last executing test programs: 1m21.379887984s ago: executing program 1 (id=23): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000000580)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8912, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000200)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) setreuid(r5, r6) 1m21.367988875s ago: executing program 1 (id=24): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tmmr'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m21.319401096s ago: executing program 1 (id=26): perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7fff, 0x401}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x6, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) tee(r0, r2, 0x1, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="190000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 1m19.916816163s ago: executing program 1 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000000)=0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000459410005680c4909500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xfb) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000000000000000", @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffb8, 0x0, 0x0, 0x10, 0x20000}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x4}, 0x18) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m19.521958251s ago: executing program 1 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) close(r3) 1m19.329175165s ago: executing program 1 (id=46): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x4a) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r2, &(0x7f0000000180)=""/174, 0xae) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) setgid(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 1m19.319637375s ago: executing program 32 (id=46): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x4a) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r2, &(0x7f0000000180)=""/174, 0xae) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) setgid(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 46.832812332s ago: executing program 5 (id=698): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="180500002000000000003a9e03624c1ab9c7b180ffa358ed0d000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff000000a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}], {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x200000000}, 0x18) r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000800)='rxrpc_s\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, r10) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da603fa09a", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) write$binfmt_script(r7, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) vmsplice(r6, &(0x7f00000007c0)=[{&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000480)="92", 0x1}, {&(0x7f0000000740)="a824ab84be32f966a7273820af2336d12a68e0b9ba9f77fc255460c3f7b467e4c8798274eb2dbd6100dc6a55404c7ff7f15306367cd0b7", 0x37}, {&(0x7f0000000780)="d428932531f2e7281805", 0xa}], 0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x8, 0x10, 0x2, 0xdf00000000000000}, &(0x7f0000000400)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r11, 0x3}, 0x8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000002c0)=0x3a7, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000240)="ac", 0x1}], 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) 46.641468096s ago: executing program 5 (id=702): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x4004040) 46.556095747s ago: executing program 5 (id=703): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 46.41416282s ago: executing program 5 (id=707): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0x2, 0x838, &(0x7f0000000cc0)="$eJzs3U9sHFcZAPBvXDtOHDVUgEoUpekkKVIiUnfXbl2sHsp2PXamtXet3TVKhKq2apwS1WmrVlVphGhyaQGBECeOpdeql0oggZBA4gCckOiBC4dKlXoBFQQSAiGQ0c7uJv63dv44Tim/3yr7Zt988+a92fF8no1nNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKpTpVI5idm8tnAq7a861ajPbTK/194vVhWbrDciaf+L3btjf6dq/2evzL6z/XQkDnZeHYzd7WJ3XNh75x0PfWZwoLf8Jh26Xof7zxpa+SKJuBiRDEYsLS2+eBM6soO+/bPuxO6rXuSfy+3nmayWN+v5XGUmS/NmPZ2cmCjdd3K6mU7ns1nzdLOVzaXVRlZp1RvpserxtDw5OZ5mo6frC7WZqcps1qt88N6xUmkifXR0Pqs0mvXafY+ONocjn53NazNFzFjplWjHPNjeER/LW2krq8yl6dlzS4vjW3W1HVReVTO8asc5eM8dH778wd/OLbZ3yH6NJN0dc6xcHhsrTzww+cCDpdLgWGlsdUVpjbgcEQND0Y64KTstt9beDeoGu3vMuhkRy5/apqM33JiBbv6P2cijFgtxKtJIY6B4vvIYimpMRSPqMdd+/fuhNfPX5f/P3/fn32623pX5v5fl91+ZfSCK/H+o8+pQv/y/rhfb8Bjs12rtnU5vVta9FK/GhXg2noqlWIrFeHHtUrvWLrHB42pibvgx3CkHtrfVmciiFnk0I4k85qJS1KRFTT3SmIyJmIhSPBEnYzqakcZ05DEbWTTjdDSjFVmxR1WjEVlUohX1aEQax6IaxyONckzGZIxHGlmMxumox0LUYiamolK0cjbOFdt9fE2/7vzGkz995ncfvtmevhxU3mQgycWI2Pt+xF83CVqX7q8h/7cjBrp7947kJHbI7i3f1dVzt+W4Ddthucj/g7e6GwAAAMBNlBSfvicRMRR3FVPT+Wz2lVvdLQAAAGAbFX/XfLBdDLWn7oqkff5f2iDyvYjhHe8eAAAAsA2S4hq7JCJG4u7OVO9yqY0+BAAAAAD+BxX//3+oXYxEvFZUOP8HAACAT5hv9rvH/ge7invsjkRzfjj5+V+i0RhKLs2fuic5X2nHVc7f1lmuW3z5cout6QPJvm4jRTExeGFvEhGD1exg0rv75b+71xJ81H76z/Lycm/xfvf6T7boQGzegeJVfCcOd2IOn+mUZ3pzOmsZmc5ns9FqffahctL9cKT18nPnvhbF8L9Vm9uXxNlzS4ujTz+/dKboy6V2K5fOd28Pn/SWiuhcULFJX5Z7V1PctfGIh4oLMbrrHemst7Ry/N27yQ5sPv5k5TpfjyOdmCMjnXJk9fh3t9dZHn2oHJXKvoFWdqr18vKK0Xd7Ub4y8uHeaJNreBdej6OdmKPHjnaKDXoxtqoXz63vxdjK7X912+Kqe/Hm4ddO/f1X9SQb36oX4zfYC4Bb5Wxx158rWWhPkYX+tdzRTmhr8u6eXtq6lqPc2Su/ZezpRq/IdYOxLrun15PdX49jnZhjB4oD6+CBDfJKaYMj+gvnXvh194h+/9s/+OHjh37z7pq8HnFx31X24u043onpFvHpX/bJse0xf3dNVn2rvcRb5/tl1ebsWPLK8PhQEheL1xfuPXf+qWcWn1l8bmxsfKJ0f6n0wFgMFb8qdIs+PZV5AP6/bfUdO+9+/XJov2/hSe7f4qw6Gez9ScFoPB3Px1KciRPF1QYRcffGrY6s+DOEE1uctY7Ej37cmVGOE1ucW15pd2xt7PDRJPrEjq/YYp/7flH842a8GwCwM45skYeTuKNz259Xbu8usSbitiQ5sfK8+6sRcaBfzm3n8uPFF+dePjuOfrHlVf38Y7f84k5sFAD4hMsaHyUjrTeSRiOff6I8OVmutE5maaNefSxt5FMzWZrXWlmjerJSm8nS+Ua9Va/2Pjqeypppc2F+vt5opdP1Rjpfb+anim9+T7tf/d7M5iq1Vl5tzs9mlWaWVuu1VqXaSqfyZjWdX3hkNm+ezBrFws35rJpP59VKK6/X0mZ9oVHNRtO0mWUrAvOprNbKp/NsKM1r6Xwjn6s0LkXE7MJclk5lzWojn2/VOw321pXXpvc15opmR9cP/087vb0B4OPgpVcvPPvU0tLii9c38YerCb7VYwQAVpOlAQAAAAAAAAAAAADg42/95Xrt2mu6EHAorvvywZeGoz2x53oXb0883h3JDVzFuMnEYGxzg5tPfOGdzmC2o8H17Qz1am7f6rrPPcV7eqlbs6u7iXdoI2znxJMPP/zshUsRUdQkgys37yOv7T/5fha90W3SzsY/KRtd6vrGvohdP/lep+ZLG8TcFu1ubPNI3+sN8NoWX042+cHf0cMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyV/wYAAP//yfVIlw==") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x180, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x100, 0x1, [@m_mirred={0x58, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x9, 0x6, "d527360c37"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0xa4, 0xa, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0x1, 0x1, 0x7}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x4, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10000, 0x7, 0x8, 0x16}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$unix(r6, &(0x7f0000000000)="2e1833ced7314a6d64ac9ac8a35554b02d61367079e673edb044c7ce283906fa182a75f51a7363d4c7bd6b11174ee9fe941ae9d543157d784923beb9c33bf526f7c37dc903386106fbf0254be1a20e4f9a232b96476b2c65501f3572ade0089f96a116e88f1ded3d4e45850823f8438187a8569c76c7a79c1da632939e47f91afb135c0dbc0e38af893e0cfa773af6efd168ae7930437fdff503a56258dc51b49ffbb47e82e39a5802cc181cdf302e", 0xaf, 0x4000, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) flock(r0, 0x2) 46.168405975s ago: executing program 5 (id=710): socket$inet(0x2b, 0x801, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close(0xffffffffffffffff) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 45.740035163s ago: executing program 5 (id=717): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 45.739141663s ago: executing program 33 (id=717): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 3.167853398s ago: executing program 2 (id=1521): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0xca0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000000dc0)=""/4106, 0x100a) (fail_nth: 4) 2.807293795s ago: executing program 2 (id=1524): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x26, 0x0, 0xfff, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000003fc0)=[{{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000680)=""/121, 0x79}], 0x3, &(0x7f0000000300)=""/64, 0x40}, 0x2}, {{&(0x7f0000000700)=@caif=@util, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000980)=""/86, 0x56}, {&(0x7f0000000a00)=""/87, 0x57}], 0x4}, 0x6}, {{&(0x7f0000000a80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/203, 0xcb}, {&(0x7f0000000c00)=""/117, 0x75}, {&(0x7f0000001540)=""/183, 0xb7}, {&(0x7f0000000d40)=""/148, 0x94}], 0x4, &(0x7f0000000e40)=""/216, 0xd8}, 0x6}, {{&(0x7f0000000f40), 0x80, &(0x7f0000001480)=[{&(0x7f0000000fc0)=""/82, 0x52}, {&(0x7f0000001040)=""/187, 0xbb}, {&(0x7f0000004280)=""/4087, 0xff7}, {&(0x7f0000001140)=""/146, 0x92}, {&(0x7f0000004180)=""/198, 0xc6}, {&(0x7f00000012c0)=""/155, 0x9b}, {&(0x7f0000001380)=""/214, 0xd6}], 0x7, &(0x7f0000002540)=""/37, 0x25}, 0xc}, {{&(0x7f0000002580)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002600)=""/162, 0xa2}, {&(0x7f00000026c0)=""/48, 0x30}], 0x2, &(0x7f0000002740)=""/2, 0x2}, 0x5}, {{&(0x7f0000002780)=@sco, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002800)=""/129, 0x81}, {&(0x7f00000028c0)=""/162, 0xa2}, {&(0x7f0000002980)=""/252, 0xfc}, {&(0x7f0000002a80)=""/104, 0x68}, {&(0x7f0000002b00)=""/235, 0xeb}, {&(0x7f0000002c00)=""/128, 0x80}], 0x6, &(0x7f0000002d00)=""/139, 0x8b}, 0x110}, {{&(0x7f0000002dc0)=@hci, 0x80, &(0x7f0000001240)=[{&(0x7f0000002e40)=""/19, 0x13}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000001200)=""/13, 0xd}], 0x3, &(0x7f0000003ec0)=""/208, 0xd0}, 0x9}], 0x7, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1000404, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2, 0x10000, r0}, 0x10) 2.391980963s ago: executing program 6 (id=1526): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xff73, 0x0, 0x41000, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)="b9", 0x1}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 2.284933375s ago: executing program 6 (id=1528): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close(0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000580)="89e7ee2c78dad9b4b673fec988ca58e8a112e7f6ea43471d71036b5b5b3ad0f1d2a2b1dd710e169d95e9048b", 0x2c}], 0x1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 2.265908266s ago: executing program 6 (id=1529): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0x90) ioctl$TUNSETOFFLOAD(r3, 0x80086601, 0x110e22fff8) r4 = pidfd_getfd(r3, r1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_generic(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x164}}, 0x10) close_range(r7, 0xffffffffffffffff, 0x100000000000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES64=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x43, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x10) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/vmstat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r11, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b80), &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000840), 0x0, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000b00)={@dev={0xfe, 0x80, '\x00', 0x2f}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x80000001, 0x5, 0x6, 0x500, 0x9, 0x20, r13}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0xf9, 0x0, 0x6, 0x8, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8000, 0x7, 0x9, 0x80000000}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0xdc, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x140) 2.086711709s ago: executing program 0 (id=1530): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="180000579dfcc7be893c0000110000000000000000000018174892", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc, 0x8000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x40000, {0xb}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10}, r7, 0xfffffffc}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) r9 = socket$inet(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @rand_addr=0x64010101}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r10}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x800008000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x800448d2, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 1.957626032s ago: executing program 0 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.953232112s ago: executing program 3 (id=1534): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x6, 0x5, 0x3, 0x7fff0000}, {0xd31f, 0x9, 0x2, 0xe5}]}) setgid(0x0) 1.933349423s ago: executing program 0 (id=1535): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x45c, r1, 0x212, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf2, 0x4, "762f261e6d80577cd408f971cd84f8d0085579ec2ebb02ce9ee8490470a2b8f349d33c7091e3326dcb651aaf0eca11e536d450a51685c2f789075eda17976cd7bda628d57790c7fb062bb4bfc8feee620bd38a7b3f01e6e526969a951d7d6a3245c1e610047c4d02e08857d2899e600e5cdb2970c7c86c867029f864f14adca6bc45c5291482456a886b1ad29dfc2c926dba9e4aff24fc3c9a3bcb8b8ae1a6f354e10067a38d06a1e19c8e4e96c4f77516f992fd206c2ba2c6289dfed6ddd3a301c7bb47cecf2b066f541f7532008342637fb32aa6cb38cb4bc99d2b1ab6a9c6268bf234c071441a17ca9e24b52a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x330, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "66117267241e65193b37aad36f1b7682f6f6f7491066d97a002dc896f2fa6d3219e3191aa3e9a97b7ff02b48a0640e635f1d515d3b0f0b5cfa8dc30fc26f32fa3fb3fea3d514becc38a1d32a101602b5e81d9d7aeb8fb7"}, @ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "a919975121d42bb4be0b0556eaef59a0a5315adc0a81d83ab94b29483fada750e9ebf80537304b04d7fece2881fd92c5fb841a43860ec835aa7a4f4f9d0bed03d5630de465777a3979a604550232e00073bdff5ec27bb94db7439ad6eb1cc0bed91b35a6c93b62f7f77fd1b15b8fa3e68b1b004da18b6ad2a775162853e3212635ea1ed72c51"}, @ETHTOOL_A_BITSET_MASK={0x98, 0x5, "8fada25e4612b9c925fc7d8f5e6c55cf0ddeac9e4eb165009ccca0ee3f39ae2fb8e5897209d34f5e18382661e64b79dbae42c92253f360597dfdfdcdf9edd5febb08cce60c54665be4867f19fd806c8d01b643d8a6b408a230c15f82542c7289dc7f5036aa388bb03143101a4df056323ebc1ceeff8d32db078b1ed16863bf915762bf9957b16f103d4f902e835cf44e5b5b9212"}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "640ba784b044f84e78b8361fc049ab4eb50dfb61052c029994fe9cb82a4318fd9e9030b0a6040f660adb65e136975fa478601ea03c9fea20b04b33b97fe66ec7f8074f97cbf2a874ba21cd35f65f179103cf7d68a8ca154cd97f8d4861c676b60eb03c2fe131fbf0df4db9a2a4bd222b76e3eae4bd881f198f49519af4b931c88a84303f09e31da4a2a31364aaf8febd38cb9105614b2d8ec25d16"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4a}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '&)$%//]:\\%\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "674701b15379e00ba050c5a30cc63b2e8f6296dacd4c902ac7a711d503a78ce7d43febb82b8c7f7e3de9f4b5b1c68709349c64f089ee3ac0bb001a020751f8b635eb1641c7cb16f400dd637bbe480b743360b4304a62b7bcdad1744e7817573c9510b8afc77f7ef37c72067837838f9e666bd113b756d9461fcd34058865fd04540d34563089e458e95e"}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) 1.907608263s ago: executing program 3 (id=1537): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000006595eab870da08b6f0d81a6c55f133c03df4728d2334b8a54fa3926cd525d218fb77f996998e75d2b2f7281cc4d2a906e5df8b66e984a5bebc4cd6725a6b7cf08760a1e04abeea3d72c144d1f248d7fc4e9c13e1ae76c96cdb18b15ed1ed601505cbfe2e850e78b6c116e5000000007f19f70b00b9b9e910378300d5e5ac59b0586cb074d606b3b1b8046418970723ab59f499b38b9b07d09ae0a352ee9b003d3af396cd", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) fcntl$notify(0xffffffffffffffff, 0x402, 0x30) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x2000404, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000ac0)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x35, 0x6, 0x1, 0x0, 0xffffffffffff0000, 0xc, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4b, 0xeb05f4b0e43d9745, @perf_bp={0x0, 0xc}, 0x8080, 0xf1, 0x1, 0x6, 0x3, 0x5, 0x5, 0x0, 0x800}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000003380), 0xffffffffffffffff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0xc00, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000300)={@multicast2, @loopback, 0x0, 0x2, [@multicast1, @private=0xa010101]}, 0x18) 1.858853424s ago: executing program 2 (id=1539): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r3, 0x801000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000200)="ac8a3ccfb6402ebef75392c50e0060759d0cf5929e703c65356925ccaa9dda730a71942a7e4e604df27c61d7fab65234cd0cfc9053b80835b0f2bf10182efb290efc422cd16d2433e22e72bd2f1f5d15b2f0a0cd76cad68120961de37f9cd3ee3e1f7be12cdb3a73206544568d91bb0d973604d135a01c0a51070a8eb0e4693ba757ab7283fb7ff0a979ad413d023f63c635021c35159a715a0a6dad2fe35e", 0x9f, 0x5, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x180800) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000100)={0x52}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r6, 0x0, 0xa86, 0x0) 1.830889294s ago: executing program 3 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012800e0001006970366772ac1861700000000c0002800600110000000000"], 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRESHEX=r2, @ANYRES8=r4], &(0x7f0000000380)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000001f80)=ANY=[@ANYBLOB="03a28bd92733ff2c6ea4105880c204e900bbbbcfbbbbbb080045ff001c0000000000019078ac1e0001ac"], 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000008ad2b4c032fa8d84b0523d31d58a5152c48bcdb8f6a171d48f38dbff0c15645cdd", @ANYRES16=r9, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e0000000000000000000c0003800800038004000180"], 0x38}}, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000e1ffffffdeff0300000000000000005cec00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) 1.830267144s ago: executing program 4 (id=1541): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="0600000004000000ff0f000007f692113d45bd175f9d6a11bf8ae50ddaebf67641759b9608f6826a99157832b403d4a0db37b6240f6334d75f921cf2e7ae12fb56c1d6812fd1e2b1ea324409be0ca061d8cb26af646041600435ff5f01f99be544a6dcc58396624ab9fd567f6f0437235c7bb66796c89a9a2b50bad89f96fc0dfdf40be5da4ba2d5d0090ef47001b27babe1d8a23d9488bb3514553b064ebaef4f42e9bfd74b73a313e5d7d7000446e333d7dec50696fe545ccdc4942caebd6882d432700ef3c0d56c02889f0ab6beb0b236566a32c2d76b1f0d7c257be827ca025996e4b00f88fbfff4faa4f80dd77b79e1c2", @ANYBLOB="5ec924548626cfdf59ae8037ef6c364e17b533ec52fcfec8b718aa2c003c1b59ee266944ae8befe60a717e9554d265f5ef6b88278c34de561f89c79efc20c74dddb3d62b37165312eef574be85cbdd5ba9cb3c0bb1ca6cc6cb724a4cc2460f740ae239", @ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff4}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r0, 