last executing test programs: 7m52.369643853s ago: executing program 4 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0x24000}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x40) (fail_nth: 3) 7m52.333760294s ago: executing program 4 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780), 0x10, 0x0}, 0x44001) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)="441f08d600270bcf724ef54e91e6ffbe002a5f89000000000000000000", 0x1d) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4dfd, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10) r6 = socket(0x31, 0x803, 0x4004) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) recvmmsg(r6, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000006c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbedit={0x5c, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x30, 0x6, "3b8ed3179ae20bc503aef000ad3ebd0369e4c3b31580613bf68f0c85a09259f198cc5a3e32e239e0c82e7ade"}, {0xc, 0xa}, {0xc, 0x9, {0x3b, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 7m52.195564076s ago: executing program 32 (id=271): r0 = socket(0x11, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x10000) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000e40)=ANY=[@ANYBLOB="b3e685b6602da128d31909b3e80f5b741fc354f1ef63d32e1344579cf88d7136a1d198d134e43fe497bc91853ed1510c076286c80023d2ac3ee7620d1e030096243e6ded738fa6a790e07a1a5efbe7425826015d1f34d89180acd5357c6ad835899fbf", @ANYRES16=r9, @ANYBLOB="020029bd7000ffdbdf250e00000008000300", @ANYRES32, @ANYBLOB="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"], 0x3e4}, 0x1, 0x0, 0x0, 0x4000800}, 0x8044) 7m51.462723361s ago: executing program 4 (id=284): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80a21a00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m51.383840722s ago: executing program 4 (id=288): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) unshare(0x2040400) r7 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r7, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 7m51.216520775s ago: executing program 4 (id=289): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 7m51.091909558s ago: executing program 4 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x2, 0x80, 0x0, 0x8000021e}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) r4 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000280)=@isdn={0x22, 0x40, 0xa, 0x8}, 0x0, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(0xffffffffffffffff, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x101) r8 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x40001) 7m51.091623788s ago: executing program 33 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x2, 0x80, 0x0, 0x8000021e}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) r4 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000280)=@isdn={0x22, 0x40, 0xa, 0x8}, 0x0, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(0xffffffffffffffff, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x101) r8 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x40001) 7m48.540260768s ago: executing program 6 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m48.45185553s ago: executing program 6 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@barrier}, {@noblock_validity}, {@mblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@inlinecrypt}]}, 0x6, 0x615, &(0x7f0000000c00)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'pimreg1\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r6, r6, 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)='smb3\x00', 0x8000, &(0x7f00000004c0)='$\x00') setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x6, 0x4e20, 0x8, 0x2, 0x0, 0x0, 0x5e, r5, r6}, {0x47a, 0x2, 0x6, 0x200, 0x5, 0xfffffffffffffffd, 0x4, 0xffffffffffffff58}, {0x3, 0x40}, 0x5, 0x6e6bb5, 0x2, 0x1, 0x3, 0x1}, {{@in=@broadcast, 0x4d5, 0x33}, 0xa, @in=@multicast1, 0x3507, 0x0, 0x1, 0x9, 0xe, 0x400, 0x3ff}}, 0xe8) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) 7m47.567970837s ago: executing program 6 (id=332): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x4004040) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32=r4, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000959b"], &(0x7f0000000000)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0xffffffffffffff1e}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) 7m46.511825467s ago: executing program 6 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffefb702000008000000b70300000000000085000000b10000008e1bdd468721e7dff0008dbc61a89781eadba4295c9e", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000180)="f7", 0x1, 0x200980) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)=0x6) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c0082, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@dev, @in=@dev}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000008c0)=0xe8) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0x29fb, 0x4) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x1, 0x8d2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @loopback, 0x0, 0x40, 0x40, 0x2}}) 7m46.511500987s ago: executing program 34 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffefb702000008000000b70300000000000085000000b10000008e1bdd468721e7dff0008dbc61a89781eadba4295c9e", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$eJzs3U9oHPUeAPDvzGZf/+U1ffAevPfooahQoXST9I9WT+1VLBR6KHipYbMNIZtsyG60CTmk9yL2ICq91JsePCoePIgXwYtXL4pnodig0PSgK/svbZPduKlJN81+PjDZ+c1vdr+/38x+J78ZZtgA+tax2p804n8RcSmJGHqkbiCalcca662uLOUfrCzlk6hWL/+SRBIR91eW8q31k+broYhYjoj/RsTX2YgT6ca45YXFqbFisTDXLA9XpmeHywuLJyenxyYKE4WZ0y+/cvbcmbOjp0Y7Nz67tb7e/PHWOze/e+3OrU8+Pbqcf28sifMx2Kx7tB/bqbFNsnF+3fIzOxGsh5JeN4AnkmnmeS2V/hNDkWlmfTvVoafaNGCHVfdFVLciWd7S6sBulmwt/4E9ozUOqJ3/tqbHBgiZDgOHfdsz/rh7oXECUou72pwaNQONaxOxv35ucvDX5LEzk9r55pHtaQJ9bPlGRIwMDGz8/ifN79+TG9mOBrKjvrrQ2FEb93+6dvyJNsefwda107+pdfxb3XD8exg/0+H4d6nLGL+/8dOHHePfiPh/2/jJWvykTfw0It7sMv7tK1+c61RX/SjieLSP35Jsfn14+NpksTDS+Ns2xpfHj766Wf8PdojfuGa7v/5vpt32n+2y/59/89lzy5vEf/H5zfd/u+1/ICLe7TL+v+5//Hqnurs3knu1UcBW939t2Z0u4790/tgPHaoOdPkRAAAAAAAAAABAG2n9XrYkza3Np2ku13iG999xMC2WypUT10rzM+ONe96ORDZt3Wk11CgntfJo837cVvnUuvLp1n3EmQP1ci5fKo73uO8AAAAAAAAAAAAAAAAAAACwWxxa9/z/b5n68//rf64a2Ks6/+Q3sNfJf+hfj+d/sm0/7gvsfo/k/4NetgN46qrG/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74tLFi7Wp+mBlKV8rjw8szE+V3jo5XihP5abn87l8aW42N1EqTRQLuXxp+q8+r1gqzY7EzPz14UqhXBkuLyxenS7Nz1SuTk6PTRSuFrJPpVcAAAAAAAAAAAAAAAAAAADwbBmsT0mai4i0Pp+muVzEPyPiSGSTa5PFwkhEHI6I7zPZfbXyaK8bDQAAAAAAAAAAAAAAAAAAAHtMeWFxaqxYLMz1yczAhiXfdl45Ipa3txm1T9zyu7LNfbVbtuGzNnN483Uy0fMW7saZHh+YAAAAAAAAAAAAAAAAAACgDz186Lfbd/yxsw0CAAAAAAAAAAAAAAAAAACAvpT+nEREbTo+9MLg+tp/JKuZ+mtEvH378vvXxyqVudHa8ntryysfNJef6i7ilW3vA9CNVp628hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4qLywODVWLBbmdnCm130EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBJ/BgAA//9UNdg0") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000180)="f7", 0x1, 0x200980) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)=0x6) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c0082, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@dev, @in=@dev}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000008c0)=0xe8) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0x29fb, 0x4) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x1, 0x8d2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @loopback, 0x0, 0x40, 0x40, 0x2}}) 4m10.923061697s ago: executing program 7 (id=3526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x6, 0x6, 0x2, 0x606, 0x43, @remote, @private2, 0x1, 0x8, 0x2, 0x9b6}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[], 0x478) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000009210000000000000", @ANYRES32=r0, @ANYBLOB="9f00"/20, @ANYRES32=r2, @ANYRES16, @ANYBLOB="030000000400"/28], 0x50) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000004ae2b60d090000a88f36da020400010000000000000000"], 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fd000000004ba55e7600000000110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000841000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x100c085, &(0x7f0000001640)=ANY=[], 0x10, 0x7f4, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES8=r5, @ANYBLOB="3df724553894c384a47b122a4c140b9d462c32983a5a46f83edb88a97b4bbe2b4e52861c22dfb0e086098f015ba159a209648486eb639b910c3e536998b9276b8d0ac0dee43e6f30784169a4", @ANYRES64=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYRES64=r5, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet(0x2, 0x801, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r10, &(0x7f0000000040)="e4", 0x1, 0x2400c091, 0x0, 0xfff7) 4m10.172305772s ago: executing program 7 (id=3536): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r0) 4m9.923903256s ago: executing program 7 (id=3538): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x44000) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f00000023c0)=""/136, 0x88}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x22, &(0x7f00000003c0)=@raw=[@ldst={0x3, 0x2, 0x4, 0xb, 0xa, 0x6, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @ldst={0x1, 0x2, 0x4, 0x5, 0x6, 0x8, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x271}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xb5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x3ff, 0xda, &(0x7f0000000580)=""/218, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x0, 0x6, 0x10000}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) write$selinux_access(r3, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) close(r0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r8 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x6, 0x6, 0x2, 0x606, 0x43, @remote, @private2, 0x1, 0x8, 0x2, 0x9b6}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r3, &(0x7f0000000440)=ANY=[], 0x478) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000009210000000000000", @ANYRES32=r0, @ANYBLOB="9f00"/20, @ANYRES32=r2, @ANYRES16, @ANYBLOB="030000000400"/28], 0x50) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000004ae2b60d090000a88f36da020400010000000000000000"], 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fd000000004ba55e7600000000110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000841000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xf0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x100c085, &(0x7f0000001640)=ANY=[], 0x10, 0x7f4, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES8=r5, @ANYBLOB="3df724553894c384a47b122a4c140b9d462c32983a5a46f83edb88a97b4bbe2b4e52861c22dfb0e086098f015ba159a209648486eb639b910c3e536998b9276b8d0ac0dee43e6f30784169a4", @ANYRES64=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYRES64=r5, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet(0x2, 0x801, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r10, &(0x7f0000000040)="e4", 0x1, 0x2400c091, 0x0, 0xfff7) 4m8.251975839s ago: executing program 7 (id=3561): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 4m8.003306083s ago: executing program 3 (id=3572): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/58}], 0x60, 0x0, 0x44}, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3e, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280), 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x20000000000002f3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9, 0x0, 0xb98}, 0x18) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mknod$loop(0x0, 0x8, 0x1) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 4m7.997757684s ago: executing program 3 (id=3574): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, 0x0, 0x0, 0x7800, 0x0, 0x3) 4m7.983768894s ago: executing program 3 (id=3575): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m7.920384645s ago: executing program 3 (id=3577): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x8080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x582, &(0x7f0000001440)="$eJzs3c9rHFUcAPDvbJKmbapNoRT1IIEerNRumsQfFTzUo2ixoPe6bLahZNMt2U1tYsH2YC9epAgiFsQ/wLvH4j+g/0RBC0VK0IOXldnONpsfu0nTbXfNfj4wyXszk7z5zsz38WbfLhvAwJpIf+QiXo6Ib5KIwy3bhiPbOPFov9WH14vpkkS9/slfSSTZuub+SfZ7LKu8FBG/fhVxMre53eryynyhXC4tZvXJ2sKVyeryyqlLC4W50lzp8vTMzJm3ZqbffeftzX88urtYXz//z/cf3/3gzNfHV7/7+f6R20mcjUPZttY4nsKN1spETGTnZCTObthxqguN9ZOk1wfArgxleT4SaR9wOIayrAf2vi8jog4MqET+w4BqjgNWH35ebD7ftx0s1PfeU96D9xsPQKPN2NfiTx69NhL7G89GB1eTdU9G6ZkY70L7aRu//HnndrpE916HANjWjZsRcXp4eF3/92K09H+7d3oH+2xsQ/8Hz8/ddPzzxmhsHv/kHo9/Yovxz9gWubsba/9jqPFzc/7n7nehmbbS8d97LXNbrfFnxoey2guNMd9IcvFSuZT2bWk3eSJGRtN6p/mcM6v36u22tY7/0iVtvzkWzI7j/vCG+a7ZQq3wNDG3enAz4pXhreJfG/8mW1z/9Hyc32Ebx0p3Xm23bfv4n636TxGvbXn91551ks7zk5ON+2GyeVds9vetY7+1a7/X8afX/2Dn+MeT1vna6pO38eP+f0vttk0k2aTpE97/+5JPG+V92bprhVptcSpiX/LR5vXTa3/brDf3T+M/cXzr/O90/x+IiM92GP+to7fa7toP13/2ia5/m0I9abvp3odf/NCu/Z31f282SieyNTvp/zoc6brC05w7AAAAAAAA6De5iDgUSS7/uJzL5fOP3t9xNA7mypVq7eTFytLl2Wh8VnY8RnLNme6xlvdDTGXvh23WpzfUZyLiSER8O3SgUc8XK+XZXgcPAAAAAAAAAAAAAAAAAAAAfWKszef/U38M9frogGfOV37D4No2/7vxTU9AX+qQ/3vvG3+BdYz/YXDJfxhc8h8Gl/yHwSX/YXDJfxhc8h8AAAAAAAAAAAAAAAAAAAAAAAAAAAC66vy5c+lSX314vZjWZ68uL81Xrp6aLVXn8wtLxXyxsnglP1epzJVL+WIlxrf5f+VK5crUdCxdm6yVktpkdXnlwkJl6XLtwqWFwlzpQmnk+YQFAAAAAAAAAAAAAAAAAAAA/yvV5ZX5QrlcWuxQuFuv17fbZ4ALv/fHYfSqMNwfh9GdQt2t3iz0umcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BQAA//9Zvjqh") r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$kcm(0x29, 0x7, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000300)={0x0, 0xfb, 0x102, 0x6, 0x6, "0839e842a555888b0ac6a35e9c52283a", "da2840cde3432b6172f4c96b820e66d57dd45c3047d5ce7f1ab7f5fa70a017cfb4f84767d85679c532be7c1fbc689268f4fa50a8aa24a10258e17cf3bca9531a0925a34f11718866791ecc9b4f9ebed6b9287d8e7cb805943fc83872e0a4293ea522301fdf30e97eae05da0fed77b379caea11e09e01602890247d9acba083398b77a780a216480959e29a8bb480011ed85f28a0ecec51ef069f05770d89029a84f2c9e4842ee700d8a8b713233e7a134f1a255370396d414bf3c390171ce315c0c20df44dfd636ff3afabd7c7fded7ef8233569808b1d8812c35f2538bda6a3f87393b8534307334c82854c67"}, 0x102, 0x3) 4m7.856002597s ago: executing program 3 (id=3578): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000005c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 4m7.848261306s ago: executing program 3 (id=3580): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2047}}, './file1\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r3}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2a) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448cb, 0x0) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) pwrite64(r8, &(0x7f0000000140)='2', 0x2c, 0x8000c61) 4m7.848014547s ago: executing program 35 (id=3580): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2047}}, './file1\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r3}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2a) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448cb, 0x0) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) pwrite64(r8, &(0x7f0000000140)='2', 0x2c, 0x8000c61) 4m6.007902542s ago: executing program 7 (id=3591): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x1}, {0x0, 0x9}]}, 0x18, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r4) 4m6.005622622s ago: executing program 36 (id=3591): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x1}, {0x0, 0x9}]}, 0x18, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r3}) keyctl$link(0x8, r3, r4) 2m34.397765908s ago: executing program 9 (id=5378): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) sched_setscheduler(0x0, 0x6, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000022) syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0xd736, 0x0, 0x0, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (fail_nth: 10) 2m33.711959631s ago: executing program 9 (id=5388): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000005c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x5) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 2m32.381063307s ago: executing program 9 (id=5438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x140, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x2, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_auth={0x48, 0x1, {{'sha384\x00'}}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00'}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 2m31.882050306s ago: executing program 9 (id=5446): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000140)={[{@map_off}, {@check_strict}, {@hide}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {}]}, 0x1, 0x544, &(0x7f0000001000)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x7fffff, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x40280) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r4, 0x20000) syz_clone(0x3cb28100, 0x0, 0x44, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x8}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/242, 0xf2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac24896"}, 0x12) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000015c0)="afd7d2fecbea168a85ca1ff5991d306331d94a7c8f0ac90848c06ff2a1bdf01a2e087de35d2d10000000ff89f8eeb3a6f35b4df8323f5c4536c5890952193704a0ba00", &(0x7f0000001640)="295485f3f550c5311c7a0c4d3785fe9abe7dbd281e10aaedaee17f", 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x2}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x13e00000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x1}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x800}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xb}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x100, 0x0, 0xe9d}, {0x2}, {0x2, 0x9, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xf}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2m31.335766177s ago: executing program 9 (id=5454): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 2m30.728052539s ago: executing program 9 (id=5466): r0 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m30.727945019s ago: executing program 37 (id=5466): r0 