads [ 273.881233][ T37] vhci_hcd: release socket [ 273.885695][ T37] vhci_hcd: disconnect device [ 273.908939][ T1036] vhci_hcd: vhci_device speed not set [ 273.917466][T21759] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.932180][T22646] loop0: detected capacity change from 0 to 164 [ 273.948408][T22646] ISOFS: unable to read i-node block [ 273.954098][T22646] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 273.967187][T21759] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.007593][T22660] tmpfs: Bad value for 'mpol' [ 274.045184][T21759] bridge_slave_1: left allmulticast mode [ 274.045370][T22673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=22673 comm=syz.0.5077 [ 274.050977][T21759] bridge_slave_1: left promiscuous mode [ 274.069462][T21759] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.085377][T21759] bridge_slave_0: left allmulticast mode [ 274.091142][T21759] bridge_slave_0: left promiscuous mode [ 274.096911][T21759] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.221660][T21759] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.230580][T21759] bond_slave_0: left promiscuous mode [ 274.237559][T21759] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.246544][T21759] bond_slave_1: left promiscuous mode [ 274.253329][T21759] $H (unregistering): Released all slaves [ 274.447894][T21759] hsr_slave_0: left promiscuous mode [ 274.460391][T21759] hsr_slave_1: left promiscuous mode [ 274.466584][T21759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.476440][T21759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.538474][T21759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.546316][T21759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.583919][T21759] veth1_macvtap: left promiscuous mode [ 274.592614][T21759] veth0_macvtap: left promiscuous mode [ 274.598185][T21759] veth1_vlan: left promiscuous mode [ 274.603842][T21759] veth0_vlan: left promiscuous mode [ 274.616813][T22735] FAULT_INJECTION: forcing a failure. [ 274.616813][T22735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.630005][T22735] CPU: 1 UID: 0 PID: 22735 Comm: syz.3.5085 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.630043][T22735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.630059][T22735] Call Trace: [ 274.630131][T22735] [ 274.630141][T22735] __dump_stack+0x1d/0x30 [ 274.630183][T22735] dump_stack_lvl+0xe8/0x140 [ 274.630292][T22735] dump_stack+0x15/0x1b [ 274.630343][T22735] should_fail_ex+0x265/0x280 [ 274.630384][T22735] should_fail+0xb/0x20 [ 274.630420][T22735] should_fail_usercopy+0x1a/0x20 [ 274.630462][T22735] _copy_from_iter+0xd2/0xe80 [ 274.630587][T22735] ? __build_skb_around+0x1ab/0x200 [ 274.630613][T22735] ? __alloc_skb+0x223/0x320 [ 274.630662][T22735] netlink_sendmsg+0x471/0x6b0 [ 274.630744][T22735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.630785][T22735] __sock_sendmsg+0x142/0x180 [ 274.630825][T22735] ____sys_sendmsg+0x31e/0x4e0 [ 274.630871][T22735] ___sys_sendmsg+0x17b/0x1d0 [ 274.630932][T22735] __x64_sys_sendmsg+0xd4/0x160 [ 274.630971][T22735] x64_sys_call+0x191e/0x3000 [ 274.631065][T22735] do_syscall_64+0xd2/0x200 [ 274.631095][T22735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 274.631169][T22735] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 274.631209][T22735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.631240][T22735] RIP: 0033:0x7f5ba082eec9 [ 274.631259][T22735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.631331][T22735] RSP: 002b:00007f5b9f297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.631358][T22735] RAX: ffffffffffffffda RBX: 00007f5ba0a85fa0 RCX: 00007f5ba082eec9 [ 274.631395][T22735] RDX: 0000000020044000 RSI: 0000200000000040 RDI: 0000000000000003 [ 274.631413][T22735] RBP: 00007f5b9f297090 R08: 0000000000000000 R09: 0000000000000000 [ 274.631488][T22735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.631585][T22735] R13: 00007f5ba0a86038 R14: 00007f5ba0a85fa0 R15: 00007ffe00cf2f38 [ 274.631613][T22735] [ 274.946187][T21759] team0 (unregistering): Port device team_slave_1 removed [ 274.958059][T21759] team0 (unregistering): Port device team_slave_0 removed [ 275.026165][T22743] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5088'. [ 275.079850][T22748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=22748 comm=syz.1.5089 [ 275.181502][T22801] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 275.188105][T22801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.195683][T22801] vhci_hcd vhci_hcd.0: Device attached [ 275.270575][T22803] vhci_hcd: connection closed [ 275.270818][ T37] vhci_hcd: stop threads [ 275.279883][ T37] vhci_hcd: release socket [ 275.284382][ T37] vhci_hcd: disconnect device [ 275.320182][T22637] chnl_net:caif_netlink_parms(): no params data found [ 275.421065][T22637] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.428184][T22637] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.455797][T22637] bridge_slave_0: entered allmulticast mode [ 275.467836][T22637] bridge_slave_0: entered promiscuous mode [ 275.480505][T22914] FAULT_INJECTION: forcing a failure. [ 275.480505][T22914] name failslab, interval 1, probability 0, space 0, times 0 [ 275.493308][T22914] CPU: 1 UID: 0 PID: 22914 Comm: syz.0.5095 Not tainted syzkaller #0 PREEMPT(voluntary) [ 275.493340][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.493356][T22914] Call Trace: [ 275.493365][T22914] [ 275.493376][T22914] __dump_stack+0x1d/0x30 [ 275.493423][T22914] dump_stack_lvl+0xe8/0x140 [ 275.493573][T22914] dump_stack+0x15/0x1b [ 275.493615][T22914] should_fail_ex+0x265/0x280 [ 275.493645][T22914] ? assoc_array_insert+0x2e0/0x1990 [ 275.493720][T22914] should_failslab+0x8c/0xb0 [ 275.493755][T22914] __kmalloc_cache_noprof+0x4c/0x4a0 [ 275.493866][T22914] assoc_array_insert+0x2e0/0x1990 [ 275.493895][T22914] ? keyring_compare_object+0xda/0x100 [ 275.493925][T22914] ? assoc_array_delete+0x6e2/0x950 [ 275.493982][T22914] __key_link_begin+0x8a/0x140 [ 275.494006][T22914] key_move+0x160/0x550 [ 275.494031][T22914] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 275.494067][T22914] ? __pfx_keyring_search_iterator+0x10/0x10 [ 275.494093][T22914] keyctl_keyring_move+0xd6/0x110 [ 275.494125][T22914] __se_sys_keyctl+0x5f7/0xb80 [ 275.494203][T22914] ? __rcu_read_unlock+0x4f/0x70 [ 275.494252][T22914] ? __fget_files+0x184/0x1c0 [ 275.494283][T22914] ? fput+0x8f/0xc0 [ 275.494319][T22914] __x64_sys_keyctl+0x67/0x80 [ 275.494351][T22914] x64_sys_call+0x2f7c/0x3000 [ 275.494431][T22914] do_syscall_64+0xd2/0x200 [ 275.494459][T22914] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 275.494503][T22914] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 275.494539][T22914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.494580][T22914] RIP: 0033:0x7fbcc94ceec9 [ 275.494618][T22914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.494641][T22914] RSP: 002b:00007fbcc7f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 275.494661][T22914] RAX: ffffffffffffffda RBX: 00007fbcc9725fa0 RCX: 00007fbcc94ceec9 [ 275.494675][T22914] RDX: ffffffffffffffff RSI: 000000003d05d675 RDI: 000000000000001e [ 275.494693][T22914] RBP: 00007fbcc7f37090 R08: 0000000000000000 R09: 0000000000000000 [ 275.494710][T22914] R10: 00000000173a455c R11: 0000000000000246 R12: 0000000000000001 [ 275.494781][T22914] R13: 00007fbcc9726038 R14: 00007fbcc9725fa0 R15: 00007ffe37024ce8 [ 275.494884][T22914] [ 275.764572][T22637] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.771809][T22637] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.779457][T22637] bridge_slave_1: entered allmulticast mode [ 275.786248][T22637] bridge_slave_1: entered promiscuous mode [ 275.817116][T22934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5099'. [ 275.844671][T22637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.859492][T22637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.862511][T22957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=22957 comm=syz.0.5101 [ 275.891650][T22637] team0: Port device team_slave_0 added [ 275.898496][T22637] team0: Port device team_slave_1 added [ 275.921057][T22637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.928070][T22637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.954135][T22637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.993979][T23013] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5103'. [ 276.003691][T22637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.010699][T22637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.036638][T22637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.088572][T22637] hsr_slave_0: entered promiscuous mode [ 276.099393][T22637] hsr_slave_1: entered promiscuous mode [ 276.105077][T23050] loop1: detected capacity change from 0 to 1024 [ 276.112043][T22637] debugfs: 'hsr0' already exists in 'hsr' [ 276.112120][T23050] EXT4-fs: Ignoring removed bh option [ 276.117834][T22637] Cannot create hsr debugfs directory [ 276.129028][T23050] EXT4-fs: inline encryption not supported [ 276.159739][T23050] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 276.196488][T23050] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 276.221084][T23050] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.5107: lblock 2 mapped to illegal pblock 2 (length 1) [ 276.239934][T23050] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.5107: lblock 0 mapped to illegal pblock 48 (length 1) [ 276.262396][T23050] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.5107: Failed to acquire dquot type 0 [ 276.265715][T22637] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 276.281459][T23050] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 276.283312][T22637] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.299514][T23050] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.5107: mark_inode_dirty error [ 276.301986][T23131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5110'. [ 276.312247][T23050] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 276.325353][T22637] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.336950][T23050] EXT4-fs (loop1): 1 orphan inode deleted [ 276.343327][T23050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.359120][T21773] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 276.371914][T22637] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.373947][T21773] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:63: Failed to release dquot type 0 [ 276.392810][T23050] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 276.417086][T23141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=23141 comm=syz.0.5112 [ 276.440517][T12624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.462265][T22637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.483042][T22637] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.496295][T21748] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.503436][T21748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.515274][T21748] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.522596][T21748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.546482][T22637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.557189][T22637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.640534][T22637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.796967][T23183] loop1: detected capacity change from 0 to 512 [ 276.822804][T23183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.822937][T23192] loop5: detected capacity change from 0 to 1024 [ 276.842810][T23192] EXT4-fs: Ignoring removed bh option [ 276.848318][T23192] EXT4-fs: inline encryption not supported [ 276.851901][T23195] serio: Serial port ptm0 [ 276.855625][T23192] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 276.869696][T23183] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.880227][T23192] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 276.889977][T23192] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.5126: lblock 2 mapped to illegal pblock 2 (length 1) [ 276.900595][T23183] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.5121: corrupted inode contents [ 276.918402][T23192] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.5126: lblock 0 mapped to illegal pblock 48 (length 1) [ 276.933167][T23183] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.5121: mark_inode_dirty error [ 276.944947][T23183] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.5121: corrupted inode contents [ 276.965109][T23192] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.5126: Failed to acquire dquot type 0 [ 276.974939][T22637] veth0_vlan: entered promiscuous mode [ 276.984200][T22637] veth1_vlan: entered promiscuous mode [ 277.000819][T22637] veth0_macvtap: entered promiscuous mode [ 277.007081][T23192] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 277.018417][T22637] veth1_macvtap: entered promiscuous mode [ 277.030435][T23192] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5126: mark_inode_dirty error [ 277.037438][T22637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.057940][T22637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.069618][T21759] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.079509][T23192] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 277.091531][T21759] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.092264][T23192] EXT4-fs (loop5): 1 orphan inode deleted [ 277.110051][T21737] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 277.111217][T23192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.142196][T21759] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.152492][T23192] FAULT_INJECTION: forcing a failure. [ 277.152492][T23192] name failslab, interval 1, probability 0, space 0, times 0 [ 277.161852][T21759] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.165217][T23192] CPU: 1 UID: 0 PID: 23192 Comm: syz.5.5126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.165249][T23192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.165346][T23192] Call Trace: [ 277.165357][T23192] [ 277.165368][T23192] __dump_stack+0x1d/0x30 [ 277.165487][T23192] dump_stack_lvl+0xe8/0x140 [ 277.165535][T23192] dump_stack+0x15/0x1b [ 277.165580][T23192] should_fail_ex+0x265/0x280 [ 277.165641][T23192] should_failslab+0x8c/0xb0 [ 277.165726][T23192] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 277.165765][T23192] ? __alloc_skb+0x101/0x320 [ 277.165813][T23192] __alloc_skb+0x101/0x320 [ 277.165846][T23192] ? audit_log_start+0x342/0x720 [ 277.165897][T23192] audit_log_start+0x3a0/0x720 [ 277.165988][T23192] ? kstrtouint+0x76/0xc0 [ 277.166069][T23192] audit_seccomp+0x48/0x100 [ 277.166111][T23192] ? __seccomp_filter+0x82d/0x1250 [ 277.166149][T23192] __seccomp_filter+0x83e/0x1250 [ 277.166198][T23192] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 277.166243][T23192] ? vfs_write+0x7e8/0x960 [ 277.166276][T23192] ? __rcu_read_unlock+0x4f/0x70 [ 277.166335][T23192] ? __fget_files+0x184/0x1c0 [ 277.166377][T23192] __secure_computing+0x82/0x150 [ 277.166412][T23192] syscall_trace_enter+0xcf/0x1e0 [ 277.166534][T23192] do_syscall_64+0xac/0x200 [ 277.166564][T23192] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 277.166650][T23192] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 277.166777][T23192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.166810][T23192] RIP: 0033:0x7f9641acd617 [ 277.166832][T23192] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.166859][T23192] RSP: 002b:00007f9640536e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 277.166929][T23192] RAX: ffffffffffffffda RBX: 00007f9640536ef0 RCX: 00007f9641acd617 [ 277.166948][T23192] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 277.166966][T23192] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 277.167025][T23192] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 277.167044][T23192] R13: 00007f9640536eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 277.167071][T23192] [ 277.169065][T21737] EXT4-fs error (device loop5): ext4_release_dquot:6979: comm kworker/u8:28: Failed to release dquot type 0 [ 277.289757][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5130'. [ 277.292679][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5130'. [ 277.427018][T23192] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 277.460817][T15241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.501576][T23232] serio: Serial port ptm0 [ 277.516987][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5134'. [ 277.540724][T12624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.582591][T23228] $H: renamed from bond0 (while UP) [ 277.597980][T23228] $H: entered promiscuous mode [ 277.603226][T23228] bond_slave_0: entered promiscuous mode [ 277.609151][T23228] bond_slave_1: entered promiscuous mode [ 277.618127][T23244] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.5134'. [ 277.700750][T23254] loop0: detected capacity change from 0 to 512 [ 277.709366][T23258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=23258 comm=syz.7.5141 [ 277.734984][T23254] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 277.755316][T23273] FAULT_INJECTION: forcing a failure. [ 277.755316][T23273] name failslab, interval 1, probability 0, space 0, times 0 [ 277.768186][T23273] CPU: 0 UID: 0 PID: 23273 Comm: syz.1.5142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.768219][T23273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.768233][T23273] Call Trace: [ 277.768240][T23273] [ 277.768310][T23273] __dump_stack+0x1d/0x30 [ 277.768393][T23273] dump_stack_lvl+0xe8/0x140 [ 277.768433][T23273] dump_stack+0x15/0x1b [ 277.768474][T23273] should_fail_ex+0x265/0x280 [ 277.768559][T23273] should_failslab+0x8c/0xb0 [ 277.768591][T23273] kmem_cache_alloc_noprof+0x50/0x480 [ 277.768625][T23273] ? security_inode_alloc+0x37/0x100 [ 277.768666][T23273] security_inode_alloc+0x37/0x100 [ 277.768753][T23273] inode_init_always_gfp+0x4b7/0x500 [ 277.768820][T23273] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 277.768847][T23273] alloc_inode+0x58/0x170 [ 277.768878][T23273] new_inode+0x1d/0xe0 [ 277.768981][T23273] shmem_get_inode+0x244/0x750 [ 277.769029][T23273] __shmem_file_setup+0x113/0x210 [ 277.769086][T23273] shmem_file_setup+0x3b/0x50 [ 277.769140][T23273] __se_sys_memfd_create+0x2c3/0x590 [ 277.769170][T23273] __x64_sys_memfd_create+0x31/0x40 [ 277.769199][T23273] x64_sys_call+0x2ac2/0x3000 [ 277.769241][T23273] do_syscall_64+0xd2/0x200 [ 277.769322][T23273] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 277.769349][T23273] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 277.769446][T23273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.769494][T23273] RIP: 0033:0x7f557694eec9 [ 277.769534][T23273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.769559][T23273] RSP: 002b:00007f55753aed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 277.769584][T23273] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007f557694eec9 [ 277.769601][T23273] RDX: 00007f55753aedec RSI: 0000000000000000 RDI: 00007f55769d2960 [ 277.769617][T23273] RBP: 00002000000005c0 R08: 00007f55753aeb07 R09: 0000000000000000 [ 277.769630][T23273] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 277.769695][T23273] R13: 00007f55753aedec R14: 00007f55753aedf0 R15: 00007ffcb2f93a38 [ 277.769715][T23273] [ 277.785490][T23254] EXT4-fs (loop0): mount failed [ 277.800614][T23275] loop3: detected capacity change from 0 to 512 [ 277.877642][T23282] FAULT_INJECTION: forcing a failure. [ 277.877642][T23282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.890775][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.894609][T23282] CPU: 1 UID: 0 PID: 23282 Comm: syz.1.5147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.894650][T23282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.894669][T23282] Call Trace: [ 277.894679][T23282] [ 277.894721][T23282] __dump_stack+0x1d/0x30 [ 277.894772][T23282] dump_stack_lvl+0xe8/0x140 [ 277.894848][T23282] dump_stack+0x15/0x1b [ 277.894892][T23282] should_fail_ex+0x265/0x280 [ 277.894937][T23282] should_fail+0xb/0x20 [ 277.895074][T23282] should_fail_usercopy+0x1a/0x20 [ 277.895120][T23282] _copy_from_iter+0xd2/0xe80 [ 277.895169][T23282] ? __build_skb_around+0x1ab/0x200 [ 277.895206][T23282] ? __alloc_skb+0x223/0x320 [ 277.895317][T23282] netlink_sendmsg+0x471/0x6b0 [ 277.895363][T23282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.895405][T23282] __sock_sendmsg+0x142/0x180 [ 277.895455][T23282] ____sys_sendmsg+0x31e/0x4e0 [ 277.895505][T23282] ___sys_sendmsg+0x17b/0x1d0 [ 277.895585][T23282] __x64_sys_sendmsg+0xd4/0x160 [ 277.895664][T23282] x64_sys_call+0x191e/0x3000 [ 277.895738][T23282] do_syscall_64+0xd2/0x200 [ 277.895769][T23282] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 277.895808][T23282] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 277.895884][T23282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.895971][T23282] RIP: 0033:0x7f557694eec9 [ 277.895995][T23282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.896022][T23282] RSP: 002b:00007f55753af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.896050][T23282] RAX: ffffffffffffffda RBX: 00007f5576ba5fa0 RCX: 00007f557694eec9 [ 277.896069][T23282] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 277.896087][T23282] RBP: 00007f55753af090 R08: 0000000000000000 R09: 0000000000000000 [ 277.896106][T23282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.896241][T23282] R13: 00007f5576ba6038 R14: 00007f5576ba5fa0 R15: 00007ffcb2f93a38 [ 277.896269][T23282] [ 277.948082][T23288] FAULT_INJECTION: forcing a failure. [ 277.948082][T23288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.955052][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 277.962924][T23288] CPU: 1 UID: 0 PID: 23288 Comm: syz.5.5148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.962956][T23288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.962973][T23288] Call Trace: [ 277.962981][T23288] [ 277.962990][T23288] __dump_stack+0x1d/0x30 [ 277.963042][T23288] dump_stack_lvl+0xe8/0x140 [ 