last executing test programs: 20.627975458s ago: executing program 3 (id=258): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) rt_sigaction(0x24, &(0x7f0000000340)={0x0, 0xc4000000, 0x0, {[0x80000000]}}, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000004c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRES16=r2, @ANYRESHEX=r2, @ANYBLOB="140006"], 0x48}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x94, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x43, 0x6, 0x2, 0x8, 0x0, 0x6, 0x800c0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f00000007c0), 0x8}, 0x10292, 0x80000000, 0x0, 0x5, 0xfffffffffffffe00, 0x3, 0x2, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0xb, r0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x7820}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000f00)=""/4096, 0x41100, 0x50, '\x00', r4, @fallback=0x1e, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x3, 0x2400000, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x878, @void, @value}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRESOCT=r7], 0x5000) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = open$dir(&(0x7f0000000100)='./file2\x00', 0x0, 0x51) sendfile(r9, r10, 0x0, 0xe065) 20.237993224s ago: executing program 3 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 20.113878596s ago: executing program 3 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 19.876386369s ago: executing program 3 (id=272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2b05090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r5 = fsopen(&(0x7f0000000240)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffe0}, {0xfff3}}}, 0x24}}, 0x0) 19.016057353s ago: executing program 3 (id=288): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) 18.873754535s ago: executing program 3 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00') unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES32, @ANYBLOB="00002abd7000fedbc9250200000002ade7c550b604dd93ab69a1fbccc12d031dfcfab7780e5bc829cc077ee56a68f8a8c4cb8e5c46000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000001fc0)={0x0, {{0xa, 0x6, 0xffffffff, @mcast1={0xff, 0x7}, 0x8a2}}, {{0xa, 0x4e20, 0x8100, @mcast1}}}, 0x108) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffe, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x0, 0xc}, {0xe, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x4c, &(0x7f0000000480)={&(0x7f0000002100)=@delchain={0x1f4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1a0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x8c, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x6, 0x0, 0x2, 0x6ffe595}}]}, {0x45, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x78, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0xbf}, 0xff21}}]}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x68, 0x14, 0x0, 0x0, {{0xf}, {0x4}, {0x35, 0x6, "ae37caa28df64c1b1743092330484ad1c6d13916bbb3d6b0c502002929921c09d789b4a1bb7b996891dd3e31c68b79f154"}, {0xc, 0x7, {0x1a7e0e4004363817}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x0, 0x5, {0x6, 0x7}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 18.873339364s ago: executing program 32 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00') unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES32, @ANYBLOB="00002abd7000fedbc9250200000002ade7c550b604dd93ab69a1fbccc12d031dfcfab7780e5bc829cc077ee56a68f8a8c4cb8e5c46000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000001fc0)={0x0, {{0xa, 0x6, 0xffffffff, @mcast1={0xff, 0x7}, 0x8a2}}, {{0xa, 0x4e20, 0x8100, @mcast1}}}, 0x108) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffe, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x0, 0xc}, {0xe, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x4c, &(0x7f0000000480)={&(0x7f0000002100)=@delchain={0x1f4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1a0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x8c, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x6, 0x0, 0x2, 0x6ffe595}}]}, {0x45, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x78, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0xbf}, 0xff21}}]}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x68, 0x14, 0x0, 0x0, {{0xf}, {0x4}, {0x35, 0x6, "ae37caa28df64c1b1743092330484ad1c6d13916bbb3d6b0c502002929921c09d789b4a1bb7b996891dd3e31c68b79f154"}, {0xc, 0x7, {0x1a7e0e4004363817}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x0, 0x5, {0x6, 0x7}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.350317895s ago: executing program 4 (id=520): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) read(r4, &(0x7f0000000840)=""/40, 0x28) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0xbb, 0x1000, &(0x7f0000000040)="5156751d32669dc43004a1a8b21836bfa8135ee0d5ff2a8711b3c4508982363a4d21871fbee35f57def28139b430e74064243de9388720f2d4991989d82f3a4b94520e26461de7393341b6905d75fb3c7ace473bc41233240c9a8ba0e8d579089e36925b3bb65028efe79c0f5928fcb621158ba58b7ccd3f4c4b5911bf96600c7af5e57354c12e2e0b5c124c8f78b8ba352b15eb0fd936450bac995a9a532c502e7ae47ab65de0bf818b744a703f92cc15d2429bc1cc233afa4e31", &(0x7f0000000580)=""/4096, 0x1, 0x0, 0xbf, 0x61, &(0x7f0000000140)="abbe4bc4f797f20ba21594ab863058233c83cd07b899417bcb69c94d62b282ef8e127d21baa6ec8d5cd215526c9502971af14776a686d32507c60e845c7b7175ddf226931261de513d723de1111a9de0affb9e12c02ce19b5261cf5541f7dee9544d65ba35803048034aebd6d7992a59147d0355cd7018b712d79982e4a05dc84667ce3b956de2fe7921742c10385846034464aa8d595ecb2ea46e41f1f525d7a00daeacfcef4d5f06c70fb335d8f1e5600aa397e10104aeca9c457139471d", &(0x7f0000000200)="904ff7ce627eed52b0f95c562324b9906014d87c634b88b77c218bf5037671f7e67181420695ed687f0bafc065e3414d4116d487b651ea4607b3faa4c4671d0dc6bde75ba93c826baa0b9ffa2da5b347a4b6052e722e3485e8c9d935200960d8bf", 0x2, 0x0, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 2.00787609s ago: executing program 4 (id=523): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r0, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, 0x0, 0x40090) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000005000000000000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r4}, 0x18) sendmmsg$inet(r2, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x86, 0x2}]}}}], 0x18}}], 0x2, 0x0) 1.947601801s ago: executing program 4 (id=524): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x10000}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x80) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") 1.939822511s ago: executing program 0 (id=525): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) 1.885348162s ago: executing program 0 (id=527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") 1.697737185s ago: executing program 0 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") (fail_nth: 1) 1.585890617s ago: executing program 0 (id=530): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x1f}, 0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x01\x00C\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}\x94\xfd\x00T.\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfcC\x1ag\vP', 0xb) fchmod(r3, 0x180) 1.582957247s ago: executing program 5 (id=532): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r0, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, 0x0, 0x40090) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000005000000000000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r4}, 0x18) sendmmsg$inet(r2, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x86, 0x2}]}}}], 0x18}}], 0x2, 0x0) 1.452374189s ago: executing program 2 (id=533): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file1\x00', r1, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)={[], [{@euid_gt={'euid>', r1}}, {@uid_eq={'uid', 0x3d, r1}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\&\xba'}}, {@uid_eq={'uid', 0x3d, r1}}]}, 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000000280)=0x5) setuid(r4) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000340)=@md0, r4, &(0x7f0000000440)={0xffffffffffffff06, 0xffffffff80000000, 0x6, 0x100000004, 0x4, 0x2, 0x4, 0x6, 0x5}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x10}, 0x19}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24002de8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7830000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000909d0000030000000000008001010000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000002000800040000000200"/28], 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="00ec4a0000003f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000300), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000880)='./bus\x00', &(0x7f0000000980)={[0x0, 0x0]}, &(0x7f0000000b40)={[&(0x7f00000009c0)='\x00', &(0x7f0000000a00)='ext4\x00', &(0x7f0000000b00)='#*!\xdd\x00']}, 0x100) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1008, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000b80)={[{@journal_async_commit}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@quota}, {@lazytime}]}, 0x2, 0x45d, &(0x7f0000000c00)="$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") 1.266721861s ago: executing program 5 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$FITHAW(r0, 0xc0045878) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x11, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000000000001b0000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000ec1c0000040000000000000000777718c16f28d4a6305cffb8ae0c0e8d42d47d28e58316dfc18db4fdf0c14afb806701015013e379631a4d8bde7b7b7a3084eb1aa5f31fc10298a54ee75a21629275a1cd557675ec4cfbbd5a9f9e9de9e640b12368cf1d12b700fb63307f5398d4547383189f60201e76e0684166bc65d93545081ef92259124e67c37eb551bca20e645f8cd896751ea59f14709809073e6e24907f1199e854598f06be28899b9a65e0ad63d013a71f7e3b0178bc3b807cce0ab1887ea2970e3886dde203446d652436027fb2bf7c14a58da2d4fb04cfd7fccb9b32", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) unshare(0x2040600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, &(0x7f0000003d00)=""/4069}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) io_uring_setup(0x1de4, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.186316123s ago: executing program 4 (id=542): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0xb, 0x0, 0x9, 0x18, @private0, @loopback, 0x700, 0x8, 0x1, 0x9}}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1f, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x25}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3cbb, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 1.027993485s ago: executing program 0 (id=544): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) setgroups(0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000060000007b11300000000000850000001e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getgroups(0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000440)=r2, 0x4) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)="74bd8073e454b05acfe3ecfaf1c8e931cf476ffe89b611c7301ed54d15359745e5f7556f7938d418ecb20541792de835454a423a685e2a6784cc2e14ad103f2ae7", 0x41}], 0x1, 0x4) close(r4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) r5 = syz_io_uring_setup(0xfbb, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10000, 0x5, 0x1a6}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000004, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/238, 0xee}, 0x6c166821}], 0x1, 0x120, 0x0) 985.647306ms ago: executing program 4 (id=545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0xfffb, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 874.356667ms ago: executing program 1 (id=546): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x1f}, 0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x01\x00C\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}\x94\xfd\x00T.