0x1c3a, 0x106a, 0x22, 0x0, 0x0) 1.819238305s ago: executing program 2 (id=1542): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="bd", 0xf4240}], 0x1}}], 0x1, 0x41) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r7 = dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r7, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20004095) 1.807595635s ago: executing program 4 (id=1543): pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa1"], 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b0750b1335007ee6431190e2ef747cf57721b9e915e4dee935e87ad62242ea9e672899a042b0fe1daeb57683324343fe09ccbfb37d95f9636b8358bbf2a0de88fe4839caf83a14ae3c5834d209208b5ccea564ba2d3df370e4eda02973f6d5c48a33f680947edf46a3385bb069aad726ded9072408517ead0c04ec1f9a7768f0374cd85a8a71ebf4a6e8418bb29cfbfbdcfada16c41f4ddcd7bb15709909d7e9b546084e9c382e834606db0345cec9bc0c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000017c0), 0x2, 0x0) tee(r2, r3, 0xa0b5, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001900)={@fallback=r5, 0x1e, 0x1, 0x7f, &(0x7f0000001800)=[0x0], 0x1, 0x0, &(0x7f0000001840)=[0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0], &(0x7f00000018c0)=[0x0, 0x0]}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001780)={0x4, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000016c0)=""/186, 0xba}, {&(0x7f0000000380)=""/32, 0x20}], &(0x7f00000005c0)=[0x1358, 0x3, 0x81]}, 0x20) 1.703918127s ago: executing program 2 (id=1544): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") r3 = syz_clone(0xa04000, &(0x7f0000000340)="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", 0xfe, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)="93b23ebe499857ffa5fe1bd4c5fc9522") r4 = syz_open_procfs(r3, &(0x7f0000000040)='comm\x00') lseek(r4, 0x10001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1fda]}, 0x8, 0x800) getpeername$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x6, 0x0, r4, 0x2, '\x00', r6, r5, 0x2, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x0, 0xfffffffffffffffe, &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000640)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x7, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r5, r8, r5, r4, r5], 0x0, 0x10, 0x8}, 0x94) 1.703444207s ago: executing program 3 (id=1545): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x6, 0x6, 0x4, 0x6fcf, 0xf8, "b72ca7a26413ef6ca5a76bf8224be84e070856", 0x1, 0x3}) mknod(&(0x7f0000002800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x40000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 1.651001668s ago: executing program 2 (id=1546): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.618037628s ago: executing program 4 (id=1547): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.606039349s ago: executing program 4 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400fff51000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x895}, 0x0) 1.5518527s ago: executing program 4 (id=1549): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x26, 0x0, 0xfff, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000003fc0)=[{{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000680)=""/121, 0x79}], 0x3, &(0x7f0000000300)=""/64, 0x40}, 0x2}, {{&(0x7f0000000700)=@caif=@util, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000980)=""/86, 0x56}, {&(0x7f0000000a00)=""/87, 0x57}], 0x4}, 0x6}, {{&(0x7f0000000a80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/203, 0xcb}, {&(0x7f0000000c00)=""/117, 0x75}, {&(0x7f0000001540)=""/183, 0xb7}, {&(0x7f0000000d40)=""/148, 0x94}], 0x4, &(0x7f0000000e40)=""/216, 0xd8}, 0x6}, {{&(0x7f0000000f40), 0x80, &(0x7f0000001480)=[{&(0x7f0000000fc0)=""/82, 0x52}, {&(0x7f0000001040)=""/187, 0xbb}, {&(0x7f0000004280)=""/4087, 0xff7}, {&(0x7f0000001140)=""/146, 0x92}, {&(0x7f0000004180)=""/198, 0xc6}, {&(0x7f00000012c0)=""/155, 0x9b}, {&(0x7f0000001380)=""/214, 0xd6}], 0x7, &(0x7f0000002540)=""/37, 0x25}, 0xc}, {{&(0x7f0000002580)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002600)=""/162, 0xa2}, {&(0x7f00000026c0)=""/48, 0x30}], 0x2, &(0x7f0000002740)=""/2, 0x2}, 0x5}, {{&(0x7f0000002780)=@sco, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002800)=""/129, 0x81}, {&(0x7f00000028c0)=""/162, 0xa2}, {&(0x7f0000002980)=""/252, 0xfc}, {&(0x7f0000002a80)=""/104, 0x68}, {&(0x7f0000002b00)=""/235, 0xeb}, {&(0x7f0000002c00)=""/128, 0x80}], 0x6, &(0x7f0000002d00)=""/139, 0x8b}, 0x110}, {{&(0x7f0000002dc0)=@hci, 0x80, &(0x7f0000001240)=[{&(0x7f0000002e40)=""/19, 0x13}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000001200)=""/13, 0xd}], 0x3, &(0x7f0000003ec0)=""/208, 0xd0}, 0x9}], 0x7, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1000404, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2, 0x10000, r0}, 0x10) 1.373577834s ago: executing program 6 (id=1550): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x180, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x3}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 1.350305514s ago: executing program 6 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) lstat(&(0x7f0000000340)='.\x00', &(0x7f0000000680)) r3 = dup(r2) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0d030000000000000000130000001c0009"], 0x30}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x11) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75"], 0x65) 965.650201ms ago: executing program 0 (id=1552): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 813.630874ms ago: executing program 0 (id=1553): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x10000018, 0x8, 0xfffffffa, 0x0, 0xde, 0x1, 0x8, 0xd1d}, 0x0) r1 = getpgid(r0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f0000000080), 0x4003) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x8001, 0x200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r3, 0x1, 0x7fffffff, 0x35e752fa, 0x6}) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000180)={0x6, 0x6}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0xffffff00}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000280), &(0x7f00000002c0)={'L-', 0x186}, 0x16, 0x0) r5 = openat2(r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x8000, 0xb3, 0x6}, 0x18) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x4) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x1f, 0x2, @tid=r0}, &(0x7f0000000480)=0x0) timer_settime(r7, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000500)) fcntl$setownex(r6, 0xf, &(0x7f0000000540)={0x0, r1}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) r8 = syz_open_procfs(r0, &(0x7f0000000580)='io\x00') socket$can_bcm(0x1d, 0x2, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) timer_create(0x6, &(0x7f0000001640)={0x0, 0x2c, 0x2, @thr={&(0x7f0000000600)="efc091e3e00ee025ccbbae5d5bd1aeafd5a8e4899086649fc3db6b4f2a7fd88e6ecda8dedb6a8e480a35e4b1c7abc315ef723cbffc0df9", &(0x7f0000000640)="f5beb3f0d83e2cc47c8bfe3d802334295f6c4cee82da5c83621d5baf1a83c46eebfb8b50b66dbee1d3e8c975ae306f1b3c7eaa524c926b49ce16330af7bbfc7d45a04cba69022d89e78550870143b32030237cc8b1d3cbb7c239a577ae5276329795be10a944102bc6ccb59d71e385aacecf9c46d99a241fc7b00546fc46622c4c60d2dadcf7e05ea230633dafa26a4e0949d2fd504b05c004225c37e5046c6c5e2fb1250d06769092042fcf03834cde4dadd8a372c15512b9e15b05bdd7c34050c61d24c2dd23e23a4a220a342a4c8c788c336ebbb4f23a4be3fda8b6fb9cebd7ecf88b3686b38433e5f20bdea4db049eebd1c3fe0642a99b6eb52f67f34fe36bb1e1594f4d0f9ccd310884d816b782dcdfa171b6f03fcc074ef598aefe53373427c4e90f7116e166fd6452138d26d16272e638798bbd4ba0f8ff294849f6f5ceba234181efdadbc0fec782c8fb1cc3aec389208f2b8ea378a45aac44ea3fe4d7f68d4cc0d08e908448b3d76e091b114075893c0a6c675eafd3448ce86adc93c59e73c6f1529d65a46cccdf0c32c3ce8a0adae674cdb92f6e28edadf99c4efaa10db97981e92c595596e7ac19fdfabd62e51a231753f0ca231516e7bf23db375cc3f7886c4aaa1abc88a9275bbc9274eb95878e66fb0b586356098c9cff267395fd92d20908d88a4dd714320b1dfb7d706c998005fd7037b97faf1dea0ae02c0a7338ba416611049e237abf9650496a4614edb7382dd0c3d1fb5bbf1580981e950da4c327eddfff5eeb2e0478d4ca0ee692829597be47bec6f08debb6b350013db19c651107f98af47ed469b790532bd98081cf0597de4d177ffbd47bb280118161b3615ebcef0a2e76e1dacf78149f5123e50f261d53f1ade0f7ce5b3277060dcbc53fa9c94d3b477949f2bc578618116ff0bf585d9c6b7bd877c49b08af086fd6c543e8a156a1b5bfb0eef0adbd7f1e1dd56a4c4ca0ee93fa0d95ff8f30925321f6c368287fb697d9b287ca44ceaa07f909d122916971cbc2cea56ebee9dfd4bd7063854759ad89c694b82f064d2fbd68fae21d0ec9dcada90ff93777895aac2291a7867b8d033be84eb2a136e82ddae216aa7c9679cbe5f92837965a9199316338b0955c100b0df40690e9620c11aac97c5f781a282ae35b93e40014bfa2fade1eb91c4b427aa4b8fc6c9091b8efec0e749b6b54b094f9aaae3b5d0674bfddbbd9d11c1433ab7f2004d3eb32355cf123d26a519d88f658240f8fd922b049c6150df4803cffbaee11320b5b8104d978f4043fca6714ee3346a2923bb24c55d334b072ae33385c6a425a3fbfb7cc5ecbf8f6546f7744cf450f6cf4d930919476ab69963bdbdd253646d27c9f1aa17007dc5d002fd0872f8adb659af1a7d793487bbffb23c0f70ede97a1dbd7318d73e9aea4e5303f77c8d676738d557e00ef3c76e17ccc4a671e73955629f73134ec40c646a9fb7645b11851d00dd67d6e45f1d16b83f426b135538e2184f329ce7d2fb9f29faba0b574621780a2900fd5a20e3d9c856750a57502f78d9f02fc92300e945e23b68c82fcf953d6e67670bec26224c9b5017d594fb87369448ca671bad4ca7212ffedd704a6dbe019538450cb6a95e6fa58319de7e187298864a43096db49aaa4b2c7fbc5aa7cfde9beac83428b15591646c4f1096c07b059228fde26d55503b5098d8150db6517d5f240c94dbf7f5a55105e82734626ea3b6dedcfe2b85bba90b48ecc8b062e142eaf1621af3ccd1c07c97c0bcea8d4ce21f278bfe802393b1858bf2c72e6555c3ce48739fc49aef28d8687e02c878665643a12fe1f0c12e02ec96d39fb19802a55b927c3880d368aaed27b2ddd8acbd99a52a427763ffaa28e155d987cf722348f42dd08a33a9f1c77e6044e3e3af6cfb0a8de3f920a081fba93312c521f11f1c4168c563e52a03ce49e4490bde44805781d5f9e98a579cf464c7a483e49e0ab009e1e3fa31e0c7b086e10f8e5f9ac6bca7b6095fb94e6f55e14805b8142756c299c23472b75fa02c6f0f5429f7ea6e88d7a769b6f51ffb0c56af758eab31b430d60974fbce1af2620ca3d380070df390207289cbb7192eaacf39955db9755b6c45e1d3696f7c5503accb349ba9d383970afb3f099a3400ce76fde6a3f154b660ad43fcd931db3abe94c901b96b540951cf4b0e505f540036104cb56263cf37a3e94cca774ca76a91b09a6927041ebfdca705b97cb646b37ba7e59aab7b9f066cb412a3870f1fef6c54f0c6c761499fe0bc0cf50f252df854cb75ecd24b5ae84252ea9cd7b09ec85eb04fb509fe7753ae8f64b799705984a385be4f5a90fb456dbf58ba48f6911fcc36dfeb09ccd6a659f2a6d9b6e5c10ab26a824845afc794ffcda5103a338306b5cafb9f65d79cf146e252e5356c0d31db85372f13cf2558c5ffd3839fd941ab5b243c347105e1d5fd0b4d251238754c1260da242dfdb50f98d8658f30751578c42dd90803762c0dd1b688fb412dfa26a0202c879f3379a22f71c33f67baffd5753ab60e8d747c6a58999b365a2e82069b577cde1f7fccd16885cbefea485509514c0863e9d4d262fe82b64ae60d084065daad531989e561aace1910ad499807301368a28538c8712584301123aa92c164e847b7f52cc70d6e293facc9aa1456c0bd4988a54ab1a13bf372cc8da8dea1a4e583ef6692012cbf30fbad386cd8f471db388c18074e84fa8801d01e38a0ca01121057aa8bf01f9a77c3211d50e7888922bf662bf50cc2af8db19e40dac57ebff8ddb0c156f6a942bfb7c6da6f6fdb8bbfde330d684f8cda9be9bd1df766361022d8c0290f10a1efeeef4756f2f025c303605873b8c471b74ee1b5387ed46b6a1c33912c2acceea7a3eafbb290ce1695af74468f89a1f279c6eb8a2477b5fc3c14b034b9bf28ad40520e96f47510f4033f2afce51d736d01eb0f97a6f376ffc89ad1561d6f203ea8e0561fba62620bfd311f490ced1d7c7ca60d12bae14a668e2e0a1c93e9ef291e698109430ee551663dfa0123493628ccb9278ffc1dba4a770d72bbec6482658a78bdfa19250370624f4ebae38551ddd3c4ea78538f20549c6765e407b71dbb390d2b88df3e280d2ef1e8d7c8f42bd0dba77cc2463b593c53ff0f81b186ed5f159a2a994edfa3143f0fbdd7bf48baa538a777413723f4135149ff28d3f8bdad4c335632b3bf17327ce00dd28d0fb57a9486c8962d280db280454ba6084b5db44f5c6f1bf8bb859a3665ab9978c92c13d10a992057bfd299abdcce9805b4d277e25d5a8b53661311206859314aab9525b88d7720cf69b13364ed6348eaaa2d0c35776a300cbc7c3b1d91a2e4cc497d01e531dba74da499022c19c8ae7c768f4cfe3fd564ddaab6bfa1343c8791004437c2b9afdb27d50570b8d30c0970f02a9eae98a901d841171b867f715c80bed780e840c3a3f71175794b0fa26844d8f6fcabecd597b1fb9660680509fb1cd038333f692e5f33720f9ce566a9de048ff189fa1b44367c5a9219f99d77b4dc632819428866a8322d7147f9c2ef1479c07579e62444afbe101865ee89d61730127da8354e03746b547918548d37b86e7d1f5ff267a7d5f714a086e54fbb779b050dfd31f0eaafe6be3a459314166cf06f626ed398c1639fc78b6e597a1fdbf05531bd13dc1a7872c9ac2333f92872306b5d751497c4de23cf8f7436c535e6f1af1bd44b173c92bed127e6474122cf1f992814b5d03d8e380bcb3eb1a05048382e790903e9c9f9dc83a6e2d45178f646c9bd9499c150a44048d918bfd3dfe126e45d2c79be204ff54f30efa667d59ebbb0fd80613e607e16592d62aa5a58af4562456392a8ff90890c52148e62219de50bf956acc062615e18d365caef77cd273ab8ce43219b405426a509176c4964295ec8b281f0827fdd459dd397488dd2a9dbae493ec0aca83eee64b4cd546dedde5dddb6b560c6e2a29351981a3d64f0ac8a5dfaf76f39fe1140510475f4c16cfe786413876c9a398f99d2694540fbd5b5ab049b164ada088783eadca858a2e3c4adf27df06a0ece2799fc191341dba571f5e5f1fbdd3df1f621821fc9827b3e224f636b20ba23254e347b5e4bf2ea9b883bbd091f4f00954e1aa5670b803865fd1a966b566e651d6fffa4d75b2d92c3a1dbff661200f2201e017c3df6232cca9b43e08293e3ee2d0c618a5e71495ca1d828b2e2b23ce5ae12af6b498c6308d525d4af4393681ddd3b3fcbf348caf9b29e3943cc104c9b9a4663998c48d6f8e8bd41d95766ec3363917b323b8898c8ca12f0dfa0f355a4799152bee8e339a0c2ab90c84a2614686e93c54edcb9c75f8abe06810d1fd3cffa54a220470eb41b79809e1458064ba5a658a35a4a91fda9add02691a6abee04dc5700d1dc3c346565962b24eacf6afa9828afe9d9667e6fe306425637cbf3de6a12a0a250a64afa3a229145d859a3a32516a6a8675f74fa1643204ca56c1b5a19e3888a0e72526fdb0afaaa8091e0a2906cd978fee11b5c38bb2ec7aa3770d6e7e70c22d8c073afd32eff51040de6ef15efad75b2f33c0a2e79a7283ba9c0769d0e3447d1afa4086c4b004d68b2efcb1db9edde1cf9dcbb30f39eddb32d6d61ea60e2229054b1c1308c5bcded9d60f0ebe31f8c595018c81fdd1a6e5305873c38b2d25ad8935e27847b107140ef63c3bad2beb569333be8f634f0f46af325a4e16af5e9dd4edb653496a75d3dcd82451e132817fb26768132b4396c5779a19bf9dd0dac71b6eb51c2fc98e913a72e6de211f4e47914ba070f31346453bb7c1329769d54b72dd45c4e30d3f90ba882d6810d7438bc8e0b4b96b4809c4d3793a1b47567ab1e6c20e1f88ea743c401f644e9a3b5e1cf4f6e3815861f85c0db7be93a2447b6114783ff20d6bdacb804363efe71e315361aac2911c914e14cd13be8d53771bd4f356e6a2c7ddd1258e5dce5c4d1799293c48a4f90a7f8095cb7c38519285f54e9ad3242a84b8a0a3411927ad1ea05b98dcde775631c7bb1efee8f810eed6f4d727c8ce35363cdad0236f3b448aa3d20dc11f0000fbd3df3337dc501d66a3e0831dc3c010ecad43497d300f2d02136e922a8389e037dea736d8a692c8b81aca460c21f6f4e748d80c343ad152d750f39350a8fb574c3dc49dc794ba7ff44d0ddc7a2b58ca2a0098e9a7823daa6fec56a0e8e8d6f0a44b1d118df688d3b333dbb47709984cc34d8d8a298dd49fa67dfb23d1c05ceb22f205defb216c2abea85821df3a4d3ce40aafa552bc60411da1e111c9fb766f5633ce568bbe2a051af2433bb8104d65bb31eed4af08460ff7bdfe91cc43f84bd4cba827e744ff6d94d6b7804e634554a8b52889b4d5a53e1e2914e35f4f96afdd7132431a4f87a61ee0cee89f16dbaa4526d7fbfc6dd9570ac632240ae76ab5cfa9bf946c2bd90b27cf20ed0702a5c4b0ffaa6b62348e2bbc4485af21e877d04ada89761f544fb63c253d74de469791a5f3bc800de7b551f9b0e0604898a2f4c58e2e0965a7fd5c7ffcfe7dc9332043085451d39403d067aae0a4a11038bbbb193947471b01d05459cd8a2a8e9e3c1f5b1a1efaeab248690535b28d1ce01dc38f5a120524424d716f8144179286dd8cb5b0843f51e1008e490cefea6d7fab41502a50eb5c13eff8aaf2ec54ef0ebf5a7c95c388dfb8273adc5d7e0c1c6ccab9adc4f6c14de9248d66716fe454da6380364907e8474b929aa8f3f2ac7732e49db5a111364073684783998b285c9f41a41ab83db3867e3f6fc450"}}, &(0x7f0000001680)=0x0) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000001700)={{}, {r10, r11+60000000}}, &(0x7f0000001740)) chmod(&(0x7f0000001780)='./file0\x00', 0x111) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x5, 0x2d, &(0x7f00000017c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x5, 0x8, 0x3, 0xfffffffffffffffc, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001940)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x5, 0x2, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001b80)=[0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) 715.987977ms ago: executing program 0 (id=1554): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) sendmsg$netlink(r2, &(0x7f0000000200)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000002a00)={0x21d8, 0x23, 0x4, 0x70bd27, 0x25dfdbff, "", [@typed={0x4, 0x85}, @typed={0x4, 0x95}, @nested={0x14, 0xf5, 0x0, 0x1, [@nested={0x4, 0x140}, @nested={0x4, 0x145}, @typed={0x8, 0xd6, 0x0, 0x0, @str=':(/\x00'}]}, @nested={0x1008, 0x50, 0x0, 0x1, [@nested={0x4, 0x124}, @generic="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"]}, @generic="03c828537d17fc1d30edfb1013634cd1bf2f836b1f6afd267296a3eca59c01280f272bfc029b498fe18aa826c95175adb8c88c99ca416b30bbcf1e9af7a720f906179ae7c6a7d0877b61e3e01cbb8d9df99c39dc43bafef03a32fad2f85c97310a96be9150a47a10f0fdc9fe06585a98a1663a6c1725decd8ae027faf97870d39186dbb5e9f3503767a3bd28fa4e43935a083fde7ac8c78ffe111dc95aaab10831e4af08addc71f3dec375174dc0294bdee08f0f8b564fc540b6709c4de8", @typed={0x14, 0x10e, 0x0, 0x0, @str='/dev/mISDNtimer\x00'}, @generic="b592059b3a4af7ccbd689489cf117695d3cc98198324dfdd57f71fb50747005e0f774e095534129612aa63b37942850106a68914bb15476ac29a6ca731034186e8ec23a3b00240e179a22cd67130332ae2b6123ac3c81a57d3eed273bce14cbfc207e529d9b0be8a5b0a3c9384b4f4131afbf4e01e04e7ac35870e1422c602986147c304e6099e4f10570e5b596801b4c27802a77052085c5cb8435e8f13a0f1947e1cf2949b8b14dec59aee78ce03b2e0a337e61ab9ce2e469ed25325e397c2847a37a86665e7ec7e21d2b333a664", @generic="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"]}, 0x21d8}, {&(0x7f0000000340)={0x1b0, 0x28, 0x20, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x8, 0x0, 0x0, @uid}, @nested={0x4d, 0x106, 0x0, 0x1, [@nested={0x4, 0xfd}, @typed={0x15, 0xb3, 0x0, 0x0, @str='security.selinux\x00'}, @nested={0x4, 0x10a}, @generic="9f9a077c9a928f269c84db99faaa55a7a75532f1c209672d2c5515feb410b478f7b10410727adc6f82"]}, @generic="31efae0894a9b1d3ac789eaa0c7b76f34b31d2fae19beb7389e309bdea346b26a729be531d5c787d8a6e190382748028519571afa6a4e4c1bbd9a09b523c5ed0cf128834e6279b7a05e841f788340cb99a1de0449127962eb00e98ad95dedb4a7c5e6d4f5196d063eda73001b303a11eadb05c3ce6009cd766bd3beae0bb0431f2fa846fe3855458e88028b6d0e45ffbaaf699138f5056747355ead850753698d68ee67877", @generic="8ea6aa8e3c1890103834291cdf36a7b0cee82eab824db7b3435ca4a89fffca9963ff26", @typed={0x15, 