277.963126][T23288] dump_stack+0x15/0x1b [ 277.963375][T23288] should_fail_ex+0x265/0x280 [ 277.963406][T23288] should_fail+0xb/0x20 [ 277.963444][T23288] should_fail_usercopy+0x1a/0x20 [ 277.963490][T23288] _copy_from_iter+0xd2/0xe80 [ 277.963545][T23288] ? __build_skb_around+0x1ab/0x200 [ 277.963582][T23288] ? __alloc_skb+0x223/0x320 [ 277.963622][T23288] netlink_sendmsg+0x471/0x6b0 [ 277.963667][T23288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.963722][T23288] __sock_sendmsg+0x142/0x180 [ 277.963751][T23288] ____sys_sendmsg+0x31e/0x4e0 [ 277.963797][T23288] ___sys_sendmsg+0x17b/0x1d0 [ 277.963928][T23288] __x64_sys_sendmsg+0xd4/0x160 [ 277.963976][T23288] x64_sys_call+0x191e/0x3000 [ 277.964007][T23288] do_syscall_64+0xd2/0x200 [ 277.964037][T23288] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 277.964132][T23288] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 277.964253][T23288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.964283][T23288] RIP: 0033:0x7f9641aceec9 [ 277.964306][T23288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.964393][T23288] RSP: 002b:00007f9640537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.964421][T23288] RAX: ffffffffffffffda RBX: 00007f9641d25fa0 RCX: 00007f9641aceec9 [ 277.964507][T23288] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 277.964526][T23288] RBP: 00007f9640537090 R08: 0000000000000000 R09: 0000000000000000 [ 277.964546][T23288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.964565][T23288] R13: 00007f9641d26038 R14: 00007f9641d25fa0 R15: 00007ffcd28f3968 [ 277.964594][T23288] [ 277.993938][T23275] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.006300][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 278.057254][T23275] EXT4-fs (loop3): shut down requested (1) [ 278.057789][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 278.064597][T23275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 278.067035][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 278.071817][T23275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 278.076975][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 278.082123][T23275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 278.086358][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 278.099489][T23275] binfmt_misc: register: failed to install interpreter file ./file2 [ 278.101240][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 278.201313][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 278.201334][ T29] audit: type=1326 audit(1759562136.234:28289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.202469][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 278.217201][ T29] audit: type=1400 audit(1759562136.254:28290): avc: denied { connect } for pid=23274 comm="syz.3.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 278.226590][ T4332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 278.247802][ T29] audit: type=1326 audit(1759562136.274:28291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.255371][ T4332] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 278.257232][ T29] audit: type=1326 audit(1759562136.274:28292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.528899][T23300] loop1: detected capacity change from 0 to 128 [ 278.533369][ T29] audit: type=1326 audit(1759562136.284:28293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.533819][ T29] audit: type=1326 audit(1759562136.304:28294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.708970][ T29] audit: type=1326 audit(1759562136.304:28295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.732689][ T29] audit: type=1326 audit(1759562136.314:28296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.733403][T23300] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 278.756454][ T29] audit: type=1326 audit(1759562136.314:28297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.756529][ T29] audit: type=1326 audit(1759562136.324:28298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.1.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 278.769399][T23316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=23316 comm=syz.0.5156 [ 278.790928][T23300] FAT-fs (loop1): Filesystem has been set read-only [ 278.856978][T14626] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 278.882455][T23324] __nla_validate_parse: 5 callbacks suppressed [ 278.882471][T23324] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5158'. [ 278.912124][T23300] syz.1.5152: attempt to access beyond end of device [ 278.912124][T23300] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 278.941259][T23300] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 278.951860][T23300] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 278.963498][T23331] GUP no longer grows the stack in syz.0.5157 (23331): 200000004000-200000008000 (200000002000) [ 278.974028][T23331] CPU: 0 UID: 0 PID: 23331 Comm: syz.0.5157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 278.974061][T23331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.974075][T23331] Call Trace: [ 278.974089][T23331] [ 278.974165][T23331] __dump_stack+0x1d/0x30 [ 278.974205][T23331] dump_stack_lvl+0xe8/0x140 [ 278.974285][T23331] dump_stack+0x15/0x1b [ 278.974319][T23331] __get_user_pages+0x1968/0x1ed0 [ 278.974353][T23331] get_user_pages_remote+0x1d5/0x6c0 [ 278.974467][T23331] __access_remote_vm+0x15c/0x590 [ 278.974503][T23331] access_remote_vm+0x32/0x40 [ 278.974533][T23331] proc_pid_cmdline_read+0x32b/0x6c0 [ 278.974575][T23331] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 278.974613][T23331] vfs_readv+0x3fb/0x690 [ 278.974693][T23331] __x64_sys_preadv+0xfd/0x1c0 [ 278.974733][T23331] x64_sys_call+0x282e/0x3000 [ 278.974816][T23331] do_syscall_64+0xd2/0x200 [ 278.974843][T23331] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.974912][T23331] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 278.975027][T23331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.975050][T23331] RIP: 0033:0x7fbcc94ceec9 [ 278.975078][T23331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.975111][T23331] RSP: 002b:00007fbcc7ef5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 278.975138][T23331] RAX: ffffffffffffffda RBX: 00007fbcc9726180 RCX: 00007fbcc94ceec9 [ 278.975155][T23331] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000005 [ 278.975230][T23331] RBP: 00007fbcc9551f91 R08: 0000000000000007 R09: 0000000000000000 [ 278.975247][T23331] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 278.975264][T23331] R13: 00007fbcc9726218 R14: 00007fbcc9726180 R15: 00007ffe37024ce8 [ 278.975289][T23331] [ 279.266820][T23349] FAULT_INJECTION: forcing a failure. [ 279.266820][T23349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.267681][T23352] FAULT_INJECTION: forcing a failure. [ 279.267681][T23352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.280089][T23349] CPU: 1 UID: 0 PID: 23349 Comm: syz.1.5164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 279.280125][T23349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.280216][T23349] Call Trace: [ 279.280223][T23349] [ 279.280236][T23349] __dump_stack+0x1d/0x30 [ 279.280377][T23349] dump_stack_lvl+0xe8/0x140 [ 279.280424][T23349] dump_stack+0x15/0x1b [ 279.280466][T23349] should_fail_ex+0x265/0x280 [ 279.280587][T23349] should_fail+0xb/0x20 [ 279.280658][T23349] should_fail_usercopy+0x1a/0x20 [ 279.280703][T23349] _copy_from_iter+0xd2/0xe80 [ 279.280751][T23349] ? __build_skb_around+0x1ab/0x200 [ 279.280789][T23349] ? __alloc_skb+0x223/0x320 [ 279.280861][T23349] netlink_sendmsg+0x471/0x6b0 [ 279.280918][T23349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.280991][T23349] __sock_sendmsg+0x142/0x180 [ 279.281039][T23349] ____sys_sendmsg+0x31e/0x4e0 [ 279.281083][T23349] ___sys_sendmsg+0x17b/0x1d0 [ 279.281219][T23349] __x64_sys_sendmsg+0xd4/0x160 [ 279.281266][T23349] x64_sys_call+0x191e/0x3000 [ 279.281295][T23349] do_syscall_64+0xd2/0x200 [ 279.281323][T23349] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.281403][T23349] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 279.281453][T23349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.281530][T23349] RIP: 0033:0x7f557694eec9 [ 279.281554][T23349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.281648][T23349] RSP: 002b:00007f55753af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.281675][T23349] RAX: ffffffffffffffda RBX: 00007f5576ba5fa0 RCX: 00007f557694eec9 [ 279.281735][T23349] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 279.281753][T23349] RBP: 00007f55753af090 R08: 0000000000000000 R09: 0000000000000000 [ 279.281773][T23349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.281798][T23349] R13: 00007f5576ba6038 R14: 00007f5576ba5fa0 R15: 00007ffcb2f93a38 [ 279.281859][T23349] [ 279.463732][T23362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8229 sclass=netlink_route_socket pid=23362 comm=syz.5.5167 [ 279.466583][T23352] CPU: 0 UID: 0 PID: 23352 Comm: syz.3.5163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 279.466623][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.466643][T23352] Call Trace: [ 279.466652][T23352] [ 279.466663][T23352] __dump_stack+0x1d/0x30 [ 279.466717][T23352] dump_stack_lvl+0xe8/0x140 [ 279.466783][T23352] dump_stack+0x15/0x1b [ 279.466828][T23352] should_fail_ex+0x265/0x280 [ 279.466870][T23352] should_fail+0xb/0x20 [ 279.466971][T23352] should_fail_usercopy+0x1a/0x20 [ 279.467016][T23352] _copy_to_user+0x20/0xa0 [ 279.467057][T23352] simple_read_from_buffer+0xb5/0x130 [ 279.467091][T23352] proc_fail_nth_read+0x10e/0x150 [ 279.467212][T23352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.467255][T23352] vfs_read+0x1a8/0x770 [ 279.467344][T23352] ? __rcu_read_unlock+0x4f/0x70 [ 279.467379][T23352] ? __fget_files+0x184/0x1c0 [ 279.467421][T23352] ksys_read+0xda/0x1a0 [ 279.467464][T23352] __x64_sys_read+0x40/0x50 [ 279.467497][T23352] x64_sys_call+0x27c0/0x3000 [ 279.467528][T23352] do_syscall_64+0xd2/0x200 [ 279.467557][T23352] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.467595][T23352] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 279.467701][T23352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.467784][T23352] RIP: 0033:0x7f5ba082d8dc [ 279.467806][T23352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 279.467832][T23352] RSP: 002b:00007f5b9f297030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.467859][T23352] RAX: ffffffffffffffda RBX: 00007f5ba0a85fa0 RCX: 00007f5ba082d8dc [ 279.467882][T23352] RDX: 000000000000000f RSI: 00007f5b9f2970a0 RDI: 0000000000000005 [ 279.467900][T23352] RBP: 00007f5b9f297090 R08: 0000000000000000 R09: 0000000000000000 [ 279.467918][T23352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.467934][T23352] R13: 00007f5ba0a86038 R14: 00007f5ba0a85fa0 R15: 00007ffe00cf2f38 [ 279.467963][T23352] [ 279.730157][T23377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5170'. [ 279.755376][T23377] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.5170'. [ 279.843003][T23395] loop5: detected capacity change from 0 to 