\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfcC\x1ag\vP', 0xb) fchmod(r3, 0x180) 873.773818ms ago: executing program 4 (id=547): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="dcf204d80000000000000000371eb26b8bc47890707531a8607476771d495683307a110a50121a71b5ec6c1e801a294fb561261ef961c073ef8ae2f6fed6f11ea8f7c4d348b16a7140cc9d932ce6bb10739ab13c416b7f0e3b94c616760c546ae7dbe63d2810347614c7b8c85651476c24784daee81e8157ee0671f6adefc15706c0ac8a6cbf"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x10001, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$addseals(r4, 0x409, 0xb) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x13) 873.032978ms ago: executing program 1 (id=548): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) read(r5, &(0x7f0000000840)=""/40, 0x28) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r3}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 793.886059ms ago: executing program 5 (id=549): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file1\x00', r1, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)={[], [{@euid_gt={'euid>', r1}}, {@uid_eq={'uid', 0x3d, r1}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\&\xba'}}, {@uid_eq={'uid', 0x3d, r1}}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x21c, 0x24000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x10000000, 0x0, 0x4}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xfffffffffffffe1a}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r2}, 0x10) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x37c4b0, &(0x7f0000000100), 0x1, 0x54e, &(0x7f0000000600)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$isdn(0x22, 0x3, 0x1) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1690, &(0x7f0000000080)={0x0, 0x69bd, 0x80, 0x0, 0x262}) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd518a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000000, 0x1, @perf_bp={0x0, 0x8}, 0x3b23, 0x200000004, 0x1e, 0x9, 0x8, 0x800001, 0x7, 0x0, 0x80000000, 0x0, 0x1000000005}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)=""/4103, 0x1007}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x13001100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a340000001e0a010300000000000000000000000a0c00054000000000000000040900010073797a310000000008009a0400000000140000001100010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c00)='ext4_update_sb\x00', r7, 0x0, 0x8}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) 627.881221ms ago: executing program 2 (id=553): socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) (fail_nth: 4) 589.013682ms ago: executing program 2 (id=554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000008, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095339ce8daaece94976c78d12e1679ef834650db2d61bad73e1928109bd78a14094cc43d1c7770fe647c46af4aa5add719ce200a878961ecef3ac702f0e1b25e6e85b19635a58f7345a07246078c3c0db427b0350e845e733f3a6e9b793eba50d26f8a8a647d028aa073b495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') (rerun: 64) fchdir(r3) (async, rerun: 64) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64) statx(r4, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r8, 0x29, 0xd, 0x0, 0x2, 0x110a7c678f548050, @loopback, @remote, 0x7800, 0x1, 0x9, 0x6}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async, rerun: 64) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0x5, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x3}]}, &(0x7f0000000800)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', r8, @fallback=0x8, r4, 0x8, &(0x7f0000000840)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x8004, 0x1000, 0xa}, 0x10, 0x0, r12, 0x0, &(0x7f0000000900)=[r3, r11, r9, r11, 0xffffffffffffffff, r9, r5, r9, r3, r3], 0x0, 0x10, 0xfffffe01, @void, @value}, 0x94) (async) fsetxattr$security_selinux(r12, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10, 0x0, 0x20000000}, 0x18) (async, rerun: 32) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async, rerun: 32) eventfd2(0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f0000000280)=[{0xff, 0x8, 0x0, 0xff}, {0x51, 0x3, 0x9, 0x50000000}, {0xe215, 0x69, 0x9, 0xc114}, {0xdbf7, 0x6, 0x3, 0x4}, {0xc00, 0xfb, 0x9, 0x8}]}) socket$l2tp(0x2, 0x2, 0x73) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180f7ffffffffffffff0000080045000024000000000073907800000300e000000100000000fe9a90670200000000000000"], 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000bda3b9588c606e6400df10dbf9259bd1b76faa74c7bffc607ca133429d238e74e3a325941d002bdb9ac06cee0ddefbd721c175e6adcbeb31f97bd1c4518bb7a645b248a6f3c9e071e60cc341b2b721542fed4801ef9f57a015de44147fe36e14284c75b072a71da83b22c2d14e63fb49cd7022b48d07335a546a4617615f85d38e5fb2b0ddfb57f8c3e65b1ba6eb84d969e297a70000000000", @ANYRES32=0x0, @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) 587.258892ms ago: executing program 5 (id=555): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = open$dir(&(0x7f0000000100)='./file2\x00', 0x0, 0x51) sendfile(r2, r3, 0x0, 0xe065) 408.935364ms ago: executing program 1 (id=556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x8f, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) mq_getsetattr(r2, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000040)=""/103, 0x67}], 0x1, 0xc002a0, 0xcbea) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x68, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x178}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x200, 0xffff0001, "e214cf6a86a7"}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f00000001c0), &(0x7f0000000280)=r7}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)=""/213) 383.959655ms ago: executing program 5 (id=557): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r1, 0x40284504, &(0x7f0000000000)=""/56) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0x1, 0x8000c5d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x6, 0x5000000, 0x8000c62) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x9}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) clock_gettime(0x3, &(0x7f0000000140)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x101, 0xa54, 0x80001, 0x4, 0x806b}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 521.08µs ago: executing program 1 (id=558): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000040), &(0x7f0000000200)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r7 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) get_mempolicy(0x0, 0xfffffffffffffffe, 0x7c, &(0x7f0000d17000/0x2000)=nil, 0x2) 0s ago: executing program 2 (id=559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = io_uring_setup(0x805, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x2a7}) clock_gettime(0x0, &(0x7f0000000040)) ppoll(0x0, 0x0, &(0x7f0000000540)={0x0, 0x989680}, 0x0, 0x7b) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x69, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x83e00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x4085, 0x9, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0x64, 0x1, 0x5}]}}}}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000100), 0x1, 0x7a2, &(0x7f0000000f80)="$eJzs3ctrG9caAPBvZDuOk9xrX7hwb7oyFFpDiFynbtJCFyldlEIDgXbdxMiKSS1bwZJDbAxNKIVuCn0tCu0m6z7SXbd9bNv/oouS0IcTmtJFcRlp5Ki25CipJRn8+8HY58xD53w6M2fOaAYpgH1rPP2TizgaEe8kEaPZ/CQihmqpwYjT9fXurq8V0imJjY2Xf0lq69xZXytE0zapw1nm/xHxzZsRx3Lby62srM7PlErFpSw/WV24NFlZWT1+cWFmrjhXXDw5NT194tRTp07uXqy/fb965Na7Lzz++ek/3vjfjbe/TeJ0HMmWNcexW8ZjPHtPhtK38G+e3+3C+izpdwV4KOmhOVA/yuNojMZALdXGSC9rBgB0ywYAsA8lxgAAsM80Pge4s75WaEz9/USit356LiIO1uNv3N+sLxnM7tkdrN0HPXQnqd0ZadwdSSJibBfKH4+Ij7989dN0iqwd3EsDeuHqtYg4Pza+vf9Ptj2zkNl4fTM5vONrP7HTwo36tuNbZu+38w/001fp+OfpVuO/3Ob4J5rGPw3DLY7dh3H/4z93cxeKaSsd/z3b9Gzb3ab4M2MDWe5ftTHfUHLhYqmY9m3/joiJGBpO81O1VTdHbsnVpjImbv95u135zeO/X9977ZO0/PT/vTVyNwe3dLOzM9WZXQk+jf9axCODreJPNts/afHoTzrvbIdlvPjMWx+1W5bGn8bbmLbH310b1yMea9n+90bhyY7PJ07WdofJxk7Rwhc/fHioXfnN7Z9OafmNa4FeSNs/rVzSPv6xpPl5zcqDl/Hd9dGv2y27f/yt9/8DySu19IFs3pWZanVpKuJA8tL2+SfubdvIN9ZP4594tPXxXy+2vv9v7f/Sa8LzHcY/eOvnzx4+/u5K45/def/f0v4Pnrhxd36gXfmdtf90LTWRzemk/+u0gv/kvQMAAAAAAAAAAAAAAAAAAAAAAACATuUi4kgkufxmOpfL5+u/4f3fOJQrlSvVYxfKy4uzUfut7LEYyjW+6nK06ftQp7Lvw2/kT2zJPxkR/4mID4ZHavl8oVya7XfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJA53Ob3/1M/Dve7dgBA1xzsdwUAgJ5z/geA/efBzv8jXasHANA7rv8BYP/p+Px/vrv1AAB6x/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXb2zJl02vh9fa2Q5mcvryzPly8fny1W5vMLy4V8obx0KT9XLs+VivlCeWFzw/e3vNDV+r9SuXxpOhaXr0xWi5XqZGVl9dxCeXmxeu7iwsxc8VxxqKfRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBnKiur8zOlUnFJYsfEyN6oxp5JDMaeqIZE1xLNvcRI/zooAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD3urwAAAP//mFguzQ==") r6 = syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a458e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x0) socket(0x10, 0x3, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x6000) kernel console output (not intermixed with test programs): c0000 [ 33.192539][ T29] audit: type=1326 audit(1750386847.074:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3775 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 33.215875][ T29] audit: type=1326 audit(1750386847.074:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3775 comm="syz.4.