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.466618952s ago: executing program 5 (id=8726): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000000600)={0x2000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 2.338371665s ago: executing program 5 (id=8730): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$eJzs3T9sG2UUAPDnXhKnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHbJ/tc+xQZ3Boxe83RE/v+9597y6n3CVKvrzeiq1L83H51q2bsbhYiLm1c2txuxClOBFJ9OzFRB8tTM4DAPe422kaf6U9d5/9yVI/8uwHgPtX9/n/5qlhoniE4qsPzKIlAGDGpvz+//mJ2SszawsAmKGx5/9jI8MHfsw/N/idAADg/vXiK68+t74RcbFcXoyof9isNCvxzHB8/XK8HbXYjLOxHPsRvReF3ttC5+OzFzbOny13/FaKSqeiWYmot5qV3pvCetKtL8ZKLEcpq08H9UmnfqVbX46IvVZ3/agXmpX5WMrW/3kpNmM1luOhsfqICxvnV8vZASr1fn0roh2L/ZPo9H8mluPHN+JK1OJSdGqH/e+ulMvn0o2R+ua1YnceAAAAAAAAAAAAAAAAAAAAAADMwpnyQGmw/01abzU/uHhwQmlkf5xKbzjbH6jd2x8oLfZ357maHNwfaHR/nmZlLk78p2cOAAAAAAAAAAAAAAAAAAAA947GzkJUa7XN7cbO+1v5oJXLvPv9V9+ejP7QXFb6TjKsiiw5cpz+xNyRkxgskQ7K02RkThYkEf3Je9Vr1wcd5+cUB2cxVt4JimNDhaynaq126tFfP59U9Xcn2Otmkhi7LKNBIVs/N1R/sJNYjIj9w6oOD1bvMudGmqaHle9+Nl4VhYi5OHIbUwTf3Xzr4Scbp5/qZr7JNn14/Inll258+uUfW9VatHtXplZb2G7sp1McudPr+FCSu38K2XUuTLgTJgftYaa93dipJj/9+fIjH/9wYHIy+f5J85n3Dl/r64OZhV5QiCj1L8K/tTo/4eafHLx2Z3D3Hv0Td/qLter13V9+n7Yq90XCRh0AAAAAAAAAAAAAAAAAAHAscn8rfgRPvzC7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+A3//38uaI9lpgnutGJ8qLi53Th08ZPHeqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/RMAAP//rShzCQ==") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x2000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3e, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xf8, 0x1, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xda7, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0x9, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0xccd, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x8, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x99d, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc9, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0xc, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x4, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x5, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x4, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 2.182582997s ago: executing program 1 (id=8736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r5}, 0xc) unshare(0x62040200) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x400c744d, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x1, 0x8, 0x200, 0x2, 0x7}, 0x7, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x9, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x4, 0x81, 0x9, 0x2, 0x8, 0x40, 0xe80c, 0x80000001, 0x80, 0x400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x200, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0x3, 0x80000001, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x800, 0xfff, 0x2, 0x5, 0x6, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0xf, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x6, 0x2, 0x3, 0x5, 0x1, 0x8001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x6, 0x1, 0x7fffffff, 0x8, 0x0, 0x800, 0x8, 0x91e, 0x4, 0xe, 0xdd, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x6, 0x8, 0x100, 0x8, 0x0, 0xd, 0x2, 0x9, 0x4, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x20000, 0xfffffffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x9, 0x2, 0x20c, 0xd, 0x4, 0xa, 0xfff, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x4, 0x40, 0x5, 0x6, 0x2ed, 0xfffffffb, 0xcf30, 0x7, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x2, 0x8, 0xc, 0x3, 0x1, 0x0, 0x3, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x0) 2.167068418s ago: executing program 8 (id=8737): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2.05107243s ago: executing program 8 (id=8738): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.768406956s ago: executing program 8 (id=8739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 1.764318296s ago: executing program 5 (id=8740): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108000400000000000000c60000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 1.615509508s ago: executing program 8 (id=8741): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x2000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 1.615309218s ago: executing program 5 (id=8742): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000000600)={0x2000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 1.54450995s ago: executing program 5 (id=8746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x6c, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 1.488017971s ago: executing program 2 (id=8747): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x2}}, {{0x0, 0x0, &(0x7f00000017c0)}}], 0x3, 0x0) 1.484374781s ago: executing program 5 (id=8748): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x10001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000005c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x5) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.468088781s ago: executing program 2 (id=8749): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.390636403s ago: executing program 2 (id=8750): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 1.359346243s ago: executing program 8 (id=8752): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x2000000000000009, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) ioctl$TCSETSW2(r3, 0x5408, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000001240), 0x4) 1.307871754s ago: executing program 1 (id=8753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}, {0x3, 0xfffb, 0xc00}], 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x0, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) 1.259937445s ago: executing program 0 (id=8754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x6c, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 1.252468516s ago: executing program 2 (id=8755): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, 0x0, 0x0) 1.246055286s ago: executing program 0 (id=8756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000fb000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=") (fail_nth: 9) 948.059311ms ago: executing program 2 (id=8757): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0xb2c05000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (fail_nth: 9) fdatasync(r2) 897.971122ms ago: executing program 0 (id=8758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x6c, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 882.031113ms ago: executing program 0 (id=8759): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000380)="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", 0x9fd}], 0x2}}, {{0x0, 0x0, &(0x7f00000017c0)}}], 0x3, 0x0) 837.116974ms ago: executing program 0 (id=8760): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 557.287489ms ago: executing program 1 (id=8761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000fb000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") (fail_nth: 9) 556.689999ms ago: executing program 0 (id=8762): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x2000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 127.406297ms ago: executing program 2 (id=8763): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000a40)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 127.191597ms ago: executing program 8 (id=8764): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r2, 0x0, 0xfe49) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) (fail_nth: 8) 93.606768ms ago: executing program 1 (id=8765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 58.614109ms ago: executing program 1 (id=8766): setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x4000840) 0s ago: executing program 1 (id=8767): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x140, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x2, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_auth={0x48, 0x1, {{'sha384\x00'}}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00'}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) kernel console output (not intermixed with test programs): error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 489.377193][T26210] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 489.389172][T26817] vhci_hcd: connection reset by peer [ 489.396198][T14419] vhci_hcd: stop threads [ 489.400593][T14419] vhci_hcd: release socket [ 489.405251][T14419] vhci_hcd: disconnect device [ 489.421289][T26865] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 489.421289][T26865] program syz.8.8249 not setting count and/or reply_len properly [ 489.468819][T26870] netlink: 'syz.1.8250': attribute type 1 has an invalid length. [ 489.479915][T26856] netlink: 'syz.0.8244': attribute type 1 has an invalid length. [ 489.490550][T26870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.565523][T26876] netlink: 'syz.8.8252': attribute type 1 has an invalid length. [ 489.577673][T26878] __nla_validate_parse: 10 callbacks suppressed [ 489.577689][T26878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8253'. [ 489.597162][T26868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8247'. [ 489.605399][T26876] 8021q: adding VLAN 0 to HW filter on device bond14 [ 489.621408][T26876] macvlan2: entered promiscuous mode [ 489.626755][T26876] macvlan2: entered allmulticast mode [ 489.639211][T26876] bond14: entered promiscuous mode [ 489.645586][T26876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 489.655591][T26876] bond14: left promiscuous mode [ 489.680198][T26881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8254'. [ 489.707520][T26889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8256'. [ 489.839641][T26901] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 489.839641][T26901] program syz.2.8261 not setting count and/or reply_len properly [ 489.898126][T26905] 9pnet_fd: Insufficient options for proto=fd [ 489.949354][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8264'. [ 490.064005][T26917] loop8: detected capacity change from 0 to 512 [ 490.096408][T26922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8267'. [ 490.097667][T26917] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.147868][T26926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8269'. [ 490.180016][T26927] loop1: detected capacity change from 0 to 1024 [ 490.186951][T26927] EXT4-fs: inline encryption not supported [ 490.193577][T26927] EXT4-fs: Ignoring removed i_version option [ 490.210366][T26927] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 490.224038][T26927] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.8266: lblock 2 mapped to illegal pblock 2 (length 1) [ 490.238956][T26927] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.8266: lblock 0 mapped to illegal pblock 48 (length 1) [ 490.255086][T26927] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.8266: Failed to acquire dquot type 0 [ 490.267164][T26927] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 490.277237][T26927] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.8266: mark_inode_dirty error [ 490.289009][T26927] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 490.299863][T26927] EXT4-fs (loop1): 1 orphan inode deleted [ 490.306138][T26927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.318515][T14437] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 490.338022][T26911] netlink: 'syz.0.8265': attribute type 1 has an invalid length. [ 490.347522][T14437] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:40: Failed to release dquot type 0 [ 490.377485][T26927] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.387567][T26927] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.8266: Invalid inode table block 1 in block_group 0 [ 490.421590][T22084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.431731][T26927] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 490.442008][T26927] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.8266: mark_inode_dirty error [ 490.459127][T26931] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 490.459127][T26931] program syz.5.8272 not setting count and/or reply_len properly [ 490.811940][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8278'. [ 490.885943][T26956] netlink: 'syz.2.8281': attribute type 10 has an invalid length. [ 490.896501][T26956] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.904854][T26956] bond0: (slave team0): Enslaving as an active interface with an up link [ 490.988169][T26961] FAULT_INJECTION: forcing a failure. [ 490.988169][T26961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.001909][T26961] CPU: 0 UID: 0 PID: 26961 Comm: syz.2.8282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 491.001939][T26961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.001951][T26961] Call Trace: [ 491.001959][T26961] [ 491.001968][T26961] __dump_stack+0x1d/0x30 [ 491.001989][T26961] dump_stack_lvl+0xe8/0x140 [ 491.002070][T26961] dump_stack+0x15/0x1b [ 491.002154][T26961] should_fail_ex+0x265/0x280 [ 491.002173][T26961] should_fail+0xb/0x20 [ 491.002189][T26961] should_fail_usercopy+0x1a/0x20 [ 491.002212][T26961] _copy_from_iter+0xd2/0xe80 [ 491.002280][T26961] ? __build_skb_around+0x1a0/0x200 [ 491.002307][T26961] ? __alloc_skb+0x223/0x320 [ 491.002362][T26961] netlink_sendmsg+0x471/0x6b0 [ 491.002385][T26961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.002426][T26961] __sock_sendmsg+0x142/0x180 [ 491.002453][T26961] ____sys_sendmsg+0x31e/0x4e0 [ 491.002535][T26961] ___sys_sendmsg+0x17b/0x1d0 [ 491.002565][T26961] __x64_sys_sendmsg+0xd4/0x160 [ 491.002589][T26961] x64_sys_call+0x191e/0x2ff0 [ 491.002610][T26961] do_syscall_64+0xd2/0x200 [ 491.002640][T26961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 491.002664][T26961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 491.002693][T26961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.002735][T26961] RIP: 0033:0x7f277541ebe9 [ 491.002749][T26961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.002762][T26961] RSP: 002b:00007f2773e7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.002843][T26961] RAX: ffffffffffffffda RBX: 00007f2775655fa0 RCX: 00007f277541ebe9 [ 491.002855][T26961] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003 [ 491.002868][T26961] RBP: 00007f2773e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 491.002915][T26961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.002925][T26961] R13: 00007f2775656038 R14: 00007f2775655fa0 R15: 00007ffec5c71618 [ 491.002941][T26961] [ 491.234425][T26963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8283'. [ 491.405375][T26972] netlink: 276 bytes leftover after parsing attributes in process `syz.2.8285'. [ 491.442594][T26976] loop8: detected capacity change from 0 to 512 [ 491.460650][T26976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.553033][T22084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.601289][T26993] FAULT_INJECTION: forcing a failure. [ 491.601289][T26993] name failslab, interval 1, probability 0, space 0, times 0 [ 491.614482][T26993] CPU: 1 UID: 0 PID: 26993 Comm: syz.5.8293 Not tainted syzkaller #0 PREEMPT(voluntary) [ 491.614532][T26993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.614545][T26993] Call Trace: [ 491.614551][T26993] [ 491.614559][T26993] __dump_stack+0x1d/0x30 [ 491.614633][T26993] dump_stack_lvl+0xe8/0x140 [ 491.614652][T26993] dump_stack+0x15/0x1b [ 491.614702][T26993] should_fail_ex+0x265/0x280 [ 491.614722][T26993] ? audit_log_d_path+0x8d/0x150 [ 491.614812][T26993] should_failslab+0x8c/0xb0 [ 491.614831][T26993] __kmalloc_cache_noprof+0x4c/0x320 [ 491.614902][T26993] audit_log_d_path+0x8d/0x150 [ 491.614926][T26993] audit_log_d_path_exe+0x42/0x70 [ 491.615097][T26993] audit_log_task+0x1e9/0x250 [ 491.615119][T26993] audit_seccomp+0x61/0x100 [ 491.615177][T26993] ? __seccomp_filter+0x68c/0x10d0 [ 491.615197][T26993] __seccomp_filter+0x69d/0x10d0 [ 491.615217][T26993] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 491.615245][T26993] ? vfs_write+0x7e8/0x960 [ 491.615264][T26993] ? __rcu_read_unlock+0x4f/0x70 [ 491.615284][T26993] ? __fget_files+0x184/0x1c0 [ 491.615306][T26993] __secure_computing+0x82/0x150 [ 491.615326][T26993] syscall_trace_enter+0xcf/0x1e0 [ 491.615414][T26993] do_syscall_64+0xac/0x200 [ 491.615468][T26993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 491.615491][T26993] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 491.615515][T26993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.615610][T26993] RIP: 0033:0x7efdb26aebe9 [ 491.615625][T26993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.615642][T26993] RSP: 002b:00007efdb110f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 491.615689][T26993] RAX: ffffffffffffffda RBX: 00007efdb28e5fa0 RCX: 00007efdb26aebe9 [ 491.615702][T26993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.615772][T26993] RBP: 00007efdb110f090 R08: 0000000000000000 R09: 0000000000000000 [ 491.615783][T26993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.615794][T26993] R13: 00007efdb28e6038 R14: 00007efdb28e5fa0 R15: 00007fff155a3af8 [ 491.615810][T26993] [ 491.853896][T26982] loop1: detected capacity change from 0 to 512 [ 491.863656][T26982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 491.876492][T26982] EXT4-fs (loop1): 1 truncate cleaned up [ 491.883797][T26982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.007407][T27013] loop5: detected capacity change from 0 to 512 [ 492.025891][T27013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.046960][T27006] netlink: 'syz.0.8299': attribute type 1 has an invalid length. [ 492.077451][T25988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.246919][T27030] FAULT_INJECTION: forcing a failure. [ 492.246919][T27030] name failslab, interval 1, probability 0, space 0, times 0 [ 492.260498][T27030] CPU: 0 UID: 0 PID: 27030 