0xd, 0x0, 0x0, @str='security.selinux\x00'}, @generic="d063258b70e5a728ba02471b281e876708dd7c427060ae2a76b2a2e44ffdf517b02b5e6c3d70543d88b1a8506dcc53d63a975f2eaa6bfbf8cc002fb82d7eb23cd7e4bfaff11726583575213916a3e90a8dffadd6d61c433fe5a3cabbc93d275d0b074745195416db"]}, 0x1b0}], 0x2, 0x0, 0x0, 0x840}, 0x4040000) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 520.22604ms ago: executing program 4 (id=1555): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) mknod(&(0x7f0000002800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x40000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 468.059071ms ago: executing program 6 (id=1556): bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x224801, 0x80) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r0, 0xb15, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) 465.015621ms ago: executing program 3 (id=1557): pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa1"], 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b0750b1335007ee6431190e2ef747cf57721b9e915e4dee935e87ad62242ea9e672899a042b0fe1daeb57683324343fe09ccbfb37d95f9636b8358bbf2a0de88fe4839caf83a14ae3c5834d209208b5ccea564ba2d3df370e4eda02973f6d5c48a33f680947edf46a3385bb069aad726ded9072408517ead0c04ec1f9a7768f0374cd85a8a71ebf4a6e8418bb29cfbfbdcfada16c41f4ddcd7bb15709909d7e9b546084e9c382e834606db0345cec9bc0c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000017c0), 0x2, 0x0) tee(r2, r3, 0xa0b5, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001900)={@fallback=r5, 0x1e, 0x1, 0x7f, &(0x7f0000001800)=[0x0], 0x1, 0x0, &(0x7f0000001840)=[0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0], &(0x7f00000018c0)=[0x0, 0x0]}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001780)={0x4, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000016c0)=""/186, 0xba}, {&(0x7f0000000380)=""/32, 0x20}], &(0x7f00000005c0)=[0x1358, 0x3, 0x81]}, 0x20) 0s ago: executing program 3 (id=1558): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xff73, 0x0, 0x41000, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 76.245373][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.936'. [ 76.277042][ T6604] loop4: detected capacity change from 0 to 2048 [ 76.290657][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.936'. [ 76.299654][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.936'. [ 76.312712][ T6604] loop4: p1 < > p4 [ 76.316900][ T6604] loop4: p4 size 8388608 extends beyond EOD, truncated [ 76.326925][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.938'. [ 76.419646][ T6622] lo speed is unknown, defaulting to 1000 [ 76.478750][ T6624] netlink: 'syz.6.944': attribute type 10 has an invalid length. [ 76.501331][ T6624] team0: Port device geneve1 added [ 76.537438][ T6628] FAULT_INJECTION: forcing a failure. [ 76.537438][ T6628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.550655][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.6.945 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.550675][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.550683][ T6628] Call Trace: [ 76.550687][ T6628] [ 76.550693][ T6628] __dump_stack+0x1d/0x30 [ 76.550746][ T6628] dump_stack_lvl+0xe8/0x140 [ 76.550758][ T6628] dump_stack+0x15/0x1b [ 76.550768][ T6628] should_fail_ex+0x265/0x280 [ 76.550784][ T6628] should_fail+0xb/0x20 [ 76.550832][ T6628] should_fail_usercopy+0x1a/0x20 [ 76.550848][ T6628] _copy_from_user+0x1c/0xb0 [ 76.550868][ T6628] ___sys_sendmsg+0xc1/0x1d0 [ 76.551038][ T6628] __x64_sys_sendmsg+0xd4/0x160 [ 76.551058][ T6628] x64_sys_call+0x191e/0x2ff0 [ 76.551072][ T6628] do_syscall_64+0xd2/0x200 [ 76.551092][ T6628] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.551189][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.551204][ T6628] RIP: 0033:0x7fe9ec9aec29 [ 76.551215][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.551227][ T6628] RSP: 002b:00007fe9eb40f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.551241][ T6628] RAX: ffffffffffffffda RBX: 00007fe9ecbf5fa0 RCX: 00007fe9ec9aec29 [ 76.551307][ T6628] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 76.551316][ T6628] RBP: 00007fe9eb40f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.551323][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.551387][ T6628] R13: 00007fe9ecbf6038 R14: 00007fe9ecbf5fa0 R15: 00007ffe556590a8 [ 76.551399][ T6628] [ 76.734070][ T6630] loop0: detected capacity change from 0 to 512 [ 76.777210][ T6630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.860542][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.887200][ T6637] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 76.895835][ T6637] SELinux: failed to load policy [ 77.031241][ T6642] syz.2.949 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.093429][ T6643] loop2: detected capacity change from 0 to 512 [ 77.417904][ T6660] netlink: 'syz.4.954': attribute type 10 has an invalid length. [ 77.424013][ T6656] lo speed is unknown, defaulting to 1000 [ 77.427109][ T6660] team0: Port device geneve1 added [ 77.451910][ T4029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.485300][ T4029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.533493][ T4029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.579903][ T4029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.732398][ T6676] loop2: detected capacity change from 0 to 2048 [ 77.751356][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.760006][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.791296][ T6676] loop2: p1 < > p4 [ 77.811569][ T6676] loop2: p4 size 8388608 extends beyond EOD, truncated [ 77.902667][ T6669] loop4: detected capacity change from 0 to 32768 [ 77.941353][ T6686] loop4: p1 p2 p3 < p5 p6 > [ 77.946222][ T6686] loop4: p1 size 242222080 extends beyond EOD, truncated [ 77.953733][ T6686] loop4: p2 start 4294967295 is beyond EOD, truncated [ 77.963885][ T6669] loop4: p1 p2 p3 < p5 p6 > [ 77.968539][ T6669] loop4: p1 size 242222080 extends beyond EOD, truncated [ 77.976113][ T6669] loop4: p2 start 4294967295 is beyond EOD, truncated [ 78.194502][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.203101][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.287411][ T6694] loop3: detected capacity change from 0 to 512 [ 78.302976][ T6694] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.965: bg 0: block 248: padding at end of block bitmap is not set [ 78.317598][ T6694] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.965: Failed to acquire dquot type 1 [ 78.329391][ T6694] EXT4-fs (loop3): 1 truncate cleaned up [ 78.335284][ T6694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.751810][ T6727] lo speed is unknown, defaulting to 1000 [ 78.785592][ T6731] loop4: detected capacity change from 0 to 2048 [ 78.804374][ T6726] lo speed is unknown, defaulting to 1000 [ 78.812214][ T6726] lo speed is unknown, defaulting to 1000 [ 78.821248][ T6726] lo speed is unknown, defaulting to 1000 [ 78.827217][ T6726] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.831415][ T6731] loop4: p1 < > p4 [ 78.835575][ T6726] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 78.838603][ T6731] loop4: p4 size 8388608 extends beyond EOD, truncated [ 78.853131][ T6726] lo speed is unknown, defaulting to 1000 [ 78.860262][ T6726] lo speed is unknown, defaulting to 1000 [ 78.866524][ T6726] lo speed is unknown, defaulting to 1000 [ 78.872836][ T6726] lo speed is unknown, defaulting to 1000 [ 78.878900][ T6726] lo speed is unknown, defaulting to 1000 [ 78.884899][ T6726] lo speed is unknown, defaulting to 1000 [ 78.966141][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.981439][ T3987] __quota_error: 408 callbacks suppressed [ 78.981517][ T3987] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 78.996379][ T3987] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:20: Failed to release dquot type 1 [ 79.014446][ T29] audit: type=1400 audit(78.994:5888): avc: denied { read write } for pid=6742 comm="syz.3.982" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.039314][ T29] audit: type=1400 audit(78.994:5889): avc: denied { open } for pid=6742 comm="syz.3.982" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.062455][ T29] audit: type=1400 audit(78.994:5890): avc: denied { ioctl } for pid=6742 comm="syz.3.982" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.114058][ T6748] loop3: detected capacity change from 0 to 2048 [ 79.132859][ T6748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.146886][ T29] audit: type=1400 audit(79.124:5891): avc: denied { create } for pid=6747 comm="syz.3.983" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.166216][ T29] audit: type=1400 audit(79.124:5892): avc: denied { write open } for pid=6747 comm="syz.3.983" path="/166/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.188575][ T29] audit: type=1400 audit(79.124:5893): avc: denied { mounton } for pid=6747 comm="syz.3.983" path="/166/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.224866][ T29] audit: type=1400 audit(79.204:5894): avc: denied { create } for pid=6751 comm="syz.0.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.229826][ T6752] 9pnet_fd: Insufficient options for proto=fd [ 79.262109][ T6752] loop0: detected capacity change from 0 to 2048 [ 79.269447][ T29] audit: type=1400 audit(79.244:5895): avc: denied { remove_name } for pid=3302 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.269726][ T3302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 79.292202][ T29] audit: type=1400 audit(79.244:5896): avc: denied { rmdir } for pid=3302 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.308955][ T3302] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 79.336889][ T6752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.353103][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.373632][ T3304] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 79.388772][ T3304] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 79.402345][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.839258][ T6784] loop4: detected capacity change from 0 to 1024 [ 79.859135][ T6787] __nla_validate_parse: 8 callbacks suppressed [ 79.859154][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.6.994'. [ 79.876814][ T6784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.893479][ T6779] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.992: bg 0: block 494: padding at end of block bitmap is not set [ 79.914909][ T6779] EXT4-fs (loop4): Remounting filesystem read-only [ 79.926326][ T6779] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 79.940310][ T6797] FAULT_INJECTION: forcing a failure. [ 79.940310][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 79.952993][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.6.998 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.953097][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.953104][ T6797] Call Trace: [ 79.953109][ T6797] [ 79.953116][ T6797] __dump_stack+0x1d/0x30 [ 79.953133][ T6797] dump_stack_lvl+0xe8/0x140 [ 79.953146][ T6797] dump_stack+0x15/0x1b [ 79.953187][ T6797] should_fail_ex+0x265/0x280 [ 79.953204][ T6797] should_failslab+0x8c/0xb0 [ 79.953223][ T6797] __kvmalloc_node_noprof+0x123/0x4e0 [ 79.953243][ T6797] ? page_pool_create_percpu+0x239/0x650 [ 79.953286][ T6797] page_pool_create_percpu+0x239/0x650 [ 79.953301][ T6797] ? __kvmalloc_node_noprof+0x260/0x4e0 [ 79.953318][ T6797] page_pool_create+0x1a/0x30 [ 79.953388][ T6797] bpf_test_run_xdp_live+0x12e/0xfe0 [ 79.953406][ T6797] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 79.953498][ T6797] ? cpus_read_unlock+0x6e/0xc0 [ 79.953513][ T6797] ? __static_call_update+0x37c/0x3b0 [ 79.953536][ T6797] ? 0xffffffffa0205380 [ 79.953547][ T6797] ? synchronize_rcu+0x45/0x320 [ 79.953656][ T6797] ? 0xffffffffa0205380 [ 79.953666][ T6797] ? 0xffffffffa0205380 [ 79.953708][ T6797] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 79.953774][ T6797] ? 0xffffffffa0201b4c [ 79.953786][ T6797] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 79.953822][ T6797] bpf_prog_test_run_xdp+0x4f5/0x910 [ 79.953931][ T6797] ? __rcu_read_unlock+0x4f/0x70 [ 79.953948][ T6797] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 79.953964][ T6797] bpf_prog_test_run+0x22a/0x390 [ 79.953987][ T6797] __sys_bpf+0x4b9/0x7b0 [ 79.954029][ T6797] __x64_sys_bpf+0x41/0x50 [ 79.954044][ T6797] x64_sys_call+0x2aea/0x2ff0 [ 79.954059][ T6797] do_syscall_64+0xd2/0x200 [ 79.954150][ T6797] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.954165][ T6797] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.954186][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.954204][ T6797] RIP: 0033:0x7fe9ec9aec29 [ 79.954215][ T6797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.954277][ T6797] RSP: 002b:00007fe9eb40f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.954293][ T6797] RAX: ffffffffffffffda RBX: 00007fe9ecbf5fa0 RCX: 00007fe9ec9aec29 [ 79.954302][ T6797] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 79.954311][ T6797] RBP: 00007fe9eb40f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.954320][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.954328][ T6797] R13: 00007fe9ecbf6038 R14: 00007fe9ecbf5fa0 R15: 00007ffe556590a8 [ 79.954341][ T6797] [ 79.954346][ T6797] page_pool_create_percpu() gave up with errno -12 [ 80.249908][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.265256][ T6808] loop6: detected capacity change from 0 to 128 [ 80.280741][ T6808] syz.6.1004: attempt to access beyond end of device [ 80.280741][ T6808] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 80.294491][ T6810] loop4: detected capacity change from 0 to 2048 [ 80.352251][ T6810] loop4: p1 < > p4 [ 80.356690][ T6810] loop4: p4 size 8388608 extends beyond EOD, truncated [ 80.373561][ T6817] loop0: detected capacity change from 0 to 512 [ 80.381229][ T6817] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1007: corrupted in-inode xattr: invalid ea_ino [ 80.395155][ T6817] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1007: couldn't read orphan inode 15 (err -117) [ 80.407528][ T6817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.428016][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.444935][ T6822] serio: Serial port ptm0 [ 80.495612][ T6823] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 80.503419][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 80.522372][ T6823] lo speed is unknown, defaulting to 1000 [ 80.562709][ T6823] lo speed is unknown, defaulting to 1000 [ 80.777722][ T6827] loop2: detected capacity change from 0 to 512 [ 80.968666][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 81.440371][ T6843] loop4: detected capacity change from 0 to 2048 [ 81.457309][ T6867] loop6: detected capacity change from 0 to 2048 [ 81.464577][ T6843] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.1015: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 81.482967][ T6843] EXT4-fs (loop4): get root inode failed [ 81.488608][ T6843] EXT4-fs (loop4): mount failed [ 81.522044][ T6867] loop6: p1 < > p4 [ 81.526275][ T6867] loop6: p4 size 8388608 extends beyond EOD, truncated [ 81.575440][ T6877] ./file0: Can't lookup blockdev [ 81.612456][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.621583][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.729003][ T6884] loop2: detected capacity change from 0 to 512 [ 81.736121][ T6884] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 81.746802][ T6884] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.753386][ T6884] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1032: Block bitmap for bg 0 marked uninitialized [ 81.766736][ T6884] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 81.776122][ T6884] EXT4-fs (loop2): 1 orphan inode deleted [ 81.782227][ T6884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.795289][ T6884] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 81.805336][ T6884] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 81.814414][ T6884] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 81.826423][ T6884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.843893][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.858958][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1033'. [ 81.881341][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 81.919434][ T6890] loop2: detected capacity change from 0 to 1024 [ 81.926016][ T6890] EXT4-fs: Ignoring removed orlov option [ 81.933304][ T6890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.167205][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.217291][ T6907] loop2: detected capacity change from 0 to 512 [ 82.236719][ T6907] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 82.248024][ T6907] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1039'. [ 82.258183][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 82.267228][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1039'. [ 82.270243][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1040'. [ 82.301154][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 82.421420][ T6931] pim6reg1: entered promiscuous mode [ 82.426905][ T6931] pim6reg1: entered allmulticast mode [ 82.536456][ T6941] SELinux: failed to load policy [ 82.551055][ T6940] loop6: detected capacity change from 0 to 2048 [ 82.562774][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.573532][ T6941] SELinux: failed to load policy [ 82.578703][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.589270][ T6941] SELinux: failed to load policy [ 82.594471][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.607728][ T6941] SELinux: failed to load policy [ 82.613033][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.623992][ T6941] SELinux: failed to load policy [ 82.629073][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.639509][ T6941] SELinux: failed to load policy [ 82.644539][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.657085][ T6940] loop6: p1 < > p4 < > [ 82.661254][ T6940] loop6: partition table partially beyond EOD, truncated [ 82.671543][ T6940] loop6: p4 start 42180 is beyond EOD, truncated [ 82.678391][ T6941] SELinux: failed to load policy [ 82.684540][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.695932][ T6941] SELinux: failed to load policy [ 82.700960][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.713382][ T6941] SELinux: failed to load policy [ 82.718746][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.729741][ T6941] SELinux: failed to load policy [ 82.735701][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.747046][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.759105][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.775787][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.787046][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.797666][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.808455][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.819451][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.830061][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.840698][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.851266][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.861992][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.872675][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.883218][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.894065][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.904672][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.915448][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.931702][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.942598][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 82.997394][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 83.009048][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 83.046775][ T6950] 9pnet_fd: Insufficient options for proto=fd [ 83.066518][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 83.115284][ T6954] loop3: detected capacity change from 0 to 512 [ 83.127202][ T6941] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 83.193401][ T6954] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1052: error while reading EA inode 32 err=-116 [ 83.206076][ T6954] EXT4-fs (loop3): Remounting filesystem read-only [ 83.212681][ T6954] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 83.223695][ T6954] EXT4-fs (loop3): 1 orphan inode deleted [ 83.229713][ T6954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.255107][ T6955] loop0: detected capacity change from 0 to 8192 [ 83.261850][ T6960] lo speed is unknown, defaulting to 1000 [ 83.323145][ T6960] lo speed is unknown, defaulting to 1000 [ 83.331226][ T6955] loop0: p1 p2[DM] p4 [ 83.335369][ T6955] loop0: p1 size 196608 extends beyond EOD, truncated [ 83.347113][ T6955] loop0: p2 start 4292936063 is beyond EOD, truncated [ 83.351973][ T6963] loop2: detected capacity change from 0 to 2048 [ 83.354066][ T6955] loop0: p4 size 50331648 extends beyond EOD, truncated [ 83.400237][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.422962][ T6963] loop2: p1 < > p4 [ 83.428822][ T6963] loop2: p4 size 8388608 extends beyond EOD, truncated [ 83.464424][ T6979] sctp: [Deprecated]: syz.6.1056 (pid 6979) Use of int in maxseg socket option. [ 83.464424][ T6979] Use struct sctp_assoc_value instead [ 83.506087][ T6978] bridge_slave_0: left allmulticast mode [ 83.511523][ T6987] tmpfs: Unknown parameter '' [ 83.511835][ T6978] bridge_slave_0: left promiscuous mode [ 83.517065][ T6988] tmpfs: Unknown parameter '' [ 83.522418][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.537348][ T6978] bridge_slave_1: left allmulticast mode [ 83.543104][ T6978] bridge_slave_1: left promiscuous mode [ 83.548840][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.557805][ T6985] SELinux: policydb string SE Li does not match my string SE Linux [ 83.557931][ T6978] bond0: (slave bond_slave_0): Releasing backup interface [ 83.574055][ T6978] bond0: (slave bond_slave_1): Releasing backup interface [ 83.583824][ T6978] team0: Port device team_slave_0 removed [ 83.590411][ T6978] team0: Port device team_slave_1 removed [ 83.596330][ T6978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.603984][ T6978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.620093][ T6978] team0: Port device geneve1 removed [ 83.647966][ T7000] loop4: detected capacity change from 0 to 512 [ 83.654871][ T7000] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 83.665012][ T7000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e02c, mo2=0002] [ 83.673276][ T7000] System zones: 1-12 [ 83.677232][ T3983] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.681305][ T7000] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.694040][ T7000] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1064: attempt to clear invalid blocks 1024 len 1 [ 83.695156][ T3983] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.707546][ T7000] EXT4-fs (loop4): Remounting filesystem read-only [ 83.716365][ T3983] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.731886][ T3983] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.733227][ T7000] EXT4-fs (loop4): 1 truncate cleaned up [ 83.747091][ T7000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 83.759969][ T7000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 83.795108][ T7008] loop3: detected capacity change from 0 to 2368 [ 83.802102][ T7008] iso9660: Bad value for 'check' [ 83.803983][ T7010] program syz.4.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.818338][ T7008] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 83.826808][ T7008] ipvlan0: entered allmulticast mode [ 83.833342][ T7008] veth0_vlan: entered allmulticast mode [ 83.839993][ T7008] team0: Device ipvlan0 failed to register rx_handler [ 83.873512][ T7008] sd 0:0:1:0: device reset [ 83.878780][ T7017] program syz.4.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.930040][ T7023] lo speed is unknown, defaulting to 1000 [ 83.972833][ T7026] FAULT_INJECTION: forcing a failure. [ 83.972833][ T7026] name failslab, interval 1, probability 0, space 0, times 0 [ 83.977396][ T7023] lo speed is unknown, defaulting to 1000 [ 83.985575][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: syz.3.1074 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.985594][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.985601][ T7026] Call Trace: [ 83.985607][ T7026] [ 83.985612][ T7026] __dump_stack+0x1d/0x30 [ 83.985627][ T7026] dump_stack_lvl+0xe8/0x140 [ 83.985718][ T7026] dump_stack+0x15/0x1b [ 83.985736][ T7026] should_fail_ex+0x265/0x280 [ 83.985752][ T7026] should_failslab+0x8c/0xb0 [ 83.985821][ T7026] kmem_cache_alloc_noprof+0x50/0x310 [ 83.985903][ T7026] ? skb_clone+0x151/0x1f0 [ 83.985919][ T7026] skb_clone+0x151/0x1f0 [ 83.985934][ T7026] __netlink_deliver_tap+0x2c9/0x500 [ 83.985954][ T7026] ? netlink_attachskb+0x2d0/0x610 [ 83.985997][ T7026] netlink_sendskb+0x126/0x150 [ 83.986086][ T7026] netlink_unicast+0x2a2/0x690 [ 83.986100][ T7026] netlink_ack+0x4c8/0x500 [ 83.986115][ T7026] netlink_rcv_skb+0x192/0x220 [ 83.986129][ T7026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.986223][ T7026] genl_rcv+0x28/0x40 [ 83.986240][ T7026] netlink_unicast+0x5bd/0x690 [ 83.986253][ T7026] netlink_sendmsg+0x58b/0x6b0 [ 83.986341][ T7026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.986356][ T7026] __sock_sendmsg+0x142/0x180 [ 83.986376][ T7026] ____sys_sendmsg+0x31e/0x4e0 [ 83.986462][ T7026] ___sys_sendmsg+0x17b/0x1d0 [ 83.986553][ T7026] __x64_sys_sendmsg+0xd4/0x160 [ 83.986570][ T7026] x64_sys_call+0x191e/0x2ff0 [ 83.986583][ T7026] do_syscall_64+0xd2/0x200 [ 83.986602][ T7026] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.986619][ T7026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.986684][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.986698][ T7026] RIP: 0033:0x7effc325ec29 [ 83.986755][ T7026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.986766][ T7026] RSP: 002b:00007effc1cbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.986779][ T7026] RAX: ffffffffffffffda RBX: 00007effc34a5fa0 RCX: 00007effc325ec29 [ 83.986787][ T7026] RDX: 0000000000000000 RSI: 0000200000003440 RDI: 0000000000000003 [ 83.986794][ T7026] RBP: 00007effc1cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 83.986802][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.986837][ T7026] R13: 00007effc34a6038 R14: 00007effc34a5fa0 R15: 00007ffccfbec3c8 [ 83.986848][ T7026] [ 84.022283][ T7028] netlink: 'syz.3.1075': attribute type 21 has an invalid length. [ 84.156231][ T29] kauditd_printk_skb: 2918 callbacks suppressed [ 84.156273][ T29] audit: type=1400 audit(84.134:8815): avc: denied { getopt } for pid=7027 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.297555][ T29] audit: type=1326 audit(84.264:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.320357][ T29] audit: type=1326 audit(84.264:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.343402][ T29] audit: type=1326 audit(84.264:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.366268][ T29] audit: type=1326 audit(84.264:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.366287][ T29] audit: type=1326 audit(84.264:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.366323][ T29] audit: type=1326 audit(84.264:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.366336][ T29] audit: type=1326 audit(84.264:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.366350][ T29] audit: type=1326 audit(84.264:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.479951][ T29] audit: type=1326 audit(84.264:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 84.716187][ T7050] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 84.728826][ T7050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.832296][ T7066] loop2: detected capacity change from 0 to 128 [ 85.126637][ T7071] loop6: detected capacity change from 0 to 512 [ 85.133593][ T7071] EXT4-fs: Ignoring removed bh option [ 85.139400][ T7071] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.148602][ T7071] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 85.177397][ T7071] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 85.187362][ T7071] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 85.196642][ T7071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.210662][ T7071] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1089: bg 0: block 353: padding at end of block bitmap is not set [ 85.242255][ T7071] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 85.259665][ T7082] FAULT_INJECTION: forcing a failure. [ 85.259665][ T7082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.272772][ T7082] CPU: 1 UID: 0 PID: 7082 Comm: syz.4.1093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.272806][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.272814][ T7082] Call Trace: [ 85.272820][ T7082] [ 85.272826][ T7082] __dump_stack+0x1d/0x30 [ 85.272842][ T7082] dump_stack_lvl+0xe8/0x140 [ 85.272853][ T7082] dump_stack+0x15/0x1b [ 85.272875][ T7082] should_fail_ex+0x265/0x280 [ 85.272990][ T7082] should_fail+0xb/0x20 [ 85.273009][ T7082] should_fail_usercopy+0x1a/0x20 [ 85.273027][ T7082] _copy_to_user+0x20/0xa0 [ 85.273063][ T7082] bpf_test_finish+0x351/0x500 [ 85.273081][ T7082] bpf_prog_test_run_xdp+0x578/0x910 [ 85.273097][ T7082] ? __rcu_read_unlock+0x4f/0x70 [ 85.273115][ T7082] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 85.273147][ T7082] bpf_prog_test_run+0x22a/0x390 [ 85.273210][ T7082] __sys_bpf+0x4b9/0x7b0 [ 85.273304][ T7082] __x64_sys_bpf+0x41/0x50 [ 85.273361][ T7082] x64_sys_call+0x2aea/0x2ff0 [ 85.273376][ T7082] do_syscall_64+0xd2/0x200 [ 85.273394][ T7082] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.273408][ T7082] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.273448][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.273468][ T7082] RIP: 0033:0x7f564e8cec29 [ 85.273479][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.273559][ T7082] RSP: 002b:00007f564d32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.273573][ T7082] RAX: ffffffffffffffda RBX: 00007f564eb15fa0 RCX: 00007f564e8cec29 [ 85.273582][ T7082] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 85.273625][ T7082] RBP: 00007f564d32f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.273632][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.273639][ T7082] R13: 00007f564eb16038 R14: 00007f564eb15fa0 R15: 00007ffef1bb9878 [ 85.273651][ T7082] [ 85.492971][ T7086] loop4: detected capacity change from 0 to 256 [ 85.514630][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.568053][ T7100] C: renamed from team_slave_0 [ 85.574921][ T7100] netlink: 'syz.4.1094': attribute type 3 has an invalid length. [ 85.582694][ T7100] __nla_validate_parse: 19 callbacks suppressed [ 85.582707][ T7100] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1094'. [ 85.597975][ T7100] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 85.621187][ T7086] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1094'. [ 85.630182][ T7086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1094'. [ 85.641159][ T7086] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.707901][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 85.720740][ T7110] IPVS: Error joining to the multicast group [ 85.876403][ T7137] FAULT_INJECTION: forcing a failure. [ 85.876403][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 85.889037][ T7137] CPU: 1 UID: 0 PID: 7137 Comm: syz.3.1115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.889051][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.889055][ T7137] Call Trace: [ 85.889078][ T7137] [ 85.889081][ T7137] __dump_stack+0x1d/0x30 [ 85.889093][ T7137] dump_stack_lvl+0xe8/0x140 [ 85.889144][ T7137] dump_stack+0x15/0x1b [ 85.889155][ T7137] should_fail_ex+0x265/0x280 [ 85.889171][ T7137] should_failslab+0x8c/0xb0 [ 85.889186][ T7137] kmem_cache_alloc_noprof+0x50/0x310 [ 85.889234][ T7137] ? skb_clone+0x151/0x1f0 [ 85.889258][ T7137] skb_clone+0x151/0x1f0 [ 85.889272][ T7137] __netlink_deliver_tap+0x2c9/0x500 [ 85.889283][ T7137] ? netlink_attachskb+0x2d0/0x610 [ 85.889367][ T7137] netlink_sendskb+0x126/0x150 [ 85.889376][ T7137] netlink_unicast+0x2a2/0x690 [ 85.889385][ T7137] netlink_ack+0x4c8/0x500 [ 85.889396][ T7137] netlink_rcv_skb+0x192/0x220 [ 85.889454][ T7137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.889468][ T7137] genl_rcv+0x28/0x40 [ 85.889517][ T7137] netlink_unicast+0x5bd/0x690 [ 85.889572][ T7137] netlink_sendmsg+0x58b/0x6b0 [ 85.889583][ T7137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.889592][ T7137] __sock_sendmsg+0x142/0x180 [ 85.889672][ T7137] ____sys_sendmsg+0x31e/0x4e0 [ 85.889683][ T7137] ___sys_sendmsg+0x17b/0x1d0 [ 85.889699][ T7137] __x64_sys_sendmsg+0xd4/0x160 [ 85.889783][ T7137] x64_sys_call+0x191e/0x2ff0 [ 85.889792][ T7137] do_syscall_64+0xd2/0x200 [ 85.889804][ T7137] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.889816][ T7137] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.889859][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.889868][ T7137] RIP: 0033:0x7effc325ec29 [ 85.890019][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.890027][ T7137] RSP: 002b:00007effc1cbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.890036][ T7137] RAX: ffffffffffffffda RBX: 00007effc34a5fa0 RCX: 00007effc325ec29 [ 85.890041][ T7137] RDX: 0000000000000000 RSI: 0000200000003440 RDI: 0000000000000003 [ 85.890046][ T7137] RBP: 00007effc1cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 85.890051][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.890056][ T7137] R13: 00007effc34a6038 R14: 00007effc34a5fa0 R15: 00007ffccfbec3c8 [ 85.890064][ T7137] [ 86.496723][ T7160] ip6erspan0: entered promiscuous mode [ 86.504361][ T7162] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 86.586594][ T7172] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1127'. [ 86.658277][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 87.078837][ T7184] loop6: detected capacity change from 0 to 512 [ 87.087605][ T7184] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1132: iget: bad extra_isize 50264 (inode size 256) [ 87.102103][ T7184] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1132: couldn't read orphan inode 15 (err -117) [ 87.114710][ T7184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.127908][ T7184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.161741][ T7184] loop6: detected capacity change from 0 to 1024 [ 87.168917][ T7184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.173664][ T7172] Set syz1 is full, maxelem 65536 reached [ 87.185459][ T7184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.251805][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.276923][ T7193] loop6: detected capacity change from 0 to 2048 [ 87.292834][ T7193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 87.349613][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 87.469483][ T7210] loop6: detected capacity change from 0 to 1024 [ 87.474455][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7212 comm=syz.2.1142 [ 87.488549][ T7214] loop0: detected capacity change from 0 to 512 [ 87.489931][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7212 comm=syz.2.1142 [ 87.495388][ T7214] ext4: Unknown parameter 'uid' [ 87.512434][ T7210] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.524501][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7212 comm=syz.2.1142 [ 87.542372][ T7210] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.1141: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.565314][ T7210] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1141: Failed to acquire dquot type 0 [ 87.576845][ T7224] FAULT_INJECTION: forcing a failure. [ 87.576845][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 87.578077][ T7223] netlink: 352 bytes leftover after parsing attributes in process `syz.0.1145'. [ 87.589491][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.2.1146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.589580][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.589588][ T7224] Call Trace: [ 87.589593][ T7224] [ 87.589599][ T7224] __dump_stack+0x1d/0x30 [ 87.589616][ T7224] dump_stack_lvl+0xe8/0x140 [ 87.589628][ T7224] dump_stack+0x15/0x1b [ 87.589699][ T7224] should_fail_ex+0x265/0x280 [ 87.589720][ T7224] should_failslab+0x8c/0xb0 [ 87.589736][ T7224] __kvmalloc_node_noprof+0x123/0x4e0 [ 87.589757][ T7224] ? io_ring_ctx_alloc+0xb0/0x660 [ 87.589772][ T7224] ? __kmalloc_cache_noprof+0x189/0x320 [ 87.589877][ T7224] io_ring_ctx_alloc+0xb0/0x660 [ 87.589893][ T7224] io_uring_create+0x10f/0x610 [ 87.589908][ T7224] __se_sys_io_uring_setup+0x1f7/0x210 [ 87.589996][ T7224] __x64_sys_io_uring_setup+0x31/0x40 [ 87.590010][ T7224] x64_sys_call+0x2b21/0x2ff0 [ 87.590034][ T7224] do_syscall_64+0xd2/0x200 [ 87.590053][ T7224] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.590068][ T7224] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.590092][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.590159][ T7224] RIP: 0033:0x7f7eabd4ec29 [ 87.590237][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.590248][ T7224] RSP: 002b:00007f7eaa7aefc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 87.590333][ T7224] RAX: ffffffffffffffda RBX: 00007f7eabf95fa0 RCX: 00007f7eabd4ec29 [ 87.590341][ T7224] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 87.590380][ T7224] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 87.590409][ T7224] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 87.590416][ T7224] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 87.590427][ T7224] [ 87.792006][ T7226] loop3: detected capacity change from 0 to 512 [ 87.821272][ T7210] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1141: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.870192][ T7210] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1141: Invalid inode bitmap blk 0 in block_group 0 [ 87.885631][ T7226] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.895600][ T7226] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 87.921751][ T3999] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.923066][ T7210] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 87.967323][ T3999] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:32: Failed to release dquot type 0 [ 88.032930][ T7210] EXT4-fs (loop6): 1 orphan inode deleted [ 88.039455][ T7210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.293895][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.452956][ T7264] loop6: detected capacity change from 0 to 512 [ 88.465615][ T7264] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.508698][ T7264] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.524255][ T7264] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1159: bg 0: block 248: padding at end of block bitmap is not set [ 88.538734][ T7264] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1159: Failed to acquire dquot type 1 [ 88.550567][ T7264] EXT4-fs (loop6): 1 truncate cleaned up [ 88.556703][ T7264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 88.692244][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 88.861062][ T3979] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 1 [ 88.912242][ T7294] tc_dump_action: action bad kind [ 88.917839][ T7293] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 89.016403][ T7304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.129696][ T7304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.167200][ T7315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1177'. [ 89.209351][ T7317] loop6: detected capacity change from 0 to 512 [ 89.234406][ T7304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.251697][ T7317] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1178: bad orphan inode 11862016 [ 89.281534][ T7317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 89.315273][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 89.315309][ T29] audit: type=1400 audit(89.294:9338): avc: denied { setattr } for pid=7316 comm="syz.6.1178" path="/92/file1/file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.373899][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1182'. [ 89.396546][ T7304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.415399][ T29] audit: type=1400 audit(89.394:9339): avc: denied { ioctl } for pid=7316 comm="syz.6.1178" path="/92/file1/file1" dev="loop6" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.442073][ T7330] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.1178: corrupted inode contents [ 89.490428][ T7330] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #20: comm syz.6.1178: mark_inode_dirty error [ 89.513886][ T113] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.522159][ T29] audit: type=1326 audit(89.484:9340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29e9de5be7 code=0x7ffc0000 [ 89.544330][ T29] audit: type=1326 audit(89.484:9341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29e9d8ae09 code=0x7ffc0000 [ 89.567178][ T29] audit: type=1326 audit(89.484:9342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29e9de5be7 code=0x7ffc0000 [ 89.589336][ T29] audit: type=1326 audit(89.484:9343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29e9d8ae09 code=0x7ffc0000 [ 89.611737][ T29] audit: type=1326 audit(89.484:9344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 89.633946][ T29] audit: type=1326 audit(89.484:9345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 89.656223][ T29] audit: type=1326 audit(89.484:9346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 89.673893][ T113] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.678424][ T29] audit: type=1326 audit(89.484:9347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 89.690314][ T7326] loop2: detected capacity change from 0 to 128 [ 89.722109][ T3994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.730310][ T7330] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.1178: corrupted inode contents [ 89.751747][ T3983] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.754153][ T7330] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #20: comm syz.6.1178: mark_inode_dirty error [ 89.792363][ T7326] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 89.810220][ T7341] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1186'. [ 89.820014][ T7341] 0X: renamed from caif0 [ 89.824225][ T7330] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #20: comm syz.6.1178: mark inode dirty (error -117) [ 89.837544][ T7330] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 89.852598][ T7341] 0X: entered allmulticast mode [ 89.857840][ T7341] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 89.890683][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.949737][ T7326] sel_write_load: 25 callbacks suppressed [ 89.949754][ T7326] SELinux: failed to load policy [ 89.979367][ T7341] loop0: detected capacity change from 0 to 2048 [ 89.998641][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.007805][ T7360] loop3: detected capacity change from 0 to 8192 [ 90.025312][ T7341] GPT:first_usable_lbas don't match. [ 90.030621][ T7341] GPT:34 != 290 [ 90.034136][ T7341] GPT: Use GNU Parted to correct GPT errors. [ 90.040288][ T7341] loop0: p1 p2 p3 [ 90.115351][ T7371] ------------[ cut here ]------------ [ 90.120830][ T7371] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 90.141052][ T7371] WARNING: CPU: 0 PID: 7371 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 90.151333][ T7371] Modules linked in: [ 90.155227][ T7371] CPU: 0 UID: 0 PID: 7371 Comm: syz.0.1196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.165063][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.175181][ T7371] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 90.181516][ T7371] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 c2 81 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 90.201203][ T7371] RSP: 0018:ffffc90001543440 EFLAGS: 00010292 [ 90.207254][ T7371] RAX: 1357f0be1fe7d200 RBX: ffff8881193ee040 RCX: 0000000000080000 [ 90.215252][ T7371] RDX: ffffc900025da000 RSI: 000000000001b48e RDI: 000000000001b48f [ 90.223248][ T7371] RBP: 0000000000000000 R08: 0001c9000154327f R09: 0000000000000000 [ 90.231320][ T7371] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881193ee000 [ 90.239310][ T7371] R13: ffff88810a658000 R14: ffff88810a658000 R15: ffff8881193ee038 [ 90.247330][ T7371] FS: 00007f29e884f6c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 90.256317][ T7371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.262953][ T7371] CR2: 0000000000000000 CR3: 0000000131d02000 CR4: 00000000003506f0 [ 90.270988][ T7371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.279037][ T7371] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 90.287052][ T7371] Call Trace: [ 90.290321][ T7371] [ 90.293263][ T7371] reg_set_min_max+0x1eb/0x260 [ 90.298178][ T7371] check_cond_jmp_op+0x1080/0x16e0 [ 90.298522][ T7373] loop0: detected capacity change from 0 to 8192 [ 90.303346][ T7371] do_check+0x332a/0x7a10 [ 90.303458][ T7371] ? do_check_common+0x378/0x12a0 [ 90.319118][ T7371] do_check_common+0xc3a/0x12a0 [ 90.324117][ T7371] bpf_check+0x942b/0xd9e0 [ 90.328531][ T7371] ? __rcu_read_unlock+0x4f/0x70 [ 90.333477][ T7371] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 90.339448][ T7371] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 90.345082][ T7371] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 90.351016][ T7371] ? pcpu_block_update+0x232/0x3b0 [ 90.356109][ T7371] ? _find_next_zero_bit+0x64/0xa0 [ 90.361229][ T7371] ? pcpu_block_refresh_hint+0x157/0x170 [ 90.366842][ T7371] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 90.372955][ T7371] ? css_rstat_updated+0xb7/0x240 [ 90.377959][ T7371] ? __rcu_read_unlock+0x4f/0x70 [ 90.382995][ T7371] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 90.388777][ T7371] ? should_fail_ex+0x30/0x280 [ 90.393589][ T7371] ? selinux_bpf_prog_load+0x36/0xf0 [ 90.398893][ T7371] ? should_failslab+0x8c/0xb0 [ 90.403642][ T7371] ? __kmalloc_cache_noprof+0x189/0x320 [ 90.409228][ T7371] ? selinux_bpf_prog_load+0xbf/0xf0 [ 90.414527][ T7371] ? security_bpf_prog_load+0x2c/0xa0 [ 90.419893][ T7371] bpf_prog_load+0xedd/0x1070 [ 90.424638][ T7371] ? security_bpf+0x2b/0x90 [ 90.429107][ T7371] __sys_bpf+0x462/0x7b0 [ 90.433366][ T7371] __x64_sys_bpf+0x41/0x50 [ 90.437753][ T7371] x64_sys_call+0x2aea/0x2ff0 [ 90.442555][ T7371] do_syscall_64+0xd2/0x200 [ 90.447036][ T7371] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.453122][ T7371] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.458881][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.464934][ T7371] RIP: 0033:0x7f29e9deec29 [ 90.469334][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.489086][ T7371] RSP: 002b:00007f29e884f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.497492][ T7371] RAX: ffffffffffffffda RBX: 00007f29ea035fa0 RCX: 00007f29e9deec29 [ 90.505494][ T7371] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 90.513470][ T7371] RBP: 00007f29e9e71e41 R08: 0000000000000000 R09: 0000000000000000 [ 90.522120][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.530139][ T7371] R13: 00007f29ea036038 R14: 00007f29ea035fa0 R15: 00007ffebdfa0dc8 [ 90.538108][ T7371] [ 90.541196][ T7371] ---[ end trace 0000000000000000 ]--- [ 90.666855][ T7383] loop0: detected capacity change from 0 to 512 [ 90.682333][ T7383] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1200: bad orphan inode 11862016 [ 90.684488][ T7378] lo speed is unknown, defaulting to 1000 [ 90.697020][ T7383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.745028][ T7378] lo speed is unknown, defaulting to 1000 [ 90.774139][ T7383] FAULT_INJECTION: forcing a failure. [ 90.774139][ T7383] name failslab, interval 1, probability 0, space 0, times 0 [ 90.786819][ T7383] CPU: 1 UID: 0 PID: 7383 Comm: syz.0.1200 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 90.786843][ T7383] Tainted: [W]=WARN [ 90.786847][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.786855][ T7383] Call Trace: [ 90.786861][ T7383] [ 90.786867][ T7383] __dump_stack+0x1d/0x30 [ 90.786918][ T7383] dump_stack_lvl+0xe8/0x140 [ 90.786932][ T7383] dump_stack+0x15/0x1b [ 90.786942][ T7383] should_fail_ex+0x265/0x280 [ 90.786959][ T7383] should_failslab+0x8c/0xb0 [ 90.786975][ T7383] __kmalloc_noprof+0xa5/0x3e0 [ 90.787050][ T7383] ? qtree_write_dquot+0x70/0x300 [ 90.787070][ T7383] ? xas_load+0x413/0x430 [ 90.787088][ T7383] qtree_write_dquot+0x70/0x300 [ 90.787153][ T7383] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 90.787170][ T7383] ? __rcu_read_unlock+0x4f/0x70 [ 90.787184][ T7383] v2_write_dquot+0xda/0x140 [ 90.787275][ T7383] dquot_commit+0x21c/0x260 [ 90.787293][ T7383] ext4_write_dquot+0x126/0x1d0 [ 90.787383][ T7383] ext4_mark_dquot_dirty+0x95/0xd0 [ 90.787396][ T7383] dquot_alloc_inode+0x3a5/0x5d0 [ 90.787413][ T7383] ? _raw_spin_unlock+0x26/0x50 [ 90.787428][ T7383] ? insert_inode_locked+0x2a3/0x2e0 [ 90.787510][ T7383] __ext4_new_inode+0x1f0b/0x2330 [ 90.787531][ T7383] ? ext4_ext_migrate+0x2a3/0x9b0 [ 90.787544][ T7383] ext4_ext_migrate+0x3f7/0x9b0 [ 90.787568][ T7383] ext4_ioctl+0xf78/0x2080 [ 90.787583][ T7383] ? file_ioctl+0x146/0x530 [ 90.787594][ T7383] ? ioctl_has_perm+0x257/0x2a0 [ 90.787610][ T7383] ? do_vfs_ioctl+0x7ca/0xe10 [ 90.787683][ T7383] ? selinux_file_ioctl+0x308/0x3a0 [ 90.787697][ T7383] ? __fget_files+0x184/0x1c0 [ 90.787711][ T7383] ? __pfx_ext4_ioctl+0x10/0x10 [ 90.787723][ T7383] __se_sys_ioctl+0xce/0x140 [ 90.787737][ T7383] __x64_sys_ioctl+0x43/0x50 [ 90.787747][ T7383] x64_sys_call+0x1816/0x2ff0 [ 90.787758][ T7383] do_syscall_64+0xd2/0x200 [ 90.787816][ T7383] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.787830][ T7383] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.787911][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.788007][ T7383] RIP: 0033:0x7f29e9deec29 [ 90.788020][ T7383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.788031][ T7383] RSP: 002b:00007f29e884f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.788045][ T7383] RAX: ffffffffffffffda RBX: 00007f29ea035fa0 RCX: 00007f29e9deec29 [ 90.788054][ T7383] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000005 [ 90.788062][ T7383] RBP: 00007f29e884f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.788069][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.788093][ T7383] R13: 00007f29ea036038 R14: 00007f29ea035fa0 R15: 00007ffebdfa0dc8 [ 90.788145][ T7383] [ 90.788151][ T7383] EXT4-fs error (device loop0): ext4_write_dquot:6917: comm syz.0.1200: Failed to commit dquot type 0 [ 91.103430][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 91.104420][ T7399] hub 1-0:1.0: USB hub found [ 91.117058][ T7399] hub 1-0:1.0: 8 ports detected [ 91.145085][ T7402] loop0: detected capacity change from 0 to 2048 [ 91.153580][ T7402] EXT4-fs: Ignoring removed orlov option [ 91.172970][ T7402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.200577][ T7413] FAULT_INJECTION: forcing a failure. [ 91.200577][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 91.213260][ T7413] CPU: 1 UID: 0 PID: 7413 Comm: syz.3.1210 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.213283][ T7413] Tainted: [W]=WARN [ 91.213359][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.213366][ T7413] Call Trace: [ 91.213372][ T7413] [ 91.213377][ T7413] __dump_stack+0x1d/0x30 [ 91.213392][ T7413] dump_stack_lvl+0xe8/0x140 [ 91.213405][ T7413] dump_stack+0x15/0x1b [ 91.213414][ T7413] should_fail_ex+0x265/0x280 [ 91.213468][ T7413] ? tty_open+0x81/0xaf0 [ 91.213487][ T7413] should_failslab+0x8c/0xb0 [ 91.213504][ T7413] __kmalloc_cache_noprof+0x4c/0x320 [ 91.213525][ T7413] tty_open+0x81/0xaf0 [ 91.213574][ T7413] ? kobj_lookup+0x276/0x280 [ 91.213658][ T7413] ? __pfx_exact_match+0x10/0x10 [ 91.213674][ T7413] chrdev_open+0x2e8/0x3a0 [ 91.213721][ T7413] do_dentry_open+0x649/0xa20 [ 91.213741][ T7413] ? __pfx_chrdev_open+0x10/0x10 [ 91.213834][ T7413] vfs_open+0x37/0x1e0 [ 91.213850][ T7413] dentry_open+0x4a/0x90 [ 91.213997][ T7413] ptm_open_peer+0x113/0x180 [ 91.214017][ T7413] tty_ioctl+0x3bc/0xb80 [ 91.214030][ T7413] ? __pfx_tty_ioctl+0x10/0x10 [ 91.214042][ T7413] __se_sys_ioctl+0xce/0x140 [ 91.214094][ T7413] __x64_sys_ioctl+0x43/0x50 [ 91.214158][ T7413] x64_sys_call+0x1816/0x2ff0 [ 91.214171][ T7413] do_syscall_64+0xd2/0x200 [ 91.214257][ T7413] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.214271][ T7413] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.214371][ T7413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.214385][ T7413] RIP: 0033:0x7effc325ec29 [ 91.214395][ T7413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.214406][ T7413] RSP: 002b:00007effc1cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.214419][ T7413] RAX: ffffffffffffffda RBX: 00007effc34a5fa0 RCX: 00007effc325ec29 [ 91.214490][ T7413] RDX: 0000000000000002 RSI: 0000000000005441 RDI: 0000000000000005 [ 91.214498][ T7413] RBP: 00007effc1cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 91.214583][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.214590][ T7413] R13: 00007effc34a6038 R14: 00007effc34a5fa0 R15: 00007ffccfbec3c8 [ 91.214601][ T7413] [ 91.451149][ T10] hid_parser_main: 32 callbacks suppressed [ 91.451162][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 91.471727][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.530247][ T7425] loop4: detected capacity change from 0 to 128 [ 91.555139][ T3411] IPVS: starting estimator thread 0... [ 91.641089][ T7429] IPVS: using max 4272 ests per chain, 213600 per kthread [ 91.717984][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.896295][ T7450] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 91.902836][ T7450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.910282][ T7450] vhci_hcd vhci_hcd.0: Device attached [ 91.917115][ T7451] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 91.924529][ T4028] vhci_hcd: stop threads [ 91.928788][ T4028] vhci_hcd: release socket [ 91.928801][ T4028] vhci_hcd: disconnect device [ 91.960853][ T7460] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 92.000265][ T7464] loop6: detected capacity change from 0 to 1024 [ 92.036021][ T7464] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 92.171924][ T7479] loop6: detected capacity change from 0 to 128 [ 92.575527][ T7498] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1234'. [ 92.584691][ T7498] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 92.648413][ T7502] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 92.775148][ T7511] netlink: 'syz.0.1241': attribute type 4 has an invalid length. [ 92.874084][ T7523] FAULT_INJECTION: forcing a failure. [ 92.874084][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 92.886818][ T7523] CPU: 1 UID: 0 PID: 7523 Comm: syz.2.1245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.886855][ T7523] Tainted: [W]=WARN [ 92.886860][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.886867][ T7523] Call Trace: [ 92.886872][ T7523] [ 92.886877][ T7523] __dump_stack+0x1d/0x30 [ 92.886891][ T7523] dump_stack_lvl+0xe8/0x140 [ 92.886901][ T7523] dump_stack+0x15/0x1b [ 92.886910][ T7523] should_fail_ex+0x265/0x280 [ 92.886989][ T7523] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 92.887003][ T7523] should_failslab+0x8c/0xb0 [ 92.887021][ T7523] __kmalloc_cache_noprof+0x4c/0x320 [ 92.887095][ T7523] nsim_fib_event_nb+0x1a0/0xcb0 [ 92.887110][ T7523] ? __account_obj_stock+0x211/0x350 [ 92.887124][ T7523] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 92.887140][ T7523] atomic_notifier_call_chain+0x73/0x1c0 [ 92.887241][ T7523] call_fib_notifiers+0x65/0xa0 [ 92.887266][ T7523] call_fib6_notifiers+0x30/0x40 [ 92.887282][ T7523] fib6_add_rt2node+0xa39/0x1760 [ 92.887297][ T7523] ? fib6_add_1+0x830/0xa80 [ 92.887367][ T7523] fib6_add+0x5b9/0xe00 [ 92.887378][ T7523] ? __ipv6_addr_type+0xe2/0x210 [ 92.887477][ T7523] ? ip6_route_info_create_nh+0x559/0x610 [ 92.887491][ T7523] ip6_route_add+0xc7/0x170 [ 92.887504][ T7523] ipv6_route_ioctl+0x251/0x280 [ 92.887562][ T7523] inet6_ioctl+0x152/0x190 [ 92.887579][ T7523] sock_do_ioctl+0x70/0x220 [ 92.887601][ T7523] sock_ioctl+0x41b/0x610 [ 92.887618][ T7523] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 92.887661][ T7523] ? __pfx_sock_ioctl+0x10/0x10 [ 92.887677][ T7523] __se_sys_ioctl+0xce/0x140 [ 92.887690][ T7523] __x64_sys_ioctl+0x43/0x50 [ 92.887735][ T7523] x64_sys_call+0x1816/0x2ff0 [ 92.887748][ T7523] do_syscall_64+0xd2/0x200 [ 92.887765][ T7523] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.887778][ T7523] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.887895][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.887959][ T7523] RIP: 0033:0x7f7eabd4ec29 [ 92.888028][ T7523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.888041][ T7523] RSP: 002b:00007f7eaa7af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.888054][ T7523] RAX: ffffffffffffffda RBX: 00007f7eabf95fa0 RCX: 00007f7eabd4ec29 [ 92.888134][ T7523] RDX: 00002000000005c0 RSI: 000000000000890b RDI: 0000000000000006 [ 92.888143][ T7523] RBP: 00007f7eaa7af090 R08: 0000000000000000 R09: 0000000000000000 [ 92.888189][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.888224][ T7523] R13: 00007f7eabf96038 R14: 00007f7eabf95fa0 R15: 00007ffda5437818 [ 92.888253][ T7523] [ 92.943208][ T7526] loop0: detected capacity change from 0 to 2048 [ 93.016554][ T7528] 9pnet_fd: Insufficient options for proto=fd [ 93.019743][ T7526] EXT4-fs: inline encryption not supported [ 93.195261][ T7536] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 93.299627][ T7543] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1252'. [ 93.619220][ T7599] netlink: 'syz.4.1273': attribute type 3 has an invalid length. [ 93.626993][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 93.643080][ T7595] loop0: detected capacity change from 0 to 2048 [ 93.654496][ T7595] EXT4-fs: inline encryption not supported [ 93.708315][ T7613] loop2: detected capacity change from 0 to 512 [ 93.783884][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 93.811060][ T7613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.843378][ T7613] EXT4-fs (loop2): 1 truncate cleaned up [ 93.965808][ C1] sd 0:0:1:0: [sda] tag#7182 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 93.976220][ C1] sd 0:0:1:0: [sda] tag#7182 CDB: Read(6) 08 01 00 00 00 48 [ 93.986019][ T7623] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1280'. [ 93.998730][ T7623] vxcan1: entered allmulticast mode [ 94.015304][ T7626] loop2: detected capacity change from 0 to 2048 [ 94.021880][ T7626] EXT4-fs: inline encryption not supported [ 94.118599][ T7632] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 94.155929][ T7636] loop0: detected capacity change from 0 to 512 [ 94.178903][ T7636] serio: Serial port ttyS3 [ 94.289405][ T7656] loop0: detected capacity change from 0 to 512 [ 94.296826][ T7656] EXT4-fs: Ignoring removed bh option [ 94.392283][ T7656] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.401356][ T7656] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 94.411438][ T7656] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 94.428604][ T7656] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 94.453689][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 94.453768][ T29] audit: type=1326 audit(94.434:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29e9ded590 code=0x7ffc0000 [ 94.454514][ T7656] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1291: bg 0: block 353: padding at end of block bitmap is not set [ 94.460243][ T29] audit: type=1326 audit(94.434:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f29e9ded977 code=0x7ffc0000 [ 94.519485][ T29] audit: type=1326 audit(94.434:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29e9ded590 code=0x7ffc0000 [ 94.542219][ T29] audit: type=1326 audit(94.434:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 94.565135][ T29] audit: type=1326 audit(94.434:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 94.587826][ T29] audit: type=1326 audit(94.434:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 94.610426][ T29] audit: type=1326 audit(94.434:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 94.633102][ T29] audit: type=1326 audit(94.434:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 94.655836][ T29] audit: type=1326 audit(94.434:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 94.682954][ T29] audit: type=1326 audit(94.484:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.0.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 94.788354][ T7676] pimreg: entered allmulticast mode [ 94.815349][ T7676] pimreg: left allmulticast mode [ 94.909432][ T7681] loop4: detected capacity change from 0 to 128 [ 94.947956][ T7681] syz.4.1301: attempt to access beyond end of device [ 94.947956][ T7681] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 94.970734][ T7685] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 94.971107][ T7681] syz.4.1301: attempt to access beyond end of device [ 94.971107][ T7681] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 95.004477][ T7681] syz.4.1301: attempt to access beyond end of device [ 95.004477][ T7681] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 95.018721][ T7681] syz.4.1301: attempt to access beyond end of device [ 95.018721][ T7681] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 95.033392][ T7681] syz.4.1301: attempt to access beyond end of device [ 95.033392][ T7681] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 95.047191][ T7681] syz.4.1301: attempt to access beyond end of device [ 95.047191][ T7681] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 95.061067][ T7681] syz.4.1301: attempt to access beyond end of device [ 95.061067][ T7681] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 95.074932][ T7681] syz.4.1301: attempt to access beyond end of device [ 95.074932][ T7681] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 95.099244][ T7681] syz.4.1301: attempt to access beyond end of device [ 95.099244][ T7681] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 95.114455][ T7700] loop0: detected capacity change from 0 to 512 [ 95.122119][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 95.145587][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 95.209126][ T7713] loop0: detected capacity change from 0 to 128 [ 95.231901][ T7713] FAULT_INJECTION: forcing a failure. [ 95.231901][ T7713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.245034][ T7713] CPU: 1 UID: 0 PID: 7713 Comm: syz.0.1310 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.245060][ T7713] Tainted: [W]=WARN [ 95.245064][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.245073][ T7713] Call Trace: [ 95.245079][ T7713] [ 95.245157][ T7713] __dump_stack+0x1d/0x30 [ 95.245173][ T7713] dump_stack_lvl+0xe8/0x140 [ 95.245184][ T7713] dump_stack+0x15/0x1b [ 95.245206][ T7713] should_fail_ex+0x265/0x280 [ 95.245222][ T7713] should_fail+0xb/0x20 [ 95.245237][ T7713] should_fail_usercopy+0x1a/0x20 [ 95.245254][ T7713] copy_folio_from_iter_atomic+0x278/0x11b0 [ 95.245335][ T7713] ? fat_write_begin+0x4f/0xe0 [ 95.245352][ T7713] ? __pfx_fat_get_block+0x10/0x10 [ 95.245446][ T7713] generic_perform_write+0x2c2/0x490 [ 95.245464][ T7713] __generic_file_write_iter+0x9e/0x120 [ 95.245477][ T7713] generic_file_write_iter+0x8d/0x2f0 [ 95.245489][ T7713] ? mntput_no_expire+0x6f/0x460 [ 95.245513][ T7713] ? mntput+0x4b/0x80 [ 95.245528][ T7713] ? terminate_walk+0x27f/0x2a0 [ 95.245590][ T7713] ? path_openat+0x1bf8/0x2170 [ 95.245611][ T7713] ? _parse_integer_limit+0x170/0x190 [ 95.245626][ T7713] do_iter_readv_writev+0x499/0x540 [ 95.245643][ T7713] vfs_writev+0x2df/0x8b0 [ 95.245736][ T7713] __se_sys_pwritev2+0xfc/0x1c0 [ 95.245751][ T7713] __x64_sys_pwritev2+0x67/0x80 [ 95.245771][ T7713] x64_sys_call+0x2c55/0x2ff0 [ 95.245820][ T7713] do_syscall_64+0xd2/0x200 [ 95.245842][ T7713] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.245860][ T7713] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.246002][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.246018][ T7713] RIP: 0033:0x7f29e9deec29 [ 95.246084][ T7713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.246096][ T7713] RSP: 002b:00007f29e884f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 95.246110][ T7713] RAX: ffffffffffffffda RBX: 00007f29ea035fa0 RCX: 00007f29e9deec29 [ 95.246179][ T7713] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006 [ 95.246188][ T7713] RBP: 00007f29e884f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.246245][ T7713] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000002 [ 95.246253][ T7713] R13: 00007f29ea036038 R14: 00007f29ea035fa0 R15: 00007ffebdfa0dc8 [ 95.246263][ T7713] [ 95.249965][ T7713] syz.0.1310: attempt to access beyond end of device [ 95.249965][ T7713] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 95.264828][ T7715] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 95.339648][ T7721] loop4: detected capacity change from 0 to 512 [ 95.544767][ T7735] FAULT_INJECTION: forcing a failure. [ 95.544767][ T7735] name failslab, interval 1, probability 0, space 0, times 0 [ 95.557554][ T7735] CPU: 0 UID: 0 PID: 7735 Comm: syz.0.1318 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.557575][ T7735] Tainted: [W]=WARN [ 95.557579][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.557590][ T7735] Call Trace: [ 95.557595][ T7735] [ 95.557600][ T7735] __dump_stack+0x1d/0x30 [ 95.557618][ T7735] dump_stack_lvl+0xe8/0x140 [ 95.557632][ T7735] dump_stack+0x15/0x1b [ 95.557644][ T7735] should_fail_ex+0x265/0x280 [ 95.557664][ T7735] should_failslab+0x8c/0xb0 [ 95.557680][ T7735] __kmalloc_noprof+0xa5/0x3e0 [ 95.557775][ T7735] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 95.557796][ T7735] ? __kfree_skb+0x109/0x150 [ 95.557889][ T7735] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 95.557912][ T7735] ? nlmon_xmit+0x4f/0x60 [ 95.557960][ T7735] genl_family_rcv_msg_doit+0x48/0x1b0 [ 95.557978][ T7735] ? genl_get_cmd+0x425/0x660 [ 95.558065][ T7735] ? __dev_queue_xmit+0x182/0x2000 [ 95.558083][ T7735] ? radix_tree_lookup+0xfa/0x140 [ 95.558172][ T7735] genl_rcv_msg+0x422/0x460 [ 95.558190][ T7735] ? __pfx_ctrl_getfamily+0x10/0x10 [ 95.558211][ T7735] netlink_rcv_skb+0x123/0x220 [ 95.558225][ T7735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.558268][ T7735] genl_rcv+0x28/0x40 [ 95.558286][ T7735] netlink_unicast+0x5bd/0x690 [ 95.558299][ T7735] netlink_sendmsg+0x58b/0x6b0 [ 95.558394][ T7735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.558408][ T7735] __sock_sendmsg+0x142/0x180 [ 95.558425][ T7735] __sys_sendto+0x268/0x330 [ 95.558442][ T7735] __x64_sys_sendto+0x76/0x90 [ 95.558472][ T7735] x64_sys_call+0x2d05/0x2ff0 [ 95.558487][ T7735] do_syscall_64+0xd2/0x200 [ 95.558509][ T7735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.558577][ T7735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.558597][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.558668][ T7735] RIP: 0033:0x7f29e9df0abc [ 95.558681][ T7735] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 95.558694][ T7735] RSP: 002b:00007f29e884dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 95.558709][ T7735] RAX: ffffffffffffffda RBX: 00007f29e884dfc0 RCX: 00007f29e9df0abc [ 95.558718][ T7735] RDX: 0000000000000020 RSI: 00007f29e884e010 RDI: 000000000000000b [ 95.558727][ T7735] RBP: 0000000000000000 R08: 00007f29e884df14 R09: 000000000000000c [ 95.558734][ T7735] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 95.558815][ T7735] R13: 00007f29e884df68 R14: 00007f29e884e010 R15: 0000000000000000 [ 95.558829][ T7735] [ 96.006512][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.015132][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.112610][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 96.166283][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1324'. [ 96.230942][ T7769] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 96.865994][ T7807] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 96.895426][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1337'. [ 97.230249][ T7841] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 97.332895][ T7843] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 97.611885][ T7873] loop3: detected capacity change from 0 to 512 [ 97.624399][ T7873] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1360: bad orphan inode 11862016 [ 97.635519][ T7873] EXT4-fs mount: 18 callbacks suppressed [ 97.635530][ T7873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.693174][ T7873] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.1360: corrupted inode contents [ 97.706057][ T7873] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.1360: mark_inode_dirty error [ 97.717572][ T7873] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.1360: corrupted inode contents [ 97.730589][ T7873] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.1360: mark_inode_dirty error [ 97.744230][ T7873] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.1360: mark inode dirty (error -117) [ 97.757101][ T7873] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 97.779480][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.888127][ T7881] loop3: detected capacity change from 0 to 1024 [ 97.894961][ T7881] EXT4-fs: Ignoring removed bh option [ 97.900706][ T7881] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 97.923531][ T7881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.958945][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.029728][ T7887] loop6: detected capacity change from 0 to 1024 [ 98.043136][ T7887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.056483][ T7887] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1363: bg 0: block 260: invalid block bitmap [ 98.220311][ T7898] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 98.632170][ T7915] loop2: detected capacity change from 0 to 512 [ 98.642722][ T7915] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1372: bad orphan inode 11862016 [ 98.654448][ T7915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.704741][ T7915] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #20: comm syz.2.1372: corrupted inode contents [ 98.716882][ T7915] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #20: comm syz.2.1372: mark_inode_dirty error [ 98.728358][ T7915] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #20: comm syz.2.1372: corrupted inode contents [ 98.740308][ T7915] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #20: comm syz.2.1372: mark_inode_dirty error [ 98.752582][ T7915] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #20: comm syz.2.1372: mark inode dirty (error -117) [ 98.765762][ T7915] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 98.783836][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.801711][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.821208][ T7923] loop2: detected capacity change from 0 to 512 [ 98.827970][ T7923] EXT4-fs (loop2): Invalid log block size: 63 [ 98.862733][ T7929] loop3: detected capacity change from 0 to 256 [ 98.909425][ T7929] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1378'. [ 98.942108][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1380'. [ 98.982152][ T7938] SELinux: ebitmap: truncated map [ 98.987404][ T7938] SELinux: failed to load policy [ 99.011450][ T7940] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 99.025031][ T7940] bond0: (slave dummy0): Releasing backup interface [ 99.034274][ T7940] team0: Port device dummy0 added [ 99.045025][ T7940] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 99.063988][ T7940] team0: Port device dummy0 removed [ 99.073356][ T7940] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.084520][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1375'. [ 99.093512][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1375'. [ 99.414818][ T7962] FAULT_INJECTION: forcing a failure. [ 99.414818][ T7962] name failslab, interval 1, probability 0, space 0, times 0 [ 99.427512][ T7962] CPU: 1 UID: 0 PID: 7962 Comm: syz.3.1390 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.427534][ T7962] Tainted: [W]=WARN [ 99.427538][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.427545][ T7962] Call Trace: [ 99.427549][ T7962] [ 99.427554][ T7962] __dump_stack+0x1d/0x30 [ 99.427639][ T7962] dump_stack_lvl+0xe8/0x140 [ 99.427652][ T7962] dump_stack+0x15/0x1b [ 99.427663][ T7962] should_fail_ex+0x265/0x280 [ 99.427679][ T7962] ? sctp_association_new+0x71/0x1200 [ 99.427696][ T7962] should_failslab+0x8c/0xb0 [ 99.427782][ T7962] __kmalloc_cache_noprof+0x4c/0x320 [ 99.427803][ T7962] sctp_association_new+0x71/0x1200 [ 99.427818][ T7962] ? __ipv6_addr_type+0xe2/0x210 [ 99.427836][ T7962] sctp_connect_new_asoc+0x1a8/0x3a0 [ 99.427852][ T7962] sctp_sendmsg+0xf10/0x18d0 [ 99.427865][ T7962] ? selinux_socket_sendmsg+0x91/0x1b0 [ 99.427883][ T7962] ? __pfx_sctp_sendmsg+0x10/0x10 [ 99.427945][ T7962] inet_sendmsg+0xc5/0xd0 [ 99.427961][ T7962] __sock_sendmsg+0x102/0x180 [ 99.428045][ T7962] __sys_sendto+0x268/0x330 [ 99.428062][ T7962] __x64_sys_sendto+0x76/0x90 [ 99.428075][ T7962] x64_sys_call+0x2d05/0x2ff0 [ 99.428087][ T7962] do_syscall_64+0xd2/0x200 [ 99.428166][ T7962] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.428206][ T7962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.428224][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.428238][ T7962] RIP: 0033:0x7effc325ec29 [ 99.428250][ T7962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.428301][ T7962] RSP: 002b:00007effc1cbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.428353][ T7962] RAX: ffffffffffffffda RBX: 00007effc34a5fa0 RCX: 00007effc325ec29 [ 99.428362][ T7962] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000000d [ 99.428370][ T7962] RBP: 00007effc1cbf090 R08: 0000200000000100 R09: 000000000000001c [ 99.428377][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.428385][ T7962] R13: 00007effc34a6038 R14: 00007effc34a5fa0 R15: 00007ffccfbec3c8 [ 99.428396][ T7962] [ 99.683780][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 99.683792][ T29] audit: type=1326 audit(99.664:9996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.729433][ T29] audit: type=1326 audit(99.664:9997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.752200][ T29] audit: type=1326 audit(99.664:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.775033][ T29] audit: type=1326 audit(99.664:9999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.783066][ T7974] loop2: detected capacity change from 0 to 512 [ 99.797944][ T29] audit: type=1326 audit(99.664:10000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.826940][ T29] audit: type=1326 audit(99.664:10001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.849816][ T29] audit: type=1326 audit(99.684:10002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.872829][ T29] audit: type=1326 audit(99.684:10003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.895629][ T29] audit: type=1326 audit(99.694:10004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7effc325ec29 code=0x7ffc0000 [ 99.924452][ T29] audit: type=1326 audit(99.854:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7978 comm="syz.6.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ec9aec29 code=0x7ffc0000 [ 99.966130][ T7974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.973830][ T7974] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1397: bad orphan inode 13 [ 99.999587][ T7974] ext4_test_bit(bit=12, block=18) = 1 [ 100.005011][ T7974] is_bad_inode(inode)=0 [ 100.009158][ T7974] NEXT_ORPHAN(inode)=2130706432 [ 100.014009][ T7974] max_ino=32 [ 100.017187][ T7974] i_nlink=1 [ 100.021551][ T7974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.047281][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.063953][ T7986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7986 comm=syz.6.1400 [ 100.109749][ T7991] loop3: detected capacity change from 0 to 1024 [ 100.122360][ T7991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.136481][ T7994] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7994 comm=syz.6.1400 [ 100.150710][ T7994] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=100 sclass=netlink_audit_socket pid=7994 comm=syz.6.1400 [ 100.347379][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 100.868221][ T8016] loop4: detected capacity change from 0 to 512 [ 100.892740][ T8016] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1410: bad orphan inode 11862016 [ 100.904958][ T8016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.982092][ T8016] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #19: comm syz.4.1410: corrupted inode contents [ 100.994648][ T8016] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #19: comm syz.4.1410: mark_inode_dirty error [ 101.007117][ T8016] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #19: comm syz.4.1410: corrupted inode contents [ 101.011488][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.031737][ T8016] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.1410: mark_inode_dirty error [ 101.044141][ T8016] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.1410: mark inode dirty (error -117) [ 101.057354][ T8016] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 101.078396][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.122781][ T8035] macsec1: entered promiscuous mode [ 101.127980][ T8035] bridge0: entered promiscuous mode [ 101.133707][ T8035] bridge0: port 1(macsec1) entered blocking state [ 101.140268][ T8035] bridge0: port 1(macsec1) entered disabled state [ 101.147236][ T8035] macsec1: entered allmulticast mode [ 101.152688][ T8035] bridge0: entered allmulticast mode [ 101.162102][ T8039] FAULT_INJECTION: forcing a failure. [ 101.162102][ T8039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.175370][ T8039] CPU: 0 UID: 0 PID: 8039 Comm: syz.0.1418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.175392][ T8039] Tainted: [W]=WARN [ 101.175396][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.175442][ T8039] Call Trace: [ 101.175447][ T8039] [ 101.175453][ T8039] __dump_stack+0x1d/0x30 [ 101.175495][ T8039] dump_stack_lvl+0xe8/0x140 [ 101.175507][ T8039] dump_stack+0x15/0x1b [ 101.175518][ T8039] should_fail_ex+0x265/0x280 [ 101.175533][ T8039] should_fail_alloc_page+0xf2/0x100 [ 101.175613][ T8039] __alloc_frozen_pages_noprof+0xff/0x360 [ 101.175639][ T8039] alloc_pages_mpol+0xb3/0x250 [ 101.175660][ T8039] vma_alloc_folio_noprof+0x1aa/0x300 [ 101.175734][ T8039] do_wp_page+0x5db/0x24e0 [ 101.175749][ T8039] ? css_rstat_updated+0xb7/0x240 [ 101.175775][ T8039] ? __rcu_read_lock+0x37/0x50 [ 101.175836][ T8039] handle_mm_fault+0x77d/0x2c20 [ 101.175853][ T8039] do_user_addr_fault+0x636/0x1090 [ 101.175872][ T8039] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 101.175893][ T8039] exc_page_fault+0x62/0xa0 [ 101.175961][ T8039] asm_exc_page_fault+0x26/0x30 [ 101.175972][ T8039] RIP: 0033:0x7f29e9cb0cb0 [ 101.175983][ T8039] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 101.175994][ T8039] RSP: 002b:00007f29e884e4a0 EFLAGS: 00010202 [ 101.176030][ T8039] RAX: 0000000000011005 RBX: 00007f29e884e540 RCX: 0000000000000101 [ 101.176038][ T8039] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f29e884e5e0 [ 101.176045][ T8039] RBP: 0000000000000102 R08: 00007f29e042f000 R09: 0000000000000004 [ 101.176052][ T8039] R10: 0000200000000642 R11: 0000000000000561 R12: 0000000000000301 [ 101.176058][ T8039] R13: 00007f29e9e8da20 R14: 0000000000000013 R15: 00007f29e884e5e0 [ 101.176085][ T8039] [ 101.176092][ T8039] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 101.381199][ T8035] macsec1: left allmulticast mode [ 101.386236][ T8035] bridge0: left allmulticast mode [ 101.392659][ T8035] bridge0: left promiscuous mode [ 101.429032][ T8048] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1422'. [ 101.447197][ T8048] lo speed is unknown, defaulting to 1000 [ 101.497231][ T8048] lo speed is unknown, defaulting to 1000 [ 101.642264][ T8059] FAULT_INJECTION: forcing a failure. [ 101.642264][ T8059] name failslab, interval 1, probability 0, space 0, times 0 [ 101.654996][ T8059] CPU: 1 UID: 0 PID: 8059 Comm: syz.4.1426 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.655016][ T8059] Tainted: [W]=WARN [ 101.655021][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.655084][ T8059] Call Trace: [ 101.655157][ T8059] [ 101.655163][ T8059] __dump_stack+0x1d/0x30 [ 101.655177][ T8059] dump_stack_lvl+0xe8/0x140 [ 101.655225][ T8059] dump_stack+0x15/0x1b [ 101.655237][ T8059] should_fail_ex+0x265/0x280 [ 101.655255][ T8059] should_failslab+0x8c/0xb0 [ 101.655273][ T8059] kmem_cache_alloc_noprof+0x50/0x310 [ 101.655373][ T8059] ? __anon_vma_prepare+0xcd/0x2f0 [ 101.655402][ T8059] __anon_vma_prepare+0xcd/0x2f0 [ 101.655493][ T8059] do_wp_page+0x1926/0x24e0 [ 101.655508][ T8059] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 101.655523][ T8059] ? css_rstat_updated+0xb7/0x240 [ 101.655618][ T8059] ? __rcu_read_lock+0x37/0x50 [ 101.655635][ T8059] handle_mm_fault+0x77d/0x2c20 [ 101.655657][ T8059] do_user_addr_fault+0x636/0x1090 [ 101.655676][ T8059] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 101.655718][ T8059] exc_page_fault+0x62/0xa0 [ 101.655736][ T8059] asm_exc_page_fault+0x26/0x30 [ 101.655756][ T8059] RIP: 0033:0x7f564e790c03 [ 101.655770][ T8059] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 101.655841][ T8059] RSP: 002b:00007f564d32e4a0 EFLAGS: 00010202 [ 101.655852][ T8059] RAX: 0000000000000400 RBX: 00007f564d32e540 RCX: 00007f5644f0f000 [ 101.655859][ T8059] RDX: 00007f564d32e6e0 RSI: 0000000000000011 RDI: 00007f564d32e5e0 [ 101.655868][ T8059] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001ba [ 101.655876][ T8059] R10: 00000000000001d0 R11: 00007f564d32e540 R12: 0000000000000001 [ 101.655885][ T8059] R13: 00007f564e96da20 R14: 0000000000000020 R15: 00007f564d32e5e0 [ 101.655964][ T8059] [ 101.655973][ T8059] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 101.854769][ T8059] loop4: detected capacity change from 0 to 512 [ 101.869010][ T8059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.983592][ T8069] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 101.989091][ T8059] EXT4-fs error (device loop4): ext4_quota_enable:7124: comm syz.4.1426: Bad quota inum: 2, type: 0 [ 101.998807][ T8066] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.002852][ T8059] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 102.013794][ T8066] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 102.027540][ T8059] EXT4-fs (loop4): mount failed [ 102.225847][ T8078] macvtap0: refused to change device tx_queue_len [ 102.427029][ T8085] loop3: detected capacity change from 0 to 164 [ 102.434082][ T8085] ISOFS: unable to read i-node block [ 102.439379][ T8085] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.641306][ T8094] netlink: 'syz.4.1437': attribute type 4 has an invalid length. [ 102.655558][ T8096] loop3: detected capacity change from 0 to 512 [ 102.667993][ T8096] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 102.738191][ T8100] FAULT_INJECTION: forcing a failure. [ 102.738191][ T8100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.751319][ T8100] CPU: 1 UID: 0 PID: 8100 Comm: syz.4.1439 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.751343][ T8100] Tainted: [W]=WARN [ 102.751347][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.751365][ T8100] Call Trace: [ 102.751370][ T8100] [ 102.751375][ T8100] __dump_stack+0x1d/0x30 [ 102.751439][ T8100] dump_stack_lvl+0xe8/0x140 [ 102.751453][ T8100] dump_stack+0x15/0x1b [ 102.751462][ T8100] should_fail_ex+0x265/0x280 [ 102.751476][ T8100] should_fail+0xb/0x20 [ 102.751487][ T8100] should_fail_usercopy+0x1a/0x20 [ 102.751570][ T8100] _copy_from_user+0x1c/0xb0 [ 102.751591][ T8100] ___sys_sendmsg+0xc1/0x1d0 [ 102.751615][ T8100] __sys_sendmmsg+0x178/0x300 [ 102.751703][ T8100] __x64_sys_sendmmsg+0x57/0x70 [ 102.751722][ T8100] x64_sys_call+0x1c4a/0x2ff0 [ 102.751737][ T8100] do_syscall_64+0xd2/0x200 [ 102.751759][ T8100] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.751784][ T8100] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.751802][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.751894][ T8100] RIP: 0033:0x7f564e8cec29 [ 102.751906][ T8100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.751918][ T8100] RSP: 002b:00007f564d32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.751930][ T8100] RAX: ffffffffffffffda RBX: 00007f564eb15fa0 RCX: 00007f564e8cec29 [ 102.751991][ T8100] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 102.751998][ T8100] RBP: 00007f564d32f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.752006][ T8100] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 102.752013][ T8100] R13: 00007f564eb16038 R14: 00007f564eb15fa0 R15: 00007ffef1bb9878 [ 102.752023][ T8100] [ 102.982962][ T8103] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1441'. [ 103.015060][ T8108] loop4: detected capacity change from 0 to 512 [ 103.047333][ T8111] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1441'. [ 103.163286][ T8122] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.183975][ T8126] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 103.204514][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1449'. [ 103.213496][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1449'. [ 103.244628][ T8122] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.294440][ T8137] SELinux: failed to load policy [ 103.303629][ T8122] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.346056][ T8146] lo speed is unknown, defaulting to 1000 [ 103.382574][ T8122] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.403209][ T8146] lo speed is unknown, defaulting to 1000 [ 103.468383][ T3975] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.469843][ T8161] blktrace: Concurrent blktraces are not allowed on sg0 [ 103.487090][ T8161] netlink: 'syz.4.1461': attribute type 7 has an invalid length. [ 103.496447][ T3975] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.499810][ T8163] 9pnet: Could not find request transport: f0xffffffffffffffff =1M$GVZU߆1_h6@E [ 103.517945][ T3975] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.532473][ T3975] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.574730][ T8170] loop6: detected capacity change from 0 to 512 [ 103.617782][ T8170] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1466: bad orphan inode 11862016 [ 103.632002][ T8170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.712971][ T8170] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.1466: corrupted inode contents [ 103.731010][ T8170] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #20: comm syz.6.1466: mark_inode_dirty error [ 103.743259][ T8170] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.1466: corrupted inode contents [ 103.763768][ T8170] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #20: comm syz.6.1466: mark_inode_dirty error [ 103.776046][ T8170] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #20: comm syz.6.1466: mark inode dirty (error -117) [ 103.788822][ T8170] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 103.804075][ T8192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.823165][ T8197] FAULT_INJECTION: forcing a failure. [ 103.823165][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 103.835980][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.2.1474 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 103.836004][ T8197] Tainted: [W]=WARN [ 103.836008][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.836015][ T8197] Call Trace: [ 103.836037][ T8197] [ 103.836044][ T8197] __dump_stack+0x1d/0x30 [ 103.836105][ T8197] dump_stack_lvl+0xe8/0x140 [ 103.836118][ T8197] dump_stack+0x15/0x1b [ 103.836129][ T8197] should_fail_ex+0x265/0x280 [ 103.836145][ T8197] should_failslab+0x8c/0xb0 [ 103.836160][ T8197] __kvmalloc_node_noprof+0x123/0x4e0 [ 103.836248][ T8197] ? io_alloc_cache_init+0x31/0xa0 [ 103.836293][ T8197] io_alloc_cache_init+0x31/0xa0 [ 103.836312][ T8197] io_ring_ctx_alloc+0x299/0x660 [ 103.836476][ T8197] io_uring_create+0x10f/0x610 [ 103.836492][ T8197] __se_sys_io_uring_setup+0x1f7/0x210 [ 103.836511][ T8197] __x64_sys_io_uring_setup+0x31/0x40 [ 103.836561][ T8197] x64_sys_call+0x2b21/0x2ff0 [ 103.836575][ T8197] do_syscall_64+0xd2/0x200 [ 103.836594][ T8197] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.836609][ T8197] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.836707][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.836721][ T8197] RIP: 0033:0x7f7eabd4ec29 [ 103.836795][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.836806][ T8197] RSP: 002b:00007f7eaa7af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 103.836818][ T8197] RAX: ffffffffffffffda RBX: 00007f7eabf95fa0 RCX: 00007f7eabd4ec29 [ 103.836839][ T8197] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 103.836847][ T8197] RBP: 00007f7eaa7af090 R08: 0000000000000000 R09: 0000000000000000 [ 103.836854][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.836862][ T8197] R13: 00007f7eabf96038 R14: 00007f7eabf95fa0 R15: 00007ffda5437818 [ 103.836873][ T8197] [ 103.839461][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.910539][ T8204] loop2: detected capacity change from 0 to 512 [ 104.058492][ T8204] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.071561][ T8216] FAULT_INJECTION: forcing a failure. [ 104.071561][ T8216] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.084815][ T8216] CPU: 0 UID: 0 PID: 8216 Comm: syz.6.1475 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.084836][ T8216] Tainted: [W]=WARN [ 104.084900][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.084907][ T8216] Call Trace: [ 104.084912][ T8216] [ 104.084917][ T8216] __dump_stack+0x1d/0x30 [ 104.084932][ T8216] dump_stack_lvl+0xe8/0x140 [ 104.084943][ T8216] dump_stack+0x15/0x1b [ 104.084953][ T8216] should_fail_ex+0x265/0x280 [ 104.084968][ T8216] should_fail_alloc_page+0xf2/0x100 [ 104.084995][ T8216] __alloc_frozen_pages_noprof+0xff/0x360 [ 104.085055][ T8216] alloc_pages_mpol+0xb3/0x250 [ 104.085179][ T8216] vma_alloc_folio_noprof+0x1aa/0x300 [ 104.085230][ T8216] handle_mm_fault+0xec2/0x2c20 [ 104.085248][ T8216] do_user_addr_fault+0x636/0x1090 [ 104.085267][ T8216] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 104.085285][ T8216] exc_page_fault+0x62/0xa0 [ 104.085365][ T8216] asm_exc_page_fault+0x26/0x30 [ 104.085376][ T8216] RIP: 0033:0x7fe9ec870c03 [ 104.085386][ T8216] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 104.085396][ T8216] RSP: 002b:00007fe9eb40e4a0 EFLAGS: 00010206 [ 104.085405][ T8216] RAX: 000000000000a000 RBX: 00007fe9eb40e540 RCX: 00007fe9e2fef000 [ 104.085459][ T8216] RDX: 00007fe9eb40e6e0 RSI: 0000000000000001 RDI: 00007fe9eb40e5e0 [ 104.085465][ T8216] RBP: 0000000000000079 R08: 0000000000000007 R09: 000000000000003e [ 104.085472][ T8216] R10: 0000000000000050 R11: 00007fe9eb40e540 R12: 0000000000000001 [ 104.085478][ T8216] R13: 00007fe9eca4da20 R14: 0000000000000005 R15: 00007fe9eb40e5e0 [ 104.085502][ T8216] [ 104.085512][ T8216] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 104.178692][ T8226] loop4: detected capacity change from 0 to 512 [ 104.183348][ T8216] loop6: detected capacity change from 0 to 512 [ 104.187547][ T8204] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1478: Failed to acquire dquot type 1 [ 104.237387][ T8216] EXT4-fs (loop6): orphan cleanup on readonly fs [ 104.244900][ T8204] EXT4-fs (loop2): 1 truncate cleaned up [ 104.254007][ T8226] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1486: bad orphan inode 11862016 [ 104.255092][ T8204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.263295][ T8216] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1475: bad orphan inode 13 [ 104.269525][ T8226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.279788][ T8216] ext4_test_bit(bit=12, block=18) = 1 [ 104.349596][ T8216] is_bad_inode(inode)=0 [ 104.353798][ T8216] NEXT_ORPHAN(inode)=2130706432 [ 104.358632][ T8216] max_ino=32 [ 104.361837][ T8216] i_nlink=1 [ 104.376278][ T8216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.378433][ T8223] lo speed is unknown, defaulting to 1000 [ 104.400722][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.414745][ T8226] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.1486: corrupted inode contents [ 104.427218][ T8226] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.1486: mark_inode_dirty error [ 104.442441][ T8237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=8237 comm=syz.2.1487 [ 104.459768][ T8226] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.1486: corrupted inode contents [ 104.467393][ T8223] lo speed is unknown, defaulting to 1000 [ 104.481404][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.509052][ T8226] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.1486: mark_inode_dirty error [ 104.574443][ T8226] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.1486: mark inode dirty (error -117) [ 104.591219][ T8226] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 104.633495][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.711753][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 104.711766][ T29] audit: type=1326 audit(104.684:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 104.740463][ T29] audit: type=1326 audit(104.684:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 104.763052][ T29] audit: type=1326 audit(104.684:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 104.785729][ T29] audit: type=1326 audit(104.684:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 104.808349][ T29] audit: type=1326 audit(104.684:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 104.852663][ T8268] __nla_validate_parse: 4 callbacks suppressed [ 104.852679][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 104.867742][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1498'. [ 104.881670][ T8264] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 104.927308][ T8269] hub 8-0:1.0: USB hub found [ 104.952302][ T8269] hub 8-0:1.0: 8 ports detected [ 105.019907][ T8280] loop4: detected capacity change from 0 to 512 [ 105.095116][ T8275] loop2: detected capacity change from 0 to 128 [ 105.179669][ T8275] bio_check_eod: 8 callbacks suppressed [ 105.179683][ T8275] syz.2.1502: attempt to access beyond end of device [ 105.179683][ T8275] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.198648][ T8275] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 105.255112][ T8280] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1503: bad orphan inode 11862016 [ 105.266332][ T8280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.334312][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.1503: corrupted inode contents [ 105.347389][ T8280] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.1503: mark_inode_dirty error [ 105.370192][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.1503: corrupted inode contents [ 105.388272][ T8280] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.1503: mark_inode_dirty error [ 105.390116][ T29] audit: type=1326 audit(105.364:10244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 105.407210][ T8280] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.1503: mark inode dirty (error -117) [ 105.422657][ T29] audit: type=1326 audit(105.364:10245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 105.422679][ T29] audit: type=1326 audit(105.364:10246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e9deec29 code=0x7ffc0000 [ 105.490267][ T8280] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 105.607310][ T8297] FAULT_INJECTION: forcing a failure. [ 105.607310][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.620598][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.2.1509 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.620622][ T8297] Tainted: [W]=WARN [ 105.620626][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.620635][ T8297] Call Trace: [ 105.620640][ T8297] [ 105.620647][ T8297] __dump_stack+0x1d/0x30 [ 105.620664][ T8297] dump_stack_lvl+0xe8/0x140 [ 105.620677][ T8297] dump_stack+0x15/0x1b [ 105.620792][ T8297] should_fail_ex+0x265/0x280 [ 105.620807][ T8297] should_fail+0xb/0x20 [ 105.620872][ T8297] should_fail_usercopy+0x1a/0x20 [ 105.620938][ T8297] _copy_from_user+0x1c/0xb0 [ 105.620958][ T8297] kstrtouint_from_user+0x69/0xf0 [ 105.621034][ T8297] ? 0xffffffff81000000 [ 105.621043][ T8297] ? selinux_file_permission+0x1e4/0x320 [ 105.621056][ T8297] proc_fail_nth_write+0x50/0x160 [ 105.621135][ T8297] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 105.621149][ T8297] vfs_write+0x266/0x960 [ 105.621218][ T8297] ? __rcu_read_unlock+0x4f/0x70 [ 105.621231][ T8297] ? __fget_files+0x184/0x1c0 [ 105.621247][ T8297] ksys_write+0xda/0x1a0 [ 105.621263][ T8297] __x64_sys_write+0x40/0x50 [ 105.621335][ T8297] x64_sys_call+0x27fe/0x2ff0 [ 105.621347][ T8297] do_syscall_64+0xd2/0x200 [ 105.621366][ T8297] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.621382][ T8297] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.621491][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.621512][ T8297] RIP: 0033:0x7f7eabd4d6df [ 105.621522][ T8297] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 105.621531][ T8297] RSP: 002b:00007f7eaa7af030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 105.621543][ T8297] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7eabd4d6df [ 105.621550][ T8297] RDX: 0000000000000001 RSI: 00007f7eaa7af0a0 RDI: 000000000000000a [ 105.621557][ T8297] RBP: 00007f7eaa7af090 R08: 0000000000000000 R09: 0000000000000000 [ 105.621609][ T8297] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 105.621616][ T8297] R13: 00007f7eabf96038 R14: 00007f7eabf95fa0 R15: 00007ffda5437818 [ 105.621627][ T8297] [ 105.845659][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.862053][ T8323] loop6: detected capacity change from 0 to 164 [ 105.888640][ T8323] Unable to read rock-ridge attributes [ 105.952861][ T8335] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.966177][ T8339] FAULT_INJECTION: forcing a failure. [ 105.966177][ T8339] name failslab, interval 1, probability 0, space 0, times 0 [ 105.978839][ T8339] CPU: 1 UID: 0 PID: 8339 Comm: syz.2.1521 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.978890][ T8339] Tainted: [W]=WARN [ 105.978894][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.978900][ T8339] Call Trace: [ 105.978905][ T8339] [ 105.978911][ T8339] __dump_stack+0x1d/0x30 [ 105.978926][ T8339] dump_stack_lvl+0xe8/0x140 [ 105.978948][ T8339] dump_stack+0x15/0x1b [ 105.978958][ T8339] should_fail_ex+0x265/0x280 [ 105.979046][ T8339] should_failslab+0x8c/0xb0 [ 105.979060][ T8339] kmem_cache_alloc_noprof+0x50/0x310 [ 105.979078][ T8339] ? security_inode_alloc+0x37/0x100 [ 105.979150][ T8339] security_inode_alloc+0x37/0x100 [ 105.979235][ T8339] inode_init_always_gfp+0x4b7/0x500 [ 105.979251][ T8339] ? __pfx_proc_alloc_inode+0x10/0x10 [ 105.979270][ T8339] alloc_inode+0x58/0x170 [ 105.979282][ T8339] new_inode+0x1d/0xe0 [ 105.979296][ T8339] proc_pid_make_inode+0x1f/0xd0 [ 105.979308][ T8339] proc_map_files_instantiate+0x81/0x120 [ 105.979404][ T8339] proc_fill_cache+0x1c4/0x240 [ 105.979414][ T8339] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 105.979432][ T8339] proc_map_files_readdir+0x4fa/0x690 [ 105.979578][ T8339] iterate_dir+0x111/0x330 [ 105.979590][ T8339] ? mutex_lock+0xd/0x30 [ 105.979666][ T8339] __se_sys_getdents+0x88/0x1b0 [ 105.979678][ T8339] ? __pfx_filldir+0x10/0x10 [ 105.979693][ T8339] __x64_sys_getdents+0x43/0x50 [ 105.979704][ T8339] x64_sys_call+0xee7/0x2ff0 [ 105.979719][ T8339] do_syscall_64+0xd2/0x200 [ 105.979746][ T8339] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.979762][ T8339] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.979835][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.979849][ T8339] RIP: 0033:0x7f7eabd4ec29 [ 105.979860][ T8339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.979876][ T8339] RSP: 002b:00007f7eaa7af038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 105.979907][ T8339] RAX: ffffffffffffffda RBX: 00007f7eabf95fa0 RCX: 00007f7eabd4ec29 [ 105.979996][ T8339] RDX: 000000000000100a RSI: 0000200000000dc0 RDI: 0000000000000004 [ 105.980004][ T8339] RBP: 00007f7eaa7af090 R08: 0000000000000000 R09: 0000000000000000 [ 105.980011][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.980018][ T8339] R13: 00007f7eabf96038 R14: 00007f7eabf95fa0 R15: 00007ffda5437818 [ 105.980029][ T8339] [ 106.304300][ T8335] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.332375][ T29] audit: type=1326 audit(106.314:10247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 106.355400][ T29] audit: type=1326 audit(106.314:10248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564e8cec29 code=0x7ffc0000 [ 106.451729][ T8356] loop4: detected capacity change from 0 to 512 [ 106.474252][ T8335] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.487287][ T8356] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1525: bad orphan inode 11862016 [ 106.508295][ T8356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 106.553827][ T8335] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.587766][ T8356] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.1525: corrupted inode contents [ 106.609995][ T8356] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #20: comm syz.4.1525: mark_inode_dirty error [ 106.632985][ T4010] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.641278][ T8356] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #20: comm syz.4.1525: corrupted inode contents [ 106.653527][ T8356] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #20: comm syz.4.1525: mark_inode_dirty error [ 106.674072][ T4010] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.682429][ T8356] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #20: comm syz.4.1525: mark inode dirty (error -117) [ 106.682714][ T8353] lo speed is unknown, defaulting to 1000 [ 106.704109][ T4010] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.758823][ T8353] lo speed is unknown, defaulting to 1000 [ 106.771913][ T8356] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 106.810757][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.833929][ T4010] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.058015][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 107.205647][ T8387] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8387 comm=syz.0.1535 [ 107.234562][ T8392] loop3: detected capacity change from 0 to 128 [ 107.241549][ T8392] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.253696][ T8392] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.280252][ T8399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8399 comm=syz.0.1535 [ 107.306061][ T3998] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.422901][ T8413] loop2: detected capacity change from 0 to 256 [ 107.432247][ T8417] coredump: 915(syz.2.1544): Core dump to core aborted: cannot preserve file permissions [ 107.675825][ T8427] lo speed is unknown, defaulting to 1000 [ 107.732403][ T8427] lo speed is unknown, defaulting to 1000 [ 107.795160][ T8434] loop6: detected capacity change from 0 to 2048 [ 107.831386][ T8434] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.1551: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 107.849914][ T8434] EXT4-fs (loop6): get root inode failed [ 107.855596][ T8434] EXT4-fs (loop6): mount failed [ 108.050018][ T8438] hub 9-0:1.0: USB hub found [ 108.056010][ T8438] hub 9-0:1.0: 8 ports detected [ 108.065877][ T8438] SELinux: policydb string SE Linu does not match my string SE Linux [ 108.074212][ T8438] SELinux: failed to load policy [ 108.687652][ T8449] loop6: detected capacity change from 0 to 512 [ 108.694532][ T8449] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.703142][ T8449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 108.744683][ T8449] EXT4-fs (loop6): 1 truncate cleaned up [ 108.750696][ T8449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.094917][ T8449] ================================================================== [ 109.103001][ T8449] BUG: KCSAN: data-race in invalidate_inode_pages2_range / xas_store [ 109.111054][ T8449] [ 109.113355][ T8449] write to 0xffff8881098f76b0 of 8 bytes by task 8457 on cpu 1: [ 109.120953][ T8449] xas_store+0xc77/0xce0 [ 109.125175][ T8449] __filemap_remove_folio+0x195/0x2a0 [ 109.130555][ T8449] __remove_mapping+0x338/0x460 [ 109.135468][ T8449] remove_mapping+0x22/0x90 [ 109.139947][ T8449] mapping_try_invalidate+0x26a/0x3f0 [ 109.145294][ T8449] invalidate_mapping_pages+0x27/0x40 [ 109.150655][ T8449] ext4_file_write_iter+0xe70/0xf00 [ 109.155835][ T8449] iter_file_splice_write+0x666/0xa60 [ 109.161183][ T8449] direct_splice_actor+0x156/0x2a0 [ 109.166266][ T8449] splice_direct_to_actor+0x312/0x680 [ 109.171612][ T8449] do_splice_direct+0xda/0x150 [ 109.176353][ T8449] do_sendfile+0x380/0x650 [ 109.180746][ T8449] __x64_sys_sendfile64+0x105/0x150 [ 109.185935][ T8449] x64_sys_call+0x2bb0/0x2ff0 [ 109.190587][ T8449] do_syscall_64+0xd2/0x200 [ 109.195067][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.200934][ T8449] [ 109.203240][ T8449] read to 0xffff8881098f76b0 of 8 bytes by task 8449 on cpu 0: [ 109.210767][ T8449] invalidate_inode_pages2_range+0x43/0x3d0 [ 109.216651][ T8449] filemap_invalidate_pages+0x16d/0x1a0 [ 109.222194][ T8449] kiocb_invalidate_pages+0x6e/0x80 [ 109.228342][ T8449] __iomap_dio_rw+0x5d4/0x1250 [ 109.233080][ T8449] iomap_dio_rw+0x40/0x90 [ 109.237385][ T8449] ext4_file_write_iter+0xad9/0xf00 [ 109.242564][ T8449] iter_file_splice_write+0x666/0xa60 [ 109.247908][ T8449] direct_splice_actor+0x156/0x2a0 [ 109.252993][ T8449] splice_direct_to_actor+0x312/0x680 [ 109.258354][ T8449] do_splice_direct+0xda/0x150 [ 109.263178][ T8449] do_sendfile+0x380/0x650 [ 109.267571][ T8449] __x64_sys_sendfile64+0x105/0x150 [ 109.272745][ T8449] x64_sys_call+0x2bb0/0x2ff0 [ 109.277397][ T8449] do_syscall_64+0xd2/0x200 [ 109.281881][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.287745][ T8449] [ 109.290041][ T8449] value changed: 0xffff88810049e492 -> 0xffff8881099f5daa [ 109.297114][ T8449] [ 109.299411][ T8449] Reported by Kernel Concurrency Sanitizer on: [ 109.305533][ T8449] CPU: 0 UID: 0 PID: 8449 Comm: syz.6.1556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.316789][ T8449] Tainted: [W]=WARN [ 109.320565][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.330593][ T8449] ================================================================== [ 109.574649][ T5899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.584507][ T3998] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.632621][ T3998] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.692789][ T3998] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.752201][ T3998] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.814725][ T3998] bridge_slave_1: left allmulticast mode [ 110.820369][ T3998] bridge_slave_1: left promiscuous mode [ 110.826056][ T3998] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.834442][ T3998] bridge_slave_0: left allmulticast mode [ 110.840063][ T3998] bridge_slave_0: left promiscuous mode [ 110.845664][ T3998] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.972856][ T3998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.982917][ T3998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.992349][ T3998] bond0 (unregistering): Released all slaves [ 111.000355][ T3998] bond1 (unregistering): Released all slaves [ 111.042885][ T3998] tipc: Left network mode [ 111.075950][ T3998] hsr_slave_0: left promiscuous mode [ 111.081987][ T3998] hsr_slave_1: left promiscuous mode [ 111.087694][ T3998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.095078][ T3998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.104205][ T3998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.111630][ T3998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.121720][ T3998] veth1_macvtap: left promiscuous mode [ 111.127172][ T3998] veth0_macvtap: left promiscuous mode [ 111.132776][ T3998] veth1_vlan: left promiscuous mode [ 111.138015][ T3998] veth0_vlan: left promiscuous mode [ 111.189953][ T3998] team0 (unregistering): Port device team_slave_1 removed [ 111.198764][ T3998] team0 (unregistering): Port device team_slave_0 removed [ 111.227679][ T23] lo speed is unknown, defaulting to 1000 [ 111.233431][ T23] infiniband syz2: ib_query_port failed (-19) [ 111.472509][ T3998] IPVS: stop unused estimator thread 0...