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 33.252636][ T3791] loop1: detected capacity change from 0 to 512 [ 33.274178][ T3791] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 33.430272][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.450233][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.789889][ T3812] loop1: detected capacity change from 0 to 128 [ 33.888970][ T3819] loop1: detected capacity change from 0 to 1024 [ 33.913710][ T3819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.938521][ T3819] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.95: Allocating blocks 497-513 which overlap fs metadata [ 33.954290][ T3819] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 33.962014][ T3818] EXT4-fs (loop1): pa ffff888106e620e0: logic 16, phys. 145, len 23 [ 33.970121][ T3818] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 34.024438][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.059392][ T3828] loop1: detected capacity change from 0 to 128 [ 34.084493][ T3828] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 34.092515][ T3828] FAT-fs (loop1): Filesystem has been set read-only [ 34.102736][ T3828] syz.1.97: attempt to access beyond end of device [ 34.102736][ T3828] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 34.124368][ T3830] loop3: detected capacity change from 0 to 128 [ 34.130731][ T3828] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 34.130757][ T3828] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 34.147438][ T3828] syz.1.97: attempt to access beyond end of device [ 34.147438][ T3828] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 34.151944][ T3830] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.174092][ T3828] syz.1.97: attempt to access beyond end of device [ 34.174092][ T3828] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 34.193764][ T3830] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.235651][ T3830] program syz.3.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.282570][ T3832] __nla_validate_parse: 46 callbacks suppressed [ 34.282627][ T3832] netlink: 14 bytes leftover after parsing attributes in process `syz.1.99'. [ 34.416420][ T3840] loop3: detected capacity change from 0 to 8192 [ 34.625379][ T3854] loop0: detected capacity change from 0 to 512 [ 34.640631][ T3854] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 34.971398][ T3873] netlink: 14 bytes leftover after parsing attributes in process `syz.2.115'. [ 35.096723][ T3867] Set syz1 is full, maxelem 65536 reached [ 35.320753][ T3881] netlink: 'syz.0.116': attribute type 27 has an invalid length. [ 35.426646][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 35.435617][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 35.521888][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 35.560986][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 35.569866][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 35.579085][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 35.607045][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 35.615959][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 35.679530][ T3901] loop3: detected capacity change from 0 to 512 [ 35.688467][ T3901] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 35.767287][ T3909] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.859530][ T3916] loop3: detected capacity change from 0 to 128 [ 35.894474][ T3916] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 35.902377][ T3916] FAT-fs (loop3): Filesystem has been set read-only [ 35.909887][ T3916] syz.3.129: attempt to access beyond end of device [ 35.909887][ T3916] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 35.926319][ T3916] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 35.935120][ T3916] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 35.946406][ T3916] syz.3.129: attempt to access beyond end of device [ 35.946406][ T3916] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.023668][ T3926] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 36.103154][ T3931] netlink: 'syz.2.135': attribute type 27 has an invalid length. [ 36.390317][ T3955] loop1: detected capacity change from 0 to 128 [ 36.425607][ T3955] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 36.433639][ T3955] FAT-fs (loop1): Filesystem has been set read-only [ 36.451666][ T3955] syz.1.143: attempt to access beyond end of device [ 36.451666][ T3955] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 36.477101][ T3955] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 36.485029][ T3955] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 36.537176][ T3960] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 36.619866][ T3955] syz.1.143: attempt to access beyond end of device [ 36.619866][ T3955] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.013982][ T3991] loop2: detected capacity change from 0 to 128 [ 37.024048][ T3993] syz2: rxe_newlink: already configured on veth0_to_bond [ 37.038128][ T3991] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.083976][ T3991] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.128676][ T3998] loop1: detected capacity change from 0 to 128 [ 37.152584][ T3991] program syz.2.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.173980][ T3998] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 37.181883][ T3998] FAT-fs (loop1): Filesystem has been set read-only [ 37.221724][ T3998] syz.1.160: attempt to access beyond end of device [ 37.221724][ T3998] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 37.235855][ T3998] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 37.243843][ T3998] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 37.252565][ T3998] syz.1.160: attempt to access beyond end of device [ 37.252565][ T3998] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.288873][ T4001] loop2: detected capacity change from 0 to 512 [ 37.326146][ T4001] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 37.531401][ T4021] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 37.615990][ T4029] loop3: detected capacity change from 0 to 512 [ 37.625285][ T4029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.647233][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.693710][ T4034] loop2: detected capacity change from 0 to 128 [ 37.723884][ T4034] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.731915][ T4034] FAT-fs (loop2): Filesystem has been set read-only [ 37.739646][ T4034] syz.2.174: attempt to access beyond end of device [ 37.739646][ T4034] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 37.799806][ T4029] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.812680][ T4034] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.820593][ T4034] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.919918][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 37.919934][ T29] audit: type=1326 audit(1750386852.014:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 37.951602][ T4045] 9pnet_fd: Insufficient options for proto=fd [ 37.959723][ T29] audit: type=1326 audit(1750386852.044:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 37.983300][ T29] audit: type=1326 audit(1750386852.044:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 38.007053][ T29] audit: type=1326 audit(1750386852.044:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 38.030452][ T29] audit: type=1326 audit(1750386852.044:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 38.054348][ T29] audit: type=1326 audit(1750386852.044:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 38.080827][ T29] audit: type=1326 audit(1750386852.044:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 38.104812][ T29] audit: type=1326 audit(1750386852.044:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 38.128076][ T29] audit: type=1326 audit(1750386852.044:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30281ee929 code=0x7ffc0000 [ 38.151682][ T29] audit: type=1326 audit(1750386852.044:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30281ed290 code=0x7ffc0000 [ 38.223881][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.246513][ T4053] loop1: detected capacity change from 0 to 128 [ 38.273803][ T4055] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 38.322693][ T4053] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 38.330868][ T4053] FAT-fs (loop1): Filesystem has been set read-only [ 38.337883][ T4053] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 38.345848][ T4053] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 38.567845][ T4073] netlink: 'syz.3.188': attribute type 27 has an invalid length. [ 38.608074][ T4073] 0ªX¹¦D: left allmulticast mode [ 38.635555][ T4073] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.642902][ T4073] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.738865][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.756802][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.815697][ T4073] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.825078][ T4073] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.834340][ T4073] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.843369][ T4073] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.890871][ T4090] loop1: detected capacity change from 0 to 512 [ 38.907216][ T4090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.932793][ T4090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.946700][ T4090] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.982912][ T4090] 9pnet_fd: Insufficient options for proto=fd [ 39.010336][ T4097] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 39.064105][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.343718][ T4116] loop3: detected capacity change from 0 to 512 [ 39.351750][ T4116] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 39.434258][ T4125] netlink: 'syz.1.204': attribute type 27 has an invalid length. [ 39.454859][ T4127] loop3: detected capacity change from 0 to 512 [ 39.470422][ T4127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.479282][ T4121] loop0: detected capacity change from 0 to 1024 [ 39.488377][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.495602][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.534815][ T4121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.545058][ T4127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.575131][ T4127] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.589416][ T4134] __nla_validate_parse: 21 callbacks suppressed [ 39.589432][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 39.605129][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 39.613412][ T4121] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.202: Allocating blocks 497-513 which overlap fs metadata [ 39.629627][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 39.641374][ T4121] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 39.642736][ T4135] 9pnet_fd: Insufficient options for proto=fd [ 39.649263][ T4120] EXT4-fs (loop0): pa ffff888106e620e0: logic 16, phys. 145, len 23 [ 39.665940][ T4120] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 39.700712][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.715164][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 