Comm: syz.2.8306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 492.260572][T27030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.260583][T27030] Call Trace: [ 492.260636][T27030] [ 492.260643][T27030] __dump_stack+0x1d/0x30 [ 492.260662][T27030] dump_stack_lvl+0xe8/0x140 [ 492.260680][T27030] dump_stack+0x15/0x1b [ 492.260693][T27030] should_fail_ex+0x265/0x280 [ 492.260716][T27030] ? bpf_prog_alloc_no_stats+0xc4/0x3a0 [ 492.260801][T27030] should_failslab+0x8c/0xb0 [ 492.260821][T27030] __kmalloc_cache_noprof+0x4c/0x320 [ 492.260845][T27030] bpf_prog_alloc_no_stats+0xc4/0x3a0 [ 492.260878][T27030] bpf_prog_alloc+0x3c/0x150 [ 492.260961][T27030] bpf_prog_load+0x514/0x1070 [ 492.260996][T27030] ? security_bpf+0x2b/0x90 [ 492.261027][T27030] __sys_bpf+0x462/0x7b0 [ 492.261059][T27030] __x64_sys_bpf+0x41/0x50 [ 492.261121][T27030] x64_sys_call+0x2aea/0x2ff0 [ 492.261143][T27030] do_syscall_64+0xd2/0x200 [ 492.261225][T27030] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 492.261249][T27030] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 492.261330][T27030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.261352][T27030] RIP: 0033:0x7f277541ebe9 [ 492.261368][T27030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.261449][T27030] RSP: 002b:00007f2773e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.261469][T27030] RAX: ffffffffffffffda RBX: 00007f2775655fa0 RCX: 00007f277541ebe9 [ 492.261481][T27030] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 492.261494][T27030] RBP: 00007f2773e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 492.261506][T27030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.261582][T27030] R13: 00007f2775656038 R14: 00007f2775655fa0 R15: 00007ffec5c71618 [ 492.261601][T27030] [ 492.491941][T27032] loop0: detected capacity change from 0 to 2048 [ 492.501822][T27028] loop8: detected capacity change from 0 to 8192 [ 492.519189][T27032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.575267][T27028] loop8: p1[EZD] p2 p3 p4 [ 492.587095][T25014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.598006][T27045] SELinux: failed to load policy [ 492.602724][T19482] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 492.619799][T27028] loop8: p3 start 117772289 is beyond EOD, truncated [ 492.626806][T27028] loop8: p4 size 262144 extends beyond EOD, truncated [ 492.641743][T19482] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 492.656138][T27048] loop5: detected capacity change from 0 to 128 [ 492.664303][T27048] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 492.665882][T27050] netlink: 'syz.2.8315': attribute type 1 has an invalid length. [ 492.688052][T27048] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.698453][T19482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.703575][T27048] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.716767][T27050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.817351][T25988] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.827370][T27053] loop1: detected capacity change from 0 to 1024 [ 492.831660][T27050] macvlan2: entered promiscuous mode [ 492.834045][T27053] EXT4-fs: inline encryption not supported [ 492.839288][T27050] macvlan2: entered allmulticast mode [ 492.845353][T27053] EXT4-fs: Ignoring removed i_version option [ 492.857084][T27053] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 492.869417][T27050] bond1: entered promiscuous mode [ 492.874980][T27050] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.876022][T27053] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.8312: lblock 2 mapped to illegal pblock 2 (length 1) [ 492.897633][T27053] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.8312: lblock 0 mapped to illegal pblock 48 (length 1) [ 492.912851][T27053] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.8312: Failed to acquire dquot type 0 [ 492.925292][T27053] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 492.935350][T27053] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.8312: mark_inode_dirty error [ 492.947332][T27050] bond1: left promiscuous mode [ 492.952637][T27053] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 492.963315][T27053] EXT4-fs (loop1): 1 orphan inode deleted [ 492.969956][T27053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.982967][T14419] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 492.999237][T14419] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:22: Failed to release dquot type 0 [ 493.012262][T27053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.022061][T27053] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.8312: Invalid inode table block 1 in block_group 0 [ 493.036509][T27053] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 493.036765][T27070] loop0: detected capacity change from 0 to 512 [ 493.053586][T27053] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.8312: mark_inode_dirty error [ 493.094330][T27082] tmpfs: Cannot retroactively limit inodes [ 493.128674][T27087] netlink: 'syz.5.8327': attribute type 1 has an invalid length. [ 493.148630][T27087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.149134][T27088] loop2: detected capacity change from 0 to 1024 [ 493.165596][T27088] ext4: Bad value for 'resuid' [ 493.170410][T27088] ext4: Bad value for 'resuid' [ 493.279436][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 493.279449][ T29] audit: type=1326 audit(25081.513:67776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.311478][ T29] audit: type=1326 audit(25081.513:67777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.336415][ T29] audit: type=1326 audit(25081.513:67778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.360654][ T29] audit: type=1326 audit(25081.513:67779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.384461][ T29] audit: type=1326 audit(25081.513:67780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.408384][ T29] audit: type=1326 audit(25081.513:67781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.432134][ T29] audit: type=1326 audit(25081.513:67782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.456667][ T29] audit: type=1326 audit(25081.513:67783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.480979][ T29] audit: type=1326 audit(25081.513:67784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.504966][ T29] audit: type=1326 audit(25081.513:67785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27112 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 493.532148][T27106] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.547447][T27115] loop1: detected capacity change from 0 to 1024 [ 493.554225][T27115] EXT4-fs: inline encryption not supported [ 493.560135][T27115] EXT4-fs: Ignoring removed i_version option [ 493.567250][T27115] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 493.579561][T27115] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.8339: lblock 2 mapped to illegal pblock 2 (length 1) [ 493.594994][T27115] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.8339: lblock 0 mapped to illegal pblock 48 (length 1) [ 493.609448][T27115] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.8339: Failed to acquire dquot type 0 [ 493.621291][T27115] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 493.624413][T27118] netlink: 'syz.2.8340': attribute type 1 has an invalid length. [ 493.640249][T27115] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.8339: mark_inode_dirty error [ 493.653147][T27115] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 493.663824][T27115] EXT4-fs (loop1): 1 orphan inode deleted [ 493.670315][T27115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.683411][T14422] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 493.700571][T14422] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:25: Failed to release dquot type 0 [ 493.704467][T27123] netlink: 'syz.8.8342': attribute type 1 has an invalid length. [ 493.713972][T27115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.723479][T27106] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.735480][T27115] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.8339: Invalid inode table block 1 in block_group 0 [ 493.754624][T27115] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 493.765071][T27115] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.8339: mark_inode_dirty error [ 493.779096][T27118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.795596][T27121] macvlan2: entered promiscuous mode [ 493.801034][T27121] macvlan2: entered allmulticast mode [ 493.809564][T27121] bond2: entered promiscuous mode [ 493.815321][T27121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 493.825548][T27121] bond2: left promiscuous mode [ 493.839875][T27130] FAULT_INJECTION: forcing a failure. [ 493.839875][T27130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.845179][T27123] 8021q: adding VLAN 0 to HW filter on device bond15 [ 493.853458][T27130] CPU: 0 UID: 0 PID: 27130 Comm: syz.0.8344 Not tainted syzkaller #0 PREEMPT(voluntary) [ 493.853506][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.853555][T27130] Call Trace: [ 493.853562][T27130] [ 493.853571][T27130] __dump_stack+0x1d/0x30 [ 493.853590][T27130] dump_stack_lvl+0xe8/0x140 [ 493.853640][T27130] dump_stack+0x15/0x1b [ 493.853656][T27130] should_fail_ex+0x265/0x280 [ 493.853760][T27130] should_fail+0xb/0x20 [ 493.853778][T27130] should_fail_usercopy+0x1a/0x20 [ 493.853801][T27130] _copy_from_iter+0xd2/0xe80 [ 493.853827][T27130] ? __build_skb_around+0x1a0/0x200 [ 493.853927][T27130] ? __alloc_skb+0x223/0x320 [ 493.853993][T27130] netlink_sendmsg+0x471/0x6b0 [ 493.854093][T27130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.854117][T27130] __sock_sendmsg+0x142/0x180 [ 493.854146][T27130] ____sys_sendmsg+0x31e/0x4e0 [ 493.854172][T27130] ___sys_sendmsg+0x17b/0x1d0 [ 493.854215][T27130] __x64_sys_sendmsg+0xd4/0x160 [ 493.854301][T27130] x64_sys_call+0x191e/0x2ff0 [ 493.854319][T27130] do_syscall_64+0xd2/0x200 [ 493.854343][T27130] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 493.854365][T27130] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 493.854409][T27130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.854494][T27130] RIP: 0033:0x7fab294febe9 [ 493.854510][T27130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.854527][T27130] RSP: 002b:00007fab27f5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.854545][T27130] RAX: ffffffffffffffda RBX: 00007fab29735fa0 RCX: 00007fab294febe9 [ 493.854557][T27130] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000006 [ 493.854569][T27130] RBP: 00007fab27f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 493.854581][T27130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.854593][T27130] R13: 00007fab29736038 R14: 00007fab29735fa0 R15: 00007ffe9f557998 [ 493.854674][T27130] [ 493.934964][ T10] usb 11-1: enqueue for inactive port 0 [ 494.078016][ T10] usb 11-1: enqueue for inactive port 0 [ 494.135915][T27106] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.149047][ T10] vhci_hcd: vhci_device speed not set [ 494.187161][T27138] SELinux: failed to load policy [ 494.624189][T27106] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.638569][T27149] __nla_validate_parse: 7 callbacks suppressed [ 494.638583][T27149] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8351'. [ 494.785822][T14411] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.801763][T27161] 9pnet: Could not find request transport: f [ 494.816099][T27164] netlink: 'syz.1.8357': attribute type 1 has an invalid length. [ 494.816104][T14452] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.836792][T27157] loop0: detected capacity change from 0 to 512 [ 494.850622][T27164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.860164][T27157] EXT4-fs (loop0): too many log groups per flexible block group [ 494.864057][T14452] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.867988][T27157] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 494.884318][T27157] EXT4-fs (loop0): mount failed [ 494.890122][T14452] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.909052][T27160] loop8: detected capacity change from 0 to 1024 [ 494.940770][T27160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.958961][T27157] pim6reg1: entered promiscuous mode [ 494.964494][T27157] pim6reg1: entered allmulticast mode [ 494.975253][T27185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8360'. [ 495.161609][T27182] netlink: 'syz.2.8362': attribute type 1 has an invalid length. [ 495.293395][T27201] 9pnet: Could not find request transport: f [ 495.415532][T27199] netlink: 'syz.5.8363': attribute type 1 has an invalid length. [ 495.575100][T22084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.584644][T27208] netlink: 'syz.0.8371': attribute type 1 has an invalid length. [ 495.748160][T27208] 8021q: adding VLAN 0 to HW filter on device bond11 [ 495.927046][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8376'. [ 495.936096][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8376'. [ 495.941118][T27219] loop1: detected capacity change from 0 to 1024 [ 495.964634][T27225] netlink: 'syz.8.8378': attribute type 1 has an invalid length. [ 495.964838][T27219] ext4: Bad value for 'resuid' [ 495.977722][T27219] ext4: Bad value for 'resuid' [ 495.988743][T27225] 8021q: adding VLAN 0 to HW filter on device bond16 [ 496.011252][T27225] macvlan2: entered promiscuous mode [ 496.016984][T27225] macvlan2: entered allmulticast mode [ 496.023418][T27225] bond16: entered promiscuous mode [ 496.029010][T27225] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 496.037954][T27225] bond16: left promiscuous mode [ 496.303102][T27244] loop5: detected capacity change from 0 to 512 [ 496.317658][T27244] EXT4-fs (loop5): orphan cleanup on readonly fs [ 496.381949][T27244] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.8385: bad orphan inode 13 [ 496.396755][T27249] 8021q: adding VLAN 0 to HW filter on device bond17 [ 496.447611][T27244] ext4_test_bit(bit=12, block=18) = 1 [ 496.453387][T27244] is_bad_inode(inode)=0 [ 496.457693][T27244] NEXT_ORPHAN(inode)=2130706432 [ 496.462862][T27244] max_ino=32 [ 496.466088][T27244] i_nlink=1 [ 496.562881][T27258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8390'. [ 496.587310][T27244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 496.695905][T27244] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.8385: deleted inode referenced: 12 [ 496.744751][T27244] binfmt_misc: register: failed to install interpreter file ./file0 [ 496.828413][T25988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.057132][T27265] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 497.058352][T27256] validate_nla: 2 callbacks suppressed [ 497.058365][T27256] netlink: 'syz.0.8389': attribute type 1 has an invalid length. [ 497.063679][T27265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 497.063758][T27265] vhci_hcd vhci_hcd.0: Device attached [ 497.191191][T27275] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 497.238797][T27262] netlink: 'syz.8.8393': attribute type 1 has an invalid length. [ 497.281733][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8400'. [ 497.344967][T14253] usb 5-1: new low-speed USB device number 16 using vhci_hcd [ 497.382233][T27292] loop1: detected capacity change from 0 to 256 [ 497.415625][T27292] FAT-fs (loop1): Directory bread(block 64) failed [ 497.422321][T27292] FAT-fs (loop1): Directory bread(block 65) failed [ 497.434690][T27292] FAT-fs (loop1): Directory bread(block 66) failed [ 497.441489][T27292] FAT-fs (loop1): Directory bread(block 67) failed [ 497.448305][T27292] FAT-fs (loop1): Directory bread(block 68) failed [ 497.456753][T27292] FAT-fs (loop1): Directory bread(block 69) failed [ 497.463763][T27292] FAT-fs (loop1): Directory bread(block 70) failed [ 497.471689][T27292] FAT-fs (loop1): Directory bread(block 71) failed [ 497.498922][T27292] FAT-fs (loop1): Directory bread(block 72) failed [ 497.505855][T27292] FAT-fs (loop1): Directory bread(block 73) failed [ 497.518118][T27296] loop5: detected capacity change from 0 to 256 [ 497.531802][T27296] FAT-fs (loop5): Directory bread(block 64) failed [ 497.540842][T27296] FAT-fs (loop5): Directory bread(block 65) failed [ 497.547883][T27296] FAT-fs (loop5): Directory bread(block 66) failed [ 497.556663][T27296] FAT-fs (loop5): Directory bread(block 67) failed [ 497.563229][T27296] FAT-fs (loop5): Directory bread(block 68) failed [ 497.572212][T27292] syz.1.8403: attempt to access beyond end of device [ 497.572212][T27292] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 497.576921][T27296] FAT-fs (loop5): Directory bread(block 69) failed [ 497.603652][T27296] FAT-fs (loop5): Directory bread(block 70) failed [ 497.615694][T27296] FAT-fs (loop5): Directory bread(block 71) failed [ 497.622610][T27296] FAT-fs (loop5): Directory bread(block 72) failed [ 497.629448][T27296] FAT-fs (loop5): Directory bread(block 73) failed [ 497.686677][T27300] loop1: detected capacity change from 0 to 2048 [ 497.717195][T27305] syz.5.8405: attempt to access beyond end of device [ 497.717195][T27305] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 497.819897][T27300] Alternate GPT is invalid, using primary GPT. [ 497.826430][T27300] loop1: p1 p2 p3 [ 497.868808][T27268] vhci_hcd: connection reset by peer [ 497.959474][T24966] vhci_hcd: stop threads [ 497.963961][T24966] vhci_hcd: release socket [ 497.968519][T24966] vhci_hcd: disconnect device [ 498.052018][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 498.052112][ T29] audit: type=1326 audit(25086.532:68124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27264 comm="syz.2.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 498.248322][ T29] audit: type=1326 audit(25086.584:68125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27264 comm="syz.2.