512 [ 279.867672][T23395] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.5173: error while reading EA inode 32 err=-116 [ 279.899022][T23395] EXT4-fs (loop5): Remounting filesystem read-only [ 279.906911][T23395] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 279.917285][T23395] EXT4-fs (loop5): 1 orphan inode deleted [ 279.923971][T23395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.943469][T23408] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.5180'. [ 279.950955][T23410] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5181'. [ 280.120175][T15241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.150350][T23450] FAULT_INJECTION: forcing a failure. [ 280.150350][T23450] name failslab, interval 1, probability 0, space 0, times 0 [ 280.163240][T23450] CPU: 1 UID: 0 PID: 23450 Comm: syz.5.5186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 280.163323][T23450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.163339][T23450] Call Trace: [ 280.163347][T23450] [ 280.163357][T23450] __dump_stack+0x1d/0x30 [ 280.163474][T23450] dump_stack_lvl+0xe8/0x140 [ 280.163564][T23450] dump_stack+0x15/0x1b [ 280.163595][T23450] should_fail_ex+0x265/0x280 [ 280.163624][T23450] should_failslab+0x8c/0xb0 [ 280.163663][T23450] __kmalloc_noprof+0xa5/0x570 [ 280.163741][T23450] ? sock_kmalloc+0x85/0xc0 [ 280.163779][T23450] sock_kmalloc+0x85/0xc0 [ 280.163845][T23450] ipv6_renew_options+0x1fb/0x5f0 [ 280.163874][T23450] ipv6_set_opt_hdr+0x13b/0x600 [ 280.163911][T23450] do_ipv6_setsockopt+0x10b9/0x2160 [ 280.163947][T23450] ? kstrtoull+0x111/0x140 [ 280.164030][T23450] ? __rcu_read_unlock+0x4f/0x70 [ 280.164108][T23444] loop3: detected capacity change from 0 to 8192 [ 280.164129][T23450] ? avc_has_perm_noaudit+0x1b1/0x200 [ 280.164178][T23450] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 280.164213][T23450] ipv6_setsockopt+0x59/0x130 [ 280.164332][T23450] sctp_setsockopt+0x113/0xe30 [ 280.164450][T23450] sock_common_setsockopt+0x66/0x80 [ 280.164480][T23450] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 280.164548][T23450] __sys_setsockopt+0x181/0x200 [ 280.164590][T23450] __x64_sys_setsockopt+0x64/0x80 [ 280.164629][T23450] x64_sys_call+0x20ec/0x3000 [ 280.164746][T23450] do_syscall_64+0xd2/0x200 [ 280.164776][T23450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.164850][T23450] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 280.164898][T23450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.165052][T23450] RIP: 0033:0x7f9641aceec9 [ 280.165075][T23450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.165105][T23450] RSP: 002b:00007f9640537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.165133][T23450] RAX: ffffffffffffffda RBX: 00007f9641d25fa0 RCX: 00007f9641aceec9 [ 280.165152][T23450] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000005 [ 280.165170][T23450] RBP: 00007f9640537090 R08: 0000000000000018 R09: 0000000000000000 [ 280.165188][T23450] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 280.165206][T23450] R13: 00007f9641d26038 R14: 00007f9641d25fa0 R15: 00007ffcd28f3968 [ 280.165234][T23450] [ 280.221886][T23455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5187'. [ 280.258524][T23459] FAULT_INJECTION: forcing a failure. [ 280.258524][T23459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.289222][T23452] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.5187'. [ 280.290549][T23459] CPU: 0 UID: 0 PID: 23459 Comm: syz.5.5190 Not tainted syzkaller #0 PREEMPT(voluntary) [ 280.290589][T23459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.290609][T23459] Call Trace: [ 280.290618][T23459] [ 280.290680][T23459] __dump_stack+0x1d/0x30 [ 280.290757][T23459] dump_stack_lvl+0xe8/0x140 [ 280.290805][T23459] dump_stack+0x15/0x1b [ 280.290849][T23459] should_fail_ex+0x265/0x280 [ 280.290940][T23459] should_fail+0xb/0x20 [ 280.291016][T23459] should_fail_usercopy+0x1a/0x20 [ 280.291089][T23459] _copy_to_user+0x20/0xa0 [ 280.291196][T23459] simple_read_from_buffer+0xb5/0x130 [ 280.291300][T23459] proc_fail_nth_read+0x10e/0x150 [ 280.291342][T23459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.291383][T23459] vfs_read+0x1a8/0x770 [ 280.291486][T23459] ? __rcu_read_unlock+0x4f/0x70 [ 280.291519][T23459] ? __fget_files+0x184/0x1c0 [ 280.291555][T23459] ksys_read+0xda/0x1a0 [ 280.291580][T23459] __x64_sys_read+0x40/0x50 [ 280.291602][T23459] x64_sys_call+0x27c0/0x3000 [ 280.291676][T23459] do_syscall_64+0xd2/0x200 [ 280.291707][T23459] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.291747][T23459] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 280.291837][T23459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.291868][T23459] RIP: 0033:0x7f9641acd8dc [ 280.291902][T23459] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 280.291992][T23459] RSP: 002b:00007f9640537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.292019][T23459] RAX: ffffffffffffffda RBX: 00007f9641d25fa0 RCX: 00007f9641acd8dc [ 280.292038][T23459] RDX: 000000000000000f RSI: 00007f96405370a0 RDI: 0000000000000007 [ 280.292055][T23459] RBP: 00007f9640537090 R08: 0000000000000000 R09: 0000000000000000 [ 280.292075][T23459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.292093][T23459] R13: 00007f9641d26038 R14: 00007f9641d25fa0 R15: 00007ffcd28f3968 [ 280.292127][T23459] [ 280.309131][T23444] loop3: p2 p3 p4 [ 280.404386][T23467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5184'. [ 280.413583][T23444] loop3: p2 start 2936012800 is beyond EOD, [ 280.426195][T23467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5184'. [ 280.435410][T23444] truncated [ 280.435421][T23444] loop3: p3 start 1912602624 is beyond EOD, truncated [ 280.435442][T23444] loop3: p4 size 656640 extends beyond EOD, truncated [ 280.718290][T23466] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 280.733176][T23466] bond0 (unregistering): Released all slaves [ 280.830328][T23545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23545 comm=syz.0.5192 [ 280.857127][T23545] loop0: detected capacity change from 0 to 512 [ 280.870628][T23545] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 280.885907][T23545] EXT4-fs (loop0): mount failed [ 281.162792][T23568] FAULT_INJECTION: forcing a failure. [ 281.162792][T23568] name failslab, interval 1, probability 0, space 0, times 0 [ 281.175526][T23568] CPU: 1 UID: 0 PID: 23568 Comm: syz.7.5200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.175562][T23568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.175577][T23568] Call Trace: [ 281.175586][T23568] [ 281.175667][T23568] __dump_stack+0x1d/0x30 [ 281.175714][T23568] dump_stack_lvl+0xe8/0x140 [ 281.175788][T23568] dump_stack+0x15/0x1b [ 281.175822][T23568] should_fail_ex+0x265/0x280 [ 281.175856][T23568] ? __se_sys_mount+0xef/0x2e0 [ 281.175917][T23568] should_failslab+0x8c/0xb0 [ 281.175992][T23568] __kmalloc_cache_noprof+0x4c/0x4a0 [ 281.176099][T23568] ? memdup_user+0x99/0xd0 [ 281.176125][T23568] __se_sys_mount+0xef/0x2e0 [ 281.176149][T23568] ? fput+0x8f/0xc0 [ 281.176201][T23568] ? ksys_write+0x192/0x1a0 [ 281.176252][T23568] __x64_sys_mount+0x67/0x80 [ 281.176282][T23568] x64_sys_call+0x2b51/0x3000 [ 281.176365][T23568] do_syscall_64+0xd2/0x200 [ 281.176393][T23568] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 281.176431][T23568] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 281.176603][T23568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.176631][T23568] RIP: 0033:0x7fb9b37feec9 [ 281.176651][T23568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.176676][T23568] RSP: 002b:00007fb9b2267038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.176764][T23568] RAX: ffffffffffffffda RBX: 00007fb9b3a55fa0 RCX: 00007fb9b37feec9 [ 281.176781][T23568] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000200000000380 [ 281.176799][T23568] RBP: 00007fb9b2267090 R08: 0000200000000680 R09: 0000000000000000 [ 281.176816][T23568] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 281.176831][T23568] R13: 00007fb9b3a56038 R14: 00007fb9b3a55fa0 R15: 00007ffc70e67c58 [ 281.176851][T23568] [ 281.430102][T23584] tmpfs: Bad value for 'mpol' [ 281.437548][T23583] IPVS: length: 24 != 696 [ 281.577402][T23601] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 281.583998][T23601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 281.591772][T23601] vhci_hcd vhci_hcd.0: Device attached [ 281.898259][T23602] usbip_core: unknown command [ 281.903223][T23602] vhci_hcd: unknown pdu 0 [ 281.907651][T23602] usbip_core: unknown command [ 281.922524][T23631] loop0: detected capacity change from 0 to 512 [ 281.929408][T21773] vhci_hcd: stop threads [ 281.933717][T21773] vhci_hcd: release socket [ 281.938139][T21773] vhci_hcd: disconnect device [ 281.944622][T23631] EXT4-fs: Ignoring removed orlov option [ 281.985027][T23631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.030599][T23631] ext4 filesystem being mounted at /414/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.067882][T23638] FAULT_INJECTION: forcing a failure. [ 282.067882][T23638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.081146][T23638] CPU: 0 UID: 0 PID: 23638 Comm: syz.5.5215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.081177][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.081202][T23638] Call Trace: [ 282.081211][T23638] [ 282.081221][T23638] __dump_stack+0x1d/0x30 [ 282.081267][T23638] dump_stack_lvl+0xe8/0x140 [ 282.081356][T23638] dump_stack+0x15/0x1b [ 282.081414][T23638] should_fail_ex+0x265/0x280 [ 282.081506][T23638] should_fail+0xb/0x20 [ 282.081565][T23638] should_fail_usercopy+0x1a/0x20 [ 282.081593][T23638] _copy_to_user+0x20/0xa0 [ 282.081612][T23638] simple_read_from_buffer+0xb5/0x130 [ 282.081683][T23638] proc_fail_nth_read+0x10e/0x150 [ 282.081787][T23638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.081824][T23638] vfs_read+0x1a8/0x770 [ 282.081844][T23638] ? __rcu_read_unlock+0x4f/0x70 [ 282.081874][T23638] ? __fget_files+0x184/0x1c0 [ 282.081900][T23638] ksys_read+0xda/0x1a0 [ 282.081945][T23638] __x64_sys_read+0x40/0x50 [ 282.082019][T23638] x64_sys_call+0x27c0/0x3000 [ 282.082038][T23638] do_syscall_64+0xd2/0x200 [ 282.082057][T23638] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.082081][T23638] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 282.082214][T23638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.082312][T23638] RIP: 0033:0x7f9641acd8dc [ 282.082327][T23638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.082344][T23638] RSP: 002b:00007f9640537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.082361][T23638] RAX: ffffffffffffffda RBX: 00007f9641d25fa0 RCX: 00007f9641acd8dc [ 282.082373][T23638] RDX: 000000000000000f RSI: 00007f96405370a0 RDI: 0000000000000007 [ 282.082451][T23638] RBP: 00007f9640537090 R08: 0000000000000000 R09: 0000000000000000 [ 282.082470][T23638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.082482][T23638] R13: 00007f9641d26038 R14: 00007f9641d25fa0 R15: 00007ffcd28f3968 [ 282.082501][T23638] [ 