last executing test programs: 1m50.665257066s ago: executing program 3 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1m49.661502446s ago: executing program 3 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m49.544767038s ago: executing program 3 (id=323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0x7}}}], 0x28}, 0x0) 1m49.522197309s ago: executing program 3 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1m49.279519434s ago: executing program 3 (id=327): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x44) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2], 0x6) 1m49.175762875s ago: executing program 2 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}}, 0x0) 1m49.121257897s ago: executing program 2 (id=333): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x7}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x7) write$ppp(r0, &(0x7f00000002c0)="4fa1efc4c7aa", 0x6) 1m48.506059108s ago: executing program 2 (id=335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0x7}}}], 0x28}, 0x0) 1m48.505559749s ago: executing program 2 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1m48.503959339s ago: executing program 32 (id=336): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0) 1m48.346312562s ago: executing program 2 (id=341): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 1m47.480336318s ago: executing program 3 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x2040400) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000010080000000100000080000000be088fd3fbd39518acf0bebed6544cd6251090dbe7ecef14900a88a9cdaa89f5d5b63b16920142c7fd040b1a0c26f3567d169c578d2f5ab66709b39c2a31b517736e3fe5a880b77f149889581f8b69b28a05da8b373f79c4789d4ded3dfe554e34179b99cf5a647624d45e453e55efde86c3f2be62a57ce487797eaa8e33bc2e3add13341b56bba89db7cc1b7a6694e22206", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="0600000000000000000000000000000000000000546a29d64b54b73a00d1de1416afa33fb295ccd7e240dd3f1938d1f42e82851fca7741b2555a929d9d30c975524204b8658f0a164126c518e87449", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) 1m47.466441969s ago: executing program 33 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x2040400) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000010080000000100000080000000be088fd3fbd39518acf0bebed6544cd6251090dbe7ecef14900a88a9cdaa89f5d5b63b16920142c7fd040b1a0c26f3567d169c578d2f5ab66709b39c2a31b517736e3fe5a880b77f149889581f8b69b28a05da8b373f79c4789d4ded3dfe554e34179b99cf5a647624d45e453e55efde86c3f2be62a57ce487797eaa8e33bc2e3add13341b56bba89db7cc1b7a6694e22206", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="0600000000000000000000000000000000000000546a29d64b54b73a00d1de1416afa33fb295ccd7e240dd3f1938d1f42e82851fca7741b2555a929d9d30c975524204b8658f0a164126c518e87449", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) 1m46.552044867s ago: executing program 2 (id=352): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x364}], 0x1) 1m46.551892407s ago: executing program 34 (id=352): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x364}], 0x1) 1m30.900739941s ago: executing program 5 (id=577): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x1, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x4402, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0) 1m30.900131442s ago: executing program 5 (id=579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) unshare(0x22020600) 1m30.836942223s ago: executing program 5 (id=582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@fmask}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@utf8}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@utf8}, {@shortname_winnt}, {}]}, 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000072"], 0x0) 1m30.782354864s ago: executing program 5 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1m30.212453384s ago: executing program 5 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m28.42849512s ago: executing program 5 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000007c0), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r3 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x184) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0xc00, 0x0, 0x0) socketpair(0xf, 0x4, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) 1m28.39206589s ago: executing program 35 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000007c0), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r3 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x184) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0xc00, 0x0, 0x0) socketpair(0xf, 0x4, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) 1m23.827426349s ago: executing program 1 (id=687): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4624, 0xf, @loopback, 0x6}, {0xa, 0x4e24, 0x80, @empty, 0x4}, r1, 0x8a0c}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r1, 0xeb1}}, 0x10) 1m23.827040569s ago: executing program 1 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m23.75597568s ago: executing program 1 (id=689): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, r1, 0x8}}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) 1m22.930990537s ago: executing program 1 (id=704): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x114}], 0x1, 0x0, 0x0, 0x4000000}, 0x814) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_clone(0x20b28000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket(0xa, 0xa, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback, 0x200}, {0xa, 0x0, 0x0, @mcast2}, 0x201, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, 0x5c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000400)=@sg0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x20a8002, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10001, 0x400, 0x0, 0x0, 0x1, 0x11, "0e36af413bb901527fe4d0ce5d295c3676345a41499dd6aac69c4730251a0ca0ea0000000000000000000c00002000", "038447c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x10) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000340)={0xa000001c}) vmsplice(r5, &(0x7f0000001b80)=[{&(0x7f00000020c0)='+', 0x1}], 0x1, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30, 0x180}], 0x1, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000040)={r11, 0x55b7}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000080)={r11, 0xf42e, 0x10}, 0xc) 1m21.811932258s ago: executing program 1 (id=711): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m20.17193417s ago: executing program 1 (id=731): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, r1, 0x8}}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x10000, 0x2}, &(0x7f0000000340), &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) 1m20.16761335s ago: executing program 36 (id=731): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, r1, 0x8}}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x10000, 0x2}, &(0x7f0000000340), &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) 54.252909294s ago: executing program 6 (id=1137): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x2, &(0x7f0000000180)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0x40189206, &(0x7f0000000180)) io_submit(r1, 0x0, 0x0) 54.184058086s ago: executing program 6 (id=1140): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x108026, 0x4, 0x0, 0x1, 0x9, 0x8020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='afs_cm_no_server\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="090000000100000000000000", @ANYBLOB="11d1eccf5ae270d0e787ce19ec01af1355609ba1ae2d766cbe2a96be00f8ff43e5e98688a54fcbc3bd8dc9b60faf6f9439409f7dbd620ad50f02bacdfc198091d7c9d7525a8566519967d544ae047fc63261c739e85311d3ab741928383cccb43a20b5cc45c0efe65b188c435838df6d054bf82080c49deddc16bf1d1cb4a62d4c762d7c538c5dc8faf508e0aeb040f047cfbebb15d224cff7c0bef331dc1bfc00846cefe42da315adc640ae145b68ec2f62a928115da67f3d3b90959d97493c2d5fa3095cfbd657d96cd7077aa8a341", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7bb7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0xfe, 0x7, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xca02, 0x0, 0x8, 0x9, 0x0, 0x5}, 0x0, 0xff00000000000001, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f00004bc000/0x4000)=nil, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 52.331650792s ago: executing program 6 (id=1151): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") 52.119675156s ago: executing program 6 (id=1156): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000), 0x10) sendto$l2tp(r0, &(0x7f0000000080)="e5786a0d000000000000c83b", 0xe, 0x0, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000122, 0x0) 52.119315256s ago: executing program 6 (id=1157): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x401, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x70bd28, 0x25dfdffb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) 51.193446794s ago: executing program 6 (id=1162): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x44090}, 0xc4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x44090}, 0xc4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r10 = socket$inet(0x10, 0x3, 0x0) r11 = memfd_secret(0x0) futimesat(r11, 0x0, 0x0) ioctl$KDSIGACCEPT(r11, 0x4b4e, 0x2c) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ec0)={0x438, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x30c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(&}\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8313}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#&}\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "7be74e6b8032d020ef3f78f2a4d80c3e37021e08d53acc527b10c8acd1c0b8179f1b4d6c4e6aa8d5222af22fa55681cbc0183714be7950bd6e7d4c29228369a9f0066ddeee25b528b9729ff5bcf08f45eb9230f17c3425c123e329545cfb4f944a30835761bfcde80a0b0dd073343711e4a6b38cf53ad65516f13b814a136f0281636b4f8df5cb9d11eb83b10c785731ea156c6b2dfeb05f75c9f3fc387aa6faa90e9a91809aa8dc8bf4cf966a2974788b75686ead0ae8b0d816c9f59bb3bc62b990c0956bf972a72ad8b19ecdd20075f37cbfe6fc7ab0f837e9b401d76dc57d0f1ebc0fd63d24"}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "e8d3a698d719fd23d05322b0c73e0b29e45c753e1a0368cc4d6cbbeb839548ed1336e93a05327572de9b4884d768f196c86266fd36189ba014cd1f61c5207f73f86660e42f6aecbd7ebcd1b15fff70ef71f59be6c5b265e269753e37abb284db8c30a84c53daa3e78ae10a63c57977ec65e74486515e0078ce0ad24e5028fb6156a536bc0fd634fea491d28b1a90ec4e4cadde670f4e57589ce840d33d84"}, @ETHTOOL_A_BITSET_MASK={0x57, 0x5, "09206e1039f59338d75684e59d9b8fc559271816af504534c2fd5de1e29fd3cfad955401c9b8688384f688bf82bafe17524fc53dee6bf2d899bf6e8a2bb55beec32988817c1d126b2bb348f64216bc86711aa0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x8b, 0x5, "4f84cc6a636de76f9cf091820e807cf36c6e5e04ff2cf5ac5aa4fc0e5cfb70a5c9e7c3980ee80aa8eed949c623c24ce56737b897ec6e73b4c5291d8979788e14e74f231ac6fb203586ebee822417af82e4fe7b2af91a8933bd099f939f7c0c87913173ac8f9abf5ad6b8aad04adbb81d4ff9a31e47a459343b452086e316fcfabc1a6d4451097b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r15}, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r16, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 36.134700207s ago: executing program 37 (id=1162): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x44090}, 0xc4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x44090}, 0xc4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r10 = socket$inet(0x10, 0x3, 0x0) r11 = memfd_secret(0x0) futimesat(r11, 0x0, 0x0) ioctl$KDSIGACCEPT(r11, 0x4b4e, 0x2c) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ec0)={0x438, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x30c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(&}\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8313}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#&}\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "7be74e6b8032d020ef3f78f2a4d80c3e37021e08d53acc527b10c8acd1c0b8179f1b4d6c4e6aa8d5222af22fa55681cbc0183714be7950bd6e7d4c29228369a9f0066ddeee25b528b9729ff5bcf08f45eb9230f17c3425c123e329545cfb4f944a30835761bfcde80a0b0dd073343711e4a6b38cf53ad65516f13b814a136f0281636b4f8df5cb9d11eb83b10c785731ea156c6b2dfeb05f75c9f3fc387aa6faa90e9a91809aa8dc8bf4cf966a2974788b75686ead0ae8b0d816c9f59bb3bc62b990c0956bf972a72ad8b19ecdd20075f37cbfe6fc7ab0f837e9b401d76dc57d0f1ebc0fd63d24"}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "e8d3a698d719fd23d05322b0c73e0b29e45c753e1a0368cc4d6cbbeb839548ed1336e93a05327572de9b4884d768f196c86266fd36189ba014cd1f61c5207f73f86660e42f6aecbd7ebcd1b15fff70ef71f59be6c5b265e269753e37abb284db8c30a84c53daa3e78ae10a63c57977ec65e74486515e0078ce0ad24e5028fb6156a536bc0fd634fea491d28b1a90ec4e4cadde670f4e57589ce840d33d84"}, @ETHTOOL_A_BITSET_MASK={0x57, 0x5, "09206e1039f59338d75684e59d9b8fc559271816af504534c2fd5de1e29fd3cfad955401c9b8688384f688bf82bafe17524fc53dee6bf2d899bf6e8a2bb55beec32988817c1d126b2bb348f64216bc86711aa0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x8b, 0x5, "4f84cc6a636de76f9cf091820e807cf36c6e5e04ff2cf5ac5aa4fc0e5cfb70a5c9e7c3980ee80aa8eed949c623c24ce56737b897ec6e73b4c5291d8979788e14e74f231ac6fb203586ebee822417af82e4fe7b2af91a8933bd099f939f7c0c87913173ac8f9abf5ad6b8aad04adbb81d4ff9a31e47a459343b452086e316fcfabc1a6d4451097b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x10}, 0x20004084) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r15}, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r16, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.539255541s ago: executing program 7 (id=1809): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002200004000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf25030000001c0006800500020001000000060001000a00000008000300e0000002"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000240)='./file1\x00', r3, 0x4000, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfe88155e8450897c8697000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x580, 0x0) close(r12) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.411757204s ago: executing program 7 (id=1813): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@delalloc}, {@sysvgroups}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x3}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbf4, &(0x7f0000001740)="$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") syz_open_dev$hiddev(0x0, 0x4, 0x400000) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 2.0520208s ago: executing program 4 (id=1825): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRESOCT=r1, @ANYRES16=r3, @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket(0x11, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) syz_io_uring_setup(0x6001f8c, &(0x7f0000000580)={0x0, 0xd60, 0x0, 0x2}, &(0x7f0000000400), &(0x7f0000000480)) r10 = syz_io_uring_setup(0x25ef, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r13, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r13, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r10, 0x6686, 0x2936, 0x28, 0x0, 0x0) 2.04555552s ago: executing program 0 (id=1826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0x0) 1.989190141s ago: executing program 0 (id=1829): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='fdinfo\x00') (fail_nth: 12) 1.715842277s ago: executing program 9 (id=1830): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a242) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000240)={{0x2, 0x1, 0x9, 0x1, 0xfffffffe}}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) 1.708789517s ago: executing program 8 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) (fail_nth: 2) 1.696615357s ago: executing program 0 (id=1832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000001200)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r7 = gettid() getsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000240)=""/43, &(0x7f0000000400)=0x2b) r8 = gettid() r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tkill(r7, 0x12) tkill(r8, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r11, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2800009, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES8=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscache']) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r12, 0x44, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/41, 0x29}}, 0x10) 1.348297324s ago: executing program 4 (id=1833): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000440)='./file2\x00', 0x2800, 0x34) sendfile(r2, r3, 0x0, 