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 498.260145][T27313] loop5: detected capacity change from 0 to 8192 [ 498.273283][ T29] audit: type=1326 audit(25086.595:68126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27264 comm="syz.2.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 498.305644][ T29] audit: type=1326 audit(25086.605:68127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27264 comm="syz.2.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 498.331337][ T29] audit: type=1326 audit(25086.605:68128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27314 comm="syz.8.8412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ca5945ba7 code=0x7ffc0000 [ 498.356182][ T29] audit: type=1326 audit(25086.605:68129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27314 comm="syz.8.8412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca58eadb9 code=0x7ffc0000 [ 498.380308][ T29] audit: type=1326 audit(25086.605:68130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27314 comm="syz.8.8412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ca5945ba7 code=0x7ffc0000 [ 498.404429][ T29] audit: type=1326 audit(25086.605:68131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27314 comm="syz.8.8412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ca58eadb9 code=0x7ffc0000 [ 498.428789][ T29] audit: type=1326 audit(25086.616:68132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27264 comm="syz.2.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 498.452966][ T29] audit: type=1326 audit(25086.647:68133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27264 comm="syz.2.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 498.466754][T27315] netlink: 'syz.8.8412': attribute type 1 has an invalid length. [ 498.669522][T27320] netlink: 'syz.1.8414': attribute type 1 has an invalid length. [ 498.855076][T14438] bridge_slave_1: left allmulticast mode [ 498.861469][T14438] bridge_slave_1: left promiscuous mode [ 498.867771][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.885263][T14438] bridge_slave_0: left allmulticast mode [ 498.891641][T14438] bridge_slave_0: left promiscuous mode [ 498.897555][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.985073][T27331] loop5: detected capacity change from 0 to 256 [ 498.999971][T27331] FAT-fs (loop5): Directory bread(block 64) failed [ 499.006883][T27331] FAT-fs (loop5): Directory bread(block 65) failed [ 499.014864][T27331] FAT-fs (loop5): Directory bread(block 66) failed [ 499.027803][T27333] loop8: detected capacity change from 0 to 256 [ 499.044154][T14438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.053413][T27331] FAT-fs (loop5): Directory bread(block 67) failed [ 499.054872][T27333] FAT-fs (loop8): Directory bread(block 64) failed [ 499.069114][T14438] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 499.079068][T27333] FAT-fs (loop8): Directory bread(block 65) failed [ 499.085742][T27333] FAT-fs (loop8): Directory bread(block 66) failed [ 499.087962][T27331] FAT-fs (loop5): Directory bread(block 68) failed [ 499.092979][T14438] bond0 (unregistering): Released all slaves [ 499.106332][T27333] FAT-fs (loop8): Directory bread(block 67) failed [ 499.115728][T14438] bond1 (unregistering): Released all slaves [ 499.121860][T27333] FAT-fs (loop8): Directory bread(block 68) failed [ 499.129051][T27331] FAT-fs (loop5): Directory bread(block 69) failed [ 499.139014][T27333] FAT-fs (loop8): Directory bread(block 69) failed [ 499.140310][T27331] FAT-fs (loop5): Directory bread(block 70) failed [ 499.148838][T14438] bond2 (unregistering): Released all slaves [ 499.152997][T27331] FAT-fs (loop5): Directory bread(block 71) failed [ 499.159816][T27333] FAT-fs (loop8): Directory bread(block 70) failed [ 499.174851][T27339] FAULT_INJECTION: forcing a failure. [ 499.174851][T27339] name failslab, interval 1, probability 0, space 0, times 0 [ 499.188461][T27339] CPU: 0 UID: 0 PID: 27339 Comm: syz.1.8419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 499.188490][T27339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.188502][T27339] Call Trace: [ 499.188510][T27339] [ 499.188544][T27339] __dump_stack+0x1d/0x30 [ 499.188566][T27339] dump_stack_lvl+0xe8/0x140 [ 499.188586][T27339] dump_stack+0x15/0x1b [ 499.188602][T27339] should_fail_ex+0x265/0x280 [ 499.188620][T27339] ? audit_log_d_path+0x8d/0x150 [ 499.188718][T27339] should_failslab+0x8c/0xb0 [ 499.188811][T27339] __kmalloc_cache_noprof+0x4c/0x320 [ 499.188841][T27339] audit_log_d_path+0x8d/0x150 [ 499.188870][T27339] audit_log_d_path_exe+0x42/0x70 [ 499.188919][T27339] audit_log_task+0x1e9/0x250 [ 499.188944][T27339] audit_seccomp+0x61/0x100 [ 499.188965][T27339] ? __seccomp_filter+0x68c/0x10d0 [ 499.188986][T27339] __seccomp_filter+0x69d/0x10d0 [ 499.189004][T27339] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 499.189026][T27339] ? vfs_write+0x7e8/0x960 [ 499.189044][T27339] ? __rcu_read_unlock+0x4f/0x70 [ 499.189129][T27339] ? __fget_files+0x184/0x1c0 [ 499.189152][T27339] __secure_computing+0x82/0x150 [ 499.189170][T27339] syscall_trace_enter+0xcf/0x1e0 [ 499.189190][T27339] do_syscall_64+0xac/0x200 [ 499.189247][T27339] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 499.189268][T27339] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 499.189294][T27339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.189312][T27339] RIP: 0033:0x7fb3ef78ebe9 [ 499.189416][T27339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.189506][T27339] RSP: 002b:00007fb3ee1f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 499.189525][T27339] RAX: ffffffffffffffda RBX: 00007fb3ef9c5fa0 RCX: 00007fb3ef78ebe9 [ 499.189536][T27339] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fb3ee1b3000 [ 499.189547][T27339] RBP: 00007fb3ee1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 499.189559][T27339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.189571][T27339] R13: 00007fb3ef9c6038 R14: 00007fb3ef9c5fa0 R15: 00007fff726f9b18 [ 499.189627][T27339] [ 499.191288][T27331] FAT-fs (loop5): Directory bread(block 72) failed [ 499.195344][T14438] bond3 (unregistering): Released all slaves [ 499.203361][T27331] FAT-fs (loop5): Directory bread(block 73) failed [ 499.218969][T27333] FAT-fs (loop8): Directory bread(block 71) failed [ 499.227793][T14438] bond4 (unregistering): Released all slaves [ 499.263308][T27331] syz.5.8416: attempt to access beyond end of device [ 499.263308][T27331] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 499.270439][T14438] bond5 (unregistering): Released all slaves [ 499.300897][T27333] FAT-fs (loop8): Directory bread(block 72) failed [ 499.306138][T14438] bond6 (unregistering): Released all slaves [ 499.320620][T27333] FAT-fs (loop8): Directory bread(block 73) failed [ 499.338812][T14438] bond7 (unregistering): Released all slaves [ 499.377090][T27348] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 499.377090][T27348] program syz.1.8425 not setting count and/or reply_len properly [ 499.383491][T14438] bond8 (unregistering): Released all slaves [ 499.521695][T14438] bond9 (unregistering): Released all slaves [ 499.530052][T14438] bond10 (unregistering): Released all slaves [ 499.538708][T14438] bond11 (unregistering): Released all slaves [ 499.558841][T27350] netlink: 'syz.1.8426': attribute type 1 has an invalid length. [ 499.706278][T27321] lo speed is unknown, defaulting to 1000 [ 499.740959][T27363] loop5: detected capacity change from 0 to 1024 [ 499.747577][T27321] lo speed is unknown, defaulting to 1000 [ 499.793013][T14438] hsr_slave_0: left promiscuous mode [ 499.802304][T14438] hsr_slave_1: left promiscuous mode [ 499.808070][T14438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.814588][T27363] EXT4-fs: inline encryption not supported [ 499.821509][T27363] EXT4-fs: Ignoring removed i_version option [ 499.833802][T27363] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 499.849063][T14438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.868508][T27363] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.8424: lblock 2 mapped to illegal pblock 2 (length 1) [ 499.921469][T14438] team0 (unregistering): Port device team_slave_1 removed [ 499.922183][T27363] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.8424: lblock 0 mapped to illegal pblock 48 (length 1) [ 499.945421][T14438] team0 (unregistering): Port device team_slave_0 removed [ 500.060728][T27363] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8424: Failed to acquire dquot type 0 [ 500.078409][T27363] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 500.089969][T27363] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8424: mark_inode_dirty error [ 500.110640][T27357] netlink: 'syz.2.8428': attribute type 1 has an invalid length. [ 500.116525][T27363] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 500.134640][T27363] EXT4-fs (loop5): 1 orphan inode deleted [ 500.146188][T27321] lo speed is unknown, defaulting to 1000 [ 500.154130][T27363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.168809][T14439] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 500.209355][T14439] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:42: Failed to release dquot type 0 [ 500.238010][T27378] loop8: detected capacity change from 0 to 256 [ 500.254157][T27363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.281443][T27363] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.8424: Invalid inode table block 1 in block_group 0 [ 500.308384][T27378] FAT-fs (loop8): Directory bread(block 64) failed [ 500.319905][T27378] FAT-fs (loop8): Directory bread(block 65) failed [ 500.338712][T27378] FAT-fs (loop8): Directory bread(block 66) failed [ 500.348483][T27363] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 500.359337][T27378] FAT-fs (loop8): Directory bread(block 67) failed [ 500.362878][T27321] chnl_net:caif_netlink_parms(): no params data found [ 500.366149][T27378] FAT-fs (loop8): Directory bread(block 68) failed [ 500.380517][T27378] FAT-fs (loop8): Directory bread(block 69) failed [ 500.387381][T27378] FAT-fs (loop8): Directory bread(block 70) failed [ 500.394557][T27378] FAT-fs (loop8): Directory bread(block 71) failed [ 500.398802][T27363] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz.5.8424: mark_inode_dirty error [ 500.401677][T27378] FAT-fs (loop8): Directory bread(block 72) failed [ 500.419818][T27378] FAT-fs (loop8): Directory bread(block 73) failed [ 500.710465][T27391] loop2: detected capacity change from 0 to 256 [ 500.726390][T27391] FAT-fs (loop2): Directory bread(block 64) failed [ 500.737560][T27391] FAT-fs (loop2): Directory bread(block 65) failed [ 500.744598][T27391] FAT-fs (loop2): Directory bread(block 66) failed [ 500.745925][T27395] FAULT_INJECTION: forcing a failure. [ 500.745925][T27395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.751729][T27391] FAT-fs (loop2): Directory bread(block 67) failed [ 500.765326][T27395] CPU: 0 UID: 0 PID: 27395 Comm: syz.1.8437 Not tainted syzkaller #0 PREEMPT(voluntary) [ 500.765367][T27395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.765380][T27395] Call Trace: [ 500.765388][T27395] [ 500.765396][T27395] __dump_stack+0x1d/0x30 [ 500.765444][T27395] dump_stack_lvl+0xe8/0x140 [ 500.765462][T27395] dump_stack+0x15/0x1b [ 500.765478][T27395] should_fail_ex+0x265/0x280 [ 500.765502][T27395] should_fail+0xb/0x20 [ 500.765521][T27395] should_fail_usercopy+0x1a/0x20 [ 500.765602][T27395] _copy_from_iter+0x254/0xe80 [ 500.765673][T27395] ? __build_skb_around+0x1a0/0x200 [ 500.765695][T27395] ? __alloc_skb+0x223/0x320 [ 500.765761][T27395] netlink_sendmsg+0x471/0x6b0 [ 500.765787][T27395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.765823][T27395] __sock_sendmsg+0x142/0x180 [ 500.765894][T27395] ____sys_sendmsg+0x31e/0x4e0 [ 500.765935][T27395] ___sys_sendmsg+0x17b/0x1d0 [ 500.765968][T27395] __x64_sys_sendmsg+0xd4/0x160 [ 500.766048][T27395] x64_sys_call+0x191e/0x2ff0 [ 500.766069][T27395] do_syscall_64+0xd2/0x200 [ 500.766106][T27395] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 500.766128][T27395] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 500.766156][T27395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.766177][T27395] RIP: 0033:0x7fb3ef78ebe9 [ 500.766194][T27395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.766210][T27395] RSP: 002b:00007fb3ee1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.766230][T27395] RAX: ffffffffffffffda RBX: 00007fb3ef9c5fa0 RCX: 00007fb3ef78ebe9 [ 500.766242][T27395] RDX: 0000000000004010 RSI: 00002000000001c0 RDI: 0000000000000004 [ 500.766255][T27395] RBP: 00007fb3ee1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 500.766411][T27395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.766424][T27395] R13: 00007fb3ef9c6038 R14: 00007fb3ef9c5fa0 R15: 00007fff726f9b18 [ 500.766444][T27395] [ 501.002681][T27321] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.009554][T27391] FAT-fs (loop2): Directory bread(block 68) failed [ 501.010059][T27321] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.016746][T27391] FAT-fs (loop2): Directory bread(block 69) failed [ 501.030604][T27391] FAT-fs (loop2): Directory bread(block 70) failed [ 501.037356][T27391] FAT-fs (loop2): Directory bread(block 71) failed [ 501.044035][T27391] FAT-fs (loop2): Directory bread(block 72) failed [ 501.067550][T27321] bridge_slave_0: entered allmulticast mode [ 501.069253][T27391] FAT-fs (loop2): Directory bread(block 73) failed [ 501.082434][T27321] bridge_slave_0: entered promiscuous mode [ 501.097772][T27321] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.105220][T27321] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.124771][T27321] bridge_slave_1: entered allmulticast mode [ 501.132792][T27321] bridge_slave_1: entered promiscuous mode [ 501.157925][T27321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.191185][T27402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8440'. [ 501.201934][T27321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.233388][T27399] netlink: 'syz.8.8439': attribute type 1 has an invalid length. [ 501.243712][T27409] loop2: detected capacity change from 0 to 256 [ 501.261029][T27407] netlink: 'syz.1.8441': attribute type 30 has an invalid length. [ 501.273282][T27321] team0: Port device team_slave_0 added [ 501.280205][T27321] team0: Port device team_slave_1 added [ 501.295896][T27409] FAT-fs (loop2): Directory bread(block 64) failed [ 501.302742][T27409] FAT-fs (loop2): Directory bread(block 65) failed [ 501.319267][T27409] FAT-fs (loop2): Directory bread(block 66) failed [ 501.355603][T27409] FAT-fs (loop2): Directory bread(block 67) failed [ 501.362353][T27409] FAT-fs (loop2): Directory bread(block 68) failed [ 501.379905][T27409] FAT-fs (loop2): Directory bread(block 69) failed [ 501.392657][T27409] FAT-fs (loop2): Directory bread(block 70) failed [ 501.401096][T27409] FAT-fs (loop2): Directory bread(block 71) failed [ 501.409003][T27409] FAT-fs (loop2): Directory bread(block 72) failed [ 501.416782][T27409] FAT-fs (loop2): Directory bread(block 73) failed [ 501.424724][T27321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.432117][T27321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.458894][T27321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.479379][T27321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.486336][T27321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.512974][T27321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.552829][T27321] hsr_slave_0: entered promiscuous mode [ 501.569266][T27321] hsr_slave_1: entered promiscuous mode [ 501.583837][T27321] debugfs: 'hsr0' already exists in 'hsr' [ 501.589692][T27321] Cannot create hsr debugfs directory [ 501.597738][T27412] vlan2: entered allmulticast mode [ 501.731784][T27433] loop2: detected capacity change from 0 to 256 [ 501.746723][T27426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8449'. [ 501.761092][T27433] FAT-fs (loop2): Directory bread(block 64) failed [ 501.768240][T27433] FAT-fs (loop2): Directory bread(block 65) failed [ 501.776314][T27433] FAT-fs (loop2): Directory bread(block 66) failed [ 501.784571][T27433] FAT-fs (loop2): Directory bread(block 67) failed [ 501.791562][T27433] FAT-fs (loop2): Directory bread(block 68) failed [ 501.800194][T27433] FAT-fs (loop2): Directory bread(block 69) failed [ 501.807264][T27433] FAT-fs (loop2): Directory bread(block 70) failed [ 501.823940][T27433] FAT-fs (loop2): Directory bread(block 71) failed [ 501.830063][T27437] loop1: detected capacity change from 0 to 256 [ 501.830929][T27433] FAT-fs (loop2): Directory bread(block 72) failed [ 501.851811][T27437] FAT-fs (loop1): Directory bread(block 64) failed [ 501.858537][T27437] FAT-fs (loop1): Directory bread(block 65) failed [ 501.866672][T27433] FAT-fs (loop2): Directory bread(block 73) failed [ 501.881297][T27437] FAT-fs (loop1): Directory bread(block 66) failed [ 501.902854][T27437] FAT-fs (loop1): Directory bread(block 67) failed [ 501.921798][T27437] FAT-fs (loop1): Directory bread(block 68) failed [ 501.934727][T27437] FAT-fs (loop1): Directory bread(block 69) failed [ 501.943082][T27437] FAT-fs (loop1): Directory bread(block 70) failed [ 501.949901][T27437] FAT-fs (loop1): Directory bread(block 71) failed [ 501.958190][T27437] FAT-fs (loop1): Directory bread(block 72) failed [ 501.965151][T27437] FAT-fs (loop1): Directory bread(block 73) failed [ 501.967048][T27439] FAULT_INJECTION: forcing a failure. [ 501.967048][T27439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.985646][T27439] CPU: 0 UID: 0 PID: 27439 Comm: syz.2.8454 Not tainted syzkaller #0 PREEMPT(voluntary) [ 501.985674][T27439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.985742][T27439] Call Trace: [ 501.985750][T27439] [ 501.985758][T27439] __dump_stack+0x1d/0x30 [ 501.985779][T27439] dump_stack_lvl+0xe8/0x140 [ 501.985798][T27439] dump_stack+0x15/0x1b [ 501.985860][T27439] should_fail_ex+0x265/0x280 [ 501.985959][T27439] should_fail+0xb/0x20 [ 501.985978][T27439] should_fail_usercopy+0x1a/0x20 [ 501.986119][T27439] _copy_from_user+0x1c/0xb0 [ 501.986145][T27439] ___sys_sendmsg+0xc1/0x1d0 [ 501.986193][T27439] __x64_sys_sendmsg+0xd4/0x160 [ 501.986220][T27439] x64_sys_call+0x191e/0x2ff0 [ 501.986240][T27439] do_syscall_64+0xd2/0x200 [ 501.986268][T27439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 501.986293][T27439] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 501.986320][T27439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.986340][T27439] RIP: 0033:0x7f277541ebe9 [ 501.986356][T27439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.986427][T27439] RSP: 002b:00007f2773e7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.986447][T27439] RAX: ffffffffffffffda RBX: 00007f2775655fa0 RCX: 00007f277541ebe9 [ 501.986460][T27439] RDX: 0000000004000041 RSI: 0000200000000540 RDI: 0000000000000005 [ 501.986473][T27439] RBP: 00007f2773e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 501.986485][T27439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.986558][T27439] R13: 00007f2775656038 R14: 00007f2775655fa0 R15: 00007ffec5c71618 [ 501.986577][T27439] [ 502.179966][T27321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 502.189258][T14253] usb 5-1: enqueue for inactive port 0 [ 502.190488][T27321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 502.208617][T27321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 502.211892][T14253] usb 5-1: enqueue for inactive port 0 [ 502.233868][T27321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 502.307014][T14253] vhci_hcd: vhci_device speed not set [ 502.451733][T27321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.493000][T27443] netlink: 'syz.2.8456': attribute type 1 has an invalid length. [ 502.497340][T27321] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.521691][T14413] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.529140][T14413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.542787][T27470] lo speed is unknown, defaulting to 1000 [ 502.552926][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.560472][T14446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.591347][T27472] loop8: detected capacity change from 0 to 256 [ 502.604284][T27472] FAT-fs (loop8): bogus logical sector size 133 [ 502.610603][T27472] FAT-fs (loop8): Can't find a valid FAT filesystem [ 502.624795][T27321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.635786][T27321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.692566][T27470] lo speed is unknown, defaulting to 1000 [ 502.715254][T27321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.823030][T27321] veth0_vlan: entered promiscuous mode [ 502.844475][T27321] veth1_vlan: entered promiscuous mode [ 502.885026][T27321] veth0_macvtap: entered promiscuous mode [ 502.895036][T27321] veth1_macvtap: entered promiscuous mode [ 502.923762][T27321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.965798][T27321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.988055][T14458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.998811][T14458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.050332][T14458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.087826][T14458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.106226][T27491] loop0: detected capacity change from 0 to 256 [ 503.135286][T27493] netlink: 'syz.8.8467': attribute type 1 has an invalid length. [ 503.150281][T27491] FAT-fs (loop0): Directory bread(block 64) failed [ 503.157723][T27491] FAT-fs (loop0): Directory bread(block 65) failed [ 503.173965][T27491] FAT-fs (loop0): Directory bread(block 66) failed [ 503.175639][T27493] 8021q: adding VLAN 0 to HW filter on device bond18 [ 503.183106][T27491] FAT-fs (loop0): Directory bread(block 67) failed [ 503.197650][T27493] macvlan2: entered promiscuous mode [ 503.203122][T27493] macvlan2: entered allmulticast mode [ 503.209703][T27493] bond18: entered promiscuous mode [ 503.209724][T27491] FAT-fs (loop0): Directory bread(block 68) failed [ 503.215249][T27493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 503.230370][T27491] FAT-fs (loop0): Directory bread(block 69) failed [ 503.237561][T27491] FAT-fs (loop0): Directory bread(block 70) failed [ 503.237588][T27493] bond18: left promiscuous mode [ 503.249195][T27491] FAT-fs (loop0): Directory bread(block 71) failed [ 503.256121][T27491] FAT-fs (loop0): Directory bread(block 72) failed [ 503.263290][T27491] FAT-fs (loop0): Directory bread(block 73) failed [ 503.509879][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 503.509894][ T29] audit: type=1326 audit(25092.264:68743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 503.580900][ T29] audit: type=1326 audit(25092.264:68744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 503.604582][ T29] audit: type=1326 audit(25092.264:68745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 503.628869][ T29] audit: type=1326 audit(25092.264:68746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 503.652808][ T29] audit: type=1326 audit(25092.264:68747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 503.739153][T27525] FAULT_INJECTION: forcing a failure. [ 503.739153][T27525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.752460][T27525] CPU: 0 UID: 0 PID: 27525 Comm: syz.2.8480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 503.752546][T27525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.752559][T27525] Call Trace: [ 503.752628][T27525] [ 503.752634][T27525] __dump_stack+0x1d/0x30 [ 503.752690][T27525] dump_stack_lvl+0xe8/0x140 [ 503.752735][T27525] dump_stack+0x15/0x1b [ 503.752751][T27525] should_fail_ex+0x265/0x280 [ 503.752788][T27525] should_fail+0xb/0x20 [ 503.752803][T27525] should_fail_usercopy+0x1a/0x20 [ 503.752961][T27525] _copy_from_user+0x1c/0xb0 [ 503.752985][T27525] ___sys_sendmsg+0xc1/0x1d0 [ 503.753071][T27525] __x64_sys_sendmsg+0xd4/0x160 [ 503.753098][T27525] x64_sys_call+0x191e/0x2ff0 [ 503.753120][T27525] do_syscall_64+0xd2/0x200 [ 503.753149][T27525] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 503.753216][T27525] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 503.753242][T27525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.753259][T27525] RIP: 0033:0x7f277541ebe9 [ 503.753326][T27525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.753343][T27525] RSP: 002b:00007f2773e7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.753360][T27525] RAX: ffffffffffffffda RBX: 00007f2775655fa0 RCX: 00007f277541ebe9 [ 503.753370][T27525] RDX: 0000000000040080 RSI: 0000200000000040 RDI: 0000000000000003 [ 503.753458][T27525] RBP: 00007f2773e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 503.753472][T27525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.753483][T27525] R13: 00007f2775656038 R14: 00007f2775655fa0 R15: 00007ffec5c71618 [ 503.753498][T27525] [ 503.933504][ T29] audit: type=1326 audit(25092.590:68748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 503.959606][T27523] netlink: 'syz.8.8479': attribute type 1 has an invalid length. [ 503.968894][ T29] audit: type=1326 audit(25092.737:68749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 504.009099][ T29] audit: type=1326 audit(25092.789:68750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 504.009172][T27510] netlink: 'syz.0.8474': attribute type 1 has an invalid length. [ 504.032846][ T29] audit: type=1326 audit(25092.789:68751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 504.032873][ T29] audit: type=1326 audit(25092.789:68752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27506 comm="syz.0.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 504.074323][T27523] 8021q: adding VLAN 0 to HW filter on device bond19 [ 504.107430][T27523] macvlan2: entered promiscuous mode [ 504.108491][T27516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8477'. [ 504.112968][T27523] macvlan2: entered allmulticast mode [ 504.141044][T27523] bond19: entered promiscuous mode [ 504.148327][T27523] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.157076][T27523] bond19: left promiscuous mode [ 504.388929][T27552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8490'. [ 504.578323][T27554] netlink: 'syz.0.8491': attribute type 1 has an invalid length. [ 504.610334][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8497'. [ 504.659792][T27571] loop5: detected capacity change from 0 to 1024 [ 504.712587][T27571] EXT4-fs: inline encryption not supported [ 504.718608][T27571] EXT4-fs: Ignoring removed i_version option [ 504.720856][T27577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8500'. [ 504.745859][T27571] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 504.819494][T27584] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8503'. [ 504.862395][T27571] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.8492: lblock 2 mapped to illegal pblock 2 (length 1) [ 504.910459][T27579] netlink: 'syz.8.8501': attribute type 1 has an invalid length. [ 504.920899][T27571] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.8492: lblock 0 mapped to illegal pblock 48 (length 1) [ 504.992751][T27596] loop2: detected capacity change from 0 to 1024 [ 504.996663][T27571] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8492: Failed to acquire dquot type 0 [ 505.019713][T27571] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 505.039861][T27571] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8492: mark_inode_dirty error [ 505.054990][T27596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.070627][T27571] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 505.120571][T27604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8508'. [ 505.158618][T27571] EXT4-fs (loop5): 1 orphan inode deleted [ 505.190205][T14413] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 505.210438][T27608] loop8: detected capacity change from 0 to 256 [ 505.213299][T27596] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.2.8506: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 505.243658][T27571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.256309][T14413] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:16: Failed to release dquot type 0 [ 505.272563][T27596] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1687: Corrupt filesystem [ 505.283568][T27571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.294305][T27571] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.8492: Invalid inode table block 1 in block_group 0 [ 505.394251][T27571] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 505.404261][T27608] FAT-fs (loop8): Directory bread(block 64) failed [ 505.411268][T27608] FAT-fs (loop8): Directory bread(block 65) failed [ 505.420011][T27608] FAT-fs (loop8): Directory bread(block 66) failed [ 505.450206][T27608] FAT-fs (loop8): Directory bread(block 67) failed [ 505.451167][T27571] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz.5.8492: mark_inode_dirty error [ 505.457078][T27608] FAT-fs (loop8): Directory bread(block 68) failed [ 505.457103][T27608] FAT-fs (loop8): Directory bread(block 69) failed [ 505.457126][T27608] FAT-fs (loop8): Directory bread(block 70) failed [ 505.457142][T27608] FAT-fs (loop8): Directory bread(block 71) failed [ 505.457162][T27608] FAT-fs (loop8): Directory bread(block 72) failed [ 505.457221][T27608] FAT-fs (loop8): Directory bread(block 73) failed [ 505.482755][T26210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.541021][T27608] syz.8.8510: attempt to access beyond end of device [ 505.541021][T27608] loop8: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 505.563560][T27621] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 505.563560][T27621] program syz.2.8514 not setting count and/or reply_len properly [ 505.625872][T27624] loop1: detected capacity change from 0 to 1024 [ 505.685393][T27634] loop0: detected capacity change from 0 to 256 [ 505.719803][T27634] FAT-fs (loop0): Directory bread(block 64) failed [ 505.731995][T27634] FAT-fs (loop0): Directory bread(block 65) failed [ 505.749159][T27624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.776308][T27634] FAT-fs (loop0): Directory bread(block 66) failed [ 505.799933][T27640] loop8: detected capacity change from 0 to 1024 [ 505.810359][T27642] veth0: entered promiscuous mode [ 505.816161][T27642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8525'. [ 505.831009][T27642] veth0 (unregistering): left promiscuous mode [ 505.838303][T27634] FAT-fs (loop0): Directory bread(block 67) failed [ 505.853414][T27634] FAT-fs (loop0): Directory bread(block 68) failed [ 505.864025][T27624] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.8519: Allocating blocks 449-513 which overlap fs metadata [ 505.880427][T27634] FAT-fs (loop0): Directory bread(block 69) failed [ 505.898880][T27634] FAT-fs (loop0): Directory bread(block 70) failed [ 505.906634][T27624] EXT4-fs (loop1): pa ffff88810079c620: logic 48, phys. 177, len 21 [ 505.915375][T27624] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 505.939405][T27640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.956765][T27634] FAT-fs (loop0): Directory bread(block 71) failed [ 505.981923][T27634] FAT-fs (loop0): Directory bread(block 72) failed [ 505.990134][T27640] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.8524: Allocating blocks 385-513 which overlap fs metadata [ 506.014571][T27634] FAT-fs (loop0): Directory bread(block 73) failed [ 506.033648][T25014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.094710][T27640] EXT4-fs (loop8): pa ffff88810079c4d0: logic 16, phys. 129, len 24 [ 506.102915][T27640] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 506.253071][T27664] loop2: detected capacity change from 0 to 256 [ 506.266911][T22084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.278278][T27657] loop1: detected capacity change from 0 to 2048 [ 506.491002][T27664] FAT-fs (loop2): Directory bread(block 64) failed [ 506.498520][T27664] FAT-fs (loop2): Directory bread(block 65) failed [ 506.538938][T27664] FAT-fs (loop2): Directory bread(block 66) failed [ 506.602377][T27664] FAT-fs (loop2): Directory bread(block 67) failed [ 506.646556][T27664] FAT-fs (loop2): Directory bread(block 68) failed [ 506.666522][T27664] FAT-fs (loop2): Directory bread(block 69) failed [ 506.675584][T27675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8536'. [ 506.694971][T27664] FAT-fs (loop2): Directory bread(block 70) failed [ 506.714602][T27664] FAT-fs (loop2): Directory bread(block 71) failed [ 506.726497][T27664] FAT-fs (loop2): Directory bread(block 72) failed [ 506.733801][T27664] FAT-fs (loop2): Directory bread(block 73) failed [ 506.749819][T27679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8538'. [ 506.769303][T27664] syz.2.8531: attempt to access beyond end of device [ 506.769303][T27664] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 506.793696][T27681] netlink: 'syz.1.8539': attribute type 10 has an invalid length. [ 506.812880][T27681] team0: Port device dummy0 added [ 506.818843][T27681] netlink: 'syz.1.8539': attribute type 10 has an invalid length. [ 506.829292][T27681] team0: Port device dummy0 removed [ 506.839765][T27681] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 507.001843][T27691] netlink: 'syz.2.8543': attribute type 1 has an invalid length. [ 507.008645][T27677] netlink: 'syz.8.8537': attribute type 1 has an invalid length. [ 507.018315][T27693] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 507.025082][T27693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 507.033004][T27693] vhci_hcd vhci_hcd.0: Device attached [ 507.046923][T27691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 507.068192][T27691] macvlan2: entered promiscuous mode [ 507.073571][T27691] macvlan2: entered allmulticast mode [ 507.080044][T27691] bond3: entered promiscuous mode [ 507.085270][T27691] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.100917][T27691] bond3: left promiscuous mode [ 507.269711][ T23] usb 1-1: new low-speed USB device number 9 using vhci_hcd [ 507.298906][T27706] loop1: detected capacity change from 0 to 2048 [ 507.311741][T27711] FAULT_INJECTION: forcing a failure. [ 507.311741][T27711] name failslab, interval 1, probability 0, space 0, times 0 [ 507.324856][T27711] CPU: 1 UID: 0 PID: 27711 Comm: syz.2.8550 Not tainted syzkaller #0 PREEMPT(voluntary) [ 507.324901][T27711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.324911][T27711] Call Trace: [ 507.324917][T27711] [ 507.324925][T27711] __dump_stack+0x1d/0x30 [ 507.324943][T27711] dump_stack_lvl+0xe8/0x140 [ 507.324963][T27711] dump_stack+0x15/0x1b [ 507.325045][T27711] should_fail_ex+0x265/0x280 [ 507.325108][T27711] should_failslab+0x8c/0xb0 [ 507.325128][T27711] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 507.325328][T27711] ? sidtab_sid2str_get+0xa0/0x130 [ 507.325351][T27711] kmemdup_noprof+0x2b/0x70 [ 507.325393][T27711] sidtab_sid2str_get+0xa0/0x130 [ 507.325414][T27711] security_sid_to_context_core+0x1eb/0x2e0 [ 507.325456][T27711] security_sid_to_context+0x27/0x40 [ 507.325477][T27711] selinux_lsmprop_to_secctx+0x67/0xf0 [ 507.325499][T27711] security_lsmprop_to_secctx+0x43/0x80 [ 507.325521][T27711] audit_log_task_context+0x77/0x190 [ 507.325618][T27711] audit_log_task+0xf4/0x250 [ 507.325652][T27711] audit_seccomp+0x61/0x100 [ 507.325677][T27711] ? __seccomp_filter+0x68c/0x10d0 [ 507.325725][T27711] __seccomp_filter+0x69d/0x10d0 [ 507.325805][T27711] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 507.325828][T27711] ? vfs_write+0x7e8/0x960 [ 507.325856][T27711] __secure_computing+0x82/0x150 [ 507.325877][T27711] syscall_trace_enter+0xcf/0x1e0 [ 507.325902][T27711] do_syscall_64+0xac/0x200 [ 507.325958][T27711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 507.326050][T27711] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 