39.724585][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 39.736059][ T4142] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 39.737766][ T4125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.746036][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.753668][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 39.805410][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.855566][ T4125] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.864563][ T4125] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.874100][ T4125] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.882291][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 39.883149][ T4125] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.892006][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 39.914754][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 40.010704][ T23] syz2: Port: 1 Link DOWN [ 41.014727][ T4172] netlink: 14 bytes leftover after parsing attributes in process `syz.2.216'. [ 41.055041][ T4176] pim6reg: entered allmulticast mode [ 41.108086][ T4179] loop0: detected capacity change from 0 to 128 [ 41.151525][ T4179] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.222109][ T4181] loop3: detected capacity change from 0 to 512 [ 41.254868][ T4179] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.284383][ T4179] program syz.0.218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.304034][ T4181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.342299][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.419894][ T4181] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.475328][ T4181] 9pnet_fd: Insufficient options for proto=fd [ 41.625634][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.736931][ T4200] loop2: detected capacity change from 0 to 8192 [ 41.785998][ T4200] bio_check_eod: 3 callbacks suppressed [ 41.786014][ T4200] +}[@: attempt to access beyond end of device [ 41.786014][ T4200] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 41.804576][ T4200] Buffer I/O error on dev loop2, logical block 57847, async page read [ 41.871160][ T4209] loop2: detected capacity change from 0 to 1024 [ 41.895559][ T4209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.915912][ T4209] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.228: Allocating blocks 497-513 which overlap fs metadata [ 41.934007][ T4209] EXT4-fs (loop2): pa ffff888106e32310: logic 16, phys. 145, len 23 [ 41.942285][ T4209] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 41.952834][ T4209] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 41.965102][ T4209] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.965102][ T4209] [ 41.974831][ T4209] EXT4-fs (loop2): Total free blocks count 0 [ 41.980836][ T4209] EXT4-fs (loop2): Free/Dirty block details [ 41.986912][ T4209] EXT4-fs (loop2): free_blocks=16 [ 41.992247][ T4209] EXT4-fs (loop2): dirty_blocks=0 [ 41.997783][ T4209] EXT4-fs (loop2): Block reservation details [ 42.003940][ T4209] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 42.128953][ T4226] loop3: detected capacity change from 0 to 512 [ 42.151146][ T4226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.202747][ T4226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.217136][ T4226] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.311919][ T4226] 9pnet_fd: Insufficient options for proto=fd [ 42.406377][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.470676][ T4239] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 42.622593][ T4244] loop3: detected capacity change from 0 to 8192 [ 42.631189][ T4253] loop0: detected capacity change from 0 to 1024 [ 42.642898][ T4244] +}[@: attempt to access beyond end of device [ 42.642898][ T4244] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 42.655930][ T4244] Buffer I/O error on dev loop3, logical block 57847, async page read [ 42.708522][ T4253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.728910][ T4253] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.243: Allocating blocks 497-513 which overlap fs metadata [ 42.788978][ T4260] loop3: detected capacity change from 0 to 512 [ 42.795524][ T4253] EXT4-fs (loop0): pa ffff888106e32310: logic 16, phys. 145, len 23 [ 42.803704][ T4253] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 42.815659][ T4260] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 42.830433][ T4253] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 42.842871][ T4253] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.842871][ T4253] [ 42.852731][ T4253] EXT4-fs (loop0): Total free blocks count 0 [ 42.858726][ T4253] EXT4-fs (loop0): Free/Dirty block details [ 42.864730][ T4253] EXT4-fs (loop0): free_blocks=16 [ 42.869927][ T4253] EXT4-fs (loop0): dirty_blocks=0 [ 42.875198][ T4253] EXT4-fs (loop0): Block reservation details [ 42.881206][ T4253] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 42.917046][ T4262] netlink: 'syz.3.245': attribute type 27 has an invalid length. [ 42.946781][ T4266] loop4: detected capacity change from 0 to 512 [ 43.004761][ T4273] loop0: detected capacity change from 0 to 128 [ 43.014536][ T4266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.028051][ T4275] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 43.041025][ T4273] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 43.048883][ T4273] FAT-fs (loop0): Filesystem has been set read-only [ 43.060239][ T4273] syz.0.248: attempt to access beyond end of device [ 43.060239][ T4273] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 43.077688][ T4277] loop3: detected capacity change from 0 to 128 [ 43.092458][ T4277] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.104583][ T4273] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 43.112573][ T4273] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 43.121570][ T4273] syz.0.248: attempt to access beyond end of device [ 43.121570][ T4273] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 43.139387][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.152760][ T4277] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.191199][ T4277] program syz.3.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.203245][ T4266] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.308267][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 43.308284][ T29] audit: type=1326 audit(1750386857.394:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.342209][ T4266] 9pnet_fd: Insufficient options for proto=fd [ 43.393719][ T29] audit: type=1326 audit(1750386857.434:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.417122][ T29] audit: type=1326 audit(1750386857.434:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.441177][ T29] audit: type=1326 audit(1750386857.434:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.464669][ T29] audit: type=1326 audit(1750386857.434:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.466244][ T4290] loop0: detected capacity change from 0 to 8192 [ 43.492075][ T29] audit: type=1326 audit(1750386857.434:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.523673][ T29] audit: type=1326 audit(1750386857.434:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.547133][ T29] audit: type=1326 audit(1750386857.434:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.571211][ T29] audit: type=1326 audit(1750386857.434:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.597803][ T29] audit: type=1326 audit(1750386857.434:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724614e929 code=0x7ffc0000 [ 43.637683][ T4290] +}[@: attempt to access beyond end of device [ 43.637683][ T4290] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 43.651203][ T4290] Buffer I/O error on dev loop0, logical block 57847, async page read [ 43.670789][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.750050][ T4295] loop4: detected capacity change from 0 to 512 [ 43.761104][ T4300] loop3: detected capacity change from 0 to 128 [ 43.770399][ T4295] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 43.859493][ T4304] loop4: detected capacity change from 0 to 512 [ 43.885885][ T4300] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.893784][ T4300] FAT-fs (loop3): Filesystem has been set read-only [ 43.908475][ T4304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.920436][ T4306] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 43.928006][ T4300] syz.3.258: attempt to access beyond end of device [ 43.928006][ T4300] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 43.971175][ T4300] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.979140][ T4300] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 43.998566][ T4300] syz.3.258: attempt to access beyond end of device [ 43.998566][ T4300] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.031857][ T4304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.047270][ T4313] program syz.0.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.060927][ T4304] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.187245][ T4304] 9pnet_fd: Insufficient options for proto=fd [ 44.198619][ T4322] loop1: detected capacity change from 0 to 512 [ 44.206499][ T4322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.405195][ T4322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.439939][ T4322] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.444353][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.536824][ T4322] 9pnet_fd: Insufficient options for proto=fd [ 44.557905][ T4336] loop4: detected capacity change from 0 to 512 [ 44.566939][ T4336] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 44.593096][ T4341] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 44.628765][ T4347] program syz.4.