0x1000000201005) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x700000000000000) execveat(r3, &(0x7f0000000040)='./file2\x00', &(0x7f0000000280)={[&(0x7f00000000c0)='data_err=abort', &(0x7f0000000100)='bh', &(0x7f0000000140)='user_xattr', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='dioread_nolock']}, &(0x7f0000000380)={[&(0x7f00000002c0)='data_err=ignore', &(0x7f0000000300)=')G$/\x00', &(0x7f0000000340)='user_xattr']}, 0x1000) 1.347815004s ago: executing program 8 (id=1834): prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x101, 0x0, 0x7, 0x6, 0x3, 0x3, 0xec, 0x5, 0x5, 0x8, 0x1c, 0x1e, 0x0, 0xe9, 0x4, 0x6}}]}}, @TCA_RATE={0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r7 = dup(r1) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='gred\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r6, r7, 0x5, 0x0, 0x5}, 0x50) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in=@local, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0x6, 0x3, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x80000000}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3503, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000800) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.332877524s ago: executing program 8 (id=1835): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x7}, {0x6, 0x60, 0x0, 0x2}]}) write$ppp(r0, &(0x7f00000002c0)="4fa1efc4c7aa", 0x6) 1.289044905s ago: executing program 8 (id=1836): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.288765445s ago: executing program 4 (id=1837): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x401, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x70bd28, 0x25dfdffb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) 1.288293365s ago: executing program 7 (id=1838): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x1, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x41000, 0x2a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0) 1.174480947s ago: executing program 7 (id=1839): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x1, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0) 1.150813568s ago: executing program 7 (id=1840): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe000000000000000000000000000000000500000000000000000000000000000000000000000000000000ffffffff"]) 1.089050069s ago: executing program 8 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 719.798806ms ago: executing program 7 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100090000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 508.07012ms ago: executing program 9 (id=1843): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 391.224612ms ago: executing program 0 (id=1844): socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000802b71d8c7c7db5a424f8ff413e3d913af20e0300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x80}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15b752a6c5715903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0x100000000}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142c00000000001d430000000000007a0a00fe0000001f6114340000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000240)=@cgroup={0x2, r2, 0xc6bd}, 0x10}}, 0x20) pipe2$9p(&(0x7f0000000000), 0x0) stat(0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x749680) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0xfffffff8) 360.580993ms ago: executing program 9 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) cachestat(r2, &(0x7f0000000000)={0x3, 0x5}, &(0x7f00000000c0), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x178}, 0x18) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 283.178574ms ago: executing program 4 (id=1846): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x7}, {0x6, 0x60, 0x0, 0x2}]}) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="4fa1efc4c7aa", 0x6) 241.912355ms ago: executing program 0 (id=1847): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000024001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 241.026726ms ago: executing program 8 (id=1848): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@delalloc}, {@sysvgroups}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x3}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbf4, &(0x7f0000001740)="$eJzs3M9rHNcdAPDvjFa/LLUrl1LqXqxSig1t17KLTG0KtYtLLz0U2h4LFvLKCK1/IKm4knVYtf9AaXsu9NjGJPgQn31JINdcEucak0PABMVKSAjJhtkfsiLtSrK9qxHS5wNv5715M/u+3xlWMw/tbABH1nj2kkaciIirSUSxuT6NiIF6bSii2thufW1l+tO1lekkarU/fJREEhFP11amW++VNJcjzcZQRLz96yS+8/ft4y4sLc9NVSrl+Wb7zOKN22cWlpZ/Nntj6nr5evnm2fO/mDw3eX7iwuRL51hoLj9//9KDT3742w+qX/z/y3sf/6tWq9VitNm3OY9uGY/xjWOyNZ6pbg+Wk75mPpvzTAq77JT2OCgAADpKN93DfS+K0RfPbt6K8cY7uQYHAAAAdEWtL6IGAAAAHHKJ+T8AAAAccq3vATxdW5lulXy/kbC/nlyOiLFG/uvN0ugpRLW+HIr+iDj2NInNj7Umjd1e2nhEPH7vwmtZiR49h7yT6mpEfL/d+U/q+Y/Vn+Lenn8aERNdGH98S/ug5f/Tgc75X+rC+HnnD8DR9PBy40K2/fqXbtz/RJvrX6HNtetF5H39a93/rW+7/2vlP1x/Prbd/d/v9zjG3f/9506nviz/Xz74zautko2fLV8qqefwZDXiB4V2+Scb5z/pkP/VPY5R/OpOuVNf3vnX/htxKtrn35K0+32igWbnhckzM7OV8kTjte0Yq29NvtJp/Lzzz87/sQ7573b+b+9xjD9fuXK/U9/u+acfDiR/rNdah/yvU4uL82cjBpLfbV9/rvlAewetbVrvkeV/+kc7ff7b558NUW0eh2wusNpcZu2/bRnzV/fuvr5T/tncL8/zf+0Fz/8/9jjGj9/85+lOPwm1ef6blWz8x0ljLgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlEjEaSljbqaVoqRYxExHfjWFq5tbD4k5lbf7l5LeuLGIv+dGa2Up6IiGKjnWTts/X6s/a5Le2fR8TxiPh3cbjeLk3fqlzLO3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2jETEaCRpKSLSiFgvpmmplHdUAAAAQNeN5R0AAAAA0HPb5v+FfOIAAAAAesf//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOix4ycfPkoionpxuF4yA82+/lwjA3otzTsAIDd9eQcA5KaQdwBAbp5zju92AQ6hZJf+oY49g12PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICD69SJh4+SiKheHK6XzECzr7/tHif3MTqgl9LdNhjenziA/de3U2dh/+IA9t8uH3FXfzjE2s/xgaMk2aV/6Nk21W/2DPYsJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOntF6SdJSRKT1epqWShHfioix6E9mZivliYj4dkS8W+wfzNqDeQcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA1y0sLc9NVSrl+eHmivmNNUemknxWqx2AMHpaSSPiAISRVaoRkd/ofxo5EAehbSU5GGE0Kjn/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBcLS8tzU5VKeX7hBXYe6kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG4WlpbnpiqV8ny7SqQRm9bc33HjzpW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9fBwAA///UnQhj") syz_open_dev$hiddev(0x0, 0x4, 0x400000) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 187.769186ms ago: executing program 4 (id=1849): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="27050200160014000600002f86dd", 0xe}], 0x1}, 0x0) 187.417746ms ago: executing program 9 (id=1850): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x1, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x41000, 0x2a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0) 164.532087ms ago: executing program 9 (id=1851): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x1, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}}, 0x0) 140.694847ms ago: executing program 9 (id=1852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='tlb_flush\x00', r0}, 0x18) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0xfffffffffffffffc, 0xa9efed481a231550) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x500a, 0x4, 0x400, 0x0, 0x2, 0x2, 0x6, 0x0, 0x200000, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) syz_clone(0x40049480, 0x0, 0x0, 0x0, 0x0, 0x0) 91.723678ms ago: executing program 4 (id=1853): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a242) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000240)={{0x2, 0x1, 0x9, 0x1, 0xfffffffe}}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) 0s ago: executing program 0 (id=1854): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_create(0x0, 0x0) ftruncate(r2, 0x7000000) preadv2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000480)={@empty, @multicast2, 0x0, "4c8ca9712edd2e56afc4facc2de2605e9f6f4626b8c92a0f0904e528559bcb73", 0x5, 0xb43, 0x7fff, 0x3}, 0x3c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, r9, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r9, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000640)=[{0x4, 0x0, [0x800, 0xb7, 0xfffffaf2, 0x40d4, 0xd9, 0x7f, 0x7, 0x5, 0x7ff, 0x3, 0x5, 0x9, 0x6, 0x3, 0x2, 0xa70]}, {0x4, 0x0, [0x8000, 0x5, 0x0, 0x4, 0xb, 0x7, 0xfff, 0x1004, 0x6, 0xc866, 0x100, 0x5, 0x0, 0x80, 0x3, 0x5]}, {0x20, 0x0, [0x3, 0x7f, 0x7, 0x7, 0x8, 0xf, 0x5, 0xff, 0x3, 0x6, 0x8, 0xfffffffc, 0x6, 0x3, 0x7, 0x6]}, {0x10, 0x0, [0xae3, 0x1, 0x6, 0xd, 0x10, 0x0, 0xffffffdd, 0x6, 0x10, 0x401, 0x3, 0x1000, 0x800, 0x1ff, 0x6, 0x9]}, {0x2a, 0x0, [0x7fff, 0x5, 0x7f, 0x5, 0x8, 0xd, 0x100, 0xfffffffe, 0x84, 0x7, 0xf4, 0x766, 0x101, 0x3, 0x0, 0xef3c]}], r9, 0x1, 0x1, 0x168}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000204fcffffff02dce12500007400ba04ee49a9555220cb5efc9402fa584637379ce601960fc843f64b7cce1a5bc30c7365a057fd8613dd4e82a2109762ca0922267ab8611962b07861a06f5ae8f84e6a081d53788a247a4ad01b82837386d9d45c952a2b7bd5c5f25a32a16a85", @ANYRES32=0x0, @ANYBLOB="0008000007500500140012800b00010062726964676500000400028008001b0000000034050011000e000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44044080) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, 0x0, 0x2000fdef) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x4, &(0x7f0000000380)=""/158, &(0x7f00000001c0)=0x9e) kernel console output (not intermixed with test programs): (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.962199][ T7399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.002955][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1162'. [ 100.002998][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1162'. [ 100.113443][ T7399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.184503][ T555] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.203285][ T555] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.215244][ T555] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.239467][ T555] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.267335][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1169'. [ 100.276721][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.284287][ T7425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.294440][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.301899][ T7425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.937326][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1173'. [ 100.952239][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1173'. [ 101.003594][ T7436] hub 8-0:1.0: USB hub found [ 101.008312][ T7436] hub 8-0:1.0: 8 ports detected [ 101.300672][ T7455] hub 8-0:1.0: USB hub found [ 101.305566][ T7455] hub 8-0:1.0: 8 ports detected [ 101.517015][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 101.517034][ T29] audit: type=1400 audit(107.492:5470): avc: denied { block_suspend } for pid=7459 comm="syz.4.1181" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.592661][ T7464] loop7: detected capacity change from 0 to 512 [ 101.709736][ T7464] EXT4-fs (loop7): orphan cleanup on readonly fs [ 101.723306][ T7464] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 101.733784][ T7464] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 101.743410][ T7464] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1182: Failed to acquire dquot type 1 [ 101.756152][ T7464] EXT4-fs (loop7): 1 truncate cleaned up [ 101.764473][ T7464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.781820][ T7464] Driver unsupported XDP return value 0 on prog (id 439) dev N/A, expect packet loss! [ 101.803356][ T7464] SELinux: security_context_str_to_sid (iì¶îlÔw6›wÖŽ¼) failed with errno=-22 [ 101.827523][ T7464] netlink: 'syz.7.1182': attribute type 4 has an invalid length. [ 101.898022][ T4368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.059806][ T7480] hub 8-0:1.0: USB hub found [ 102.064562][ T7480] hub 8-0:1.0: 8 ports detected [ 102.754515][ T29] audit: type=1400 audit(108.732:5471): avc: denied { create } for pid=7496 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.776674][ T29] audit: type=1400 audit(108.732:5472): avc: denied { bind } for pid=7496 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.796095][ T29] audit: type=1400 audit(108.732:5473): avc: denied { getopt } for pid=7496 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.869453][ T7503] loop7: detected capacity change from 0 to 512 [ 102.891270][ T7503] EXT4-fs (loop7): too many log groups per flexible block group [ 102.899059][ T7503] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 102.928697][ T7503] EXT4-fs (loop7): mount failed [ 102.972629][ T7511] FAULT_INJECTION: forcing a failure. [ 102.972629][ T7511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.985779][ T7511] CPU: 0 UID: 0 PID: 7511 Comm: syz.7.1200 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.985851][ T7511] Tainted: [W]=WARN [ 102.985929][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.985992][ T7511] Call Trace: [ 102.985995][ T7511] [ 102.985999][ T7511] __dump_stack+0x1d/0x30 [ 102.986012][ T7511] dump_stack_lvl+0xe8/0x140 [ 102.986028][ T7511] dump_stack+0x15/0x1b [ 102.986036][ T7511] should_fail_ex+0x265/0x280 [ 102.986068][ T7511] should_fail+0xb/0x20 [ 102.986143][ T7511] should_fail_usercopy+0x1a/0x20 [ 102.986155][ T7511] strncpy_from_user+0x25/0x230 [ 102.986259][ T7511] ? kstrtoull+0x111/0x140 [ 102.986273][ T7511] bpf_raw_tp_link_attach+0x150/0x400 [ 102.986286][ T7511] ? kstrtouint+0x76/0xc0 [ 102.986310][ T7511] bpf_raw_tracepoint_open+0x164/0x2c0 [ 102.986391][ T7511] ? security_bpf+0x2b/0x90 [ 102.986412][ T7511] __sys_bpf+0x6a3/0x7b0 [ 102.986444][ T7511] __x64_sys_bpf+0x41/0x50 [ 102.986534][ T7511] x64_sys_call+0x2aea/0x2ff0 [ 102.986550][ T7511] do_syscall_64+0xd2/0x200 [ 102.986568][ T7511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.986678][ T7511] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.986715][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.986797][ T7511] RIP: 0033:0x7f768103ebe9 [ 102.986814][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.986830][ T7511] RSP: 002b:00007f767fa9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.986909][ T7511] RAX: ffffffffffffffda RBX: 00007f7681275fa0 RCX: 00007f768103ebe9 [ 102.986916][ T7511] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 102.987001][ T7511] RBP: 00007f767fa9f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.987007][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.987013][ T7511] R13: 00007f7681276038 R14: 00007f7681275fa0 R15: 00007ffc5d0727f8 [ 102.987022][ T7511] [ 103.256845][ T7512] hub 8-0:1.0: USB hub found [ 103.261844][ T7512] hub 8-0:1.0: 8 ports detected [ 103.773293][ T7530] bond1: entered promiscuous mode [ 103.778565][ T7530] bond1: entered allmulticast mode [ 103.784559][ T7530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.801819][ T7530] bond1 (unregistering): Released all slaves [ 103.851506][ T29] audit: type=1400 audit(109.832:5474): avc: denied { getopt } for pid=7536 comm="syz.9.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.937325][ T7540] hub 8-0:1.0: USB hub found [ 103.942106][ T7540] hub 8-0:1.0: 8 ports detected [ 104.640448][ T7556] loop7: detected capacity change from 0 to 256 [ 104.710882][ T29] audit: type=1400 audit(110.692:5475): avc: denied { create } for pid=7560 comm="syz.8.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.729822][ T29] audit: type=1400 audit(110.692:5476): avc: denied { connect } for pid=7560 comm="syz.8.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.764452][ T29] audit: type=1400 audit(110.742:5477): avc: denied { bind } for pid=7560 comm="syz.8.