282.355536][T13284] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.452094][T23665] tmpfs: Bad value for 'mpol' [ 282.490054][T23667] netlink: 'syz.7.5225': attribute type 1 has an invalid length. [ 282.497880][T23667] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5225'. [ 282.542790][ T1026] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 282.621577][T23699] FAULT_INJECTION: forcing a failure. [ 282.621577][T23699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.634853][T23699] CPU: 1 UID: 0 PID: 23699 Comm: syz.1.5231 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.634932][T23699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.634948][T23699] Call Trace: [ 282.634957][T23699] [ 282.634965][T23699] __dump_stack+0x1d/0x30 [ 282.635009][T23699] dump_stack_lvl+0xe8/0x140 [ 282.635046][T23699] dump_stack+0x15/0x1b [ 282.635140][T23699] should_fail_ex+0x265/0x280 [ 282.635189][T23699] should_fail+0xb/0x20 [ 282.635224][T23699] should_fail_usercopy+0x1a/0x20 [ 282.635266][T23699] _copy_from_iter+0xd2/0xe80 [ 282.635308][T23699] ? __build_skb_around+0x1ab/0x200 [ 282.635334][T23699] ? __alloc_skb+0x223/0x320 [ 282.635399][T23699] netlink_sendmsg+0x471/0x6b0 [ 282.635433][T23699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.635473][T23699] __sock_sendmsg+0x142/0x180 [ 282.635501][T23699] ____sys_sendmsg+0x31e/0x4e0 [ 282.635563][T23699] ___sys_sendmsg+0x17b/0x1d0 [ 282.635611][T23699] __x64_sys_sendmsg+0xd4/0x160 [ 282.635774][T23699] x64_sys_call+0x191e/0x3000 [ 282.635797][T23699] do_syscall_64+0xd2/0x200 [ 282.635821][T23699] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.635895][T23699] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 282.635932][T23699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.635955][T23699] RIP: 0033:0x7f557694eec9 [ 282.636029][T23699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.636049][T23699] RSP: 002b:00007f55753af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.636070][T23699] RAX: ffffffffffffffda RBX: 00007f5576ba5fa0 RCX: 00007f557694eec9 [ 282.636139][T23699] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 282.636153][T23699] RBP: 00007f55753af090 R08: 0000000000000000 R09: 0000000000000000 [ 282.636166][T23699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.636178][T23699] R13: 00007f5576ba6038 R14: 00007f5576ba5fa0 R15: 00007ffcb2f93a38 [ 282.636204][T23699] [ 282.638729][T23703] netlink: 'syz.0.5232': attribute type 7 has an invalid length. [ 282.697457][T23705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23705 comm=syz.1.5233 [ 282.710451][T23701] SELinux: failed to load policy [ 282.729378][T23703] netlink: 'syz.0.5232': attribute type 3 has an invalid length. [ 282.827324][T23713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=23713 comm=syz.0.5232 [ 283.005726][T23748] loop3: detected capacity change from 0 to 512 [ 283.013099][T23748] EXT4-fs (loop3): inodes count not valid: 23 vs 32 [ 283.122489][ T3399] hid_parser_main: 81 callbacks suppressed [ 283.122519][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.135949][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.143394][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.150954][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.158706][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.166454][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.173893][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.181357][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.189018][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.196614][ T3399] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 283.246824][T23773] loop3: detected capacity change from 0 to 512 [ 283.248566][ T3399] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 283.267928][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 283.268006][ T29] audit: type=1326 audit(1759562141.304:28655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.298529][T23773] EXT4-fs: Ignoring removed orlov option [ 283.304951][T23775] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 283.307306][ T29] audit: type=1326 audit(1759562141.304:28656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.336282][ T29] audit: type=1326 audit(1759562141.304:28657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.360037][ T29] audit: type=1326 audit(1759562141.304:28658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.383790][ T29] audit: type=1326 audit(1759562141.304:28659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.407542][ T29] audit: type=1326 audit(1759562141.304:28660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.431146][ T29] audit: type=1326 audit(1759562141.304:28661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.431717][T23759] FAULT_INJECTION: forcing a failure. [ 283.431717][T23759] name failslab, interval 1, probability 0, space 0, times 0 [ 283.454937][ T29] audit: type=1326 audit(1759562141.304:28662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.467535][T23759] CPU: 1 UID: 0 PID: 23759 Comm: syz.0.5247 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.467569][T23759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.467585][T23759] Call Trace: [ 283.467594][T23759] [ 283.467605][T23759] __dump_stack+0x1d/0x30 [ 283.467671][T23759] dump_stack_lvl+0xe8/0x140 [ 283.467722][T23759] dump_stack+0x15/0x1b [ 283.467768][T23759] should_fail_ex+0x265/0x280 [ 283.467884][T23759] ? call_usermodehelper_setup+0x72/0x190 [ 283.467932][T23759] should_failslab+0x8c/0xb0 [ 283.467957][T23759] ? __pfx_cleanup_uevent_env+0x10/0x10 [ 283.468065][T23759] __kmalloc_cache_noprof+0x4c/0x4a0 [ 283.468108][T23759] ? __pfx_cleanup_uevent_env+0x10/0x10 [ 283.468157][T23759] call_usermodehelper_setup+0x72/0x190 [ 283.468259][T23759] kobject_uevent_env+0x537/0x570 [ 283.468301][T23759] ? device_pm_check_callbacks+0x683/0x6a0 [ 283.468350][T23759] kobject_uevent+0x1d/0x30 [ 283.468455][T23759] device_del+0x710/0x790 [ 283.468500][T23759] device_destroy+0x66/0xa0 [ 283.468550][T23759] drop_ref+0xbf/0x1a0 [ 283.468584][T23759] hidraw_disconnect+0x39/0x50 [ 283.468619][T23759] hid_device_remove+0x158/0x210 [ 283.468696][T23759] ? __pfx_hid_device_remove+0x10/0x10 [ 283.468804][T23759] device_release_driver_internal+0x2bb/0x4e0 [ 283.468844][T23759] device_release_driver+0x19/0x20 [ 283.468878][T23759] bus_remove_device+0x26d/0x290 [ 283.468933][T23759] device_del+0x36a/0x790 [ 283.468968][T23759] hid_destroy_device+0x54/0x120 [ 283.468994][T23759] uhid_dev_destroy+0x6a/0xb0 [ 283.469032][T23759] uhid_char_write+0x3aa/0x650 [ 283.469111][T23759] ? __pfx_uhid_char_write+0x10/0x10 [ 283.469170][T23759] vfs_write+0x269/0x960 [ 283.469201][T23759] ? __rcu_read_unlock+0x4f/0x70 [ 283.469235][T23759] ? __fget_files+0x184/0x1c0 [ 283.469308][T23759] ksys_write+0xda/0x1a0 [ 283.469528][T23759] __x64_sys_write+0x40/0x50 [ 283.469560][T23759] x64_sys_call+0x2802/0x3000 [ 283.469665][T23759] do_syscall_64+0xd2/0x200 [ 283.469694][T23759] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 283.469730][T23759] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 283.469851][T23759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.469881][T23759] RIP: 0033:0x7fbcc94ceec9 [ 283.469904][T23759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.469931][T23759] RSP: 002b:00007fbcc7f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.469957][T23759] RAX: ffffffffffffffda RBX: 00007fbcc9725fa0 RCX: 00007fbcc94ceec9 [ 283.469975][T23759] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 283.470047][T23759] RBP: 00007fbcc7f37090 R08: 0000000000000000 R09: 0000000000000000 [ 283.470064][T23759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.470081][T23759] R13: 00007fbcc9726038 R14: 00007fbcc9725fa0 R15: 00007ffe37024ce8 [ 283.470109][T23759] [ 283.555545][T23800] FAULT_INJECTION: forcing a failure. [ 283.555545][T23800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.556806][ T29] audit: type=1326 audit(1759562141.304:28663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.562393][T23800] CPU: 1 UID: 0 PID: 23800 Comm: syz.5.5259 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.562502][T23800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.562521][T23800] Call Trace: [ 283.562532][T23800] [ 283.562542][T23800] __dump_stack+0x1d/0x30 [ 283.562593][T23800] dump_stack_lvl+0xe8/0x140 [ 283.562641][T23800] dump_stack+0x15/0x1b [ 283.562684][T23800] should_fail_ex+0x265/0x280 [ 283.562726][T23800] should_fail+0xb/0x20 [ 283.562819][T23800] should_fail_usercopy+0x1a/0x20 [ 283.562940][T23800] _copy_from_iter+0xd2/0xe80 [ 283.562988][T23800] ? __build_skb_around+0x1ab/0x200 [ 283.563075][T23800] ? __alloc_skb+0x223/0x320 [ 283.563111][T23800] netlink_sendmsg+0x471/0x6b0 [ 283.563155][T23800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.563258][T23800] __sock_sendmsg+0x142/0x180 [ 283.563301][T23800] ____sys_sendmsg+0x345/0x4e0 [ 283.563346][T23800] ___sys_sendmsg+0x17b/0x1d0 [ 283.563405][T23800] __sys_sendmmsg+0x178/0x300 [ 283.563508][T23800] __x64_sys_sendmmsg+0x57/0x70 [ 283.563547][T23800] x64_sys_call+0x1c4a/0x3000 [ 283.563576][T23800] do_syscall_64+0xd2/0x200 [ 283.563626][T23800] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 283.563668][T23800] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 283.563716][T23800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.563790][T23800] RIP: 0033:0x7f9641aceec9 [ 283.563813][T23800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.563838][T23800] RSP: 002b:00007f9640537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 283.563865][T23800] RAX: ffffffffffffffda RBX: 00007f9641d25fa0 RCX: 00007f9641aceec9 [ 283.563883][T23800] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 283.563952][T23800] RBP: 00007f9640537090 R08: 0000000000000000 R09: 0000000000000000 [ 283.563970][T23800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.563989][T23800] R13: 00007f9641d26038 R14: 00007f9641d25fa0 R15: 00007ffcd28f3968 [ 283.564016][T23800] [ 283.565380][T23795] FAULT_INJECTION: forcing a failure. [ 283.565380][T23795] name failslab, interval 1, probability 0, space 0, times 0 [ 283.567963][ T29] audit: type=1326 audit(1759562141.304:28664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557694eec9 code=0x7ffc0000 [ 283.573044][T23795] CPU: 1 UID: 0 PID: 23795 Comm: syz.1.5258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.573082][T23795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.573103][T23795] Call Trace: [ 283.573112][T23795] [ 283.573125][T23795] __dump_stack+0x1d/0x30 [ 283.573174][T23795] dump_stack_lvl+0xe8/0x140 [ 283.573231][T23795] dump_stack+0x15/0x1b [ 283.573275][T23795] should_fail_ex+0x265/0x280 [ 283.573320][T23795] should_failslab+0x8c/0xb0 [ 283.573356][T23795] kmem_cache_alloc_noprof+0x50/0x480 [ 283.573392][T23795] ? mas_alloc_nodes+0x1a2/0x210 [ 283.573424][T23795] mas_alloc_nodes+0x1a2/0x210 [ 283.573451][T23795] mas_preallocate+0x2ca/0x510 [ 283.573486][T23795] mmap_region+0xbd4/0x1620 [ 283.573552][T23795] do_mmap+0x9b3/0xbe0 [ 