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.661251][ T4348] __nla_validate_parse: 10 callbacks suppressed [ 44.661265][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 44.677564][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.687177][ T4348] hsr_slave_0: left promiscuous mode [ 44.693595][ T4348] hsr_slave_1: left promiscuous mode [ 44.713676][ T4354] netlink: 'syz.1.276': attribute type 27 has an invalid length. [ 44.723381][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.732590][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.742566][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.758192][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.767283][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.776500][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.797992][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.807111][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.816267][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.856796][ T4363] loop1: detected capacity change from 0 to 128 [ 44.873232][ T4363] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 44.881914][ T4363] FAT-fs (loop1): Filesystem has been set read-only [ 44.888813][ T4363] syz.1.280: attempt to access beyond end of device [ 44.888813][ T4363] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 44.903159][ T4363] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 44.911147][ T4363] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 44.919061][ T4363] syz.1.280: attempt to access beyond end of device [ 44.919061][ T4363] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.932364][ T4363] syz.1.280: attempt to access beyond end of device [ 44.932364][ T4363] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 45.183402][ T4371] loop0: detected capacity change from 0 to 8192 [ 45.198935][ T4371] Buffer I/O error on dev loop0, logical block 57847, async page read [ 45.247698][ T4373] syz2: rxe_newlink: already configured on veth0_to_bond [ 45.288600][ T4377] loop0: detected capacity change from 0 to 512 [ 45.296486][ T4375] loop2: detected capacity change from 0 to 512 [ 45.303606][ T4377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.305690][ T4379] loop1: detected capacity change from 0 to 512 [ 45.313865][ T4375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.351258][ T4379] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 45.374278][ T4377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.399824][ T4375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.412338][ T4377] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.431603][ T4375] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.486895][ T4389] loop1: detected capacity change from 0 to 128 [ 45.509186][ T4390] 9pnet_fd: Insufficient options for proto=fd [ 45.511540][ T4375] 9pnet_fd: Insufficient options for proto=fd [ 45.532721][ T4389] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 45.540642][ T4389] FAT-fs (loop1): Filesystem has been set read-only [ 45.558117][ T4389] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 45.566356][ T4389] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 45.630500][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.661558][ T2236] bridge_slave_1: left allmulticast mode [ 45.667264][ T2236] bridge_slave_1: left promiscuous mode [ 45.673007][ T2236] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.691805][ T2236] bridge_slave_0: left allmulticast mode [ 45.697518][ T2236] bridge_slave_0: left promiscuous mode [ 45.703282][ T2236] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.731830][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.821929][ T2236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.838950][ T2236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.871197][ T2236] bond0 (unregistering): Released all slaves [ 45.875720][ T4411] loop0: detected capacity change from 0 to 8192 [ 45.918073][ T4411] Buffer I/O error on dev loop0, logical block 57847, async page read [ 46.029852][ T4426] loop2: detected capacity change from 0 to 512 [ 46.054263][ T4426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 46.064319][ T4426] System zones: 1-12 [ 46.083199][ T4426] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.299: invalid indirect mapped block 8 (level 2) [ 46.096912][ T4431] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 46.140168][ T4426] EXT4-fs (loop2): Remounting filesystem read-only [ 46.146960][ T4426] EXT4-fs (loop2): 1 truncate cleaned up [ 46.166758][ T4426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.183890][ T2236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.199141][ T2236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.216831][ T4440] program syz.1.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.227147][ T2236] pim6reg (unregistering): left allmulticast mode [ 46.264669][ T4444] loop1: detected capacity change from 0 to 128 [ 46.271912][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.275997][ T4446] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 46.340888][ T2236] team0 (unregistering): Port device team_slave_1 removed [ 46.354389][ T2236] team0 (unregistering): Port device team_slave_0 removed [ 46.366310][ T4451] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.374367][ T4451] FAT-fs (loop1): Filesystem has been set read-only [ 46.383612][ T4451] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.391648][ T4451] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.431384][ T4450] 9pnet_fd: Insufficient options for proto=fd [ 46.462251][ T4395] chnl_net:caif_netlink_parms(): no params data found [ 46.488188][ T4457] loop1: detected capacity change from 0 to 1024 [ 46.499406][ T4457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.506169][ T4457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.533076][ T4457] ext4: Unknown parameter 'nojournal' [ 46.559563][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.566889][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.584083][ T4395] bridge_slave_0: entered allmulticast mode [ 46.591163][ T4395] bridge_slave_0: entered promiscuous mode [ 46.600852][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.607929][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.615565][ T4395] bridge_slave_1: entered allmulticast mode [ 46.622026][ T4395] bridge_slave_1: entered promiscuous mode [ 46.633418][ T4469] loop2: detected capacity change from 0 to 8192 [ 46.651570][ T4395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.670560][ T4469] Buffer I/O error on dev loop2, logical block 57847, async page read [ 46.712285][ T4395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.732263][ T4480] loop4: detected capacity change from 0 to 1024 [ 46.764644][ T4395] team0: Port device team_slave_0 added [ 46.770832][ T4480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.792270][ T4395] team0: Port device team_slave_1 added [ 46.809614][ T4480] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.310: Allocating blocks 497-513 which overlap fs metadata [ 46.825024][ T4484] loop2: detected capacity change from 0 to 1024 [ 46.837378][ T4480] EXT4-fs (loop4): pa ffff888106e62150: logic 16, phys. 145, len 23 [ 46.845459][ T4480] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 46.854639][ T4395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.858675][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.862485][ T4395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.900558][ T4395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.902997][ T4480] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 46.911684][ T4395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.923365][ T4480] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.923365][ T4480] [ 46.923382][ T4480] EXT4-fs (loop4): Total free blocks count 0 [ 46.930460][ T4395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.930516][ T4395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.940631][ T4480] EXT4-fs (loop4): Free/Dirty block details [ 46.989799][ T4480] EXT4-fs (loop4): free_blocks=16 [ 46.995188][ T4484] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.311: Allocating blocks 497-513 which overlap fs metadata [ 46.995136][ T4480] EXT4-fs (loop4): dirty_blocks=0 [ 47.014247][ T4480] EXT4-fs (loop4): Block reservation details [ 47.020339][ T4480] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 47.024156][ T4484] EXT4-fs (loop2): pa ffff888106e32380: logic 16, phys. 145, len 23 [ 47.034305][ T4484] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 47.060961][ T4484] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 47.073273][ T4484] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.073273][ T4484] [ 47.083109][ T4484] EXT4-fs (loop2): Total free blocks count 0 [ 47.089219][ T4484] EXT4-fs (loop2): Free/Dirty block details [ 47.095154][ T4484] EXT4-fs (loop2): free_blocks=16 [ 47.100460][ T4484] EXT4-fs (loop2): dirty_blocks=0 [ 47.105481][ T4484] EXT4-fs (loop2): Block reservation details [ 47.111486][ T4484] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 47.119503][ T4395] hsr_slave_0: entered promiscuous mode [ 47.136686][ T4395] hsr_slave_1: entered promiscuous mode [ 47.150168][ T4395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.157753][ T4395] Cannot create hsr debugfs directory [ 47.262386][ T4511] program syz.4.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.277292][ T4502] loop1: detected capacity change from 0 to 2048 [ 47.301864][ T4515] loop0: detected capacity change from 0 to 128 [ 47.328588][ T4515] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 47.337968][ T4515] FAT-fs (loop0): Filesystem has been set read-only [ 47.355036][ T4502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 47.357531][ T4395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.369359][ T4515] bio_check_eod: 7 callbacks suppressed [ 47.369374][ T4515] syz.0.316: attempt to access beyond end of device [ 47.369374][ T4515] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 47.408740][ T4515] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 47.416678][ T4515] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 47.427739][ T4395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.434853][ T4515] syz.0.316: attempt to access beyond end of device [ 47.434853][ T4515] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.442461][ T4395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.457563][ T4523] netlink: 'syz.2.315': attribute type 13 has an invalid length. [ 47.486314][ T4395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.507762][ T4502] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.553069][ T4502] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1038 with error 28 [ 47.565751][ T4502] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.565751][ T4502] [ 47.575591][ T4502] EXT4-fs (loop1): Total free blocks count 0 [ 47.581707][ T4502] EXT4-fs (loop1): Free/Dirty block details [ 47.588036][ T4502] EXT4-fs (loop1): free_blocks=2415919104 [ 47.593920][ T4502] EXT4-fs (loop1): dirty_blocks=1040 [ 47.599445][ T4502] EXT4-fs (loop1): Block reservation details [ 47.599460][ T4502] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 47.642183][ T4538] loop4: detected capacity change from 0 to 512 [ 47.653233][ T4538] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.726572][ T4395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.763568][ T4395] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.775660][ T292] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 47.783530][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.795072][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.832935][ T4395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.843568][ T4395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.871677][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.878941][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.966144][ T4395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.140560][ T4595] netlink: 'syz.4.326': attribute type 3 has an invalid length. [ 48.197781][ T4395] veth0_vlan: entered promiscuous mode [ 48.225036][ T4395] veth1_vlan: entered promiscuous mode [ 48.283279][ T4395] veth0_macvtap: entered promiscuous mode [ 48.295835][ T4395] veth1_macvtap: entered promiscuous mode [ 48.311656][ T4613] netlink: 'syz.2.330': attribute type 27 has an invalid length. [ 48.315719][ T4395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.342581][ T4395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.362390][ T4395] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.371433][ T4395] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.380189][ T4395] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.389250][ T4395] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.431956][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 48.431971][ T29] audit: type=1400 audit(1750386862.524:1156): avc: denied { mount } for pid=4395 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.511174][ T4634] loop0: detected capacity change from 0 to 128 [ 48.536129][ T4634] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 48.544120][ T4634] FAT-fs (loop0): Filesystem has been set read-only [ 48.559764][ T29] audit: type=1400 audit(1750386862.524:1157): avc: denied { mounton } for pid=4395 comm="syz-executor" path="/root/syzkaller.KDoeLE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.589043][ T4634] syz.0.333: attempt to access beyond end of device [ 48.589043][ T4634] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 48.612139][ T4634] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 48.621442][ T4634] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 48.636171][ T4634] syz.0.333: attempt to access beyond end of device [ 48.636171][ T4634] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.739520][ T29] audit: type=1400 audit(1750386862.824:1158): avc: denied { create } for pid=4652 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.759954][ T29] audit: type=1400 audit(1750386862.824:1159): avc: denied { write } for pid=4652 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.186393][ T4665] loop2: detected capacity change from 0 to 8192 [ 49.283984][ T4665] +}[@: attempt to access beyond end of device [ 49.283984][ T4665] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 49.296998][ T4665] Buffer I/O error on dev loop2, logical block 57847, async page read [ 49.594450][ T4677] loop2: detected capacity change from 0 to 512 [ 49.666135][ T4677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.713512][ T4677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.740880][ T4677] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.897278][ T29] audit: type=1326 audit(1750386863.984:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf346e929 code=0x7ffc0000 [ 49.920777][ T29] audit: type=1326 audit(1750386863.984:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1bf346e929 code=0x7ffc0000 [ 49.945815][ T29] audit: type=1326 audit(1750386863.984:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf346e929 code=0x7ffc0000 [ 49.969174][ T29] audit: type=1326 audit(1750386863.984:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bf346e929 code=0x7ffc0000 [ 49.992590][ T29] audit: type=1326 audit(1750386863.984:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf346e929 code=0x7ffc0000 [ 50.027124][ T4677] 9pnet_fd: Insufficient options for proto=fd [ 50.104333][ T4698] loop5: detected capacity change from 0 to 512 [ 50.128329][ T4698] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 50.208768][ T4704] FAULT_INJECTION: forcing a failure. [ 50.208768][ T4704] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.222203][ T4704] CPU: 0 UID: 0 PID: 4704 Comm: syz.4.348 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 50.222262][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.222278][ T4704] Call Trace: [ 50.222286][ T4704] [ 50.222294][ T4704] __dump_stack+0x1d/0x30 [ 50.222318][ T4704] dump_stack_lvl+0xe8/0x140 [ 50.222333][ T4704] dump_stack+0x15/0x1b [ 50.222347][ T4704] should_fail_ex+0x265/0x280 [ 50.222418][ T4704] should_fail+0xb/0x20 [ 50.222487][ T4704] should_fail_usercopy+0x1a/0x20 [ 50.222590][ T4704] _copy_to_user+0x20/0xa0 [ 50.222608][ T4704] simple_read_from_buffer+0xb5/0x130 [ 50.222638][ T4704] proc_fail_nth_read+0x100/0x140 [ 50.222694][ T4704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.222792][ T4704] vfs_read+0x1a0/0x6f0 [ 50.222817][ T4704] ? __rcu_read_unlock+0x4f/0x70 [ 50.222835][ T4704] ? __fget_files+0x184/0x1c0 [ 50.222853][ T4704] ksys_read+0xda/0x1a0 [ 50.222949][ T4704] __x64_sys_read+0x40/0x50 [ 50.222976][ T4704] x64_sys_call+0x2d77/0x2fb0 [ 50.223026][ T4704] do_syscall_64+0xd2/0x200 [ 50.223044][ T4704] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.223191][ T4704] ? clear_bhb_loop+0x40/0x90 [ 50.223214][ T4704] ? clear_bhb_loop+0x40/0x90 [ 50.223312][ T4704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.223334][ T4704] RIP: 0033:0x7f724614d33c [ 50.223353][ T4704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.223369][ T4704] RSP: 002b:00007f7244796030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.223385][ T4704] RAX: ffffffffffffffda RBX: 00007f7246376080 RCX: 00007f724614d33c [ 50.223395][ T4704] RDX: 000000000000000f RSI: 00007f72447960a0 RDI: 0000000000000005 [ 50.223405][ T4704] RBP: 00007f7244796090 R08: 0000000000000000 R09: 0000000000000000 [ 50.223490][ T4704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.223500][ T4704] R13: 0000000000000001 R14: 00007f7246376080 R15: 00007ffde153f1f8 [ 50.223521][ T4704] [ 50.356734][ T29] audit: type=1326 audit(1750386864.114:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1bf346e929 code=0x7ffc0000 [ 50.551699][ T4722] program syz.0.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.562468][ T4685] Invalid logical block size (2) [ 50.605900][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.676314][ T4729] netlink: 'syz.1.356': attribute type 3 has an invalid length. [ 50.677962][ T4735] loop2: detected capacity change from 0 to 512 [ 50.692041][ T4735] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 50.703716][ T4736] loop0: detected capacity change from 0 to 512 [ 50.725898][ T4736] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.760248][ T4736] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.355: corrupted xattr entries [ 50.786213][ T4736] EXT4-fs (loop0): Remounting filesystem read-only [ 50.793979][ T4736] EXT4-fs (loop0): 1 truncate cleaned up [ 50.800983][ T4736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.852580][ T4730] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 50.865780][ T4730] IPVS: Error connecting to the multicast addr [ 51.201113][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.327858][ T4756] loop4: detected capacity change from 0 to 2048 [ 51.390752][ T4756] loop4: p1 < > p4 [ 51.408255][ T4756] loop4: p4 size 8388608 extends beyond EOD, truncated [ 51.614736][ T2998] loop4: p1 < > p4 [ 51.635152][ T2998] loop4: p4 size 8388608 extends beyond EOD, truncated [ 51.805571][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 51.821909][ T4765] loop4: detected capacity change from 0 to 512 [ 51.839527][ T4406] udevd[4406]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 51.851100][ T4765] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 51.984286][ T4771] program syz.0.366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.272287][ T4787] sd 0:0:1:0: device reset [ 52.292705][ T4787] FAULT_INJECTION: forcing a failure. [ 52.292705][ T4787] name failslab, interval 1, probability 0, space 0, times 1 [ 52.305752][ T4787] CPU: 0 UID: 0 PID: 4787 Comm: syz.1.372 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 52.305777][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.305787][ T4787] Call Trace: [ 52.305793][ T4787] [ 52.305836][ T4787] __dump_stack+0x1d/0x30 [ 52.305855][ T4787] dump_stack_lvl+0xe8/0x140 [ 52.305888][ T4787] dump_stack+0x15/0x1b [ 52.305912][ T4787] should_fail_ex+0x265/0x280 [ 52.306003][ T4787] should_failslab+0x8c/0xb0 [ 52.306028][ T4787] kmem_cache_alloc_node_noprof+0x57/0x320 [ 52.306052][ T4787] ? __alloc_skb+0x101/0x320 [ 52.306145][ T4787] __alloc_skb+0x101/0x320 [ 52.306181][ T4787] ? audit_log_start+0x365/0x6c0 [ 52.306207][ T4787] audit_log_start+0x380/0x6c0 [ 52.306275][ T4787] ? scsi_ioctl+0x5fd/0x14d0 [ 52.306300][ T4787] audit_seccomp+0x48/0x100 [ 52.306325][ T4787] ? __seccomp_filter+0x68c/0x10d0 [ 52.306386][ T4787] __seccomp_filter+0x69d/0x10d0 [ 52.306408][ T4787] ? do_vfs_ioctl+0x9df/0x11d0 [ 52.306438][ T4787] ? sg_ioctl+0x12fb/0x1360 [ 52.306468][ T4787] __secure_computing+0x82/0x150 [ 52.306545][ T4787] syscall_trace_enter+0xcf/0x1e0 [ 52.306571][ T4787] do_syscall_64+0xac/0x200 [ 52.306591][ T4787] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.306615][ T4787] ? clear_bhb_loop+0x40/0x90 [ 52.306632][ T4787] ? clear_bhb_loop+0x40/0x90 [ 52.306706][ T4787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.306726][ T4787] RIP: 0033:0x7f8b7380d33c [ 52.306739][ T4787] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.306754][ T4787] RSP: 002b:00007f8b71e77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.306804][ T4787] RAX: ffffffffffffffda RBX: 00007f8b73a35fa0 RCX: 00007f8b7380d33c [ 52.306818][ T4787] RDX: 000000000000000f RSI: 00007f8b71e770a0 RDI: 0000000000000006 [ 52.306828][ T4787] RBP: 00007f8b71e77090 R08: 0000000000000000 R09: 0000000000000000 [ 52.306838][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.306960][ T4787] R13: 0000000000000000 R14: 00007f8b73a35fa0 R15: 00007ffcb7e47cb8 [ 52.306974][ T4787] [ 52.566110][ T4792] loop2: detected capacity change from 0 to 1024 [ 52.576922][ T4789] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 52.584667][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.592790][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.592975][ T4795] loop1: detected capacity change from 0 to 1024 [ 52.600741][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.608372][ T4795] EXT4-fs: Ignoring removed orlov option [ 52.616955][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.630712][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.638345][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.646081][ T3388] hid-generic 0000:0000:0000.0001: item fetching failed at offset 8/43 [ 52.656641][ T3388] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 52.656836][ T4795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.713552][ T4802] loop4: detected capacity change from 0 to 512 [ 52.724190][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.738909][ T4802] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 52.776756][ T4808] program syz.1.