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.875057][ T7564] tipc: Cannot configure node identity twice [ 104.955303][ T7566] FAULT_INJECTION: forcing a failure. [ 104.955303][ T7566] name failslab, interval 1, probability 0, space 0, times 0 [ 104.968010][ T7566] CPU: 0 UID: 0 PID: 7566 Comm: syz.9.1220 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.968039][ T7566] Tainted: [W]=WARN [ 104.968044][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.968074][ T7566] Call Trace: [ 104.968078][ T7566] [ 104.968083][ T7566] __dump_stack+0x1d/0x30 [ 104.968098][ T7566] dump_stack_lvl+0xe8/0x140 [ 104.968111][ T7566] dump_stack+0x15/0x1b [ 104.968122][ T7566] should_fail_ex+0x265/0x280 [ 104.968135][ T7566] ? call_usermodehelper_setup+0x72/0x190 [ 104.968174][ T7566] should_failslab+0x8c/0xb0 [ 104.968189][ T7566] ? __pfx_free_modprobe_argv+0x10/0x10 [ 104.968204][ T7566] __kmalloc_cache_noprof+0x4c/0x320 [ 104.968255][ T7566] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 104.968275][ T7566] ? __pfx_free_modprobe_argv+0x10/0x10 [ 104.968289][ T7566] call_usermodehelper_setup+0x72/0x190 [ 104.968340][ T7566] __request_module+0x264/0x3e0 [ 104.968355][ T7566] ? security_capable+0x83/0x90 [ 104.968371][ T7566] dev_load+0xa3/0xc0 [ 104.968386][ T7566] dev_ioctl+0x777/0x960 [ 104.968432][ T7566] sock_ioctl+0x593/0x610 [ 104.968466][ T7566] ? __pfx_sock_ioctl+0x10/0x10 [ 104.968522][ T7566] __se_sys_ioctl+0xcb/0x140 [ 104.968544][ T7566] __x64_sys_ioctl+0x43/0x50 [ 104.968563][ T7566] x64_sys_call+0x1816/0x2ff0 [ 104.968587][ T7566] do_syscall_64+0xd2/0x200 [ 104.968615][ T7566] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.968650][ T7566] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.968674][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.968689][ T7566] RIP: 0033:0x7f30e9efebe9 [ 104.968770][ T7566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.968782][ T7566] RSP: 002b:00007f30e8967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.968797][ T7566] RAX: ffffffffffffffda RBX: 00007f30ea135fa0 RCX: 00007f30e9efebe9 [ 104.968806][ T7566] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000006 [ 104.968814][ T7566] RBP: 00007f30e8967090 R08: 0000000000000000 R09: 0000000000000000 [ 104.968890][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.968898][ T7566] R13: 00007f30ea136038 R14: 00007f30ea135fa0 R15: 00007ffcdbef81e8 [ 104.968911][ T7566] [ 105.237712][ T7573] loop4: detected capacity change from 0 to 512 [ 105.288121][ T7573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.361487][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.747461][ T7579] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1224'. [ 105.817971][ T7581] hub 8-0:1.0: USB hub found [ 105.822748][ T7581] hub 8-0:1.0: 8 ports detected [ 105.976611][ T7601] loop7: detected capacity change from 0 to 4096 [ 105.985669][ T7601] EXT4-fs: test_dummy_encryption option not supported [ 106.115312][ T7605] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1234'. [ 106.977908][ T7627] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1240'. [ 107.001583][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 107.001600][ T29] audit: type=1400 audit(112.982:5482): avc: denied { ioctl } for pid=7635 comm="syz.7.1244" path="socket:[19323]" dev="sockfs" ino=19323 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.045657][ T7636] process 'syz.7.1244' launched '/dev/fd/12' with NULL argv: empty string added [ 107.060641][ T7636] netlink: zone id is out of range [ 107.064689][ T29] audit: type=1400 audit(113.042:5483): avc: denied { execute_no_trans } for pid=7635 comm="syz.7.1244" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.068011][ T7636] netlink: zone id is out of range [ 107.094986][ T29] audit: type=1326 audit(113.042:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768103ebe9 code=0x7ffc0000 [ 107.100075][ T7636] netlink: zone id is out of range [ 107.122812][ T29] audit: type=1326 audit(113.042:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768103ebe9 code=0x7ffc0000 [ 107.122842][ T29] audit: type=1326 audit(113.042:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768103ebe9 code=0x7ffc0000 [ 107.127942][ T7636] netlink: zone id is out of range [ 107.150721][ T29] audit: type=1326 audit(113.042:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f768103ebe9 code=0x7ffc0000 [ 107.173464][ T7636] netlink: zone id is out of range [ 107.178587][ T29] audit: type=1326 audit(113.042:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768103ebe9 code=0x7ffc0000 [ 107.201338][ T7636] netlink: zone id is out of range [ 107.206433][ T29] audit: type=1326 audit(113.042:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f768103ebe9 code=0x7ffc0000 [ 107.206457][ T29] audit: type=1326 audit(113.042:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768103ebe9 code=0x7ffc0000 [ 107.206487][ T29] audit: type=1326 audit(113.042:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.7.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f768103ebe9 code=0x7ffc0000 [ 107.229498][ T7636] netlink: zone id is out of range [ 107.229507][ T7636] netlink: zone id is out of range [ 107.229514][ T7636] netlink: zone id is out of range [ 107.229520][ T7636] netlink: zone id is out of range [ 107.466281][ T7644] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1247'. [ 107.613493][ T7646] hub 8-0:1.0: USB hub found [ 107.618427][ T7646] hub 8-0:1.0: 8 ports detected [ 107.687965][ T7650] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1249'. [ 107.715010][ T7648] team0: Port device dummy0 removed [ 107.766984][ T7648] bridge_slave_0: left allmulticast mode [ 107.772728][ T7648] bridge_slave_0: left promiscuous mode [ 107.778387][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.810038][ T7653] loop8: detected capacity change from 0 to 256 [ 107.857285][ T7653] vfat: Bad value for 'fmask' [ 107.901992][ T7648] bridge_slave_1: left allmulticast mode [ 107.907782][ T7648] bridge_slave_1: left promiscuous mode [ 107.913580][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.933182][ T7648] bond0: (slave bond_slave_0): Releasing backup interface [ 107.949278][ T7648] bond0: (slave bond_slave_1): Releasing backup interface [ 107.962779][ T7648] team0: Port device team_slave_0 removed [ 107.973052][ T7648] team0: Port device team_slave_1 removed [ 108.041160][ T7656] loop9: detected capacity change from 0 to 512 [ 108.050896][ T7656] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 108.061628][ T7656] EXT4-fs (loop9): 1 truncate cleaned up [ 108.067622][ T7656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.099868][ T5980] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.209007][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1259'. [ 108.295595][ T7678] FAULT_INJECTION: forcing a failure. [ 108.295595][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 108.298683][ T7680] loop4: detected capacity change from 0 to 256 [ 108.308345][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.9.1260 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.308380][ T7678] Tainted: [W]=WARN [ 108.308386][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.308398][ T7678] Call Trace: [ 108.308405][ T7678] [ 108.308414][ T7678] __dump_stack+0x1d/0x30 [ 108.308503][ T7678] dump_stack_lvl+0xe8/0x140 [ 108.308523][ T7678] dump_stack+0x15/0x1b [ 108.308540][ T7678] should_fail_ex+0x265/0x280 [ 108.308560][ T7678] ? sctp_transport_new+0x69/0x3e0 [ 108.308646][ T7678] should_failslab+0x8c/0xb0 [ 108.308669][ T7678] __kmalloc_cache_noprof+0x4c/0x320 [ 108.308698][ T7678] sctp_transport_new+0x69/0x3e0 [ 108.308798][ T7678] sctp_assoc_add_peer+0x1a7/0xb20 [ 108.308818][ T7678] ? sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 108.308885][ T7678] sctp_connect_new_asoc+0x1eb/0x3a0 [ 108.308944][ T7678] sctp_sendmsg+0xf10/0x18d0 [ 108.309047][ T7678] ? selinux_socket_sendmsg+0x151/0x1b0 [ 108.309077][ T7678] ? __pfx_sctp_sendmsg+0x10/0x10 [ 108.309128][ T7678] inet_sendmsg+0xc2/0xd0 [ 108.309218][ T7678] __sock_sendmsg+0x102/0x180 [ 108.309246][ T7678] __sys_sendto+0x268/0x330 [ 108.309271][ T7678] __x64_sys_sendto+0x76/0x90 [ 108.309291][ T7678] x64_sys_call+0x2d05/0x2ff0 [ 108.309312][ T7678] do_syscall_64+0xd2/0x200 [ 108.309356][ T7678] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.309380][ T7678] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.309469][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.309505][ T7678] RIP: 0033:0x7f30e9efebe9 [ 108.309522][ T7678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.309540][ T7678] RSP: 002b:00007f30e8967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 108.309561][ T7678] RAX: ffffffffffffffda RBX: 00007f30ea135fa0 RCX: 00007f30e9efebe9 [ 108.309650][ T7678] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 108.309737][ T7678] RBP: 00007f30e8967090 R08: 0000200000000100 R09: 000000000000001c [ 108.309750][ T7678] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 108.309763][ T7678] R13: 00007f30ea136038 R14: 00007f30ea135fa0 R15: 00007ffcdbef81e8 [ 108.309780][ T7678] [ 108.360375][ T7667] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1256'. [ 108.438758][ T7680] vfat: Bad value for 'fmask' [ 108.627199][ T7700] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1269'. [ 108.651799][ T7700] xt_policy: neither incoming nor outgoing policy selected [ 108.802907][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 108.831281][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 108.844059][ T7719] mmap: syz.8.1275 (7719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.875764][ T7722] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1276'. [ 108.983206][ T7709] tipc: Started in network mode [ 108.988138][ T7709] tipc: Node identity da1ab7eab758, cluster identity 4711 [ 108.995483][ T7709] tipc: Enabled bearer , priority 0 [ 109.044934][ T7709] syzkaller0: entered promiscuous mode [ 109.050484][ T7709] syzkaller0: entered allmulticast mode [ 109.104884][ T7709] tipc: Resetting bearer [ 109.116812][ T7709] loop7: detected capacity change from 0 to 128 [ 109.145490][ T7740] loop9: detected capacity change from 0 to 512 [ 109.176055][ T7709] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.273314][ T7708] tipc: Resetting bearer [ 109.297591][ T7708] tipc: Disabling bearer [ 109.306548][ T7740] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.1283: error while reading EA inode 32 err=-116 [ 109.379127][ T7740] EXT4-fs (loop9): Remounting filesystem read-only [ 109.385771][ T7740] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.398761][ T7740] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 109.437905][ T7740] EXT4-fs (loop9): 1 orphan inode deleted [ 109.447734][ T7740] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.560572][ T5980] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.651025][ T555] tipc: Left network mode [ 109.742571][ T7755] loop8: detected capacity change from 0 to 512 [ 109.749235][ T7755] EXT4-fs: Ignoring removed nobh option [ 109.770808][ T7755] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1289: iget: bad i_size value: 38620345925642 [ 109.786667][ T7755] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1289: couldn't read orphan inode 15 (err -117) [ 109.799942][ T7755] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.800264][ T4368] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.813812][ T7755] EXT4-fs (loop8): shut down requested (0) [ 109.901183][ T7765] vlan2: entered allmulticast mode [ 109.906398][ T7765] bridge_slave_0: entered allmulticast mode [ 109.936988][ T5450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.222815][ T7835] __nla_validate_parse: 8 callbacks suppressed [ 111.222832][ T7835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1322'. [ 111.239119][ T1035] IPVS: starting estimator thread 0... [ 111.250122][ T7835] loop4: detected capacity change from 0 to 512 [ 111.274864][ T7835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.296779][ T7835] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1322: corrupted inode contents [ 111.317538][ T7835] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1322: mark_inode_dirty error [ 111.330160][ T7835] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1322: corrupted inode contents [ 111.342503][ T7836] IPVS: using max 2928 ests per chain, 146400 per kthread [ 111.350789][ T7835] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1322: mark_inode_dirty error [ 111.362629][ T7835] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1322: Failed to acquire dquot type 1 [ 111.377010][ T7846] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1322: corrupted inode contents [ 111.390247][ T7846] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.1322: mark_inode_dirty error [ 111.401959][ T7846] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.1322: corrupted inode contents [ 111.413919][ T7845] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1324'. [ 111.413973][ T7846] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.1322: mark_inode_dirty error [ 111.435122][ T7846] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1322: Failed to acquire dquot type 1 [ 111.461810][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.495192][ T7852] loop4: detected capacity change from 0 to 128 [ 111.533713][ T7852] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.115067][ T7862] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1329'. [ 112.196945][ T7873] loop9: detected capacity change from 0 to 512 [ 112.215445][ T7873] EXT4-fs (loop9): too many log groups per flexible block group [ 112.223325][ T7873] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 112.231310][ T7873] EXT4-fs (loop9): mount failed [ 112.294320][ T7880] netlink: 'syz.9.1336': attribute type 2 has an invalid length. [ 112.302898][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1336'. [ 112.389550][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.426309][ T7886] loop9: detected capacity change from 0 to 7 [ 112.444746][ T3998] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.462538][ T3998] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.470512][ T3998] loop9: unable to read partition table [ 112.482366][ T7886] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.500039][ T7886] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.507907][ T7886] loop9: unable to read partition table [ 112.514386][ T7886] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 112.514386][ T7886] ) failed (rc=-5) [ 112.514796][ T3998] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.536934][ T3998] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.549665][ T3998] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.557756][ T3998] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.566122][ T3998] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.599879][ T7887] loop9: detected capacity change from 0 to 512 [ 112.633519][ T7887] __quota_error: 104 callbacks suppressed [ 112.633536][ T7887] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 112.650835][ T7887] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.667114][ T7887] EXT4-fs (loop9): mount failed [ 112.670333][ T7894] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1341'. [ 113.195614][ T7904] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1345'. [ 113.197590][ T7909] hub 8-0:1.0: USB hub found [ 113.209656][ T7909] hub 8-0:1.0: 8 ports detected [ 113.242989][ T7911] loop9: detected capacity change from 0 to 128 [ 113.271072][ T7911] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.312744][ T7916] hub 8-0:1.0: USB hub found [ 113.317591][ T7916] hub 8-0:1.0: 8 ports detected [ 113.471179][ T7923] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1352'. [ 114.081917][ T5980] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.097794][ T7936] loop8: detected capacity change from 0 to 512 [ 114.209582][ T7936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.225802][ T29] audit: type=1326 audit(120.202:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.254052][ T7950] hub 8-0:1.0: USB hub found [ 114.262614][ T7950] hub 8-0:1.0: 8 ports detected [ 114.269455][ T29] audit: type=1326 audit(120.242:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.292561][ T29] audit: type=1326 audit(120.242:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.315427][ T29] audit: type=1326 audit(120.242:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.338360][ T29] audit: type=1326 audit(120.242:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.361218][ T29] audit: type=1326 audit(120.242:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.384064][ T29] audit: type=1326 audit(120.242:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.406942][ T29] audit: type=1326 audit(120.242:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.431803][ T7954] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1359'. [ 114.432362][ T29] audit: type=1326 audit(120.242:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.8.