283.573600][T23795] vm_mmap_pgoff+0x17a/0x2e0 [ 283.573642][T23795] ksys_mmap_pgoff+0xc2/0x310 [ 283.573685][T23795] ? __x64_sys_mmap+0x49/0x70 [ 283.573716][T23795] x64_sys_call+0x14a3/0x3000 [ 283.573746][T23795] do_syscall_64+0xd2/0x200 [ 283.573776][T23795] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 283.573813][T23795] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 283.573863][T23795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.573893][T23795] RIP: 0033:0x7f557694ef03 [ 283.573914][T23795] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 283.573941][T23795] RSP: 002b:00007f55753aee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 283.573967][T23795] RAX: ffffffffffffffda RBX: 0000000000000448 RCX: 00007f557694ef03 [ 283.573986][T23795] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 283.574003][T23795] RBP: 0000200000000882 R08: 00000000ffffffff R09: 0000000000000000 [ 283.574021][T23795] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 283.574039][T23795] R13: 00007f55753aeef0 R14: 00007f55753aeeb0 R15: 0000200000000180 [ 283.574066][T23795] [ 283.644625][T23773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.262272][T23773] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.294848][T23773] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5251: bg 0: block 328: padding at end of block bitmap is not set [ 284.326355][T14626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.379881][T23824] __nla_validate_parse: 7 callbacks suppressed [ 284.379897][T23824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5265'. [ 284.408203][T23824] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.5265'. [ 284.421623][T23831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5269'. [ 284.453772][T23829] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 284.460437][T23829] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 284.467957][T23829] vhci_hcd vhci_hcd.0: Device attached [ 284.504839][T23842] netlink: 'syz.1.5272': attribute type 1 has an invalid length. [ 284.512686][T23842] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5272'. [ 284.545358][T23848] loop0: detected capacity change from 0 to 1024 [ 284.557259][T23835] loop7: detected capacity change from 0 to 128 [ 284.561099][T23848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.590062][T23848] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.5273: Allocating blocks 497-513 which overlap fs metadata [ 284.605556][T23832] vhci_hcd: connection closed [ 284.605744][T21725] vhci_hcd: stop threads [ 284.614805][T21725] vhci_hcd: release socket [ 284.619330][T21725] vhci_hcd: disconnect device [ 284.625154][T23848] EXT4-fs (loop0): pa ffff888106e83a80: logic 256, phys. 369, len 9 [ 284.633248][T23848] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 284.633691][T23854] FAULT_INJECTION: forcing a failure. [ 284.633691][T23854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.646780][T23848] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: [ 284.656384][T23854] CPU: 1 UID: 0 PID: 23854 Comm: syz.1.5274 Not tainted syzkaller #0 PREEMPT(voluntary) [ 284.656419][T23854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 284.656511][T23854] Call Trace: [ 284.656523][T23854] [ 284.656534][T23854] __dump_stack+0x1d/0x30 [ 284.656588][T23854] dump_stack_lvl+0xe8/0x140 [ 284.656690][T23854] dump_stack+0x15/0x1b [ 284.656730][T23854] should_fail_ex+0x265/0x280 [ 284.656764][T23854] should_fail+0xb/0x20 [ 284.656845][T23854] should_fail_usercopy+0x1a/0x20 [ 284.656890][T23854] _copy_from_user+0x1c/0xb0 [ 284.656920][T23854] simple_transaction_get+0xe2/0x130 [ 284.657017][T23854] selinux_transaction_write+0x9d/0x110 [ 284.657108][T23854] ? __pfx_selinux_transaction_write+0x10/0x10 [ 284.657151][T23854] vfs_write+0x269/0x960 [ 284.657185][T23854] ? __rcu_read_unlock+0x4f/0x70 [ 284.657220][T23854] ? __fget_files+0x184/0x1c0 [ 284.657289][T23854] ksys_write+0xda/0x1a0 [ 284.657325][T23854] __x64_sys_write+0x40/0x50 [ 284.657358][T23854] x64_sys_call+0x2802/0x3000 [ 284.657389][T23854] do_syscall_64+0xd2/0x200 [ 284.657420][T23854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 284.657459][T23854] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 284.657509][T23854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.657563][T23854] RIP: 0033:0x7f557694eec9 [ 284.657587][T23854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.657615][T23854] RSP: 002b:00007f55753af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.657655][T23854] RAX: ffffffffffffffda RBX: 00007f5576ba5fa0 RCX: 00007f557694eec9 [ 284.657674][T23854] RDX: 0000000000000046 RSI: 00002000000002c0 RDI: 0000000000000006 [ 284.657710][T23854] RBP: 00007f55753af090 R08: 0000000000000000 R09: 0000000000000000 [ 284.657728][T23854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.657788][T23854] R13: 00007f5576ba6038 R14: 00007f5576ba5fa0 R15: 00007ffcb2f93a38 [ 284.657817][T23854] [ 284.677915][T23835] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 284.684961][T23848] block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 284.920993][T23835] FAT-fs (loop7): Filesystem has been set read-only [ 284.921354][ T3399] vhci_hcd: vhci_device speed not set [ 284.921793][T23835] syz.7.5268: attempt to access beyond end of device [ 284.921793][T23835] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 284.922353][T23835] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 284.922563][T23835] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 284.924180][T13284] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.992016][T23875] loop0: detected capacity change from 0 to 512 [ 285.024584][T23875] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5275: bad orphan inode 11862016 [ 285.024893][T23880] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5280'. [ 285.025307][T23875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 285.025457][T23875] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.068662][T23885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5281'. [ 285.106766][T13284] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 285.118720][T23885] netlink: 14528 bytes leftover after parsing attributes in process `syz.7.5281'. [ 285.142131][T23894] tmpfs: Bad value for 'mpol' [ 285.158681][T23860] loop1: detected capacity change from 0 to 32768 [ 285.234721][T23899] FAULT_INJECTION: forcing a failure. [ 285.234721][T23899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.247864][T23899] CPU: 1 UID: 0 PID: 23899 Comm: syz.3.5285 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.247902][T23899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.247920][T23899] Call Trace: [ 285.247928][T23899] [ 285.247938][T23899] __dump_stack+0x1d/0x30 [ 285.247995][T23899] dump_stack_lvl+0xe8/0x140 [ 285.248048][T23899] dump_stack+0x15/0x1b [ 285.248089][T23899] should_fail_ex+0x265/0x280 [ 285.248136][T23899] should_fail+0xb/0x20 [ 285.248172][T23899] should_fail_usercopy+0x1a/0x20 [ 285.248215][T23899] _copy_from_user+0x1c/0xb0 [ 285.248279][T23899] ___sys_sendmsg+0xc1/0x1d0 [ 285.248378][T23899] __x64_sys_sendmsg+0xd4/0x160 [ 285.248413][T23899] x64_sys_call+0x191e/0x3000 [ 285.248439][T23899] do_syscall_64+0xd2/0x200 [ 285.248473][T23899] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 285.248525][T23899] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 285.248568][T23899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.248683][T23899] RIP: 0033:0x7f5ba082eec9 [ 285.248704][T23899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.248730][T23899] RSP: 002b:00007f5b9f297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.248831][T23899] RAX: ffffffffffffffda RBX: 00007f5ba0a85fa0 RCX: 00007f5ba082eec9 [ 285.248850][T23899] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 285.248867][T23899] RBP: 00007f5b9f297090 R08: 0000000000000000 R09: 0000000000000000 [ 285.248884][T23899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.248901][T23899] R13: 00007f5ba0a86038 R14: 00007f5ba0a85fa0 R15: 00007ffe00cf2f38 [ 285.248927][T23899] [ 285.449878][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5286'. [ 285.524378][T23916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5291'. [ 285.564114][T23921] FAULT_INJECTION: forcing a failure. [ 285.564114][T23921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.577348][T23921] CPU: 0 UID: 0 PID: 23921 Comm: syz.5.5293 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.577396][T23921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.577413][T23921] Call Trace: [ 285.577422][T23921] [ 285.577431][T23921] __dump_stack+0x1d/0x30 [ 285.577495][T23921] dump_stack_lvl+0xe8/0x140 [ 285.577588][T23921] dump_stack+0x15/0x1b [ 285.577622][T23921] should_fail_ex+0x265/0x280 [ 285.577717][T23921] should_fail+0xb/0x20 [ 285.577751][T23921] should_fail_usercopy+0x1a/0x20 [ 285.577791][T23921] _copy_from_iter+0xd2/0xe80 [ 285.577898][T23921] ? __build_skb_around+0x1ab/0x200 [ 285.577931][T23921] ? __alloc_skb+0x223/0x320 [ 285.577963][T23921] netlink_sendmsg+0x471/0x6b0 [ 285.578070][T23921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.578104][T23921] __sock_sendmsg+0x142/0x180 [ 285.578133][T23921] ____sys_sendmsg+0x31e/0x4e0 [ 285.578228][T23921] ___sys_sendmsg+0x17b/0x1d0 [ 285.578273][T23921] __x64_sys_sendmsg+0xd4/0x160 [ 285.578311][T23921] x64_sys_call+0x191e/0x3000 [ 285.578389][T23921] do_syscall_64+0xd2/0x200 [ 285.578412][T23921] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 285.578440][T23921] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 285.578475][T23921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.578559][T23921] RIP: 0033:0x7f9641aceec9 [ 285.578576][T23921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.578595][T23921] RSP: 002b:00007f9640537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.578615][T23921] RAX: ffffffffffffffda RBX: 00007f9641d25fa0 RCX: 00007f9641aceec9 [ 285.578628][T23921] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 285.578709][T23921] RBP: 00007f9640537090 R08: 0000000000000000 R09: 0000000000000000 [ 285.578722][T23921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.578734][T23921] R13: 00007f9641d26038 R14: 00007f9641d25fa0 R15: 00007ffcd28f3968 [ 285.578754][T23921] [ 285.786900][T23923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5294'. [ 285.799065][T23925] FAULT_INJECTION: forcing a failure. [ 285.799065][T23925] name failslab, interval 1, probability 0, space 0, times 0 [ 285.811769][T23925] CPU: 1 UID: 0 PID: 23925 Comm: syz.3.5295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.811802][T23925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.811817][T23925] Call Trace: [ 285.811825][T23925] [ 285.811881][T23925] __dump_stack+0x1d/0x30 [ 285.811924][T23925] dump_stack_lvl+0xe8/0x140 [ 285.811965][T23925] dump_stack+0x15/0x1b [ 285.812040][T23925] should_fail_ex+0x265/0x280 [ 285.812074][T23925] should_failslab+0x8c/0xb0 [ 285.812100][T23925] kmem_cache_alloc_noprof+0x50/0x480 [ 285.812156][T23925] ? skb_clone+0x151/0x1f0 [ 285.812198][T23925] skb_clone+0x151/0x1f0 [ 285.812234][T23925] __netlink_deliver_tap+0x2c9/0x500 [ 285.812320][T23925] netlink_dump+0x836/0x8a0 [ 285.812357][T23925] __netlink_dump_start+0x43e/0x520 [ 285.812458][T23925] ? __pfx_rtnl_dump_all+0x10/0x10 [ 285.812478][T23925] rtnetlink_rcv_msg+0x552/0x6d0 [ 285.812512][T23925] ? __pfx_rtnl_dump_all+0x10/0x10 [ 285.812532][T23925] ? __pfx_rtnl_dumpit+0x10/0x10 [ 285.812578][T23925] ? __pfx_rtnl_dump_all+0x10/0x10 [ 285.812599][T23925] netlink_rcv_skb+0x120/0x220 [ 285.812662][T23925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.812776][T23925] rtnetlink_rcv+0x1c/0x30 [ 285.812809][T23925] netlink_unicast+0x5c0/0x690 [ 285.812837][T23925] netlink_sendmsg+0x58b/0x6b0 [ 285.812918][T23925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.812951][T23925] __sock_sendmsg+0x142/0x180 [ 285.812976][T23925] sock_write_iter+0x1a7/0x1f0 [ 285.813085][T23925] ? __pfx_sock_write_iter+0x10/0x10 [ 285.813119][T23925] vfs_write+0x52a/0x960 [ 285.813150][T23925] ksys_write+0xda/0x1a0 [ 285.813220][T23925] __x64_sys_write+0x40/0x50 [ 285.813246][T23925] x64_sys_call+0x2802/0x3000 [ 285.813268][T23925] do_syscall_64+0xd2/0x200 [ 285.813290][T23925] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 285.813335][T23925] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 285.813373][T23925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.813396][T23925] RIP: 0033:0x7f5ba082eec9 [ 285.813435][T23925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.813455][T23925] RSP: 002b:00007f5b9f297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.813475][T23925] RAX: ffffffffffffffda RBX: 00007f5ba0a85fa0 RCX: 00007f5ba082eec9 [ 285.813489][T23925] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 285.813502][T23925] RBP: 00007f5b9f297090 R08: 0000000000000000 R09: 0000000000000000 [ 285.813515][T23925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.813606][T23925] R13: 00007f5ba0a86038 R14: 00007f5ba0a85fa0 R15: 00007ffe00cf2f38 [ 285.813626][T23925] [ 286.087690][T23929] netlink: 'syz.5.5296': attribute type 1 has an invalid length. [ 286.127099][T23925] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.134475][T23925] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.144633][T23925] $H: left promiscuous mode [ 286.149605][T23925] bond_slave_0: left promiscuous mode [ 286.155422][T23925] bond_slave_1: left promiscuous mode [ 286.175149][T23925] wg2: left promiscuous mode [ 286.217691][T23925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.228697][T23925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.274060][T21725] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.293550][T21725] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.305974][T23951] loop7: detected capacity change from 0 to 164 [ 286.326084][T21725] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.337555][T23951] syz.7.5304: attempt to access beyond end of device [ 286.337555][T23951] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 286.340407][T21725] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.352637][T23951] syz.7.5304: attempt to access beyond end of device [ 286.352637][T23951] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 286.380598][T23959] netlink: 'syz.3.5307': attribute type 1 has an invalid length. [ 286.527448][T23981] netlink: 'syz.7.5316': attribute type 21 has an invalid length. [ 286.539274][T23990] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 286.545833][T23990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 286.553316][T23990] vhci_hcd vhci_hcd.0: Device attached [ 286.589377][T23991] vhci_hcd: connection closed [ 286.590119][T21773] vhci_hcd: stop threads [ 286.599338][T21773] vhci_hcd: release socket [ 286.603777][T21773] vhci_hcd: disconnect device [ 286.610990][T23980] veth0_macvtap: left promiscuous mode [ 286.682291][T24010] FAULT_INJECTION: forcing a failure. [ 286.682291][T24010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.695570][T24010] CPU: 1 UID: 0 PID: 24010 Comm: syz.5.5322 Not tainted syzkaller #0 PREEMPT(voluntary) [ 286.695674][T24010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.695691][T24010] Call Trace: [ 286.695699][T24010] [ 286.695707][T24010] __dump_stack+0x1d/0x30 [ 286.695764][T24010] dump_stack_lvl+0xe8/0x140 [ 286.695853][T24010] dump_stack+0x15/0x1b [ 286.695884][T24010] should_fail_ex+0x265/0x280 [ 286.695914][T24010] should_fail+0xb/0x20 [ 286.695974][T24010] should_fail_usercopy+0x1a/0x20 [ 286.696003][T24010] _copy_to_user+0x20/0xa0 [ 286.696074][T24010] simple_read_from_buffer+0xb5/0x130 [ 286.696097][T24010] proc_fail_nth_read+0x10e/0x150 [ 286.696141][T24010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.696168][T24010] vfs_read+0x1a8/0x770 [ 286.696267][T24010] ? __rcu_read_unlock+0x4f/0x70 [ 286.696348][T24010] ? __fget_files+0x184/0x1c0 [ 286.696371][T24010] ? finish_task_switch+0xad/0x2b0 [ 286.696395][T24010] ksys_read+0xda/0x1a0 [ 286.696423][T24010] __x64_sys_read+0x40/0x50 [ 286.696454][T24010] x64_sys_call+0x27c0/0x3000 [ 286.696573][T24010] do_syscall_64+0xd2/0x200 [ 286.696646][T24010] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 286.696672][T24010] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 286.696707][T24010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.696777][T24010] RIP: 0033:0x7f9641acd8dc [ 286.696793][T24010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.696810][T24010] RSP: 002b:00007f9640537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.696838][T24010] RAX: ffffffffffffffda RBX: 00007f9641d25fa0 RCX: 00007f9641acd8dc [ 286.696880][T24010] RDX: 000000000000000f RSI: 00007f96405370a0 RDI: 0000000000000007 [ 286.696891][T24010] RBP: 00007f9640537090 R08: 0000000000000000 R09: 0000000000000000 [ 286.696903][T24010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.696926][T24010] R13: 00007f9641d26038 R14: 00007f9641d25fa0 R15: 00007ffcd28f3968 [ 286.696951][T24010] [ 286.940776][T24018] loop3: detected capacity change from 0 to 512 [ 286.961477][T24027] SELinux: Context : *ȇ [ 286.961477][T24027] ?5H Er?amNoYYJ39RuJM?v;NmD Vc2cO˦rXI{ +c is not valid (left unmapped). [ 286.981003][T24018] loop3: detected capacity change from 0 to 776 [ 286.993622][T24018] loop3: detected capacity change from 0 to 776 [ 287.006203][T24018] loop3: detected capacity change from 0 to 776 [ 287.018141][T24018] loop3: detected capacity change from 0 to 776 [ 287.029937][T24018] loop3: detected capacity change from 0 to 776 [ 287.043083][T24018] loop3: detected capacity change from 0 to 776 [ 287.054789][T24018] loop3: detected capacity change from 0 to 776 [ 287.066360][T24018] loop3: detected capacity change from 0 to 776 [ 287.079814][T24018] loop3: detected capacity change from 0 to 776 [ 287.092029][T24018] loop3: detected capacity change from 0 to 776 [ 287.113496][T24018] loop3: detected capacity change from 0 to 776 [ 287.127114][T24018] loop3: detected capacity change from 0 to 776 [ 287.141951][T24018] loop3: detected capacity change from 0 to 776 [ 287.144226][T24066] loop0: detected capacity change from 0 to 2048 [ 287.154899][T24076] loop7: detected capacity change from 0 to 512 [ 287.162958][T24076] EXT4-fs: Ignoring removed orlov option [ 287.168946][T24018] loop3: detected capacity change from 0 to 776 [ 287.180294][T24018] loop3: detected capacity change from 0 to 776 [ 287.189271][T24076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.202939][T24091] SELinux: Context is not valid (left unmapped). [ 287.209884][T24018] loop3: detected capacity change from 0 to 776 [ 287.222086][T24018] loop3: detected capacity change from 0 to 776 [ 287.222171][T24066] loop0: p2 p3 p7 [ 287.235004][T24018] loop3: detected capacity change from 0 to 776 [ 287.238532][T24076] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.247510][T24018] loop3: detected capacity change from 0 to 776 [ 287.264141][T24018] loop3: detected capacity change from 0 to 776 [ 287.280043][T24018] loop3: detected capacity change from 0 to 776 [ 287.292116][T24018] loop3: detected capacity change from 0 to 776 [ 287.305686][T24018] loop3: detected capacity change from 0 to 776 [ 287.312302][T24120] IPVS: length: 24 != 696 [ 287.318177][T24018] loop3: detected capacity change from 0 to 776 [ 287.330010][T24018] loop3: detected capacity change from 0 to 776 [ 287.338502][T24076] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5332: bg 0: block 328: padding at end of block bitmap is not set [ 287.341996][T24018] loop3: detected capacity change from 0 to 776 [ 287.364857][T24018] loop3: detected capacity change from 0 to 776 [ 287.377350][T24018] loop3: detected capacity change from 0 to 776 [ 287.399029][T24018] loop3: detected capacity change from 0 to 776 [ 287.411241][T22637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.412002][T24018] loop3: detected capacity change from 0 to 776 [ 287.444467][T24018] loop3: detected capacity change from 0 to 776 [ 287.460150][T24018] loop3: detected capacity change from 0 to 776 [ 287.594599][T24177] loop5: detected capacity change from 0 to 8192 [ 287.912209][T24217] FAULT_INJECTION: forcing a failure. [ 287.912209][T24217] name failslab, interval 1, probability 0, space 0, times 0 [ 287.924900][T24217] CPU: 0 UID: 0 PID: 24217 Comm: wޡ Not tainted syzkaller #0 PREEMPT(voluntary) [ 287.924998][T24217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.925011][T24217] Call Trace: [ 287.925020][T24217] [ 287.925028][T24217] __dump_stack+0x1d/0x30 [ 287.925152][T24217] dump_stack_lvl+0xe8/0x140 [ 287.925257][T24217] dump_stack+0x15/0x1b [ 287.925292][T24217] should_fail_ex+0x265/0x280 [ 287.925357][T24217] ? alloc_mnt_ns+0x6f/0x220 [ 287.925439][T24217] should_failslab+0x8c/0xb0 [ 287.925586][T24217] __kmalloc_cache_noprof+0x4c/0x4a0 [ 287.925624][T24217] alloc_mnt_ns+0x6f/0x220 [ 287.925673][T24217] copy_mnt_ns+0xc4/0x610 [ 287.925710][T24217] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 287.925743][T24217] ? create_new_namespaces+0x3c/0x3d0 [ 287.925782][T24217] create_new_namespaces+0x83/0x3d0 [ 287.925892][T24217] unshare_nsproxy_namespaces+0xe8/0x120 [ 287.925984][T24217] ksys_unshare+0x3d0/0x6d0 [ 287.926050][T24217] ? ksys_write+0x15f/0x1a0 [ 287.926108][T24217] __x64_sys_unshare+0x1f/0x30 [ 287.926145][T24217] x64_sys_call+0x2915/0x3000 [ 287.926247][T24217] do_syscall_64+0xd2/0x200 [ 287.926280][T24217] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 287.926311][T24217] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 287.926428][T24217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.926457][T24217] RIP: 0033:0x7f5ba082eec9 [ 287.926477][T24217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.926502][T24217] RSP: 002b:00007f5b9f297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 287.926564][T24217] RAX: ffffffffffffffda RBX: 00007f5ba0a85fa0 RCX: 00007f5ba082eec9 [ 287.926581][T24217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 287.926598][T24217] RBP: 00007f5b9f297090 R08: 0000000000000000 R09: 0000000000000000 [ 