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.812239][ T4812] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.818114][ T4814] loop1: detected capacity change from 0 to 256 [ 52.840710][ T4814] Cannot find del_set index 3 as target [ 52.849489][ T4814] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 52.925386][ T4825] FAULT_INJECTION: forcing a failure. [ 52.925386][ T4825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.939542][ T4825] CPU: 1 UID: 0 PID: 4825 Comm: syz.4.385 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 52.939601][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.939613][ T4825] Call Trace: [ 52.939620][ T4825] [ 52.939627][ T4825] __dump_stack+0x1d/0x30 [ 52.939648][ T4825] dump_stack_lvl+0xe8/0x140 [ 52.939667][ T4825] dump_stack+0x15/0x1b [ 52.939687][ T4825] should_fail_ex+0x265/0x280 [ 52.939758][ T4825] should_fail+0xb/0x20 [ 52.939772][ T4825] should_fail_usercopy+0x1a/0x20 [ 52.939868][ T4825] copy_folio_from_iter_atomic+0x278/0x1170 [ 52.939883][ T4825] ? shmem_write_begin+0xa8/0x190 [ 52.939901][ T4825] ? shmem_write_begin+0xe1/0x190 [ 52.939918][ T4825] generic_perform_write+0x2c2/0x490 [ 52.940009][ T4825] shmem_file_write_iter+0xc5/0xf0 [ 52.940048][ T4825] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 52.940068][ T4825] vfs_write+0x4a0/0x8e0 [ 52.940088][ T4825] ksys_write+0xda/0x1a0 [ 52.940170][ T4825] __x64_sys_write+0x40/0x50 [ 52.940180][ T4825] x64_sys_call+0x2cdd/0x2fb0 [ 52.940191][ T4825] do_syscall_64+0xd2/0x200 [ 52.940202][ T4825] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.940216][ T4825] ? clear_bhb_loop+0x40/0x90 [ 52.940250][ T4825] ? clear_bhb_loop+0x40/0x90 [ 52.940262][ T4825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.940274][ T4825] RIP: 0033:0x7f724614e929 [ 52.940283][ T4825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.940293][ T4825] RSP: 002b:00007f72447b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.940368][ T4825] RAX: ffffffffffffffda RBX: 00007f7246375fa0 RCX: 00007f724614e929 [ 52.940375][ T4825] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000007 [ 52.940382][ T4825] RBP: 00007f72447b7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.940451][ T4825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.940458][ T4825] R13: 0000000000000000 R14: 00007f7246375fa0 R15: 00007ffde153f1f8 [ 52.940544][ T4825] [ 53.285934][ T4831] loop4: detected capacity change from 0 to 512 [ 53.299702][ T4831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.404630][ T4831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.446083][ T4831] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.477924][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 53.477939][ T29] audit: type=1400 audit(1750386867.564:1235): avc: denied { create } for pid=4838 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.521713][ T4831] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.387: failed to insert inode 16: doubly allocated? [ 53.537268][ T29] audit: type=1400 audit(1750386867.614:1236): avc: denied { create } for pid=4830 comm="syz.4.387" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.620891][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.693217][ T29] audit: type=1400 audit(1750386867.784:1237): avc: denied { write } for pid=4838 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.813999][ T4847] loop5: detected capacity change from 0 to 512 [ 53.835906][ T4847] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.021665][ T4852] loop5: detected capacity change from 0 to 1024 [ 54.029602][ T4852] EXT4-fs: Ignoring removed nobh option [ 54.035305][ T4852] EXT4-fs: Ignoring removed bh option [ 54.051168][ T4852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.067478][ T29] audit: type=1400 audit(1750386868.154:1238): avc: denied { read } for pid=4851 comm="syz.5.394" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.092006][ T29] audit: type=1400 audit(1750386868.154:1239): avc: denied { open } for pid=4851 comm="syz.5.394" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.135214][ T4857] loop4: detected capacity change from 0 to 512 [ 54.192225][ T4857] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.229913][ T4862] __nla_validate_parse: 10 callbacks suppressed [ 54.229929][ T4862] netlink: 240 bytes leftover after parsing attributes in process `syz.0.395'. [ 54.255751][ T4857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.281244][ T29] audit: type=1400 audit(1750386868.204:1240): avc: denied { connect } for pid=4851 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.302559][ T29] audit: type=1400 audit(1750386868.204:1241): avc: denied { write } for pid=4851 comm="syz.5.394" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.326227][ T29] audit: type=1400 audit(1750386868.264:1242): avc: denied { cpu } for pid=4858 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.346577][ T29] audit: type=1400 audit(1750386868.264:1243): avc: denied { read } for pid=4858 comm="syz.0.395" path="socket:[9771]" dev="sockfs" ino=9771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.370953][ T29] audit: type=1400 audit(1750386868.344:1244): avc: denied { write } for pid=4858 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.400365][ T4857] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.431070][ T4857] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.390: failed to insert inode 16: doubly allocated? [ 54.459586][ T4395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.496480][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.544870][ T4873] loop5: detected capacity change from 0 to 512 [ 54.559379][ T4873] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.574926][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 54.579314][ T4873] EXT4-fs (loop5): 1 truncate cleaned up [ 54.583804][ T4874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 54.600442][ T4873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.616412][ T4880] FAULT_INJECTION: forcing a failure. [ 54.616412][ T4880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.629983][ T4880] CPU: 1 UID: 0 PID: 4880 Comm: syz.1.401 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 54.630053][ T4880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.630064][ T4880] Call Trace: [ 54.630070][ T4880] [ 54.630077][ T4880] __dump_stack+0x1d/0x30 [ 54.630169][ T4880] dump_stack_lvl+0xe8/0x140 [ 54.630186][ T4880] dump_stack+0x15/0x1b [ 54.630200][ T4880] should_fail_ex+0x265/0x280 [ 54.630275][ T4880] should_fail+0xb/0x20 [ 54.630301][ T4880] should_fail_usercopy+0x1a/0x20 [ 54.630335][ T4880] _copy_from_iter+0xcf/0xe40 [ 54.630420][ T4880] ? __build_skb_around+0x1a0/0x200 [ 54.630449][ T4880] ? __build_skb+0x59/0x70 [ 54.630471][ T4880] ? is_vmalloc_addr+0x37/0x90 [ 54.630494][ T4880] netlink_sendmsg+0x471/0x6b0 [ 54.630580][ T4880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.630645][ T4880] __sock_sendmsg+0x145/0x180 [ 54.630670][ T4880] sock_write_iter+0x165/0x1b0 [ 54.630755][ T4880] ? __pfx_sock_write_iter+0x10/0x10 [ 54.630852][ T4880] vfs_write+0x4a0/0x8e0 [ 54.630901][ T4880] ksys_write+0xda/0x1a0 [ 54.630920][ T4880] __x64_sys_write+0x40/0x50 [ 54.630938][ T4880] x64_sys_call+0x2cdd/0x2fb0 [ 54.630982][ T4880] do_syscall_64+0xd2/0x200 [ 54.630997][ T4880] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.631027][ T4880] ? clear_bhb_loop+0x40/0x90 [ 54.631053][ T4880] ? clear_bhb_loop+0x40/0x90 [ 54.631072][ T4880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.631142][ T4880] RIP: 0033:0x7f8b7380e929 [ 54.631158][ T4880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.631239][ T4880] RSP: 002b:00007f8b71e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.631256][ T4880] RAX: ffffffffffffffda RBX: 00007f8b73a35fa0 RCX: 00007f8b7380e929 [ 54.631267][ T4880] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000006 [ 54.631356][ T4880] RBP: 00007f8b71e77090 R08: 0000000000000000 R09: 0000000000000000 [ 54.631365][ T4880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.631375][ T4880] R13: 0000000000000000 R14: 00007f8b73a35fa0 R15: 00007ffcb7e47cb8 [ 54.631391][ T4880] [ 54.636659][ T4874] wireguard0: entered promiscuous mode [ 54.662480][ T4884] program syz.1.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.782556][ T4886] loop1: detected capacity change from 0 to 512 [ 54.786362][ T4874] wireguard0: entered allmulticast mode [ 54.888735][ T4886] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.980691][ T4901] loop1: detected capacity change from 0 to 1024 [ 54.984268][ T4395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.016221][ T4899] loop0: detected capacity change from 0 to 8192 [ 55.023890][ T4901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.041696][ T4905] loop5: detected capacity change from 0 to 1024 [ 55.051055][ T4905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.069621][ T4905] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 55.087196][ T4901] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 55.107766][ T4905] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 55.112452][ T4901] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 55.120324][ T4905] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.120324][ T4905] [ 55.132663][ T4901] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.132663][ T4901] [ 55.132684][ T4901] EXT4-fs (loop1): Total free blocks count 0 [ 55.142324][ T4905] EXT4-fs (loop5): Total free blocks count 0 [ 55.151962][ T4901] EXT4-fs (loop1): Free/Dirty block details [ 55.152033][ T4901] EXT4-fs (loop1): free_blocks=68451041280 [ 55.158027][ T4905] EXT4-fs (loop5): Free/Dirty block details [ 55.158039][ T4905] EXT4-fs (loop5): free_blocks=68451041280 [ 55.164114][ T4901] EXT4-fs (loop1): dirty_blocks=32 [ 55.170017][ T4905] EXT4-fs (loop5): dirty_blocks=32 [ 55.175792][ T4901] EXT4-fs (loop1): Block reservation details [ 55.181788][ T4905] EXT4-fs (loop5): Block reservation details [ 55.181805][ T4905] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 55.188111][ T4901] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 55.202363][ T4910] FAULT_INJECTION: forcing a failure. [ 55.202363][ T4910] name failslab, interval 1, probability 0, space 0, times 0 [ 55.235391][ T4910] CPU: 1 UID: 0 