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b1a5ebe9 code=0x7ffc0000 [ 114.484271][ T5450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.567803][ T7967] loop8: detected capacity change from 0 to 128 [ 114.604785][ T7967] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.625655][ T7956] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1364'. [ 114.665167][ T7973] FAULT_INJECTION: forcing a failure. [ 114.665167][ T7973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.678417][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.4.1370 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.678529][ T7973] Tainted: [W]=WARN [ 114.678536][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.678548][ T7973] Call Trace: [ 114.678556][ T7973] [ 114.678564][ T7973] __dump_stack+0x1d/0x30 [ 114.678587][ T7973] dump_stack_lvl+0xe8/0x140 [ 114.678607][ T7973] dump_stack+0x15/0x1b [ 114.678624][ T7973] should_fail_ex+0x265/0x280 [ 114.678698][ T7973] should_fail+0xb/0x20 [ 114.678715][ T7973] should_fail_usercopy+0x1a/0x20 [ 114.678738][ T7973] _copy_to_user+0x20/0xa0 [ 114.678769][ T7973] simple_read_from_buffer+0xb5/0x130 [ 114.678888][ T7973] proc_fail_nth_read+0x10e/0x150 [ 114.678916][ T7973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.679005][ T7973] vfs_read+0x1a8/0x770 [ 114.679028][ T7973] ? rtnl_unlock+0xe/0x20 [ 114.679124][ T7973] ? __rcu_read_unlock+0x4f/0x70 [ 114.679148][ T7973] ? __fget_files+0x184/0x1c0 [ 114.679176][ T7973] ksys_read+0xda/0x1a0 [ 114.679200][ T7973] __x64_sys_read+0x40/0x50 [ 114.679224][ T7973] x64_sys_call+0x27bc/0x2ff0 [ 114.679318][ T7973] do_syscall_64+0xd2/0x200 [ 114.679471][ T7973] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.679512][ T7973] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.679536][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.679560][ T7973] RIP: 0033:0x7fa1143ad5fc [ 114.679610][ T7973] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 114.679629][ T7973] RSP: 002b:00007fa112e17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.679649][ T7973] RAX: ffffffffffffffda RBX: 00007fa1145e5fa0 RCX: 00007fa1143ad5fc [ 114.679661][ T7973] RDX: 000000000000000f RSI: 00007fa112e170a0 RDI: 0000000000000007 [ 114.679719][ T7973] RBP: 00007fa112e17090 R08: 0000000000000000 R09: 0000000000000000 [ 114.679732][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.679805][ T7973] R13: 00007fa1145e6038 R14: 00007fa1145e5fa0 R15: 00007ffd11d730a8 [ 114.679823][ T7973] [ 114.903846][ T7977] loop7: detected capacity change from 0 to 512 [ 114.928073][ T2993] udevd[2993]: worker [3998] terminated by signal 33 (Unknown signal 33) [ 114.969429][ T7977] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 114.982992][ T59] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.991965][ T59] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.011348][ T59] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.020382][ T59] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.086791][ T7987] loop9: detected capacity change from 0 to 512 [ 115.107281][ T7987] EXT4-fs (loop9): 1 orphan inode deleted [ 115.116738][ T7987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.134731][ T59] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 115.201673][ T5980] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.232250][ T7985] loop7: detected capacity change from 0 to 512 [ 115.252724][ T7985] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 115.262287][ T7985] EXT4-fs (loop7): orphan cleanup on readonly fs [ 115.291677][ T7985] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1375: corrupted inode contents [ 115.328389][ T8004] hub 8-0:1.0: USB hub found [ 115.333176][ T8004] hub 8-0:1.0: 8 ports detected [ 115.376597][ T7985] EXT4-fs (loop7): Remounting filesystem read-only [ 115.482587][ T5450] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.505431][ T7985] EXT4-fs (loop7): 1 truncate cleaned up [ 115.748416][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 115.821626][ T555] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.832312][ T555] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.850017][ T555] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 115.861131][ T7985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.861981][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.881085][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.885324][ T7985] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.905989][ T7990] bridge_slave_0: entered allmulticast mode [ 115.913775][ T7990] bridge_slave_0: entered promiscuous mode [ 115.929675][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.936765][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.944895][ T7990] bridge_slave_1: entered allmulticast mode [ 115.952506][ T7990] bridge_slave_1: entered promiscuous mode [ 116.000094][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.020795][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.051977][ T7990] team0: Port device team_slave_0 added [ 116.059207][ T7990] team0: Port device team_slave_1 added [ 116.084022][ T8025] hub 8-0:1.0: USB hub found [ 116.089206][ T8025] hub 8-0:1.0: 8 ports detected [ 116.102319][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.109683][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.135773][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.158763][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.165788][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.191910][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.215932][ T7990] hsr_slave_0: entered promiscuous mode [ 116.221782][ T7990] hsr_slave_1: entered promiscuous mode [ 116.227598][ T7990] debugfs: 'hsr0' already exists in 'hsr' [ 116.233389][ T7990] Cannot create hsr debugfs directory [ 116.687990][ T7990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.716253][ T7990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.799329][ T8052] loop9: detected capacity change from 0 to 128 [ 116.807891][ T7990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.815590][ T8052] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.830395][ T7990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.886043][ T8066] loop8: detected capacity change from 0 to 128 [ 116.898276][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.904089][ T8066] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.992805][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.004136][ T4017] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.011262][ T4017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.029903][ T8088] loop7: detected capacity change from 0 to 128 [ 117.032772][ T4017] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.043330][ T4017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.046794][ T8088] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.087119][ T4368] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.105571][ T8080] net_ratelimit: 416 callbacks suppressed [ 117.105583][ T8080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.261742][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.389959][ T8134] hub 8-0:1.0: USB hub found [ 117.395368][ T8134] hub 8-0:1.0: 8 ports detected [ 117.673718][ T5980] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.724434][ T5450] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.835163][ T8148] bridge_slave_0: left allmulticast mode [ 117.840920][ T8148] bridge_slave_0: left promiscuous mode [ 117.846675][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.856998][ T8148] bridge_slave_1: left allmulticast mode [ 117.862833][ T8148] bridge_slave_1: left promiscuous mode [ 117.868583][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.880516][ T8148] bond0: (slave bond_slave_0): Releasing backup interface [ 117.899192][ T8164] loop8: detected capacity change from 0 to 512 [ 117.905841][ T8148] bond0: (slave bond_slave_1): Releasing backup interface [ 117.906104][ T8164] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 117.937981][ T8164] EXT4-fs (loop8): 1 truncate cleaned up [ 117.948307][ T8148] team0: Port device team_slave_0 removed [ 117.954829][ T8164] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.972874][ T8148] team0: Port device team_slave_1 removed [ 117.984465][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.984484][ T5450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.991928][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.009957][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.017380][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.095892][ T7990] veth0_vlan: entered promiscuous mode [ 118.113148][ T8183] loop7: detected capacity change from 0 to 1024 [ 118.149056][ T7990] veth1_vlan: entered promiscuous mode [ 118.156805][ T8194] __nla_validate_parse: 2 callbacks suppressed [ 118.156824][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1400'. [ 118.180661][ T8183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.187427][ T7990] veth0_macvtap: entered promiscuous mode [ 118.199512][ T8190] loop4: detected capacity change from 0 to 128 [ 118.204424][ T7990] veth1_macvtap: entered promiscuous mode [ 118.220196][ T8190] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.235786][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.247283][ T8176] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1400'. [ 118.264090][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.287856][ T4017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.301739][ T4017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.311615][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 118.311628][ T29] audit: type=1400 audit(124.292:5646): avc: denied { lock } for pid=8181 comm="syz.7.1402" path="/241/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.323027][ T4017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.366574][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1408'. [ 118.385473][ T29] audit: type=1400 audit(124.292:5647): avc: denied { link } for pid=8181 comm="syz.7.1402" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.407239][ T29] audit: type=1400 audit(124.362:5648): avc: denied { mounton } for pid=7990 comm="syz-executor" path="/root/syzkaller.Ncijld/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 118.417023][ T4017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.431229][ T29] audit: type=1400 audit(124.362:5649): avc: denied { mount } for pid=7990 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.461587][ T29] audit: type=1400 audit(124.362:5650): avc: denied { mount } for pid=7990 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.483039][ T29] audit: type=1400 audit(124.362:5651): avc: denied { mounton } for pid=7990 comm="syz-executor" path="/root/syzkaller.Ncijld/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 118.509318][ T29] audit: type=1400 audit(124.362:5652): avc: denied { mounton } for pid=7990 comm="syz-executor" path="/root/syzkaller.Ncijld/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 118.536349][ T29] audit: type=1400 audit(124.362:5653): avc: denied { mounton } for pid=7990 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 118.559985][ T4368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.570621][ T29] audit: type=1400 audit(124.422:5654): avc: denied { mount } for pid=7990 comm="syz-executor" name="/" dev="gadgetfs" ino=4702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 118.725030][ T8238] loop0: detected capacity change from 0 to 8192 [ 118.768961][ T8238] loop0: p3 p4 < > [ 118.772840][ T8238] loop0: p3 size 33554432 extends beyond EOD, truncated [ 118.786686][ T8260] netlink: 'syz.7.1414': attribute type 1 has an invalid length. [ 118.804730][ T29] audit: type=1326 audit(124.782:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602314ebe9 code=0x7ffc0000 [ 118.813771][ T8260] bond2: entered promiscuous mode [ 118.839700][ T8260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.864468][ T8264] hub 8-0:1.0: USB hub found [ 118.869562][ T8264] hub 8-0:1.0: 8 ports detected [ 119.006908][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.276840][ T8282] FAULT_INJECTION: forcing a failure. [ 119.276840][ T8282] name failslab, interval 1, probability 0, space 0, times 0 [ 119.289899][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.7.1418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.289938][ T8282] Tainted: [W]=WARN [ 119.289946][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.289960][ T8282] Call Trace: [ 119.289967][ T8282] [ 119.289976][ T8282] __dump_stack+0x1d/0x30 [ 119.290101][ T8282] dump_stack_lvl+0xe8/0x140 [ 119.290122][ T8282] dump_stack+0x15/0x1b [ 119.290140][ T8282] should_fail_ex+0x265/0x280 [ 119.290210][ T8282] ? sctp_stream_init_ext+0x39/0x130 [ 119.290239][ T8282] should_failslab+0x8c/0xb0 [ 119.290267][ T8282] __kmalloc_cache_noprof+0x4c/0x320 [ 119.290302][ T8282] sctp_stream_init_ext+0x39/0x130 [ 119.290353][ T8282] sctp_sendmsg_to_asoc+0xe7a/0xf20 [ 119.290386][ T8282] ? sctp_assoc_add_peer+0xa39/0xb20 [ 119.290411][ T8282] ? sctp_connect_new_asoc+0x29c/0x3a0 [ 119.290511][ T8282] sctp_sendmsg+0x1263/0x18d0 [ 119.290545][ T8282] ? selinux_socket_sendmsg+0x151/0x1b0 [ 119.290577][ T8282] ? __pfx_sctp_sendmsg+0x10/0x10 [ 119.290611][ T8282] inet_sendmsg+0xc2/0xd0 [ 119.290673][ T8282] __sock_sendmsg+0x102/0x180 [ 119.290705][ T8282] __sys_sendto+0x268/0x330 [ 119.290733][ T8282] __x64_sys_sendto+0x76/0x90 [ 119.290766][ T8282] x64_sys_call+0x2d05/0x2ff0 [ 119.290854][ T8282] do_syscall_64+0xd2/0x200 [ 119.290884][ T8282] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.290912][ T8282] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.290945][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.290968][ T8282] RIP: 0033:0x7f768103ebe9 [ 119.290987][ T8282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.291009][ T8282] RSP: 002b:00007f767fa9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 119.291033][ T8282] RAX: ffffffffffffffda RBX: 00007f7681275fa0 RCX: 00007f768103ebe9 [ 119.291048][ T8282] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 119.291123][ T8282] RBP: 00007f767fa9f090 R08: 0000200000000100 R09: 000000000000001c [ 119.291138][ T8282] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 119.291152][ T8282] R13: 00007f7681276038 R14: 00007f7681275fa0 R15: 00007ffc5d0727f8 [ 119.291172][ T8282] [ 119.583781][ T8288] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 119.683339][ T8304] loop4: detected capacity change from 0 to 128 [ 119.698834][ T8304] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.013489][ T8357] hub 8-0:1.0: USB hub found [ 120.018423][ T8357] hub 8-0:1.0: 8 ports detected [ 120.142151][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 120.330512][ T8330] loop8: detected capacity change from 0 to 512 [ 120.443939][ T8330] EXT4-fs: Mount option(s) incompatible with ext2 [ 120.554789][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.577356][ T8373] vlan0: entered allmulticast mode [ 120.582591][ T8373] bridge_slave_0: entered allmulticast mode [ 120.976433][ T8379] loop9: detected capacity change from 0 to 512 [ 121.085121][ T8379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.148112][ T8388] netlink: 'syz.8.1444': attribute type 13 has an invalid length. [ 121.364791][ T5980] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.380245][ T8383] loop4: detected capacity change from 0 to 8192 [ 121.387098][ T8383] vfat: Unknown parameter 'þ€' [ 121.417144][ T8388] bridge0: port 3(syz_tun) entered disabled state [ 121.445442][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.452815][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.526094][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.606454][ T8396] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1445'. [ 121.619106][ T41] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.627643][ T41] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.637308][ T41] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.711162][ T8418] loop7: detected capacity change from 0 to 128 [ 121.726645][ T8418] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.739412][ T41] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.754121][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 122.056115][ T8447] hub 8-0:1.0: USB hub found [ 122.060903][ T8447] hub 8-0:1.0: 8 ports detected [ 122.353404][ T8441] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1458'. [ 122.471628][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'. [ 122.556767][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1468'. [ 122.566024][ T4368] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.575231][ T8466] netem: change failed [ 122.619653][ T8471] lo speed is unknown, defaulting to 1000 [ 122.631158][ T8471] lo speed is unknown, defaulting to 1000 [ 122.637741][ T8471] lo speed is unknown, defaulting to 1000 [ 122.647181][ T8471] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.666658][ T8473] 9pnet_fd: Insufficient options for proto=fd [ 122.675199][ T8471] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 122.689355][ T8471] lo speed is unknown, defaulting to 1000 [ 122.719960][ T8473] loop0: detected capacity change from 0 to 128 [ 122.722812][ T8471] lo speed is