287.926613][T24217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.926629][T24217] R13: 00007f5ba0a86038 R14: 00007f5ba0a85fa0 R15: 00007ffe00cf2f38 [ 287.926658][T24217] [ 288.282299][T24245] netlink: 'syz.1.5354': attribute type 1 has an invalid length. [ 288.293794][T24240] loop3: detected capacity change from 0 to 2048 [ 288.317285][T24245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.331947][T24240] GPT:first_usable_lbas don't match. [ 288.337287][T24240] GPT:34 != 290 [ 288.340860][T24240] GPT: Use GNU Parted to correct GPT errors. [ 288.347094][T24240] loop3: p1 p2 p3 [ 288.407690][T24245] bond0 (unregistering): Released all slaves [ 288.445833][ T29] kauditd_printk_skb: 527 callbacks suppressed [ 288.445851][ T29] audit: type=1326 audit(1759562146.484:29192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.497287][ T29] audit: type=1326 audit(1759562146.514:29193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.521167][ T29] audit: type=1326 audit(1759562146.514:29194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.544889][ T29] audit: type=1326 audit(1759562146.524:29195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.558690][T24329] lo speed is unknown, defaulting to 1000 [ 288.568550][ T29] audit: type=1326 audit(1759562146.524:29196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.597928][ T29] audit: type=1326 audit(1759562146.524:29197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.621784][ T29] audit: type=1326 audit(1759562146.524:29198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.645525][ T29] audit: type=1326 audit(1759562146.524:29199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.658596][T24329] lo speed is unknown, defaulting to 1000 [ 288.669324][ T29] audit: type=1326 audit(1759562146.524:29200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.698696][ T29] audit: type=1326 audit(1759562146.534:29201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.5.5357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9641aceec9 code=0x7ffc0000 [ 288.726920][T24329] lo speed is unknown, defaulting to 1000 [ 288.819566][T24329] infiniband sz1: set active [ 288.824322][T24329] infiniband sz1: added lo [ 288.829097][ T3419] lo speed is unknown, defaulting to 1000 [ 288.875728][T24323] loop0: detected capacity change from 0 to 128 [ 288.900776][T24329] RDS/IB: sz1: added [ 288.909266][T24329] lo speed is unknown, defaulting to 1000 [ 288.960988][T24323] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 288.961085][T24345] ================================================================== [ 288.961131][T24345] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 288.961199][T24345] [ 288.961206][T24345] write to 0xffffffff86883d08 of 8 bytes by task 24323 on cpu 0: [ 288.961227][T24345] data_alloc+0x27d/0x2b0 [ 288.961266][T24345] prb_reserve+0x808/0xaf0 [ 288.961306][T24345] vprintk_store+0x56d/0x860 [ 288.961329][T24345] vprintk_emit+0x10d/0x580 [ 288.961354][T24345] vprintk_default+0x26/0x30 [ 288.961379][T24345] vprintk+0x1d/0x30 [ 288.961412][T24345] _printk+0x79/0xa0 [ 288.961443][T24345] _fat_msg+0xa4/0xd0 [ 288.961482][T24345] __fat_fs_error+0x178/0x1d0 [ 288.961507][T24345] fat_ent_read+0x55d/0x5c0 [ 288.961527][T24345] fat_get_cluster+0x4b2/0x7b0 [ 288.961567][T24345] fat_get_mapped_cluster+0xe4/0x240 [ 288.961602][T24345] fat_bmap+0x254/0x280 [ 288.961641][T24345] fat_get_block+0xd3/0x5e0 [ 288.961669][T24345] do_mpage_readpage+0x52c/0xe20 [ 288.961710][T24345] mpage_readahead+0x196/0x2b0 [ 288.961749][T24345] fat_readahead+0x1c/0x30 [ 288.961791][T24345] read_pages+0xa3/0x480 [ 288.970116][T24323] FAT-fs (loop0): Filesystem has been set read-only [ 288.977700][T24345] page_cache_ra_unbounded+0x34e/0x450 [ 288.977746][T24345] page_cache_ra_order+0x145/0x220 [ 288.977782][T24345] do_sync_mmap_readahead+0x315/0x320 [ 288.977831][T24345] filemap_fault+0x333/0xb60 [ 288.977873][T24345] __do_fault+0xbc/0x200 [ 288.977894][T24345] handle_mm_fault+0xf78/0x2be0 [ 288.977920][T24345] __get_user_pages+0x102a/0x1ed0 [ 288.977944][T24345] __mm_populate+0x243/0x3a0 [ 288.977963][T24345] vm_mmap_pgoff+0x232/0x2e0 [ 288.977992][T24345] ksys_mmap_pgoff+0x268/0x310 [ 288.978030][T24345] x64_sys_call+0x14a3/0x3000 [ 288.978057][T24345] do_syscall_64+0xd2/0x200 [ 288.978079][T24345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.978107][T24345] [ 288.978115][T24345] read to 0xffffffff86883d08 of 8 bytes by task 24345 on cpu 1: [ 288.978135][T24345] prb_reserve+0x221/0xaf0 [ 288.985741][T24323] syz.0.5359: attempt to access beyond end of device [ 288.985741][T24323] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 288.987043][T24345] vprintk_store+0x56d/0x860 [ 288.987072][T24345] vprintk_emit+0x10d/0x580 [ 288.987093][T24345] vprintk_default+0x26/0x30 [ 288.987119][T24345] vprintk+0x1d/0x30 [ 288.987153][T24345] _printk+0x79/0xa0 [ 288.987187][T24345] p9_client_create+0x4d1/0xbc0 [ 288.987228][T24345] v9fs_session_init+0xf7/0xde0 [ 288.987258][T24345] v9fs_mount+0x67/0x5c0 [ 288.987293][T24345] legacy_get_tree+0x78/0xd0 [ 288.987324][T24345] vfs_get_tree+0x57/0x1d0 [ 288.987348][T24345] do_new_mount+0x24d/0x660 [ 288.987377][T24345] path_mount+0x4a5/0xb70 [ 288.987403][T24345] __se_sys_mount+0x28c/0x2e0 [ 288.987444][T24345] __x64_sys_mount+0x67/0x80 [ 288.987471][T24345] x64_sys_call+0x2b51/0x3000 [ 288.987497][T24345] do_syscall_64+0xd2/0x200 [ 288.987523][T24345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.987549][T24345] [ 288.987554][T24345] value changed: 0x000000000001b838 -> 0x00000000000b6920 [ 288.987569][T24345] [ 288.987574][T24345] Reported by Kernel Concurrency Sanitizer on: [ 288.987588][T24345] CPU: 1 UID: 0 PID: 24345 Comm: syz.1.5363 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.987621][T24345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.987635][T24345] ================================================================== [ 288.960942][T24345] 9pnet: Could not find request transport:  [ 288.997844][T24323] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 289.064175][T24348] FAULT_INJECTION: forcing a failure. [ 289.064175][T24348] name failslab, interval 1, probability 0, space 0, times 0 [ 289.068371][T24323] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 289.072624][T24348] CPU: 1 UID: 0 PID: 24348 Comm: syz.5.5364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 289.072675][T24348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.072774][T24348] Call Trace: [ 289.072782][T24348] [ 289.072791][T24348] __dump_stack+0x1d/0x30 [ 289.072866][T24348] dump_stack_lvl+0xe8/0x140 [ 289.072928][T24348] dump_stack+0x15/0x1b [ 289.072968][T24348] should_fail_ex+0x265/0x280 [ 289.073073][T24348] ? nft_target_select_ops+0x1ff/0x320 [ 289.073099][T24348] should_failslab+0x8c/0xb0 [ 289.073150][T24348] __kmalloc_cache_noprof+0x4c/0x4a0 [ 289.073190][T24348] nft_target_select_ops+0x1ff/0x320 [ 289.073233][T24348] nf_tables_expr_parse+0x3c6/0x4e0 [ 289.073278][T24348] nf_tables_newrule+0xce1/0x17b0 [ 289.073382][T24348] ? __nla_parse+0x40/0x60 [ 289.073421][T24348] nfnetlink_rcv+0xbc9/0x16c0 [ 289.073449][T24348] ? kmem_cache_free+0xe4/0x3d0 [ 289.073679][T24348] netlink_unicast+0x5c0/0x690 [ 289.073721][T24348] netlink_sendmsg+0x58b/0x6b0 [ 289.073766][T24348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.073835][T24348] __sock_sendmsg+0x142/0x180 [ 289.073865][T24348] ____sys_sendmsg+0x31e/0x4e0 [ 289.073977][T24348] ___sys_sendmsg+0x17b/0x1d0 [ 289.074035][T24348] __x64_sys_sendmsg+0xd4/0x160 [ 289.074161][T24348] x64_sys_call+0x191e/0x3000 [ 289.074190][T24348] do_syscall_64+0xd2/0x200 [ 289.074218][T24348] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 289.074257][T24348] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 289.074366][T24348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.074397][T24348] RIP: 0033:0x7f9641aceec9 [ 289.074419][T24348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.074533][T24348] RSP: 002b:00007f9640537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.074631][T24348] RAX: ffffffffffffffda RBX: 00007f9641d25fa0 RCX: 00007f9641aceec9 [ 289.074649][T24348] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 289.074667][T24348] RBP: 00007f9640537090 R08: 0000000000000000 R09: 0000000000000000 [ 289.074722][T24348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.074740][T24348] R13: 00007f9641d26038 R14: 00007f9641d25fa0 R15: 00007ffcd28f3968 [ 289.074767][T24348] [ 289.084468][T24329] lo speed is unknown, defaulting to 1000 [ 289.222651][T24345] FAULT_INJECTION: forcing a failure. [ 289.222651][T24345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.396163][T24329] lo speed is unknown, defaulting to 1000 [ 289.399739][T24345] CPU: 0 UID: 0 PID: 24345 Comm: syz.1.5363 Not tainted syzkaller #0 PREEMPT(voluntary) [ 289.399770][T24345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.399787][T24345] Call Trace: [ 289.399793][T24345] [ 289.399801][T24345] __dump_stack+0x1d/0x30 [ 289.399929][T24345] dump_stack_lvl+0xe8/0x140 [ 289.399979][T24345] dump_stack+0x15/0x1b [ 289.400034][T24345] should_fail_ex+0x265/0x280 [ 289.400086][T24345] should_fail_alloc_page+0xf2/0x100 [ 289.400135][T24345] __alloc_frozen_pages_noprof+0xff/0x360 [ 289.400256][T24345] alloc_pages_mpol+0xb3/0x260 [ 289.400306][T24345] alloc_pages_noprof+0x90/0x130 [ 289.400355][T24345] pte_alloc_one+0x1e/0xd0 [ 289.400390][T24345] __pte_alloc+0x32/0x290 [ 289.400465][T24345] handle_mm_fault+0x1c18/0x2be0 [ 289.400500][T24345] ? vma_start_read+0x141/0x1f0 [ 289.400612][T24345] do_user_addr_fault+0x630/0x1080 [ 289.400644][T24345] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 289.400682][T24345] exc_page_fault+0x62/0xa0 [ 289.400728][T24345] asm_exc_page_fault+0x26/0x30 [ 289.400842][T24345] RIP: 0033:0x7f5576810ca6 [ 289.400943][T24345] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 289.400969][T24345] RSP: 002b:00007f55753ae4a0 EFLAGS: 00010246 [ 289.401019][T24345] RAX: 0000000000000001 RBX: 00007f55753ae540 RCX: 0000000000000101 [ 289.401038][T24345] RDX: 0000000000000030 RSI: 0000000000000001 RDI: 00007f55753ae5e0 [ 289.401056][T24345] RBP: 0000000000000102 R08: 00007f556cf6e000 R09: 0000000000000000 [ 289.401075][T24345] R10: 0000000000000000 R11: 00007f55753ae550 R12: 0000000000000001 [ 289.401093][T24345] R13: 00007f55769edb80 R14: 0000000000000000 R15: 00007f55753ae5e0 [ 289.401193][T24345] [ 289.401210][T24345] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 289.490810][T24329] lo speed is unknown, defaulting to 1000 [ 289.520109][T24345] loop1: detected capacity change from 0 to 1024 [ 289.638132][T24329] lo speed is unknown, defaulting to 1000 [ 289.661559][T24345] EXT4-fs: Ignoring removed nobh option [ 289.661588][T24345] EXT4-fs: Ignoring removed bh option [ 289.703907][T24329] lo speed is unknown, defaulting to 1000 [ 289.800537][T24345] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 289.852887][T24345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.873406][T24345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.