507.326078][T27711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.326171][T27711] RIP: 0033:0x7f277541ebe9 [ 507.326185][T27711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.326200][T27711] RSP: 002b:00007f2773e7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 507.326216][T27711] RAX: ffffffffffffffda RBX: 00007f2775655fa0 RCX: 00007f277541ebe9 [ 507.326297][T27711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 507.326308][T27711] RBP: 00007f2773e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 507.326319][T27711] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 507.326331][T27711] R13: 00007f2775656038 R14: 00007f2775655fa0 R15: 00007ffec5c71618 [ 507.326347][T27711] [ 507.584278][T27706] Alternate GPT is invalid, using primary GPT. [ 507.591094][T27706] loop1: p1 p2 p3 [ 507.636911][T27714] loop5: detected capacity change from 0 to 256 [ 507.668035][T27720] loop8: detected capacity change from 0 to 256 [ 507.678781][T27714] FAT-fs (loop5): Directory bread(block 64) failed [ 507.685944][T27714] FAT-fs (loop5): Directory bread(block 65) failed [ 507.691767][T27720] FAT-fs (loop8): Directory bread(block 64) failed [ 507.700080][T27714] FAT-fs (loop5): Directory bread(block 66) failed [ 507.703618][T27720] FAT-fs (loop8): Directory bread(block 65) failed [ 507.708723][T27714] FAT-fs (loop5): Directory bread(block 67) failed [ 507.721033][T27714] FAT-fs (loop5): Directory bread(block 68) failed [ 507.721099][T27722] loop1: detected capacity change from 0 to 1024 [ 507.728322][T27714] FAT-fs (loop5): Directory bread(block 69) failed [ 507.728360][T27714] FAT-fs (loop5): Directory bread(block 70) failed [ 507.728407][T27714] FAT-fs (loop5): Directory bread(block 71) failed [ 507.728428][T27714] FAT-fs (loop5): Directory bread(block 72) failed [ 507.728442][T27714] FAT-fs (loop5): Directory bread(block 73) failed [ 507.731540][T27720] FAT-fs (loop8): Directory bread(block 66) failed [ 507.769237][T27714] syz.5.8551: attempt to access beyond end of device [ 507.769237][T27714] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 507.772903][T27720] FAT-fs (loop8): Directory bread(block 67) failed [ 507.791860][T27694] vhci_hcd: connection reset by peer [ 507.803960][T27722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.819930][T27720] FAT-fs (loop8): Directory bread(block 68) failed [ 507.825259][T14438] vhci_hcd: stop threads [ 507.826770][T27720] FAT-fs (loop8): Directory bread(block 69) failed [ 507.831125][T14438] vhci_hcd: release socket [ 507.831140][T14438] vhci_hcd: disconnect device [ 507.841320][T27722] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.8555: Allocating blocks 449-513 which overlap fs metadata [ 507.843432][T27720] FAT-fs (loop8): Directory bread(block 70) failed [ 507.863198][T27721] EXT4-fs (loop1): pa ffff8881078929a0: logic 48, phys. 177, len 21 [ 507.868328][T27720] FAT-fs (loop8): Directory bread(block 71) failed [ 507.876230][T27721] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 507.895539][T27720] FAT-fs (loop8): Directory bread(block 72) failed [ 507.902661][T27720] FAT-fs (loop8): Directory bread(block 73) failed [ 507.920261][T25014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.954638][T27732] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 508.055856][T27740] netlink: 'syz.8.8562': attribute type 1 has an invalid length. [ 508.093276][T27740] 8021q: adding VLAN 0 to HW filter on device bond20 [ 508.150649][T27742] macvlan2: entered promiscuous mode [ 508.156487][T27742] macvlan2: entered allmulticast mode [ 508.216407][T27742] bond20: entered promiscuous mode [ 508.223482][T27742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 508.244358][T27742] bond20: left promiscuous mode [ 508.284193][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 508.284208][ T29] audit: type=1326 audit(25097.272:69100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27692 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 508.314811][ T29] audit: type=1326 audit(25097.304:69101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27692 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 508.376287][T27750] loop5: detected capacity change from 0 to 1024 [ 508.383068][T27750] EXT4-fs: inline encryption not supported [ 508.389170][T27750] EXT4-fs: Ignoring removed i_version option [ 508.398483][ T29] audit: type=1400 audit(25097.398:69102): avc: denied { bind } for pid=27748 comm="syz.8.8565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 508.422173][ T29] audit: type=1400 audit(25097.398:69103): avc: denied { setopt } for pid=27748 comm="syz.8.8565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 508.443630][T27750] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 508.461700][T27755] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 508.470065][T27755] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 508.480436][ T29] audit: type=1326 audit(25097.451:69104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27754 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 508.504505][ T29] audit: type=1326 audit(25097.451:69105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27754 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 508.528476][ T29] audit: type=1326 audit(25097.451:69106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27754 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 508.552174][ T29] audit: type=1326 audit(25097.451:69107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27754 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 508.576057][ T29] audit: type=1326 audit(25097.451:69108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27754 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 508.599708][ T29] audit: type=1326 audit(25097.451:69109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27754 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fbdeb1bebe9 code=0x7ffc0000 [ 508.628218][T27755] loop0: detected capacity change from 0 to 512 [ 508.636971][T27755] EXT4-fs: Ignoring removed oldalloc option [ 508.645291][T27761] loop2: detected capacity change from 0 to 256 [ 508.660543][T27746] loop1: detected capacity change from 0 to 2048 [ 508.661834][T27755] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.8566: Parent and EA inode have the same ino 15 [ 508.679846][T27750] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.8563: lblock 2 mapped to illegal pblock 2 (length 1) [ 508.708294][T27755] EXT4-fs (loop0): 1 orphan inode deleted [ 508.711655][T27746] Alternate GPT is invalid, using primary GPT. [ 508.720335][T27746] loop1: p1 p2 p3 [ 508.727206][T27755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.751666][T27750] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.8563: lblock 0 mapped to illegal pblock 48 (length 1) [ 508.752975][T27761] FAT-fs (loop2): Directory bread(block 64) failed [ 508.809739][T27761] FAT-fs (loop2): Directory bread(block 65) failed [ 508.819878][T27761] FAT-fs (loop2): Directory bread(block 66) failed [ 508.831935][T27750] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.8563: Failed to acquire dquot type 0 [ 508.846872][T27761] FAT-fs (loop2): Directory bread(block 67) failed [ 508.871554][T27761] FAT-fs (loop2): Directory bread(block 68) failed [ 508.880154][T27321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.885028][T27750] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 508.890244][T27761] FAT-fs (loop2): Directory bread(block 69) failed [ 508.919121][T27761] FAT-fs (loop2): Directory bread(block 70) failed [ 508.926067][T27761] FAT-fs (loop2): Directory bread(block 71) failed [ 508.933248][T27761] FAT-fs (loop2): Directory bread(block 72) failed [ 508.940064][T27761] FAT-fs (loop2): Directory bread(block 73) failed [ 508.971972][T27750] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8563: mark_inode_dirty error [ 509.021830][T27750] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 509.058333][T27750] EXT4-fs (loop5): 1 orphan inode deleted [ 509.087270][T14438] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:41: lblock 1 mapped to illegal pblock 1 (length 1) [ 509.091795][T27750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.118829][T14438] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:41: Failed to release dquot type 0 [ 509.212553][T27750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.242034][T27792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8579'. [ 509.341567][T27750] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.8563: Invalid inode table block 1 in block_group 0 [ 509.558497][T27750] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 509.601251][T27798] loop2: detected capacity change from 0 to 2048 [ 509.670458][T27798] Alternate GPT is invalid, using primary GPT. [ 509.677082][T27798] loop2: p1 p2 p3 [ 509.693095][T27750] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz.5.8563: mark_inode_dirty error [ 509.817911][T27805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8583'. [ 509.855792][T27807] loop0: detected capacity change from 0 to 1024 [ 509.947519][T27807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.994342][T27821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8590'. [ 510.012225][T27807] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.8585: Allocating blocks 449-513 which overlap fs metadata [ 510.093418][T27806] EXT4-fs (loop0): pa ffff888107892a10: logic 48, phys. 177, len 21 [ 510.101548][T27806] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 510.138991][T27816] netlink: 'syz.8.8589': attribute type 1 has an invalid length. [ 510.152046][T27829] netlink: 'syz.1.8593': attribute type 21 has an invalid length. [ 510.160244][T27829] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8593'. [ 510.176494][T27321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.375856][T27835] netlink: 'syz.2.8595': attribute type 1 has an invalid length. [ 510.396074][T27835] macvlan2: entered promiscuous mode [ 510.401464][T27835] macvlan2: entered allmulticast mode [ 510.501046][T27856] netlink: 'syz.8.8604': attribute type 1 has an invalid length. [ 510.509234][T27856] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8604'. [ 510.521178][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8599'. [ 510.523470][T27856] loop8: detected capacity change from 0 to 164 [ 511.005371][T27871] loop8: detected capacity change from 0 to 512 [ 511.065821][T27871] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 511.151373][T27871] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 511.208399][T27871] EXT4-fs (loop8): orphan cleanup on readonly fs [ 511.263642][T27871] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.8609: invalid indirect mapped block 4294967295 (level 0) [ 511.391926][T27871] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.8609: invalid indirect mapped block 4294967295 (level 1) [ 511.435115][T27871] EXT4-fs (loop8): 1 orphan inode deleted [ 511.441189][T27871] EXT4-fs (loop8): 1 truncate cleaned up [ 511.447526][T27871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 511.472123][T27878] netlink: 'syz.1.8611': attribute type 1 has an invalid length. [ 511.488806][T22084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.500755][T27878] macvlan2: entered promiscuous mode [ 511.506375][T27878] macvlan2: entered allmulticast mode [ 511.539563][T27882] loop8: detected capacity change from 0 to 512 [ 511.635481][T27896] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 511.635481][T27896] program syz.2.8617 not setting count and/or reply_len properly [ 511.772299][T27880] netlink: 'syz.0.8612': attribute type 1 has an invalid length. [ 511.780700][T27902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8619'. [ 511.803219][T27904] 9p: Unknown access argument : -22 [ 511.833921][T27904] serio: Serial port ptm0 [ 512.060321][ T23] usb 1-1: enqueue for inactive port 0 [ 512.078163][ T23] usb 1-1: enqueue for inactive port 0 [ 512.155913][ T23] vhci_hcd: vhci_device speed not set [ 512.362700][T27972] loop0: detected capacity change from 0 to 512 [ 512.370839][T27972] EXT4-fs: Ignoring removed oldalloc option [ 512.378759][T27972] EXT4-fs (loop0): 1 truncate cleaned up [ 512.386644][T27972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.400680][T27972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.451901][T27979] FAULT_INJECTION: forcing a failure. [ 512.451901][T27979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.465942][T27979] CPU: 0 UID: 0 PID: 27979 Comm: syz.0.8646 Not tainted syzkaller #0 PREEMPT(voluntary) [ 512.465969][T27979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.466044][T27979] Call Trace: [ 512.466057][T27979] [ 512.466064][T27979] __dump_stack+0x1d/0x30 [ 512.466109][T27979] dump_stack_lvl+0xe8/0x140 [ 512.466174][T27979] dump_stack+0x15/0x1b [ 512.466191][T27979] should_fail_ex+0x265/0x280 [ 512.466247][T27979] should_fail+0xb/0x20 [ 512.466264][T27979] should_fail_usercopy+0x1a/0x20 [ 512.466286][T27979] _copy_from_user+0x1c/0xb0 [ 512.466465][T27979] __sys_bpf+0x178/0x7b0 [ 512.466546][T27979] __x64_sys_bpf+0x41/0x50 [ 512.466571][T27979] x64_sys_call+0x2aea/0x2ff0 [ 512.466592][T27979] do_syscall_64+0xd2/0x200 [ 512.466622][T27979] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 512.466656][T27979] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 512.466761][T27979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.466782][T27979] RIP: 0033:0x7fbdeb1bebe9 [ 512.466821][T27979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.466838][T27979] RSP: 002b:00007fbde9c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.466855][T27979] RAX: ffffffffffffffda RBX: 00007fbdeb3f5fa0 RCX: 00007fbdeb1bebe9 [ 512.466866][T27979] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 512.466879][T27979] RBP: 00007fbde9c27090 R08: 0000000000000000 R09: 0000000000000000 [ 512.466892][T27979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.466905][T27979] R13: 00007fbdeb3f6038 R14: 00007fbdeb3f5fa0 R15: 00007fff520b8258 [ 512.466923][T27979] [ 512.720342][T27991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8651'. [ 512.730917][T27995] FAULT_INJECTION: forcing a failure. [ 512.730917][T27995] name failslab, interval 1, probability 0, space 0, times 0 [ 512.744439][T27995] CPU: 1 UID: 0 PID: 27995 Comm: syz.5.8653 Not tainted syzkaller #0 PREEMPT(voluntary) [ 512.744464][T27995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.744474][T27995] Call Trace: [ 512.744480][T27995] [ 512.744486][T27995] __dump_stack+0x1d/0x30 [ 512.744520][T27995] dump_stack_lvl+0xe8/0x140 [ 512.744534][T27995] dump_stack+0x15/0x1b [ 512.744561][T27995] should_fail_ex+0x265/0x280 [ 512.744584][T27995] should_failslab+0x8c/0xb0 [ 512.744604][T27995] __kvmalloc_node_noprof+0x123/0x4e0 [ 512.744628][T27995] ? alloc_netdev_mqs+0xa0/0xa30 [ 512.744691][T27995] ? vsnprintf+0x829/0x890 [ 512.744711][T27995] ? __pfx_macvlan_setup+0x10/0x10 [ 512.744735][T27995] alloc_netdev_mqs+0xa0/0xa30 [ 512.744758][T27995] rtnl_create_link+0x239/0x710 [ 512.744836][T27995] rtnl_newlink_create+0x14c/0x620 [ 512.744863][T27995] ? security_capable+0x83/0x90 [ 512.744884][T27995] ? netlink_ns_capable+0x86/0xa0 [ 512.744956][T27995] rtnl_newlink+0xf29/0x12d0 [ 512.744985][T27995] ? search_extable+0x53/0x80 [ 512.745000][T27995] ? strncpy_from_user+0x17d/0x230 [ 512.745062][T27995] ? strncpy_from_user+0x17d/0x230 [ 512.745094][T27995] ? __memcg_slab_free_hook+0x135/0x230 [ 512.745121][T27995] ? __rcu_read_unlock+0x4f/0x70 [ 512.745205][T27995] ? avc_has_perm_noaudit+0x1b1/0x200 [ 512.745227][T27995] ? cred_has_capability+0x210/0x280 [ 512.745247][T27995] ? selinux_capable+0x31/0x40 [ 512.745269][T27995] ? security_capable+0x83/0x90 [ 512.745336][T27995] ? ns_capable+0x7d/0xb0 [ 512.745352][T27995] ? __pfx_rtnl_newlink+0x10/0x10 [ 512.745376][T27995] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 512.745461][T27995] netlink_rcv_skb+0x123/0x220 [ 512.745479][T27995] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 512.745508][T27995] rtnetlink_rcv+0x1c/0x30 [ 512.745529][T27995] netlink_unicast+0x5bd/0x690 [ 512.745622][T27995] netlink_sendmsg+0x58b/0x6b0 [ 512.745643][T27995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.745688][T27995] __sock_sendmsg+0x142/0x180 [ 512.745713][T27995] ____sys_sendmsg+0x31e/0x4e0 [ 512.745763][T27995] ___sys_sendmsg+0x17b/0x1d0 [ 512.745792][T27995] __x64_sys_sendmsg+0xd4/0x160 [ 512.745816][T27995] x64_sys_call+0x191e/0x2ff0 [ 512.745835][T27995] do_syscall_64+0xd2/0x200 [ 512.745895][T27995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 512.746169][T27995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 512.746246][T27995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.746339][T27995] RIP: 0033:0x7efdb26aebe9 [ 512.746396][T27995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.746411][T27995] RSP: 002b:00007efdb110f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.746445][T27995] RAX: ffffffffffffffda RBX: 00007efdb28e5fa0 RCX: 00007efdb26aebe9 [ 512.746513][T27995] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 512.746523][T27995] RBP: 00007efdb110f090 R08: 0000000000000000 R09: 0000000000000000 [ 512.746534][T27995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.746552][T27995] R13: 00007efdb28e6038 R14: 00007efdb28e5fa0 R15: 00007fff155a3af8 [ 512.746568][T27995] [ 513.068048][T27993] loop0: detected capacity change from 0 to 256 [ 513.082338][T27993] FAT-fs (loop0): Directory bread(block 64) failed [ 513.090349][T27993] FAT-fs (loop0): Directory bread(block 65) failed [ 513.097115][T27993] FAT-fs (loop0): Directory bread(block 66) failed [ 513.120772][T27993] FAT-fs (loop0): Directory bread(block 67) failed [ 513.133156][T27993] FAT-fs (loop0): Directory bread(block 68) failed [ 513.133643][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 513.133656][ T29] audit: type=1326 audit(25102.364:69288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27999 