unknown, defaulting to 1000 [ 122.732936][ T8471] lo speed is unknown, defaulting to 1000 [ 122.740567][ T8471] lo speed is unknown, defaulting to 1000 [ 122.740865][ T8473] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.748339][ T8471] lo speed is unknown, defaulting to 1000 [ 122.770147][ T8471] lo speed is unknown, defaulting to 1000 [ 122.776533][ T8473] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.793526][ T8480] loop4: detected capacity change from 0 to 512 [ 122.835440][ T8480] EXT4-fs (loop4): 1 orphan inode deleted [ 122.842574][ T8480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.855485][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 1 [ 122.855890][ T8487] 9pnet: Could not find request transport: f [ 122.879169][ T8494] loop8: detected capacity change from 0 to 128 [ 122.899976][ T8494] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.901878][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.914457][ T8499] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1480'. [ 123.021286][ T8517] loop0: detected capacity change from 0 to 512 [ 123.063602][ T8524] loop0: detected capacity change from 0 to 512 [ 123.094593][ T8524] EXT4-fs: Ignoring removed i_version option [ 123.130617][ T8524] EXT4-fs: journaled quota format not specified [ 123.232547][ T8531] hub 8-0:1.0: USB hub found [ 123.238176][ T8531] hub 8-0:1.0: 8 ports detected [ 123.427418][ T8535] loop9: detected capacity change from 0 to 7 [ 123.458429][ T8535] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.511879][ T8535] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.519775][ T8535] loop9: unable to read partition table [ 123.584723][ T8535] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 123.584723][ T8535] ) failed (rc=-5) [ 123.673970][ T8544] loop0: detected capacity change from 0 to 512 [ 123.694665][ T8544] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.695543][ T5450] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.718089][ T8544] EXT4-fs (loop0): 1 truncate cleaned up [ 123.758951][ T8544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.794387][ T8552] loop9: detected capacity change from 0 to 128 [ 123.894396][ T8557] loop7: detected capacity change from 0 to 1024 [ 123.911364][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 123.911381][ T29] audit: type=1400 audit(129.892:5743): avc: denied { write } for pid=8558 comm="syz.8.1503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 123.939090][ T8557] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.948760][ T7990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.982947][ T8559] netlink: 'syz.8.1503': attribute type 21 has an invalid length. [ 123.983012][ T29] audit: type=1326 audit(129.932:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 123.993197][ T8557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.013775][ T29] audit: type=1326 audit(129.932:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 124.013811][ T29] audit: type=1326 audit(129.932:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 124.013890][ T29] audit: type=1326 audit(129.932:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 124.038596][ T8559] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1503'. [ 124.045371][ T29] audit: type=1326 audit(129.932:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 124.068253][ T8559] netlink: 'syz.8.1503': attribute type 1 has an invalid length. [ 124.091021][ T29] audit: type=1326 audit(129.932:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 124.153794][ T29] audit: type=1326 audit(129.932:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 124.176678][ T29] audit: type=1326 audit(129.932:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 124.199711][ T29] audit: type=1326 audit(129.932:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.4.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1143aebe9 code=0x7ffc0000 [ 124.233123][ T8557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.284144][ T8557] EXT4-fs error (device loop7): __ext4_iget:5464: inode #12: block 13: comm syz.7.1502: invalid block [ 124.295907][ T8557] EXT4-fs (loop7): Remounting filesystem read-only [ 124.314022][ T8572] loop8: detected capacity change from 0 to 128 [ 124.335736][ T8572] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.360015][ T4368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.427480][ T8587] loop7: detected capacity change from 0 to 128 [ 124.540091][ T8587] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 124.609082][ T8597] loop0: detected capacity change from 0 to 164 [ 124.647874][ T8598] hub 8-0:1.0: USB hub found [ 124.652658][ T8598] hub 8-0:1.0: 8 ports detected [ 124.714104][ T8597] syz.0.1517: attempt to access beyond end of device [ 124.714104][ T8597] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 124.770918][ T8597] syz.0.1517: attempt to access beyond end of device [ 124.770918][ T8597] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 124.950788][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1512'. [ 124.963376][ T8587] sd 0:0:1:0: device reset [ 125.000066][ T8587] infiniband syz2: set down [ 125.004770][ T8587] infiniband syz2: added ipvlan1 [ 125.016797][ T8587] RDS/IB: syz2: added [ 125.021570][ T8587] smc: adding ib device syz2 with port count 1 [ 125.028215][ T8587] smc: ib device syz2 port 1 has pnetid [ 125.055530][ T8610] loop0: detected capacity change from 0 to 512 [ 125.063953][ T8610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 125.072989][ T8610] System zones: 1-12 [ 125.077195][ T8610] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.1521: Directory hole found for htree index block 0 [ 125.092531][ T8610] EXT4-fs (loop0): Remounting filesystem read-only [ 125.099236][ T8610] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 125.107625][ T8610] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 125.117900][ T8610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.160789][ T5450] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.189882][ T8613] syz_tun: left allmulticast mode [ 125.194995][ T8613] syz_tun: left promiscuous mode [ 125.200312][ T8613] bridge0: port 3(syz_tun) entered disabled state [ 125.212684][ T8613] bridge_slave_0: left promiscuous mode [ 125.218591][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.227608][ T8613] bridge_slave_1: left allmulticast mode [ 125.233547][ T8613] bridge_slave_1: left promiscuous mode [ 125.239323][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.276722][ T7990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.309007][ T8613] bond0: (slave bond_slave_0): Releasing backup interface [ 125.320651][ T8613] bond0: (slave bond_slave_1): Releasing backup interface [ 125.365678][ T8613] team0: Port device team_slave_0 removed [ 125.379051][ T8613] team0: Port device team_slave_1 removed [ 125.388892][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.458701][ T8624] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1526'. [ 125.483411][ T8638] loop0: detected capacity change from 0 to 128 [ 125.493546][ T8638] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.532120][ T8645] FAULT_INJECTION: forcing a failure. [ 125.532120][ T8645] name failslab, interval 1, probability 0, space 0, times 0 [ 125.544856][ T8645] CPU: 0 UID: 0 PID: 8645 Comm: syz.9.1535 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.544895][ T8645] Tainted: [W]=WARN [ 125.544902][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.545041][ T8645] Call Trace: [ 125.545047][ T8645] [ 125.545055][ T8645] __dump_stack+0x1d/0x30 [ 125.545077][ T8645] dump_stack_lvl+0xe8/0x140 [ 125.545097][ T8645] dump_stack+0x15/0x1b [ 125.545117][ T8645] should_fail_ex+0x265/0x280 [ 125.545144][ T8645] should_failslab+0x8c/0xb0 [ 125.545173][ T8645] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 125.545205][ T8645] ? sock_alloc_inode+0x34/0xa0 [ 125.545232][ T8645] ? __pfx_sock_alloc_inode+0x10/0x10 [ 125.545275][ T8645] sock_alloc_inode+0x34/0xa0 [ 125.545341][ T8645] alloc_inode+0x3d/0x170 [ 125.545420][ T8645] __sock_create+0x122/0x5b0 [ 125.545496][ T8645] sock_create_kern+0x38/0x50 [ 125.545522][ T8645] mptcp_subflow_create_socket+0x84/0x630 [ 125.545546][ T8645] __mptcp_nmpc_sk+0xb3/0x3a0 [ 125.545699][ T8645] mptcp_bind+0x71/0x2f0 [ 125.545717][ T8645] __sys_bind+0x1ce/0x2a0 [ 125.545806][ T8645] __x64_sys_bind+0x3f/0x50 [ 125.545833][ T8645] x64_sys_call+0x2b6e/0x2ff0 [ 125.545854][ T8645] do_syscall_64+0xd2/0x200 [ 125.545882][ T8645] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.545959][ T8645] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.546015][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.546036][ T8645] RIP: 0033:0x7f30e9efebe9 [ 125.546051][ T8645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.546072][ T8645] RSP: 002b:00007f30e8967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 125.546147][ T8645] RAX: ffffffffffffffda RBX: 00007f30ea135fa0 RCX: 00007f30e9efebe9 [ 125.546170][ T8645] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 125.546183][ T8645] RBP: 00007f30e8967090 R08: 0000000000000000 R09: 0000000000000000 [ 125.546194][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.546281][ T8645] R13: 00007f30ea136038 R14: 00007f30ea135fa0 R15: 00007ffcdbef81e8 [ 125.546296][ T8645] [ 125.546304][ T8645] socket: no more sockets [ 125.610136][ T8646] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1533'. [ 125.671542][ T8649] hub 8-0:1.0: USB hub found [ 125.780232][ T8649] hub 8-0:1.0: 8 ports detected [ 125.876036][ T8653] hub 8-0:1.0: USB hub found [ 125.880890][ T8653] hub 8-0:1.0: 8 ports detected [ 126.324657][ T10] hid_parser_main: 33 callbacks suppressed [ 126.324677][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 126.338360][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 126.360690][ T7990] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.367405][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 126.378185][ T10] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 126.560178][ T8690] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=8690 comm=syz.9.1550 [ 126.575184][ T8690] geneve0: entered allmulticast mode [ 126.610882][ T8685] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1548'. [ 126.735288][ T8697] hub 8-0:1.0: USB hub found [ 126.740139][ T8697] hub 8-0:1.0: 8 ports detected [ 127.101791][ T8701] loop8: detected capacity change from 0 to 1024 [ 127.221532][ T8701] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 127.292025][ T8708] loop7: detected capacity change from 0 to 128 [ 127.319274][ T8710] hub 8-0:1.0: USB hub found [ 127.324041][ T8710] hub 8-0:1.0: 8 ports detected [ 127.470242][ T8701] loop8: detected capacity change from 0 to 2048 [ 127.497276][ T8695] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1552'. [ 127.517551][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 127.582263][ T8715] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1558'. [ 127.597453][ T8701] loop8: p1 < > p4 [ 127.620140][ T8708] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.642610][ T8718] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1554'. [ 127.734205][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1554'. [ 127.849923][ T8701] loop8: p4 size 8388608 extends beyond EOD, truncated [ 128.181482][ T4368] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.281675][ T8752] hub 8-0:1.0: USB hub found [ 128.286433][ T8752] hub 8-0:1.0: 8 ports detected [ 128.761066][ T8759] hub 8-0:1.0: USB hub found [ 128.766816][ T8759] hub 8-0:1.0: 8 ports detected [ 129.098388][ T8763] FAULT_INJECTION: forcing a failure. [ 129.098388][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 129.111132][ T8763] CPU: 1 UID: 0 PID: 8763 Comm: syz.9.1572 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.111205][ T8763] Tainted: [W]=WARN [ 129.111211][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.111222][ T8763] Call Trace: [ 129.111229][ T8763] [ 129.111237][ T8763] __dump_stack+0x1d/0x30 [ 129.111259][ T8763] dump_stack_lvl+0xe8/0x140 [ 129.111281][ T8763] dump_stack+0x15/0x1b [ 129.111300][ T8763] should_fail_ex+0x265/0x280 [ 129.111358][ T8763] should_failslab+0x8c/0xb0 [ 129.111385][ T8763] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 129.111416][ T8763] ? __d_alloc+0x3d/0x340 [ 129.111515][ T8763] __d_alloc+0x3d/0x340 [ 129.111540][ T8763] d_alloc_parallel+0x53/0xc60 [ 129.111616][ T8763] ? __rcu_read_unlock+0x4f/0x70 [ 129.111639][ T8763] ? __d_lookup+0x316/0x340 [ 129.111695][ T8763] path_openat+0x6b5/0x2170 [ 129.111722][ T8763] do_filp_open+0x109/0x230 [ 129.111741][ T8763] ? __pfx_kfree_link+0x10/0x10 [ 129.111764][ T8763] do_sys_openat2+0xa6/0x110 [ 129.111869][ T8763] __x64_sys_openat+0xf2/0x120 [ 129.111898][ T8763] x64_sys_call+0x2e9c/0x2ff0 [ 129.111918][ T8763] do_syscall_64+0xd2/0x200 [ 129.112108][ T8763] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 129.112189][ T8763] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 129.112225][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.112326][ T8763] RIP: 0033:0x7f30e9efd550 [ 129.112343][ T8763] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 129.112364][ T8763] RSP: 002b:00007f30e8966f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 129.112461][ T8763] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f30e9efd550 [ 129.112472][ T8763] RDX: 0000000000000002 RSI: 00007f30e8966fa0 RDI: 00000000ffffff9c [ 129.112481][ T8763] RBP: 00007f30e8966fa0 R08: 0000000000000000 R09: 00007f30e8966cd5 [ 129.112490][ T8763] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 129.112500][ T8763] R13: 00007f30ea136038 R14: 00007f30ea135fa0 R15: 00007ffcdbef81e8 [ 129.112515][ T8763] [ 129.468806][ T8778] loop7: detected capacity change from 0 to 128 [ 129.494229][ T8778] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.517448][ T8781] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1579'. [ 129.565602][ T8784] hub 8-0:1.0: USB hub found [ 129.570530][ T8784] hub 8-0:1.0: 8 ports detected [ 129.667736][ T6267] kernel read not supported for file /sysvipc/msg (pid: 6267 comm: kworker/1:7) [ 129.742085][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1581'. [ 129.978025][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.986490][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.003049][ T8796] loop4: detected capacity change from 0 to 512 [ 130.020602][ T8796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.035396][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 130.035410][ T29] audit: type=1400 audit(136.012:5846): avc: denied { setattr } for pid=8795 comm="syz.4.1583" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.113425][ T8802] hub 8-0:1.0: USB hub found [ 130.118504][ T8802] hub 8-0:1.0: 8 ports detected [ 130.335391][ T8796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.400273][ T8806] loop0: detected capacity change from 0 to 4096 [ 130.408104][ T8806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.421727][ T8806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.447216][ T29] audit: type=1400 audit(136.422:5847): avc: denied { mounton } for pid=8805 comm="syz.0.1586" path="/42/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.554167][ T4368] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.581317][ T7990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.660250][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1592'. [ 130.671414][ T8818] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1592'. [ 130.782777][ T8822] loop0: detected capacity change from 0 to 512 [ 130.785930][ T8824] loop9: detected capacity change from 0 to 256 [ 130.795624][ T29] audit: type=1400 audit(136.762:5848): avc: denied { relabelfrom } for pid=8821 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 130.815195][ T29] audit: type=1400 audit(136.762:5849): avc: denied { relabelto } for pid=8821 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 130.857543][ T8827] hub 8-0:1.0: USB hub found [ 130.862487][ T8827] hub 8-0:1.0: 8 ports detected [ 130.918953][ T8824] FAULT_INJECTION: forcing a failure. [ 130.918953][ T8824] name failslab, interval 1, probability 0, space 0, times 0 [ 130.931714][ T8824] CPU: 1 UID: 0 PID: 8824 Comm: syz.9.1593 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.931752][ T8824] Tainted: [W]=WARN [ 130.931760][ T8824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.931774][ T8824] Call Trace: [ 130.931783][ T8824] [ 130.931859][ T8824] __dump_stack+0x1d/0x30 [ 130.931884][ T8824] dump_stack_lvl+0xe8/0x140 [ 130.931906][ T8824] dump_stack+0x15/0x1b [ 130.931970][ T8824] should_fail_ex+0x265/0x280 [ 130.931993][ T8824] should_failslab+0x8c/0xb0 [ 130.932017][ T8824] kmem_cache_alloc_noprof+0x50/0x310 [ 130.932104][ T8824] ? fat_parse_long+0x5d/0x430 [ 130.932139][ T8824] fat_parse_long+0x5d/0x430 [ 130.932166][ T8824] fat_search_long+0x1cc/0x9c0 [ 130.932224][ T8824] ? __d_lookup_rcu+0x28e/0x2a0 [ 130.932264][ T8824] vfat_lookup+0xd5/0x2d0 [ 130.932290][ T8824] ? __pfx_vfat_lookup+0x10/0x10 [ 130.932392][ T8824] path_openat+0xcf0/0x2170 [ 130.932478][ T8824] do_filp_open+0x109/0x230 [ 130.932505][ T8824] do_sys_openat2+0xa6/0x110 [ 130.932539][ T8824] __x64_sys_openat+0xf2/0x120 [ 130.932569][ T8824] x64_sys_call+0x2e9c/0x2ff0 [ 130.932662][ T8824] do_syscall_64+0xd2/0x200 [ 130.932687][ T8824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.932778][ T8824] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.932825][ T8824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.932846][ T8824] RIP: 0033:0x7f30e9efebe9 [ 130.932877][ T8824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.932894][ T8824] RSP: 002b:00007f30e8967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.932915][ T8824] RAX: ffffffffffffffda RBX: 00007f30ea135fa0 RCX: 00007f30e9efebe9 [ 130.932929][ T8824] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 130.932944][ T8824] RBP: 00007f30e8967090 R08: 0000000000000000 R09: 0000000000000000 [ 130.932957][ T8824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.932971][ T8824] R13: 00007f30ea136038 R14: 00007f30ea135fa0 R15: 00007ffcdbef81e8 [ 130.932991][ T8824] [ 130.936955][ T8822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.222879][ T8835] loop9: detected capacity change from 0 to 256 [ 131.259445][ T29] audit: type=1400 audit(137.242:5850): avc: denied { create } for pid=8821 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.279814][ T29] audit: type=1400 audit(137.242:5851): avc: denied { open } for pid=8836 comm="syz.9.