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 513.170161][ T29] audit: type=1326 audit(25102.364:69289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27999 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2775420b3a code=0x7ffc0000 [ 513.170946][T27993] FAT-fs (loop0): Directory bread(block 69) failed [ 513.193870][ T29] audit: type=1326 audit(25102.364:69290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27999 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f277541d550 code=0x7ffc0000 [ 513.193898][ T29] audit: type=1326 audit(25102.364:69291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27999 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f277541d69f code=0x7ffc0000 [ 513.260600][ T29] audit: type=1400 audit(25102.438:69292): avc: denied { connect } for pid=28000 comm="syz.8.8656" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.265185][T28002] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 513.291815][T28002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 513.291927][T28002] vhci_hcd vhci_hcd.0: Device attached [ 513.292004][T27993] FAT-fs (loop0): Directory bread(block 70) failed [ 513.292024][T27993] FAT-fs (loop0): Directory bread(block 71) failed [ 513.292190][T27993] FAT-fs (loop0): Directory bread(block 72) failed [ 513.292208][T27993] FAT-fs (loop0): Directory bread(block 73) failed [ 513.308204][T27993] syz.0.8652: attempt to access beyond end of device [ 513.308204][T27993] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 513.310039][ T29] audit: type=1400 audit(25102.532:69293): avc: denied { watch watch_reads } for pid=28006 comm="syz.1.8657" path="/198/file1" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 513.310068][ T29] audit: type=1326 audit(25102.532:69294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27999 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f277541d84a code=0x7ffc0000 [ 513.310208][ T29] audit: type=1326 audit(25102.532:69295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27999 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 513.310233][ T29] audit: type=1326 audit(25102.532:69296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27999 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 513.322060][ T29] audit: type=1326 audit(25102.564:69297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27999 comm="syz.2.8655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f277541ebe9 code=0x7ffc0000 [ 513.333270][T28012] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8659'. [ 513.333289][T28012] netem: unknown loss type 0 [ 513.333303][T28012] netem: change failed [ 513.334233][T28012] netlink: 'syz.0.8659': attribute type 4 has an invalid length. [ 513.413923][T28023] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8657'. [ 513.516636][T28022] loop0: detected capacity change from 0 to 8192 [ 513.540813][T28027] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 513.540843][T28027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 513.540882][T28027] vhci_hcd vhci_hcd.0: Device attached [ 513.546178][ T3397] usb 5-1: new low-speed USB device number 17 using vhci_hcd [ 513.614916][T28022] loop0: p1 p2[DM] p4 [ 513.614953][T28022] loop0: p1 size 196608 extends beyond EOD, truncated [ 513.615479][T28022] loop0: p2 start 4292936063 is beyond EOD, truncated [ 513.615497][T28022] loop0: p4 size 50331648 extends beyond EOD, truncated [ 513.715620][T28039] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 513.715647][T28039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 513.715678][T28039] vhci_hcd vhci_hcd.0: Device attached [ 513.726325][T28045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8665'. [ 513.764992][ T23] usb 11-1: new low-speed USB device number 17 using vhci_hcd [ 513.819996][T28050] loop0: detected capacity change from 0 to 2048 [ 513.861157][T28050] Alternate GPT is invalid, using primary GPT. [ 513.867734][T28050] loop0: p1 p2 p3 [ 513.917412][T28005] vhci_hcd: connection reset by peer [ 513.922946][T28056] loop0: detected capacity change from 0 to 256 [ 513.929789][T28030] vhci_hcd: connection reset by peer [ 513.935478][T14452] vhci_hcd: stop threads [ 513.935491][T14452] vhci_hcd: release socket [ 513.935504][T14452] vhci_hcd: disconnect device [ 513.935672][T14452] vhci_hcd: stop threads [ 513.935679][T14452] vhci_hcd: release socket [ 513.935689][T14452] vhci_hcd: disconnect device [ 513.937365][T28058] FAULT_INJECTION: forcing a failure. [ 513.937365][T28058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.937389][T28058] CPU: 0 UID: 0 PID: 28058 Comm: syz.1.8671 Not tainted syzkaller #0 PREEMPT(voluntary) [ 513.937410][T28058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.937422][T28058] Call Trace: [ 513.937427][T28058] [ 513.937433][T28058] __dump_stack+0x1d/0x30 [ 513.937465][T28058] dump_stack_lvl+0xe8/0x140 [ 513.937560][T28058] dump_stack+0x15/0x1b [ 513.937576][T28058] should_fail_ex+0x265/0x280 [ 513.937599][T28058] should_fail+0xb/0x20 [ 513.937618][T28058] should_fail_usercopy+0x1a/0x20 [ 513.937716][T28058] _copy_from_user+0x1c/0xb0 [ 513.937743][T28058] ___sys_sendmsg+0xc1/0x1d0 [ 513.937785][T28058] __x64_sys_sendmsg+0xd4/0x160 [ 513.937811][T28058] x64_sys_call+0x191e/0x2ff0 [ 513.937922][T28058] do_syscall_64+0xd2/0x200 [ 513.937950][T28058] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 513.938040][T28058] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 513.938066][T28058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.938103][T28058] RIP: 0033:0x7fb3ef78ebe9 [ 513.938117][T28058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.938180][T28058] RSP: 002b:00007fb3ee1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.938211][T28058] RAX: ffffffffffffffda RBX: 00007fb3ef9c5fa0 RCX: 00007fb3ef78ebe9 [ 513.938223][T28058] RDX: 0000000000040800 RSI: 0000200000000380 RDI: 0000000000000005 [ 513.938277][T28058] RBP: 00007fb3ee1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 513.938289][T28058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.938301][T28058] R13: 00007fb3ef9c6038 R14: 00007fb3ef9c5fa0 R15: 00007fff726f9b18 [ 513.938319][T28058] [ 513.956462][T14253] usb 17-1: new low-speed USB device number 12 using vhci_hcd [ 513.971897][T28056] FAT-fs (loop0): Directory bread(block 64) failed [ 514.169501][T28056] FAT-fs (loop0): Directory bread(block 65) failed [ 514.176747][T28056] FAT-fs (loop0): Directory bread(block 66) failed [ 514.183524][T28056] FAT-fs (loop0): Directory bread(block 67) failed [ 514.190697][T28056] FAT-fs (loop0): Directory bread(block 68) failed [ 514.198257][T28056] FAT-fs (loop0): Directory bread(block 69) failed [ 514.205212][T28056] FAT-fs (loop0): Directory bread(block 70) failed [ 514.211819][T28056] FAT-fs (loop0): Directory bread(block 71) failed [ 514.218703][T28056] FAT-fs (loop0): Directory bread(block 72) failed [ 514.225895][T28056] FAT-fs (loop0): Directory bread(block 73) failed [ 514.280810][T28067] lo speed is unknown, defaulting to 1000 [ 514.313533][T28067] lo speed is unknown, defaulting to 1000 [ 514.424194][T28072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8676'. [ 514.433611][T28072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8676'. [ 514.434027][T28042] vhci_hcd: connection reset by peer [ 514.450149][T14452] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.459708][T14452] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.469713][T14458] vhci_hcd: stop threads [ 514.474010][T14458] vhci_hcd: release socket [ 514.478547][T14458] vhci_hcd: disconnect device [ 514.497755][T14452] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.514170][T14452] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.530462][T28077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8678'. [ 514.558376][T28079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8679'. [ 514.582855][T28083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8680'. [ 514.616477][T28086] team_slave_0: entered promiscuous mode [ 514.622197][T28086] team_slave_1: entered promiscuous mode [ 514.632379][T28089] netlink: 'syz.2.8683': attribute type 1 has an invalid length. [ 514.641440][T28086] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 514.655541][T28091] loop5: detected capacity change from 0 to 256 [ 514.656830][T28089] macvlan2: entered promiscuous mode [ 514.668160][T28089] macvlan2: entered allmulticast mode [ 514.674554][T28091] FAT-fs (loop5): Directory bread(block 64) failed [ 514.683897][T28091] FAT-fs (loop5): Directory bread(block 65) failed [ 514.693658][T28091] FAT-fs (loop5): Directory bread(block 66) failed [ 514.700555][T28091] FAT-fs (loop5): Directory bread(block 67) failed [ 514.707180][T28091] FAT-fs (loop5): Directory bread(block 68) failed [ 514.714136][T28091] FAT-fs (loop5): Directory bread(block 69) failed [ 514.721119][T28091] FAT-fs (loop5): Directory bread(block 70) failed [ 514.729059][T28091] FAT-fs (loop5): Directory bread(block 71) failed [ 514.735914][T28091] FAT-fs (loop5): Directory bread(block 72) failed [ 514.750269][T28096] loop0: detected capacity change from 0 to 256 [ 514.753092][T28091] FAT-fs (loop5): Directory bread(block 73) failed [ 514.779834][T28096] FAT-fs (loop0): Directory bread(block 64) failed [ 514.779938][T28098] netlink: 'syz.2.8687': attribute type 3 has an invalid length. [ 514.791347][T28096] FAT-fs (loop0): Directory bread(block 65) failed [ 514.801962][T28096] FAT-fs (loop0): Directory bread(block 66) failed [ 514.809539][T28096] FAT-fs (loop0): Directory bread(block 67) failed [ 514.817137][T28096] FAT-fs (loop0): Directory bread(block 68) failed [ 514.824258][T28096] FAT-fs (loop0): Directory bread(block 69) failed [ 514.831032][T28096] FAT-fs (loop0): Directory bread(block 70) failed [ 514.838462][T28096] FAT-fs (loop0): Directory bread(block 71) failed [ 514.845640][T28096] FAT-fs (loop0): Directory bread(block 72) failed [ 514.852664][T28096] FAT-fs (loop0): Directory bread(block 73) failed [ 514.902074][T28105] syzkaller1: entered promiscuous mode [ 514.908061][T28105] syzkaller1: entered allmulticast mode [ 514.973572][T28108] netlink: 'syz.5.8691': attribute type 1 has an invalid length. [ 514.988683][T28108] macvlan2: entered promiscuous mode [ 514.993928][T28110] loop8: detected capacity change from 0 to 1024 [ 514.994275][T28108] macvlan2: entered allmulticast mode [ 515.000890][T28110] EXT4-fs: Ignoring removed nobh option [ 515.011708][T28110] EXT4-fs: Ignoring removed bh option [ 515.029672][T28110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.047457][T28110] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.8692: Allocating blocks 481-513 which overlap fs metadata [ 515.065719][T28110] FAULT_INJECTION: forcing a failure. [ 515.065719][T28110] name failslab, interval 1, probability 0, space 0, times 0 [ 515.079314][T28110] CPU: 1 UID: 0 PID: 28110 Comm: syz.8.8692 Not tainted syzkaller #0 PREEMPT(voluntary) [ 515.079345][T28110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.079428][T28110] Call Trace: [ 515.079434][T28110] [ 515.079443][T28110] __dump_stack+0x1d/0x30 [ 515.079464][T28110] dump_stack_lvl+0xe8/0x140 [ 515.079484][T28110] dump_stack+0x15/0x1b [ 515.079500][T28110] should_fail_ex+0x265/0x280 [ 515.079559][T28110] should_failslab+0x8c/0xb0 [ 515.079583][T28110] __kmalloc_noprof+0xa5/0x3e0 [ 515.079615][T28110] ? ext4_find_extent+0x16b/0x7a0 [ 515.079704][T28110] ext4_find_extent+0x16b/0x7a0 [ 515.079723][T28110] ext4_ext_map_blocks+0x11f/0x38a0 [ 515.079791][T28110] ? x2apic_send_IPI_self+0x10/0x20 [ 515.079897][T28110] ? arch_irq_work_raise+0x46/0x50 [ 515.079916][T28110] ? __irq_work_queue_local+0x10f/0x2c0 [ 515.079971][T28110] ? irq_work_queue+0x93/0x100 [ 515.079994][T28110] ? invalidate_inode_pages2_range+0x397/0x3d0 [ 515.080019][T28110] ? bpf_send_signal_common+0x280/0x300 [ 515.080099][T28110] ? ext4_es_lookup_extent+0x352/0x4f0 [ 515.080126][T28110] ext4_map_blocks+0x5ee/0xd00 [ 515.080153][T28110] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 515.080236][T28110] ext4_iomap_begin+0x88d/0xe00 [ 515.080321][T28110] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 515.080417][T28110] iomap_iter+0x332/0x730 [ 515.080434][T28110] ? should_failslab+0x8c/0xb0 [ 515.080525][T28110] __iomap_dio_rw+0x708/0x1250 [ 515.080554][T28110] ? ext4_journal_check_start+0x11a/0x1b0 [ 515.080574][T28110] iomap_dio_rw+0x40/0x90 [ 515.080602][T28110] ext4_file_write_iter+0xad9/0xf00 [ 515.080680][T28110] do_iter_readv_writev+0x49c/0x540 [ 515.080705][T28110] vfs_writev+0x2df/0x8b0 [ 515.080784][T28110] __se_sys_pwritev2+0xfc/0x1c0 [ 515.080819][T28110] __x64_sys_pwritev2+0x67/0x80 [ 515.080840][T28110] x64_sys_call+0x2c55/0x2ff0 [ 515.080859][T28110] do_syscall_64+0xd2/0x200 [ 515.080884][T28110] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 515.080966][T28110] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 515.081055][T28110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.081073][T28110] RIP: 0033:0x7f2ca594ebe9 [ 515.081087][T28110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.081140][T28110] RSP: 002b:00007f2ca43af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 515.081160][T28110] RAX: ffffffffffffffda RBX: 00007f2ca5b85fa0 RCX: 00007f2ca594ebe9 [ 515.081222][T28110] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 515.081233][T28110] RBP: 00007f2ca43af090 R08: 0000000000000000 R09: 0000000000000003 [ 515.081243][T28110] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 515.081254][T28110] R13: 00007f2ca5b86038 R14: 00007f2ca5b85fa0 R15: 00007ffd1d5c0388 [ 515.081272][T28110] [ 515.375567][T28117] loop1: detected capacity change from 0 to 1024 [ 515.384587][T22084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.396333][T28117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.448877][T25014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.461271][T28128] loop2: detected capacity change from 0 to 256 [ 515.476172][T28128] FAT-fs (loop2): Directory bread(block 64) failed [ 515.484437][T28128] FAT-fs (loop2): Directory bread(block 65) failed [ 515.492508][T28128] FAT-fs (loop2): Directory bread(block 66) failed [ 515.500795][T28128] FAT-fs (loop2): Directory bread(block 67) failed [ 515.500920][T28132] loop8: detected capacity change from 0 to 1024 [ 515.507431][T28128] FAT-fs (loop2): Directory bread(block 68) failed [ 515.514671][T28132] ext4: Unknown parameter 'fsmagic' [ 515.538098][T28128] FAT-fs (loop2): Directory bread(block 69) failed [ 515.547745][T28128] FAT-fs (loop2): Directory bread(block 70) failed [ 515.554533][T28128] FAT-fs (loop2): Directory bread(block 71) failed [ 515.566055][T28128] FAT-fs (loop2): Directory bread(block 72) failed [ 515.572903][T28128] FAT-fs (loop2): Directory bread(block 73) failed [ 515.594393][T28126] loop5: detected capacity change from 0 to 2048 [ 515.602852][T28138] loop1: detected capacity change from 0 to 256 [ 515.616601][T28138] FAT-fs (loop1): Directory bread(block 64) failed [ 515.623464][T28138] FAT-fs (loop1): Directory bread(block 65) failed [ 515.630469][T28138] FAT-fs (loop1): Directory bread(block 66) failed [ 515.637664][T28138] FAT-fs (loop1): Directory bread(block 67) failed [ 515.647359][T28138] FAT-fs (loop1): Directory bread(block 68) failed [ 515.654130][T28138] FAT-fs (loop1): Directory bread(block 69) failed [ 515.661479][T28138] FAT-fs (loop1): Directory bread(block 70) failed [ 515.669086][T28138] FAT-fs (loop1): Directory bread(block 71) failed [ 515.676370][T28138] FAT-fs (loop1): Directory bread(block 72) failed [ 515.683428][T28138] FAT-fs (loop1): Directory bread(block 73) failed [ 515.698792][T28126] Alternate GPT is invalid, using primary GPT. [ 515.705442][T28126] loop5: p1 p2 p3 [ 515.839286][T28165] loop5: detected capacity change from 0 to 256 [ 515.878831][T28165] FAT-fs (loop5): Directory bread(block 64) failed [ 515.898542][T28165] FAT-fs (loop5): Directory bread(block 65) failed [ 515.906936][T28165] FAT-fs (loop5): Directory bread(block 66) failed [ 515.914442][T28165] FAT-fs (loop5): Directory bread(block 67) failed [ 515.926666][T28165] FAT-fs (loop5): Directory bread(block 68) failed [ 515.949170][T28165] FAT-fs (loop5): Directory bread(block 69) failed [ 515.961573][T28143] netlink: 'syz.8.8705': attribute type 1 has an invalid length. [ 515.962695][T28165] FAT-fs (loop5): Directory bread(block 70) failed [ 515.982107][T28165] FAT-fs (loop5): Directory bread(block 71) failed [ 515.989527][T28165] FAT-fs (loop5): Directory bread(block 72) failed [ 515.999598][T28165] FAT-fs (loop5): Directory bread(block 73) failed [ 516.057601][T28179] lo speed is unknown, defaulting to 1000 [ 516.065378][T28180] loop2: detected capacity change from 0 to 256 [ 516.090691][T28180] FAT-fs (loop2): Directory bread(block 64) failed [ 516.127420][T28180] FAT-fs (loop2): Directory bread(block 65) failed [ 516.134343][T28180] FAT-fs (loop2): Directory bread(block 66) failed [ 516.141999][T28180] FAT-fs (loop2): Directory bread(block 67) failed [ 516.160571][T28180] FAT-fs (loop2): Directory bread(block 68) failed [ 516.202057][T28180] FAT-fs (loop2): Directory bread(block 69) failed [ 516.218823][T28180] FAT-fs (loop2): Directory bread(block 70) failed [ 516.230165][T28179] lo speed is unknown, defaulting to 1000 [ 516.235892][T28180] FAT-fs (loop2): Directory bread(block 71) failed [ 516.236306][T28190] lo speed is unknown, defaulting to 1000 [ 516.255415][T28180] FAT-fs (loop2): Directory bread(block 72) failed [ 516.283044][T28180] FAT-fs (loop2): Directory bread(block 73) failed [ 516.324084][T28190] lo speed is unknown, defaulting to 1000 [ 516.336683][T28177] lo speed is unknown, defaulting to 1000 [ 516.388310][T28204] loop5: detected capacity change from 0 to 256 [ 516.411199][T28204] FAT-fs (loop5): Directory bread(block 64) failed [ 516.433356][T28204] FAT-fs (loop5): Directory bread(block 65) failed [ 516.440553][T28204] FAT-fs (loop5): Directory bread(block 66) failed [ 516.459509][T28204] FAT-fs (loop5): Directory bread(block 67) failed [ 516.489068][T28204] FAT-fs (loop5): Directory bread(block 68) failed [ 516.529106][T28177] lo speed is unknown, defaulting to 1000 [ 516.554329][T28210] __nla_validate_parse: 7 callbacks suppressed [ 516.554346][T28210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8733'. [ 516.572346][T28204] FAT-fs (loop5): Directory bread(block 69) failed [ 516.579176][T28204] FAT-fs (loop5): Directory bread(block 70) failed [ 516.587048][T28204] FAT-fs (loop5): Directory bread(block 71) failed [ 516.593940][T28204] FAT-fs (loop5): Directory bread(block 72) failed [ 516.600845][T28204] FAT-fs (loop5): Directory bread(block 73) failed [ 516.680809][T28204] syz.5.8730: attempt to access beyond end of device [ 516.680809][T28204] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 516.768896][T28225] lo speed is unknown, defaulting to 1000 [ 516.819794][T28225] lo speed is unknown, defaulting to 1000 [ 516.996226][T28228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8739'. [ 517.005777][T28228] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8739'. [ 517.073983][ T41] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.106176][T28233] loop8: detected capacity change from 0 to 256 [ 517.113961][ T41] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.131378][ T41] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.154126][ T41] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.180591][T28233] FAT-fs (loop8): Directory bread(block 64) failed [ 517.188140][T28233] FAT-fs (loop8): Directory bread(block 65) failed [ 517.194951][T28233] FAT-fs (loop8): Directory bread(block 66) failed [ 517.201747][T28233] FAT-fs (loop8): Directory bread(block 67) failed [ 517.236232][T28233] FAT-fs (loop8): Directory bread(block 68) failed [ 517.244742][T28233] FAT-fs (loop8): Directory bread(block 69) failed [ 517.258058][T28233] FAT-fs (loop8): Directory bread(block 70) failed [ 517.265450][T28233] FAT-fs (loop8): Directory bread(block 71) failed [ 517.267909][T28245] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 517.272369][T28233] FAT-fs (loop8): Directory bread(block 72) failed [ 517.279000][T28245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.279112][T28245] vhci_hcd vhci_hcd.0: Device attached [ 517.286006][T28233] FAT-fs (loop8): Directory bread(block 73) failed [ 517.344158][T28253] netlink: 'syz.2.8750': attribute type 1 has an invalid length. [ 517.368566][T28253] macvlan2: entered promiscuous mode [ 517.373962][T28253] macvlan2: entered allmulticast mode [ 517.503067][T28266] FAULT_INJECTION: forcing a failure. [ 517.503067][T28266] name failslab, interval 1, probability 0, space 0, times 0 [ 517.527000][T28266] CPU: 0 UID: 0 PID: 28266 Comm: syz.0.8756 Not tainted syzkaller #0 PREEMPT(voluntary) [ 517.527029][T28266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.527041][T28266] Call Trace: [ 517.527049][T28266] [ 517.527058][T28266] __dump_stack+0x1d/0x30 [ 517.527078][T28266] dump_stack_lvl+0xe8/0x140 [ 517.527096][T28266] dump_stack+0x15/0x1b [ 517.527113][T28266] should_fail_ex+0x265/0x280 [ 517.527137][T28266] should_failslab+0x8c/0xb0 [ 517.527163][T28266] kmem_cache_alloc_noprof+0x50/0x310 [ 517.527185][T28266] ? mas_alloc_nodes+0x265/0x520 [ 517.527213][T28266] mas_alloc_nodes+0x265/0x520 [ 517.527243][T28266] mas_preallocate+0x33e/0x520 [ 517.527274][T28266] mmap_region+0xbdd/0x1630 [ 517.527315][T28266] do_mmap+0x9b3/0xbe0 [ 517.527342][T28266] vm_mmap_pgoff+0x17a/0x2e0 [ 517.527373][T28266] ksys_mmap_pgoff+0xc2/0x310 [ 517.527390][T28266] ? __x64_sys_mmap+0x49/0x70 [ 517.527412][T28266] x64_sys_call+0x14a3/0x2ff0 [ 517.527432][T28266] do_syscall_64+0xd2/0x200 [ 517.527459][T28266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 517.527483][T28266] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 517.527509][T28266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.527529][T28266] RIP: 0033:0x7fbdeb1bec23 [ 517.527589][T28266] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 517.527605][T28266] RSP: 002b:00007fbde9c26e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 517.527624][T28266] RAX: ffffffffffffffda RBX: 0000000000000543 RCX: 00007fbdeb1bec23 [ 517.527636][T28266] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 517.527648][T28266] RBP: 0000200000001302 R08: 00000000ffffffff R09: 0000000000000000 [ 517.527658][T28266] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 517.527670][T28266] R13: 00007fbde9c26ef0 R14: 00007fbde9c26eb0 R15: 00002000000001c0 [ 517.527686][T28266] [ 517.736851][T28269] loop2: detected capacity change from 0 to 128 [ 517.773734][T28261] loop1: detected capacity change from 0 to 2048 [ 517.794487][T28271] syz.2.8757: attempt to access beyond end of device [ 517.794487][T28271] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 517.839194][T28271] syz.2.8757: attempt to access beyond end of device [ 517.839194][T28271] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 517.871937][T28261] Alternate GPT is invalid, using primary GPT. [ 517.878372][T28261] loop1: p1 p2 p3 [ 517.892871][T28271] syz.2.8757: attempt to access beyond end of device [ 517.892871][T28271] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 517.907005][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 517.907018][ T29] audit: type=1326 audit(25107.383:69932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 517.947648][T28271] syz.2.8757: attempt to access beyond end of device [ 517.947648][T28271] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 517.988834][ T29] audit: type=1326 audit(25107.415:69933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.012541][ T29] audit: type=1326 audit(25107.425:69934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.036888][ T29] audit: type=1326 audit(25107.436:69935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.060997][ T29] audit: type=1326 audit(25107.446:69936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.084877][ T29] audit: type=1326 audit(25107.457:69937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.088532][T28271] syz.2.8757: attempt to access beyond end of device [ 518.088532][T28271] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 518.108773][ T29] audit: type=1326 audit(25107.467:69938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.132604][T28271] syz.2.8757: attempt to access beyond end of device [ 518.132604][T28271] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 518.158759][T28249] vhci_hcd: connection closed [ 518.162300][T28271] syz.2.8757: attempt to access beyond end of device [ 518.162300][T28271] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 518.162338][T28271] syz.2.8757: attempt to access beyond end of device [ 518.162338][T28271] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 518.162477][T28271] syz.2.8757: attempt to access beyond end of device [ 518.162477][T28271] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 518.162508][T28271] syz.2.8757: attempt to access beyond end of device [ 518.162508][T28271] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 518.162604][T28271] syz.2.8757: attempt to access beyond end of device [ 518.162604][T28271] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 518.162635][T28271] syz.2.8757: attempt to access beyond end of device [ 518.162635][T28271] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 518.162663][T28271] syz.2.8757: attempt to access beyond end of device [ 518.162663][T28271] loop2: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 518.162784][T28271] syz.2.8757: attempt to access beyond end of device [ 518.162784][T28271] loop2: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 518.165616][ T29] audit: type=1326 audit(25107.478:69939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.171356][T14426] vhci_hcd: stop threads [ 518.184202][ T29] audit: type=1326 audit(25107.488:69940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.197940][T14426] vhci_hcd: release socket [ 518.211961][ T29] audit: type=1326 audit(25107.499:69941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.5.8748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efdb26aebe9 code=0x7ffc0000 [ 518.225830][T14426] vhci_hcd: disconnect device [ 518.309093][T28283] FAULT_INJECTION: forcing a failure. [ 518.309093][T28283] name failslab, interval 1, probability 0, space 0, times 0 [ 518.380881][T28284] loop0: detected capacity change from 0 to 256 [ 518.381727][T28283] CPU: 0 UID: 0 PID: 28283 Comm: syz.1.8761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 518.381751][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.381762][T28283] Call Trace: [ 518.381768][T28283] [ 518.381774][T28283] __dump_stack+0x1d/0x30 [ 518.381800][T28283] dump_stack_lvl+0xe8/0x140 [ 518.381818][T28283] dump_stack+0x15/0x1b [ 518.381833][T28283] should_fail_ex+0x265/0x280 [ 518.381854][T28283] should_failslab+0x8c/0xb0 [ 518.381876][T28283] kmem_cache_alloc_noprof+0x50/0x310 [ 518.381901][T28283] ? mas_alloc_nodes+0x265/0x520 [ 518.381930][T28283] mas_alloc_nodes+0x265/0x520 [ 518.381958][T28283] mas_preallocate+0x33e/0x520 [ 518.381987][T28283] mmap_region+0xbdd/0x1630 [ 518.382029][T28283] do_mmap+0x9b3/0xbe0 [ 518.382059][T28283] vm_mmap_pgoff+0x17a/0x2e0 [ 518.382087][T28283] ksys_mmap_pgoff+0xc2/0x310 [ 518.382103][T28283] ? __x64_sys_mmap+0x49/0x70 [ 518.382124][T28283] x64_sys_call+0x14a3/0x2ff0 [ 518.382143][T28283] do_syscall_64+0xd2/0x200 [ 518.382168][T28283] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 518.382190][T28283] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 518.382215][T28283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.382234][T28283] RIP: 0033:0x7fb3ef78ec23 [ 518.382249][T28283] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 518.382264][T28283] RSP: 002b:00007fb3ee1f6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 518.382282][T28283] RAX: ffffffffffffffda RBX: 0000000000000543 RCX: 00007fb3ef78ec23 [ 518.382294][T28283] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 518.382305][T28283] RBP: 0000200000001302 R08: 00000000ffffffff R09: 0000000000000000 [ 518.382317][T28283] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 518.382328][T28283] R13: 00007fb3ee1f6ef0 R14: 00007fb3ee1f6eb0 R15: 00002000000001c0 [ 518.382345][T28283] [ 518.406262][ T3397] usb 5-1: enqueue for inactive port 0 [ 518.614235][ T23] usb 11-1: enqueue for inactive port 0 [ 518.620012][ T23] usb 11-1: enqueue for inactive port 0 [ 518.631204][T28284] FAT-fs (loop0): Directory bread(block 64) failed [ 518.645014][T28284] FAT-fs (loop0): Directory bread(block 65) failed [ 518.675852][T28284] FAT-fs (loop0): Directory bread(block 66) failed [ 518.683107][T28286] pim6reg1: entered promiscuous mode [ 518.687970][T28295] loop1: detected capacity change from 0 to 256 [ 518.696474][T28284] FAT-fs (loop0): Directory bread(block 67) failed [ 518.703442][T28293] FAULT_INJECTION: forcing a failure. [ 518.703442][T28293] name failslab, interval 1, probability 0, space 0, times 0 [ 518.716679][T28293] CPU: 0 UID: 0 PID: 28293 Comm: syz.8.8764 Not tainted syzkaller #0 PREEMPT(voluntary) [ 518.716706][T28293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.716727][ T23] vhci_hcd: vhci_device speed not set [ 518.716816][T28293] ================================================================== [ 518.716837][T28293] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 518.716867][T28293] [ 518.716872][T28293] write to 0xffffffff88e2a1a0 of 38 bytes by task 23 on cpu 1: [ 518.716887][T28293] vsnprintf+0x2ce/0x890 [ 518.716906][T28293] vscnprintf+0x41/0x90 [ 518.716923][T28293] printk_sprint+0x30/0x2d0 [ 518.716938][T28293] vprintk_store+0x599/0x860 [ 518.716952][T28293] vprintk_emit+0x178/0x650 [ 518.716967][T28293] vprintk_default+0x26/0x30 [ 518.716983][T28293] vprintk+0x1d/0x30 [ 518.717003][T28293] _printk+0x79/0xa0 [ 518.717026][T28293] vhci_hub_control+0xe7a/0xe80 [ 518.717051][T28293] usb_hcd_submit_urb+0xc0c/0x1200 [ 518.717075][T28293] usb_submit_urb+0xae2/0xc20 [ 518.717102][T28293] usb_start_wait_urb+0x8c/0x190 [ 518.717119][T28293] usb_control_msg+0x18f/0x250 [ 518.717134][T28293] hub_ext_port_status+0xc0/0x480 [ 518.717159][T28293] hub_port_reset+0x53a/0xe50 [ 518.717177][T28293] hub_port_init+0x7a7/0x1680 [ 518.717196][T28293] hub_event+0x19f3/0x29c0 [ 518.717213][T28293] process_scheduled_works+0x4cb/0x9d0 [ 518.717238][T28293] worker_thread+0x582/0x770 [ 518.717264][T28293] kthread+0x489/0x510 [ 518.717280][T28293] ret_from_fork+0xda/0x150 [ 518.717298][T28293] ret_from_fork_asm+0x1a/0x30 [ 518.717316][T28293] [ 518.717321][T28293] read to 0xffffffff88e2a1a8 of 8 bytes by task 28293 on cpu 0: [ 518.717335][T28293] data_push_tail+0xfd/0x420 [ 518.717360][T28293] data_alloc+0xbf/0x2b0 [ 518.717383][T28293] prb_reserve+0x808/0xaf0 [ 518.717407][T28293] vprintk_store+0x56d/0x860 [ 518.717421][T28293] vprintk_emit+0x178/0x650 [ 518.717436][T28293] vprintk_default+0x26/0x30 [ 518.717459][T28293] vprintk+0x1d/0x30 [ 518.717479][T28293] _printk+0x79/0xa0 [ 518.717501][T28293] dump_stack_print_info+0x1a0/0x1b0 [ 518.717517][T28293] __dump_stack+0x11/0x30 [ 518.717532][T28293] dump_stack_lvl+0xe8/0x140 [ 518.717548][T28293] dump_stack+0x15/0x1b [ 518.717562][T28293] should_fail_ex+0x265/0x280 [ 518.717581][T28293] should_failslab+0x8c/0xb0 [ 518.717602][T28293] kmem_cache_alloc_node_noprof+0x57/0x320 [ 518.717626][T28293] __alloc_skb+0x101/0x320 [ 518.717643][T28293] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 518.717666][T28293] rtmsg_ifinfo+0x6d/0x110 [ 518.717686][T28293] netif_state_change+0x187/0x1f0 [ 518.717711][T28293] netdev_state_change+0xb5/0x160 [ 518.717728][T28293] __tun_chr_ioctl+0x3f4/0x14c0 [ 518.717746][T28293] tun_chr_ioctl+0x27/0x40 [ 518.717764][T28293] __se_sys_ioctl+0xcb/0x140 [ 518.717779][T28293] __x64_sys_ioctl+0x43/0x50 [ 518.717794][T28293] x64_sys_call+0x1816/0x2ff0 [ 518.717811][T28293] do_syscall_64+0xd2/0x200 [ 518.717837][T28293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.717856][T28293] [ 518.717859][T28293] value changed: 0x000000010000186f -> 0x645f69636876203a [ 518.717869][T28293] [ 518.717873][T28293] Reported by Kernel Concurrency Sanitizer on: [ 518.717881][T28293] CPU: 0 UID: 0 PID: 28293 Comm: syz.8.8764 Not tainted syzkaller #0 PREEMPT(voluntary) [ 518.717904][T28293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.717914][T28293] ================================================================== [ 518.717941][T28293] Call Trace: [ 518.717947][T28293] [ 518.717954][T28293] __dump_stack+0x1d/0x30 [ 518.717970][T28293] dump_stack_lvl+0xe8/0x140 [ 518.717988][T28293] dump_stack+0x15/0x1b [ 518.718020][T28293] should_fail_ex+0x265/0x280 [ 518.718041][T28293] should_failslab+0x8c/0xb0 [ 518.718063][T28293] kmem_cache_alloc_node_noprof+0x57/0x320 [ 518.718088][T28293] ? __alloc_skb+0x101/0x320 [ 518.718107][T28293] __alloc_skb+0x101/0x320 [ 518.718142][T28293] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 518.718165][T28293] ? ip6_route_dev_notify+0x60/0x580 [ 518.718195][T28293] rtmsg_ifinfo+0x6d/0x110 [ 518.718297][T28293] netif_state_change+0x187/0x1f0 [ 518.718326][T28293] netdev_state_change+0xb5/0x160 [ 518.718346][T28293] __tun_chr_ioctl+0x3f4/0x14c0 [ 518.718426][T28293] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 518.718490][T28293] tun_chr_ioctl+0x27/0x40 [ 518.718506][T28293] __se_sys_ioctl+0xcb/0x140 [ 518.718524][T28293] __x64_sys_ioctl+0x43/0x50 [ 518.718540][T28293] x64_sys_call+0x1816/0x2ff0 [ 518.718612][T28293] do_syscall_64+0xd2/0x200 [ 518.718638][T28293] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 518.718661][T28293] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 518.718687][T28293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.718741][T28293] RIP: 0033:0x7f2ca594ebe9 [ 518.718757][T28293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.718773][T28293] RSP: 002b:00007f2ca438e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.718838][T28293] RAX: ffffffffffffffda RBX: 00007f2ca5b86090 RCX: 00007f2ca594ebe9 [ 518.718928][T28293] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000007 [ 518.718940][T28293] RBP: 00007f2ca438e090 R08: 0000000000000000 R09: 0000000000000000 [ 518.718952][T28293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.718964][T28293] R13: 00007f2ca5b86128 R14: 00007f2ca5b86090 R15: 00007ffd1d5c0388 [ 518.718981][T28293] [ 518.721862][ T3397] usb 5-1: enqueue for inactive port 0 [ 518.727679][T28284] FAT-fs (loop0): Directory bread(block 68) failed [ 518.776877][T14253] usb 17-1: enqueue for inactive port 0 [ 518.778549][T28284] FAT-fs (loop0): Directory bread(block 69) failed [ 518.789512][T28295] FAT-fs (loop1): Directory bread(block 64) failed [ 518.792660][T28284] FAT-fs (loop0): Directory bread(block 70) failed [ 518.800340][T28295] FAT-fs (loop1): Directory bread(block 65) failed [ 518.801689][T28284] FAT-fs (loop0): Directory bread(block 71) failed [ 518.806235][T14253] usb 17-1: enqueue for inactive port 0 [ 518.811669][T28284] FAT-fs (loop0): Directory bread(block 72) failed [ 518.817642][ T3397] vhci_hcd: vhci_device speed not set [ 518.822641][T28284] FAT-fs (loop0): Directory bread(block 73) failed [ 518.830755][T28295] FAT-fs (loop1): Directory bread(block 66) failed [ 519.359608][T28295] FAT-fs (loop1): Directory bread(block 67) failed [ 519.366611][T28295] FAT-fs (loop1): Directory bread(block 68) failed [ 519.373211][T28295] FAT-fs (loop1): Directory bread(block 69) failed [ 519.380312][T28295] FAT-fs (loop1): Directory bread(block 70) failed [ 519.387271][T28295] FAT-fs (loop1): Directory bread(block 71) failed [ 519.394111][T28295] FAT-fs (loop1): Directory bread(block 72) failed [ 519.401020][T28295] FAT-fs (loop1): Directory bread(block 73) failed [ 519.422799][T14253] vhci_hcd: vhci_device speed not set