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 131.298687][ T29] audit: type=1400 audit(137.242:5852): avc: denied { perfmon } for pid=8836 comm="syz.9.1598" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.319293][ T29] audit: type=1400 audit(137.242:5853): avc: denied { kernel } for pid=8836 comm="syz.9.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 131.338287][ T29] audit: type=1400 audit(137.242:5854): avc: denied { tracepoint } for pid=8836 comm="syz.9.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 131.357938][ T29] audit: type=1400 audit(137.262:5855): avc: denied { write } for pid=8821 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.385932][ T8839] hub 8-0:1.0: USB hub found [ 131.390699][ T8839] hub 8-0:1.0: 8 ports detected [ 131.408684][ T8840] bridge0: entered promiscuous mode [ 131.422643][ T8840] macsec1: entered promiscuous mode [ 131.428419][ T8840] bridge0: port 1(macsec1) entered blocking state [ 131.434943][ T8840] bridge0: port 1(macsec1) entered disabled state [ 131.703074][ T8840] macsec1: entered allmulticast mode [ 131.708432][ T8840] bridge0: entered allmulticast mode [ 131.715070][ T8840] macsec1: left allmulticast mode [ 131.720400][ T8840] bridge0: left allmulticast mode [ 131.726828][ T8845] loop9: detected capacity change from 0 to 512 [ 131.733788][ T8845] ext4: Bad value for 'inode_readahead_blks' [ 131.740945][ T8840] bridge0: left promiscuous mode [ 131.836142][ T7990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.850133][ T8848] loop4: detected capacity change from 0 to 512 [ 131.859198][ T8848] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1602: iget: bad extended attribute block 1 [ 131.872611][ T8848] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1602: couldn't read orphan inode 15 (err -117) [ 131.885445][ T8848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.904370][ T8850] loop0: detected capacity change from 0 to 512 [ 131.912764][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.925178][ T8850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.007708][ T8862] loop9: detected capacity change from 0 to 1024 [ 132.027493][ T8862] EXT4-fs: Ignoring removed nobh option [ 132.033481][ T8862] EXT4-fs: Ignoring removed bh option [ 132.041225][ T8862] EXT4-fs warning (device loop9): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop9. [ 132.041723][ T8850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.071842][ T8868] capability: warning: `syz.7.1608' uses 32-bit capabilities (legacy support in use) [ 132.231746][ T8865] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1607'. [ 132.336460][ T8879] loop0: detected capacity change from 0 to 512 [ 132.351719][ T8879] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.363716][ T8879] EXT4-fs (loop0): 1 truncate cleaned up [ 132.371275][ T8879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.456487][ T7990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.522471][ T8897] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 132.695746][ T8905] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1620'. [ 132.802794][ T8920] loop7: detected capacity change from 0 to 1764 [ 132.816783][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1626'. [ 132.880312][ T8916] loop8: detected capacity change from 0 to 512 [ 133.065828][ T8916] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1625: bg 0: block 248: padding at end of block bitmap is not set [ 133.123691][ T8930] loop4: detected capacity change from 0 to 512 [ 133.137294][ T8916] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1625: Failed to acquire dquot type 1 [ 133.187123][ T8916] EXT4-fs (loop8): 1 truncate cleaned up [ 133.209145][ T8930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8930 comm=syz.4.1630 [ 133.209169][ T8916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.237091][ T8930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8930 comm=syz.4.1630 [ 133.269639][ T8949] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1636'. [ 133.297449][ T5450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.328836][ T8956] SELinux: failed to load policy [ 133.504145][ T8979] macvlan2: entered promiscuous mode [ 133.509827][ T8979] macvlan2: entered allmulticast mode [ 133.531013][ T8980] loop7: detected capacity change from 0 to 512 [ 133.542915][ T8980] vfat: Unknown parameter 'nnonumtail' [ 133.622293][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1649'. [ 133.926490][ T9004] hub 8-0:1.0: USB hub found [ 133.931316][ T9004] hub 8-0:1.0: 8 ports detected [ 134.285498][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1654'. [ 134.414117][ T9019] loop9: detected capacity change from 0 to 512 [ 134.425831][ T9019] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 134.442227][ T9019] EXT4-fs (loop9): 1 truncate cleaned up [ 134.452226][ T9019] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.500617][ T9031] FAULT_INJECTION: forcing a failure. [ 134.500617][ T9031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.513762][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.0.1663 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.513801][ T9031] Tainted: [W]=WARN [ 134.513809][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.513823][ T9031] Call Trace: [ 134.513831][ T9031] [ 134.513857][ T9031] __dump_stack+0x1d/0x30 [ 134.513910][ T9031] dump_stack_lvl+0xe8/0x140 [ 134.513932][ T9031] dump_stack+0x15/0x1b [ 134.513951][ T9031] should_fail_ex+0x265/0x280 [ 134.514004][ T9031] should_fail+0xb/0x20 [ 134.514021][ T9031] should_fail_usercopy+0x1a/0x20 [ 134.514041][ T9031] _copy_from_iter+0xd2/0xe80 [ 134.514133][ T9031] ? _copy_from_iter+0x170/0xe80 [ 134.514165][ T9031] copy_page_from_iter+0x178/0x2a0 [ 134.514233][ T9031] skb_copy_datagram_from_iter+0x232/0x490 [ 134.514274][ T9031] tun_get_user+0xafa/0x2680 [ 134.514313][ T9031] ? ref_tracker_alloc+0x1f2/0x2f0 [ 134.514334][ T9031] ? selinux_file_permission+0x1e4/0x320 [ 134.514428][ T9031] tun_chr_write_iter+0x15e/0x210 [ 134.514465][ T9031] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 134.514499][ T9031] vfs_write+0x52a/0x960 [ 134.514541][ T9031] ksys_write+0xda/0x1a0 [ 134.514687][ T9031] __x64_sys_write+0x40/0x50 [ 134.514714][ T9031] x64_sys_call+0x27fe/0x2ff0 [ 134.514739][ T9031] do_syscall_64+0xd2/0x200 [ 134.514771][ T9031] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.514823][ T9031] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.514853][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.514877][ T9031] RIP: 0033:0x7f602314ebe9 [ 134.514935][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.514952][ T9031] RSP: 002b:00007f6021bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.515009][ T9031] RAX: ffffffffffffffda RBX: 00007f6023385fa0 RCX: 00007f602314ebe9 [ 134.515023][ T9031] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 134.515055][ T9031] RBP: 00007f6021bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.515134][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.515196][ T9031] R13: 00007f6023386038 R14: 00007f6023385fa0 R15: 00007ffe97a88f38 [ 134.515217][ T9031] [ 134.763818][ T9030] __nla_validate_parse: 1 callbacks suppressed [ 134.763862][ T9030] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1662'. [ 134.826479][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1664'. [ 134.858679][ T9019] lo speed is unknown, defaulting to 1000 [ 134.906828][ T9036] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1664'. [ 134.922136][ T9035] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1665'. [ 134.994717][ T9047] siw: device registration error -23 [ 135.023798][ T9054] loop8: detected capacity change from 0 to 128 [ 135.033028][ T9054] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.089437][ T9060] lo speed is unknown, defaulting to 1000 [ 135.107860][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 135.116930][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 135.158873][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 135.158889][ T29] audit: type=1400 audit(141.142:5998): avc: denied { name_bind } for pid=9056 comm="syz.0.1673" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 135.197833][ T5980] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.643538][ T9072] hub 8-0:1.0: USB hub found [ 135.648314][ T9072] hub 8-0:1.0: 8 ports detected [ 135.899140][ T9074] hub 8-0:1.0: USB hub found [ 135.904504][ T9074] hub 8-0:1.0: 8 ports detected [ 135.967419][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 135.994705][ T5450] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.278216][ T29] audit: type=1400 audit(142.092:5999): avc: denied { create } for pid=9077 comm="syz.7.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.297847][ T29] audit: type=1400 audit(142.092:6000): avc: denied { setopt } for pid=9077 comm="syz.7.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.317243][ T29] audit: type=1400 audit(142.092:6001): avc: denied { listen } for pid=9077 comm="syz.7.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.336343][ T29] audit: type=1400 audit(142.092:6002): avc: denied { bind } for pid=9077 comm="syz.7.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.358074][ T9071] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1677'. [ 136.368529][ T9076] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1678'. [ 136.378535][ T9079] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 136.386930][ T9079] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 136.439363][ T29] audit: type=1400 audit(142.302:6003): avc: denied { getopt } for pid=9081 comm="syz.8.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.458734][ T29] audit: type=1400 audit(142.302:6004): avc: denied { create } for pid=9081 comm="syz.8.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.478011][ T29] audit: type=1400 audit(142.302:6005): avc: denied { bind } for pid=9081 comm="syz.8.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.497310][ T29] audit: type=1400 audit(142.302:6006): avc: denied { setopt } for pid=9081 comm="syz.8.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.516716][ T29] audit: type=1400 audit(142.302:6007): avc: denied { write } for pid=9081 comm="syz.8.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.573664][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1683'. [ 136.592341][ T9092] loop7: detected capacity change from 0 to 512 [ 136.657504][ T9092] EXT4-fs (loop7): 1 orphan inode deleted [ 136.664197][ T9092] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.679173][ T9103] loop0: detected capacity change from 0 to 512 [ 136.686318][ T9103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.697612][ T9103] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 136.708384][ T31] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 136.734152][ T4368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.786061][ T9107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9107 comm=syz.4.1689 [ 136.802860][ T9107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9107 comm=syz.4.1689 [ 136.952637][ T9105] loop7: detected capacity change from 0 to 2048 [ 136.969768][ T9113] loop9: detected capacity change from 0 to 128 [ 136.974137][ T9105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 136.993171][ T9113] FAT-fs (loop9): Directory bread(block 32) failed [ 136.999907][ T9113] FAT-fs (loop9): Directory bread(block 33) failed [ 137.006465][ T9113] FAT-fs (loop9): Directory bread(block 34) failed [ 137.013343][ T9113] FAT-fs (loop9): Directory bread(block 35) failed [ 137.020134][ T9113] FAT-fs (loop9): Directory bread(block 36) failed [ 137.026986][ T9113] FAT-fs (loop9): Directory bread(block 37) failed [ 137.033945][ T9113] FAT-fs (loop9): Directory bread(block 38) failed [ 137.040724][ T9113] FAT-fs (loop9): Directory bread(block 39) failed [ 137.047812][ T9113] FAT-fs (loop9): Directory bread(block 40) failed [ 137.054693][ T9113] FAT-fs (loop9): Directory bread(block 41) failed [ 137.089791][ T9121] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.140340][ T9115] syz.9.1691: attempt to access beyond end of device [ 137.140340][ T9115] loop9: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 137.153737][ T9115] Buffer I/O error on dev loop9, logical block 1028, async page read [ 137.212113][ T9115] syz.9.1691: attempt to access beyond end of device [ 137.212113][ T9115] loop9: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 137.225658][ T9115] Buffer I/O error on dev loop9, logical block 41991, async page read [ 137.233885][ T9115] FAT-fs (loop9): Filesystem has been set read-only [ 137.248765][ T9112] syz.9.1691: attempt to access beyond end of device [ 137.248765][ T9112] loop9: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 137.262052][ T9112] Buffer I/O error on dev loop9, logical block 1028, async page read [ 137.284674][ T9112] syz.9.1691: attempt to access beyond end of device [ 137.284674][ T9112] loop9: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 137.298363][ T9112] Buffer I/O error on dev loop9, logical block 41991, async page read [ 137.307588][ T9115] syz.9.1691: attempt to access beyond end of device [ 137.307588][ T9115] loop9: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 137.320858][ T9115] Buffer I/O error on dev loop9, logical block 1028, async page read [ 137.340720][ T9115] syz.9.1691: attempt to access beyond end of device [ 137.340720][ T9115] loop9: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 137.354665][ T9115] Buffer I/O error on dev loop9, logical block 41991, async page read [ 137.362901][ T9112] syz.9.1691: attempt to access beyond end of device [ 137.362901][ T9112] loop9: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 137.376258][ T9112] Buffer I/O error on dev loop9, logical block 1028, async page read [ 137.384547][ T9112] syz.9.1691: attempt to access beyond end of device [ 137.384547][ T9112] loop9: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 137.398001][ T9112] Buffer I/O error on dev loop9, logical block 41991, async page read [ 137.406540][ T9115] syz.9.1691: attempt to access beyond end of device [ 137.406540][ T9115] loop9: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 137.419811][ T9115] Buffer I/O error on dev loop9, logical block 1028, async page read [ 137.427970][ T9115] syz.9.1691: attempt to access beyond end of device [ 137.427970][ T9115] loop9: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 137.441583][ T9115] Buffer I/O error on dev loop9, logical block 41991, async page read [ 137.465336][ T9135] loop4: detected capacity change from 0 to 164 [ 137.539146][ T9135] iso9660: Unknown parameter '000000000000000000030x000000000000000018446744073709551615' [ 137.621271][ T4368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 137.875184][ T9159] loop0: detected capacity change from 0 to 128 [ 137.892786][ T9159] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.010441][ T9164] tipc: Cannot configure node identity twice [ 138.154103][ T9176] loop8: detected capacity change from 0 to 2048 [ 138.171067][ T9176] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 138.242036][ T9180] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.637719][ T9192] FAULT_INJECTION: forcing a failure. [ 138.637719][ T9192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.651052][ T9192] CPU: 0 UID: 0 PID: 9192 Comm: syz.7.1715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 138.651087][ T9192] Tainted: [W]=WARN [ 138.651093][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.651106][ T9192] Call Trace: [ 138.651112][ T9192] [ 138.651120][ T9192] __dump_stack+0x1d/0x30 [ 138.651145][ T9192] dump_stack_lvl+0xe8/0x140 [ 138.651167][ T9192] dump_stack+0x15/0x1b [ 138.651254][ T9192] should_fail_ex+0x265/0x280 [ 138.651273][ T9192] should_fail_alloc_page+0xf2/0x100 [ 138.651306][ T9192] __alloc_frozen_pages_noprof+0xff/0x360 [ 138.651337][ T9192] alloc_pages_mpol+0xb3/0x250 [ 138.651441][ T9192] alloc_pages_noprof+0x90/0x130 [ 138.651471][ T9192] __pud_alloc+0x47/0x4c0 [ 138.651490][ T9192] handle_mm_fault+0x1882/0x2c20 [ 138.651510][ T9192] ? __rcu_read_unlock+0x4f/0x70 [ 138.651544][ T9192] do_user_addr_fault+0x3fe/0x1090 [ 138.651573][ T9192] ? obj_cgroup_charge_account+0x122/0x1a0 [ 138.651687][ T9192] exc_page_fault+0x62/0xa0 [ 138.651708][ T9192] asm_exc_page_fault+0x26/0x30 [ 138.651726][ T9192] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 138.651745][ T9192] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 138.651761][ T9192] RSP: 0018:ffffc90000ecbae0 EFLAGS: 00050212 [ 138.651776][ T9192] RAX: ffff888104353c20 RBX: ffff888104258040 RCX: 0000000000000032 [ 138.651863][ T9192] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffff888104258040 [ 138.651874][ T9192] RBP: 0000200000000000 R08: 00000000000004eb R09: 0000000000000000 [ 138.651885][ T9192] R10: 0001888104258040 R11: 0001888104258071 R12: 0000200000000032 [ 138.651897][ T9192] R13: ffffc90000ecbe08 R14: 0000000000000032 R15: 00007ffffffff000 [ 138.651913][ T9192] _copy_from_iter+0x144/0xe80 [ 138.651992][ T9192] ? alloc_pages_mpol+0x201/0x250 [ 138.652081][ T9192] copy_page_from_iter+0x178/0x2a0 [ 138.652104][ T9192] tun_get_user+0x679/0x2680 [ 138.652138][ T9192] ? ref_tracker_alloc+0x1f2/0x2f0 [ 138.652171][ T9192] tun_chr_write_iter+0x15e/0x210 [ 138.652228][ T9192] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 138.652253][ T9192] vfs_write+0x52a/0x960 [ 138.652283][ T9192] ksys_write+0xda/0x1a0 [ 138.652356][ T9192] __x64_sys_write+0x40/0x50 [ 138.652375][ T9192] x64_sys_call+0x27fe/0x2ff0 [ 138.652394][ T9192] do_syscall_64+0xd2/0x200 [ 138.652460][ T9192] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.652481][ T9192] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.652503][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.652523][ T9192] RIP: 0033:0x7f768103d69f [ 138.652560][ T9192] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 138.652576][ T9192] RSP: 002b:00007f767fa9f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 138.652592][ T9192] RAX: ffffffffffffffda RBX: 00007f7681275fa0 RCX: 00007f768103d69f [ 138.652602][ T9192] RDX: 0000000000000032 RSI: 0000200000000000 RDI: 00000000000000c8 [ 138.652613][ T9192] RBP: 00007f767fa9f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.652623][ T9192] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 138.652634][ T9192] R13: 00007f7681276038 R14: 00007f7681275fa0 R15: 00007ffc5d0727f8 [ 138.652649][ T9192] [ 139.023154][ T7990] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.068027][ T5450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 139.423649][ T9211] loop7: detected capacity change from 0 to 4096 [ 139.589003][ T9221] FAULT_INJECTION: forcing a failure. [ 139.589003][ T9221] name failslab, interval 1, probability 0, space 0, times 0 [ 139.601709][ T9221] CPU: 1 UID: 0 PID: 9221 Comm: syz.0.1725 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.601745][ T9221] Tainted: [W]=WARN [ 139.601753][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.601767][ T9221] Call Trace: [ 139.601817][ T9221] [ 139.601825][ T9221] __dump_stack+0x1d/0x30 [ 139.601914][ T9221] dump_stack_lvl+0xe8/0x140 [ 139.601934][ T9221] dump_stack+0x15/0x1b [ 139.601952][ T9221] should_fail_ex+0x265/0x280 [ 139.602031][ T9221] should_failslab+0x8c/0xb0 [ 139.602071][ T9221] kmem_cache_alloc_noprof+0x50/0x310 [ 139.602095][ T9221] ? sk_prot_alloc+0x3f/0x190 [ 139.602117][ T9221] ? should_failslab+0x8c/0xb0 [ 139.602220][ T9221] sk_prot_alloc+0x3f/0x190 [ 139.602241][ T9221] sk_alloc+0x34/0x360 [ 139.602260][ T9221] inet6_create+0x3bd/0x870 [ 139.602360][ T9221] __sock_create+0x2ec/0x5b0 [ 139.602394][ T9221] sock_create_kern+0x38/0x50 [ 139.602426][ T9221] mptcp_subflow_create_socket+0x84/0x630 [ 139.602496][ T9221] __mptcp_nmpc_sk+0xb3/0x3a0 [ 139.602519][ T9221] mptcp_bind+0x71/0x2f0 [ 139.602536][ T9221] __sys_bind+0x1ce/0x2a0 [ 139.602585][ T9221] __x64_sys_bind+0x3f/0x50 [ 139.602615][ T9221] x64_sys_call+0x2b6e/0x2ff0 [ 139.602718][ T9221] do_syscall_64+0xd2/0x200 [ 139.602767][ T9221] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.602864][ T9221] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.602888][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.602911][ T9221] RIP: 0033:0x7f602314ebe9 [ 139.602928][ T9221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.602975][ T9221] RSP: 002b:00007f6021bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 139.602995][ T9221] RAX: ffffffffffffffda RBX: 00007f6023385fa0 RCX: 00007f602314ebe9 [ 139.603081][ T9221] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 139.603095][ T9221] RBP: 00007f6021bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.603109][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.603121][ T9221] R13: 00007f6023386038 R14: 00007f6023385fa0 R15: 00007ffe97a88f38 [ 139.603137][ T9221] [ 139.995815][ T9229] loop4: detected capacity change from 0 to 128 [ 140.003998][ T9229] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.046792][ T9227] tipc: Cannot configure node identity twice [ 140.099301][ T9232] hub 8-0:1.0: USB hub found [ 140.104301][ T9232] hub 8-0:1.0: 8 ports detected [ 140.456524][ T9241] __nla_validate_parse: 33 callbacks suppressed [ 140.456568][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1732'. [ 140.474903][ T9242] netlink: 428 bytes leftover after parsing attributes in process `syz.8.1731'. [ 140.636348][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 140.636368][ T29] audit: type=1400 audit(146.512:6568): avc: denied { read write } for pid=9249 comm="syz.8.1736" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.666510][ T29] audit: type=1400 audit(146.512:6569): avc: denied { open } for pid=9249 comm="syz.8.1736" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.690956][ T29] audit: type=1400 audit(146.542:6570): avc: denied { bind } for pid=9253 comm="syz.8.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.709707][ T29] audit: type=1400 audit(146.542:6571): avc: denied { name_bind } for pid=9253 comm="syz.8.1738" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 140.729995][ T29] audit: type=1400 audit(146.542:6572): avc: denied { node_bind } for pid=9253 comm="syz.8.1738" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 140.751583][ T29] audit: type=1400 audit(146.542:6573): avc: denied { read } for pid=9253 comm="syz.8.1738" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.006755][ T9259] hub 8-0:1.0: USB hub found [ 141.013127][ T9259] hub 8-0:1.0: 8 ports detected [ 141.780999][ T9263] loop0: detected capacity change from 0 to 1764 [ 141.873128][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.882309][ T29] audit: type=1400 audit(147.842:6574): avc: denied { bind } for pid=9266 comm="syz.9.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.902095][ T29] audit: type=1400 audit(147.842:6575): avc: denied { setopt } for pid=9266 comm="syz.9.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.921994][ T29] audit: type=1400 audit(147.842:6576): avc: denied { create } for pid=9266 comm="syz.9.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.940976][ T29] audit: type=1400 audit(147.842:6577): avc: denied { setopt } for pid=9266 comm="syz.9.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.025830][ T9274] loop9: detected capacity change from 0 to 2048 [ 142.062168][ T9274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 142.124768][ T9288] loop7: detected capacity change from 0 to 128 [ 142.131655][ T9288] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 142.144224][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1747'. [ 142.159678][ T9288] sd 0:0:1:0: device reset [ 142.161552][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 142.176548][ T9294] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1749'. [ 142.177883][ T9292] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.212579][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1745'. [ 142.221772][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1745'. [ 142.232927][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1745'. [ 142.266647][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1745'. [ 142.275653][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1745'. [ 142.870586][ T5980] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 142.925685][ T9312] hub 8-0:1.0: USB hub found [ 142.930597][ T9312] hub 8-0:1.0: 8 ports detected [ 143.256316][ T9326] hub 8-0:1.0: USB hub found [ 143.261242][ T9326] hub 8-0:1.0: 8 ports detected [ 143.585632][ T9327] hub 8-0:1.0: USB hub found [ 143.590474][ T9327] hub 8-0:1.0: 8 ports detected [ 144.097546][ T9332] IPv6: Can't replace route, no match found [ 144.350734][ T9343] loop8: detected capacity change from 0 to 8192 [ 144.366053][ T9343] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.366464][ T9345] loop4: detected capacity change from 0 to 2048 [ 144.481309][ T9345] Alternate GPT is invalid, using primary GPT. [ 144.487689][ T9345] loop4: p2 p3 p7 [ 145.250850][ T9395] loop9: detected capacity change from 0 to 2048 [ 145.261173][ T9391] loop7: detected capacity change from 0 to 256 [ 145.282438][ T9395] Alternate GPT is invalid, using primary GPT. [ 145.288877][ T9395] loop9: p2 p3 p7 [ 145.392403][ T9401] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 145.416226][ T9407] netlink: 'syz.9.1784': attribute type 21 has an invalid length. [ 145.602324][ T9414] loop8: detected capacity change from 0 to 512 [ 145.793663][ T9414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.835547][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 145.835563][ T29] audit: type=1400 audit(151.812:6890): avc: denied { write } for pid=9419 comm="syz.4.1789" name="tcp" dev="proc" ino=4026532440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 145.922651][ T29] audit: type=1400 audit(151.892:6891): avc: denied { create } for pid=9412 comm="syz.8.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.922684][ T29] audit: type=1400 audit(151.892:6892): avc: denied { write } for pid=9412 comm="syz.8.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.922705][ T29] audit: type=1400 audit(151.892:6893): avc: denied { map_create } for pid=9412 comm="syz.8.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 145.922726][ T29] audit: type=1400 audit(151.902:6894): avc: denied { prog_load } for pid=9412 comm="syz.8.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 145.922750][ T29] audit: type=1400 audit(151.902:6895): avc: denied { bpf } for pid=9412 comm="syz.8.1785" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.006911][ T9413] __nla_validate_parse: 28 callbacks suppressed [ 146.006926][ T9413] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1787'. [ 146.010303][ T29] audit: type=1400 audit(151.982:6896): avc: denied { map_read map_write } for pid=9411 comm="syz.9.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.010339][ T29] audit: type=1400 audit(151.982:6897): avc: denied { perfmon } for pid=9411 comm="syz.9.1787" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.187826][ T29] audit: type=1400 audit(152.162:6898): avc: denied { read write } for pid=7990 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 146.187861][ T29] audit: type=1400 audit(152.162:6899): avc: denied { open } for pid=7990 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 146.267856][ T9429] FAULT_INJECTION: forcing a failure. [ 146.267856][ T9429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.383857][ T9429] CPU: 1 UID: 0 PID: 9429 Comm: syz.9.1792 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 146.383891][ T9429] Tainted: [W]=WARN [ 146.383897][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.383908][ T9429] Call Trace: [ 146.383913][ T9429] [ 146.383920][ T9429] __dump_stack+0x1d/0x30 [ 146.383941][ T9429] dump_stack_lvl+0xe8/0x140 [ 146.384004][ T9429] dump_stack+0x15/0x1b [ 146.384033][ T9429] should_fail_ex+0x265/0x280 [ 146.384090][ T9429] should_fail+0xb/0x20 [ 146.384106][ T9429] should_fail_usercopy+0x1a/0x20 [ 146.384126][ T9429] _copy_from_iter+0xd2/0xe80 [ 146.384154][ T9429] ? alloc_pages_mpol+0x201/0x250 [ 146.384213][ T9429] copy_page_from_iter+0x178/0x2a0 [ 146.384239][ T9429] tun_get_user+0x679/0x2680 [ 146.384375][ T9429] ? ref_tracker_alloc+0x1f2/0x2f0 [ 146.384402][ T9429] tun_chr_write_iter+0x15e/0x210 [ 146.384434][ T9429] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 146.384487][ T9429] vfs_write+0x52a/0x960 [ 146.384510][ T9429] ksys_write+0xda/0x1a0 [ 146.384534][ T9429] __x64_sys_write+0x40/0x50 [ 146.384556][ T9429] x64_sys_call+0x27fe/0x2ff0 [ 146.384612][ T9429] do_syscall_64+0xd2/0x200 [ 146.384640][ T9429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 146.384662][ T9429] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.384711][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.384812][ T9429] RIP: 0033:0x7f30e9efd69f [ 146.384829][ T9429] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 146.384845][ T9429] RSP: 002b:00007f30e8967000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 146.384931][ T9429] RAX: ffffffffffffffda RBX: 00007f30ea135fa0 RCX: 00007f30e9efd69f [ 146.384943][ T9429] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 00000000000000c8 [ 146.384955][ T9429] RBP: 00007f30e8967090 R08: 0000000000000000 R09: 0000000000000000 [ 146.384969][ T9429] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 146.384980][ T5450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.384992][ T9429] R13: 00007f30ea136038 R14: 00007f30ea135fa0 R15: 00007ffcdbef81e8 [ 146.385012][ T9429] [ 146.653248][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1791'. [ 146.664917][ T9446] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1791'. [ 146.668129][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1798'. [ 146.691937][ T9449] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1798'. [ 146.772369][ T9459] netlink: 'syz.0.1801': attribute type 3 has an invalid length. [ 146.796604][ T9466] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1802'. [ 147.106044][ T9477] lo speed is unknown, defaulting to 1000 [ 147.618668][ T9482] loop8: detected capacity change from 0 to 128 [ 147.693975][ T9482] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.718305][ T9493] FAULT_INJECTION: forcing a failure. [ 147.718305][ T9493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.731469][ T9493] CPU: 0 UID: 0 PID: 9493 Comm: syz.4.1811 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.731505][ T9493] Tainted: [W]=WARN [ 147.731511][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.731522][ T9493] Call Trace: [ 147.731571][ T9493] [ 147.731579][ T9493] __dump_stack+0x1d/0x30 [ 147.731602][ T9493] dump_stack_lvl+0xe8/0x140 [ 147.731620][ T9493] dump_stack+0x15/0x1b [ 147.731636][ T9493] should_fail_ex+0x265/0x280 [ 147.731655][ T9493] should_fail+0xb/0x20 [ 147.731723][ T9493] should_fail_usercopy+0x1a/0x20 [ 147.731746][ T9493] copy_fpstate_to_sigframe+0x628/0x7d0 [ 147.731779][ T9493] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 147.731815][ T9493] ? x86_task_fpu+0x36/0x60 [ 147.731928][ T9493] get_sigframe+0x34d/0x490 [ 147.731945][ T9493] ? get_signal+0xdc8/0xf70 [ 147.732106][ T9493] x64_setup_rt_frame+0xa8/0x580 [ 147.732137][ T9493] arch_do_signal_or_restart+0x27c/0x480 [ 147.732163][ T9493] irqentry_exit_to_user_mode+0x5e/0xa0 [ 147.732191][ T9493] irqentry_exit+0x12/0x50 [ 147.732229][ T9493] exc_general_protection+0x15b/0x1f0 [ 147.732273][ T9493] asm_exc_general_protection+0x26/0x30 [ 147.732304][ T9493] RIP: 0033:0x7fa114387739 [ 147.732321][ T9493] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 147.732338][ T9493] RSP: 002b:00007fa112e167c8 EFLAGS: 00010283 [ 147.732355][ T9493] RAX: 0000000000000999 RBX: 00007fa112e16d30 RCX: 00007fa1145a8120 [ 147.732369][ T9493] RDX: 9999999999999999 RSI: 00007fa114431b31 RDI: 9999999999999999 [ 147.732427][ T9493] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 147.732440][ T9493] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 147.732459][ T9493] R13: 00007fa112e16eb0 R14: 9999999999999999 R15: 0000000000000000 [ 147.732555][ T9493] [ 147.755188][ T9499] loop7: detected capacity change from 0 to 4096 [ 147.911807][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1816'. [ 147.923604][ T9499] EXT4-fs: test_dummy_encryption option not supported [ 148.001809][ T9510] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1816'. [ 148.023648][ T9510] bond0 (unregistering): Released all slaves [ 148.056928][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'. [ 148.090254][ T9513] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1818'. [ 148.402175][ T5450] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.672439][ T9530] hub 8-0:1.0: USB hub found [ 148.677655][ T9530] hub 8-0:1.0: 8 ports detected [ 149.215889][ T9538] FAULT_INJECTION: forcing a failure. [ 149.215889][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 149.228838][ T9538] CPU: 1 UID: 0 PID: 9538 Comm: syz.0.1829 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.228874][ T9538] Tainted: [W]=WARN [ 149.228882][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.228896][ T9538] Call Trace: [ 149.228905][ T9538] [ 149.228932][ T9538] __dump_stack+0x1d/0x30 [ 149.228957][ T9538] dump_stack_lvl+0xe8/0x140 [ 149.229007][ T9538] dump_stack+0x15/0x1b [ 149.229034][ T9538] should_fail_ex+0x265/0x280 [ 149.229059][ T9538] should_failslab+0x8c/0xb0 [ 149.229088][ T9538] kmem_cache_alloc_noprof+0x50/0x310 [ 149.229116][ T9538] ? getname_flags+0x80/0x3b0 [ 149.229155][ T9538] getname_flags+0x80/0x3b0 [ 149.229179][ T9538] do_sys_openat2+0x60/0x110 [ 149.229301][ T9538] __x64_sys_openat+0xf2/0x120 [ 149.229331][ T9538] x64_sys_call+0x2e9c/0x2ff0 [ 149.229420][ T9538] do_syscall_64+0xd2/0x200 [ 149.229444][ T9538] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.229466][ T9538] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.229530][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.229554][ T9538] RIP: 0033:0x7f602314d550 [ 149.229570][ T9538] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 149.229586][ T9538] RSP: 002b:00007f6021bb6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 149.229604][ T9538] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f602314d550 [ 149.229616][ T9538] RDX: 0000000000000000 RSI: 00007f6021bb6fa0 RDI: 00000000ffffff9c [ 149.229664][ T9538] RBP: 00007f6021bb6fa0 R08: 0000000000000000 R09: 00007f6021bb6cd5 [ 149.229677][ T9538] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 149.229688][ T9538] R13: 00007f6023386038 R14: 00007f6023385fa0 R15: 00007ffe97a88f38 [ 149.229705][ T9538] [ 149.477920][ T9545] FAULT_INJECTION: forcing a failure. [ 149.477920][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 149.490766][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.8.1831 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.490805][ T9545] Tainted: [W]=WARN [ 149.490812][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.490825][ T9545] Call Trace: [ 149.490832][ T9545] [ 149.490882][ T9545] __dump_stack+0x1d/0x30 [ 149.490907][ T9545] dump_stack_lvl+0xe8/0x140 [ 149.490927][ T9545] dump_stack+0x15/0x1b [ 149.490945][ T9545] should_fail_ex+0x265/0x280 [ 149.490965][ T9545] should_failslab+0x8c/0xb0 [ 149.490989][ T9545] __kmalloc_cache_node_noprof+0x54/0x320 [ 149.491091][ T9545] ? __get_vm_area_node+0x106/0x1d0 [ 149.491156][ T9545] __get_vm_area_node+0x106/0x1d0 [ 149.491182][ T9545] __vmalloc_node_range_noprof+0x273/0xe00 [ 149.491211][ T9545] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 149.491305][ T9545] ? avc_has_perm_noaudit+0x1b1/0x200 [ 149.491427][ T9545] ? cred_has_capability+0x210/0x280 [ 149.491451][ T9545] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 149.491479][ T9545] __vmalloc_noprof+0x83/0xc0 [ 149.491518][ T9545] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 149.491612][ T9545] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 149.491640][ T9545] ? bpf_prog_alloc+0x2a/0x150 [ 149.491667][ T9545] bpf_prog_alloc+0x3c/0x150 [ 149.491734][ T9545] bpf_prog_load+0x514/0x1070 [ 149.491767][ T9545] ? security_bpf+0x2b/0x90 [ 149.491799][ T9545] __sys_bpf+0x462/0x7b0 [ 149.491836][ T9545] __x64_sys_bpf+0x41/0x50 [ 149.491868][ T9545] x64_sys_call+0x2aea/0x2ff0 [ 149.491890][ T9545] do_syscall_64+0xd2/0x200 [ 149.491922][ T9545] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.491947][ T9545] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.491974][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.491995][ T9545] RIP: 0033:0x7f72b1a5ebe9 [ 149.492014][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.492067][ T9545] RSP: 002b:00007f72b04c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.492088][ T9545] RAX: ffffffffffffffda RBX: 00007f72b1c95fa0 RCX: 00007f72b1a5ebe9 [ 149.492102][ T9545] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 149.492195][ T9545] RBP: 00007f72b04c7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.492208][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.492281][ T9545] R13: 00007f72b1c96038 R14: 00007f72b1c95fa0 R15: 00007ffff7826508 [ 149.492366][ T9545] [ 149.492403][ T9545] syz.8.1831: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 149.544879][ T9549] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 149.546937][ T9545] ,cpuset=/,mems_allowed=0 [ 149.757278][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.8.1831 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.757376][ T9545] Tainted: [W]=WARN [ 149.757381][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.757390][ T9545] Call Trace: [ 149.757395][ T9545] [ 149.757401][ T9545] __dump_stack+0x1d/0x30 [ 149.757417][ T9545] dump_stack_lvl+0xe8/0x140 [ 149.757430][ T9545] dump_stack+0x15/0x1b [ 149.757461][ T9545] warn_alloc+0x12b/0x1a0 [ 149.757565][ T9545] __vmalloc_node_range_noprof+0x297/0xe00 [ 149.757589][ T9545] ? avc_has_perm_noaudit+0x1b1/0x200 [ 149.757738][ T9545] ? cred_has_capability+0x210/0x280 [ 149.757761][ T9545] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 149.757790][ T9545] __vmalloc_noprof+0x83/0xc0 [ 149.757848][ T9545] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 149.757875][ T9545] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 149.757927][ T9545] ? bpf_prog_alloc+0x2a/0x150 [ 149.757993][ T9545] bpf_prog_alloc+0x3c/0x150 [ 149.758018][ T9545] bpf_prog_load+0x514/0x1070 [ 149.758050][ T9545] ? security_bpf+0x2b/0x90 [ 149.758149][ T9545] __sys_bpf+0x462/0x7b0 [ 149.758231][ T9545] __x64_sys_bpf+0x41/0x50 [ 149.758265][ T9545] x64_sys_call+0x2aea/0x2ff0 [ 149.758290][ T9545] do_syscall_64+0xd2/0x200 [ 149.758321][ T9545] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.758460][ T9545] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.758545][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.758571][ T9545] RIP: 0033:0x7f72b1a5ebe9 [ 149.758588][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.758608][ T9545] RSP: 002b:00007f72b04c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.758630][ T9545] RAX: ffffffffffffffda RBX: 00007f72b1c95fa0 RCX: 00007f72b1a5ebe9 [ 149.758645][ T9545] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 149.758659][ T9545] RBP: 00007f72b04c7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.758746][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.758815][ T9545] R13: 00007f72b1c96038 R14: 00007f72b1c95fa0 R15: 00007ffff7826508 [ 149.758835][ T9545] [ 149.758981][ T9545] Mem-Info: [ 149.758989][ T9545] active_anon:9328 inactive_anon:8 isolated_anon:0 [ 149.758989][ T9545] active_file:22224 inactive_file:2488 isolated_file:0 [ 149.758989][ T9545] unevictable:0 dirty:217 writeback:0 [ 149.758989][ T9545] slab_reclaimable:3800 slab_unreclaimable:38788 [ 149.758989][ T9545] mapped:36947 shmem:3642 pagetables:1707 [ 149.758989][ T9545] sec_pagetables:0 bounce:0 [ 149.758989][ T9545] kernel_misc_reclaimable:0 [ 149.758989][ T9545] free:1821887 free_pcp:37023 free_cma:0 [ 149.759143][ T9545] Node 0 active_anon:37312kB inactive_anon:32kB active_file:88896kB inactive_file:9952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147788kB dirty:868kB writeback:0kB shmem:14568kB kernel_stack:4480kB pagetables:6828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.759238][ T9545] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.759424][ T9545] lowmem_reserve[]: 0 2883 7862 7862 [ 149.759453][ T9545] Node 0 DMA32 free:2949196kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 149.759568][ T9545] lowmem_reserve[]: 0 0 4978 4978 [ 149.759599][ T9545] Node 0 Normal free:4322992kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37312kB inactive_anon:32kB active_file:88896kB inactive_file:9952kB unevictable:0kB writepending:868kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:144444kB local_pcp:80020kB free_cma:0kB [ 149.759718][ T9545] lowmem_reserve[]: 0 0 0 0 [ 149.759905][ T9545] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.760060][ T9545] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949196kB [ 149.760330][ T9545] Node 0 Normal: 2652*4kB (UME) 1172*8kB (UM) 496*16kB (UME) 282*32kB (UME) 54*64kB (UME) 34*128kB (UME) 32*256kB (UME) 14*512kB (U) 3*1024kB (UM) 2*2048kB (UM) 1039*4096kB (UM) = 4323024kB [ 149.760544][ T9545] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 149.760560][ T9545] 28349 total pagecache pages [ 149.760568][ T9545] 5 pages in swap cache [ 149.760575][ T9545] Free swap = 124976kB [ 149.760580][ T9545] Total swap = 124996kB [ 149.760586][ T9545] 2097051 pages RAM [ 149.760592][ T9545] 0 pages HighMem/MovableOnly [ 149.760597][ T9545] 80444 pages reserved [ 149.773168][ T9549] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.774585][ T9549] bond0: (slave team0): Enslaving as an active interface with an up link [ 149.814244][ T9553] loop4: detected capacity change from 0 to 1024 [ 149.814714][ T9553] EXT4-fs: Ignoring removed oldalloc option [ 149.814864][ T9553] EXT4-fs: Ignoring removed bh option [ 149.818184][ T9550] 9pnet_fd: Insufficient options for proto=fd [ 149.865073][ T9553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.886875][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.107184][ T9573] loop8: detected capacity change from 0 to 128 [ 150.154692][ T9575] hub 8-0:1.0: USB hub found [ 150.154750][ T9575] hub 8-0:1.0: 8 ports detected [ 150.159462][ T9571] loop7: detected capacity change from 0 to 512 [ 150.357759][ T9573] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.393320][ T9571] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1840: iget: bad extended attribute block 1 [ 150.393617][ T9571] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1840: couldn't read orphan inode 15 (err -117) [ 150.394202][ T9571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.402602][ T9571] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 150.415001][ T4368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.436347][ T9579] loop7: detected capacity change from 0 to 128 [ 150.752987][ T9579] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.859508][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 150.859524][ T29] audit: type=1326 audit(156.842:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9588 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602314ebe9 code=0x7ffc0000 [ 150.888960][ T29] audit: type=1326 audit(156.842:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9588 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602314ebe9 code=0x7ffc0000 [ 150.936749][ T29] audit: type=1400 audit(156.912:7093): avc: denied { tracepoint } for pid=9597 comm="syz.0.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 150.949723][ T9598] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 150.966058][ T5450] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.004383][ T9601] loop8: detected capacity change from 0 to 4096 [ 151.011362][ T9601] EXT4-fs: test_dummy_encryption option not supported [ 151.100930][ T8399] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 151.108478][ T29] audit: type=1400 audit(157.082:7094): avc: denied { read write } for pid=9608 comm="syz.9.1852" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.108420][ T8399] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 151.108576][ T29] ================================================================== [ 151.108588][ T8399] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 151.108611][ T29] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 151.108645][ T29] [ 151.108651][ T29] write to 0xffffffff88e42c89 of 24 bytes by task 8399 on cpu 0: [ 151.108668][ T29] vsnprintf+0x2ce/0x890 [ 151.108685][ T29] pointer+0x833/0xcf0 [ 151.108701][ T29] vsnprintf+0x491/0x890 [ 151.108719][ T29] vscnprintf+0x41/0x90 [ 151.108737][ T29] printk_sprint+0x30/0x2d0 [ 151.108754][ T29] vprintk_store+0x599/0x860 [ 151.108787][ T29] vprintk_emit+0x178/0x650 [ 151.108805][ T29] dev_vprintk_emit+0x242/0x2a0 [ 151.108826][ T29] dev_printk_emit+0x84/0xb0 [ 151.108849][ T29] __dev_printk+0xf3/0x110 [ 151.108876][ T29] _dev_warn+0x9b/0xd0 [ 151.108896][ T29] hid_parser_main+0x79a/0x7f0 [ 151.108923][ T29] hid_open_report+0x48e/0x7a0 [ 151.108950][ T29] hid_generic_probe+0x33/0x70 [ 151.108975][ T29] hid_device_probe+0x2c8/0x490 [ 151.109004][ T29] really_probe+0x1bc/0x5c0 [ 151.109028][ T29] __driver_probe_device+0x121/0x190 [ 151.109050][ T29] driver_probe_device+0x37/0x2f0 [ 151.109076][ T29] __device_attach_driver+0x205/0x310 [ 151.109102][ T29] bus_for_each_drv+0x1bd/0x230 [ 151.109134][ T29] __device_attach+0x1c7/0x290 [ 151.109157][ T29] device_initial_probe+0x1a/0x30 [ 151.109181][ T29] bus_probe_device+0x143/0x1d0 [ 151.109212][ T29] device_add+0x5c9/0x770 [ 151.109234][ T29] hid_add_device+0x273/0x2f0 [ 151.109272][ T29] uhid_device_add_worker+0x2b/0xa0 [ 151.109297][ T29] process_scheduled_works+0x4ce/0x9d0 [ 151.109323][ T29] worker_thread+0x582/0x770 [ 151.109351][ T29] kthread+0x486/0x510 [ 151.109373][ T29] ret_from_fork+0xda/0x150 [ 151.109397][ T29] ret_from_fork_asm+0x1a/0x30 [ 151.109422][ T29] [ 151.109429][ T29] read to 0xffffffff88e42ca0 of 8 bytes by task 29 on cpu 1: [ 151.109448][ T29] data_push_tail+0xfd/0x420 [ 151.109483][ T29] data_alloc+0xbf/0x2b0 [ 151.109514][ T29] prb_reserve+0x808/0xaf0 [ 151.109546][ T29] vprintk_store+0x56d/0x860 [ 151.109579][ T29] vprintk_emit+0x178/0x650 [ 151.109597][ T29] vprintk_default+0x26/0x30 [ 151.109617][ T29] vprintk+0x1d/0x30 [ 151.109642][ T29] _printk+0x79/0xa0 [ 151.109670][ T29] kauditd_hold_skb+0x1b1/0x1c0 [ 151.109690][ T29] kauditd_send_queue+0x273/0x2c0 [ 151.109709][ T29] kauditd_thread+0x421/0x630 [ 151.109741][ T29] kthread+0x486/0x510 [ 151.109760][ T29] ret_from_fork+0xda/0x150 [ 151.109781][ T29] ret_from_fork_asm+0x1a/0x30 [ 151.109803][ T29] [ 151.109809][ T29] value changed: 0x00000000ffffe813 -> 0x00000000000a3078 [ 151.109846][ T29] [ 151.109851][ T29] Reported by Kernel Concurrency Sanitizer on: [ 151.109866][ T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.109899][ T29] Tainted: [W]=WARN [ 151.109908][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.109923][ T29] ================================================================== [ 151.189574][ T8399] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 151.193880][ T29] audit: type=1400 audit(157.082:7095): avc: denied { open } for pid=9608 comm="syz.9.1852" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.420955][ T9612] lo speed is unknown, defaulting to 1000 [ 151.483965][ T4368] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.599070][ T9619] hub 8-0:1.0: USB hub found [ 151.606109][ T9619] hub 8-0:1.0: 8 ports detected