PID: 4910 Comm: syz.5.409 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 55.235420][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.235433][ T4910] Call Trace: [ 55.235440][ T4910] [ 55.235457][ T4910] __dump_stack+0x1d/0x30 [ 55.235478][ T4910] dump_stack_lvl+0xe8/0x140 [ 55.235497][ T4910] dump_stack+0x15/0x1b [ 55.235592][ T4910] should_fail_ex+0x265/0x280 [ 55.235645][ T4910] should_failslab+0x8c/0xb0 [ 55.235743][ T4910] kmem_cache_alloc_noprof+0x50/0x310 [ 55.235770][ T4910] ? ext4_init_io_end+0x31/0xb0 [ 55.235803][ T4910] ext4_init_io_end+0x31/0xb0 [ 55.235835][ T4910] ext4_do_writepages+0x6ca/0x21c0 [ 55.235861][ T4910] ? should_fail_ex+0x30/0x280 [ 55.235895][ T4910] ? xas_load+0x413/0x430 [ 55.235988][ T4910] ? xa_load+0xb1/0xe0 [ 55.236006][ T4910] ? __account_obj_stock+0x211/0x350 [ 55.236027][ T4910] ? xas_load+0x413/0x430 [ 55.236056][ T4910] ? __rcu_read_unlock+0x4f/0x70 [ 55.236097][ T4910] ? filemap_get_entry+0x34b/0x390 [ 55.236128][ T4910] ? folio_mark_accessed+0x240/0x3d0 [ 55.236185][ T4910] ? __filemap_get_folio+0x47f/0x6b0 [ 55.236216][ T4910] ext4_writepages+0x176/0x300 [ 55.236378][ T4910] ? __pfx_ext4_writepages+0x10/0x10 [ 55.236404][ T4910] do_writepages+0x1c6/0x310 [ 55.236426][ T4910] ? ext4_get_group_desc+0x16b/0x190 [ 55.236448][ T4910] ? from_kprojid+0x159/0x380 [ 55.236480][ T4910] ? _raw_spin_unlock+0x26/0x50 [ 55.236503][ T4910] ? wbc_attach_and_unlock_inode+0x91/0x2b0 [ 55.236527][ T4910] filemap_write_and_wait_range+0x144/0x340 [ 55.236557][ T4910] ? __brelse+0x32/0x60 [ 55.236668][ T4910] ext4_insert_range+0x1c1/0x650 [ 55.236700][ T4910] ext4_fallocate+0x43e/0x660 [ 55.236730][ T4910] vfs_fallocate+0x413/0x450 [ 55.236786][ T4910] __x64_sys_fallocate+0x7a/0xd0 [ 55.236808][ T4910] x64_sys_call+0x2b88/0x2fb0 [ 55.236879][ T4910] do_syscall_64+0xd2/0x200 [ 55.236897][ T4910] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.236923][ T4910] ? clear_bhb_loop+0x40/0x90 [ 55.236944][ T4910] ? clear_bhb_loop+0x40/0x90 [ 55.237038][ T4910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.237060][ T4910] RIP: 0033:0x7f1d6b93e929 [ 55.237075][ T4910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.237092][ T4910] RSP: 002b:00007f1d69f86038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 55.237112][ T4910] RAX: ffffffffffffffda RBX: 00007f1d6bb66080 RCX: 00007f1d6b93e929 [ 55.237226][ T4910] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000005 [ 55.237265][ T4910] RBP: 00007f1d69f86090 R08: 0000000000000000 R09: 0000000000000000 [ 55.237277][ T4910] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 55.237289][ T4910] R13: 0000000000000000 R14: 00007f1d6bb66080 R15: 00007ffdc8946a48 [ 55.237307][ T4910] [ 55.238042][ T4911] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.295850][ T4899] +}[@: attempt to access beyond end of device [ 55.295850][ T4899] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 55.328507][ T4913] syz.2.411 uses obsolete (PF_INET,SOCK_PACKET) [ 55.343504][ T4910] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.348690][ T4899] Buffer I/O error on dev loop0, logical block 57847, async page read [ 55.565740][ T4916] netlink: 'syz.1.412': attribute type 3 has an invalid length. [ 55.638642][ T4919] netlink: 'syz.5.413': attribute type 3 has an invalid length. [ 55.668493][ T4921] program syz.5.414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.734991][ T4925] loop0: detected capacity change from 0 to 512 [ 55.746718][ T4925] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 55.803848][ T4927] SELinux: failed to load policy [ 55.921159][ T4940] loop0: detected capacity change from 0 to 8192 [ 55.971690][ T4940] loop0: p1 p2 < > p3 p4 < p5 > [ 55.976684][ T4940] loop0: partition table partially beyond EOD, truncated [ 55.988630][ T4940] loop0: p1 size 100663296 extends beyond EOD, truncated [ 55.997214][ T4940] loop0: p2 start 591104 is beyond EOD, truncated [ 56.004237][ T4940] loop0: p3 start 33572980 is beyond EOD, truncated [ 56.012075][ T4940] loop0: p5 size 100663296 extends beyond EOD, truncated [ 56.030895][ T2998] loop0: p1 p2 < > p3 p4 < p5 > [ 56.035866][ T2998] loop0: partition table partially beyond EOD, truncated [ 56.043432][ T2998] loop0: p1 size 100663296 extends beyond EOD, truncated [ 56.051368][ T2998] loop0: p2 start 591104 is beyond EOD, truncated [ 56.057925][ T2998] loop0: p3 start 33572980 is beyond EOD, truncated [ 56.065668][ T2998] loop0: p5 size 100663296 extends beyond EOD, truncated [ 56.087006][ T4945] loop5: detected capacity change from 0 to 256 [ 56.100701][ T4945] vfat: Unknown parameter 'n' [ 56.110169][ T4947] program syz.0.425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.137032][ T4406] udevd[4406]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 56.138415][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 56.148857][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 56.182576][ T4406] udevd[4406]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 56.182871][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 56.202423][ T4950] loop0: detected capacity change from 0 to 128 [ 56.211835][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 56.364961][ T4953] netlink: 324 bytes leftover after parsing attributes in process `syz.1.427'. [ 56.462568][ T4956] loop1: detected capacity change from 0 to 8192 [ 56.494188][ T4956] +}[@: attempt to access beyond end of device [ 56.494188][ T4956] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 56.507212][ T4956] Buffer I/O error on dev loop1, logical block 57847, async page read [ 56.552422][ T4958] netlink: 14 bytes leftover after parsing attributes in process `syz.1.429'. [ 56.683536][ T4961] netlink: 14 bytes leftover after parsing attributes in process `syz.2.430'. [ 56.828020][ T41] kworker/u8:2: attempt to access beyond end of device [ 56.828020][ T41] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 56.850867][ T41] kworker/u8:2: attempt to access beyond end of device [ 56.850867][ T41] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 56.864660][ T41] kworker/u8:2: attempt to access beyond end of device [ 56.864660][ T41] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 56.893024][ T41] kworker/u8:2: attempt to access beyond end of device [ 56.893024][ T41] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 56.907080][ T41] kworker/u8:2: attempt to access beyond end of device [ 56.907080][ T41] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 56.949968][ T41] kworker/u8:2: attempt to access beyond end of device [ 56.949968][ T41] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 56.974061][ T41] kworker/u8:2: attempt to access beyond end of device [ 56.974061][ T41] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 56.993348][ T41] kworker/u8:2: attempt to access beyond end of device [ 56.993348][ T41] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 57.085280][ T4976] loop1: detected capacity change from 0 to 512 [ 57.145344][ T4981] loop0: detected capacity change from 0 to 512 [ 57.154224][ T4981] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 57.203311][ T4984] FAULT_INJECTION: forcing a failure. [ 57.203311][ T4984] name failslab, interval 1, probability 0, space 0, times 0 [ 57.216210][ T4984] CPU: 0 UID: 0 PID: 4984 Comm: syz.0.438 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 57.216238][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.216251][ T4984] Call Trace: [ 57.216331][ T4984] [ 57.216338][ T4984] __dump_stack+0x1d/0x30 [ 57.216357][ T4984] dump_stack_lvl+0xe8/0x140 [ 57.216413][ T4984] dump_stack+0x15/0x1b [ 57.216430][ T4984] should_fail_ex+0x265/0x280 [ 57.216534][ T4984] ? io_ring_ctx_alloc+0x38/0x6a0 [ 57.216561][ T4984] should_failslab+0x8c/0xb0 [ 57.216583][ T4984] __kmalloc_cache_noprof+0x4c/0x320 [ 57.216698][ T4984] ? avc_has_perm_noaudit+0x1b1/0x200 [ 57.216787][ T4984] io_ring_ctx_alloc+0x38/0x6a0 [ 57.216807][ T4984] ? avc_has_perm+0xd3/0x150 [ 57.216827][ T4984] ? io_uring_fill_params+0x270/0x300 [ 57.216877][ T4984] io_uring_create+0x10f/0x610 [ 57.216905][ T4984] __se_sys_io_uring_setup+0x1f7/0x210 [ 57.216964][ T4984] __x64_sys_io_uring_setup+0x31/0x40 [ 57.217052][ T4984] x64_sys_call+0x184b/0x2fb0 [ 57.217074][ T4984] do_syscall_64+0xd2/0x200 [ 57.217092][ T4984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.217119][ T4984] ? clear_bhb_loop+0x40/0x90 [ 57.217193][ T4984] ? clear_bhb_loop+0x40/0x90 [ 57.217215][ T4984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.217279][ T4984] RIP: 0033:0x7ff41c0be929 [ 57.217295][ T4984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.217312][ T4984] RSP: 002b:00007ff41a726fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 57.217331][ T4984] RAX: ffffffffffffffda RBX: 00007ff41c2e5fa0 RCX: 00007ff41c0be929 [ 57.217345][ T4984] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 57.217358][ T4984] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 57.217369][ T4984] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 57.217379][ T4984] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 57.217395][ T4984] [ 57.317340][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 57.406389][ T4987] loop0: detected capacity change from 0 to 8192 [ 57.467025][ T4989] loop2: detected capacity change from 0 to 512 [ 57.475403][ T4989] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.497732][ T4989] EXT4-fs (loop2): 1 truncate cleaned up [ 57.508059][ T4987] Buffer I/O error on dev loop0, logical block 57847, async page read [ 57.518934][ T4989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.533441][ T4989] FAULT_INJECTION: forcing a failure. [ 57.533441][ T4989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.546634][ T4989] CPU: 1 UID: 0 PID: 4989 Comm: syz.2.440 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 57.546664][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.546731][ T4989] Call Trace: [ 57.546737][ T4989] [ 57.546745][ T4989] __dump_stack+0x1d/0x30 [ 57.546836][ T4989] dump_stack_lvl+0xe8/0x140 [ 57.546898][ T4989] dump_stack+0x15/0x1b [ 57.546914][ T4989] should_fail_ex+0x265/0x280 [ 57.546944][ T4989] should_fail+0xb/0x20 [ 57.546998][ T4989] should_fail_usercopy+0x1a/0x20 [ 57.547065][ T4989] _copy_from_user+0x1c/0xb0 [ 57.547086][ T4989] set_selection_user+0x4a/0xe0 [ 57.547118][ T4989] tioclinux+0x347/0x460 [ 57.547263][ T4989] vt_ioctl+0x75f/0x1880 [ 57.547298][ T4989] ? tty_jobctrl_ioctl+0x29e/0x810 [ 57.547319][ T4989] tty_ioctl+0x7db/0xb80 [ 57.547353][ T4989] ? __pfx_tty_ioctl+0x10/0x10 [ 57.547454][ T4989] __se_sys_ioctl+0xce/0x140 [ 57.547483][ T4989] __x64_sys_ioctl+0x43/0x50 [ 57.547511][ T4989] x64_sys_call+0x19a8/0x2fb0 [ 57.547531][ T4989] do_syscall_64+0xd2/0x200 [ 57.547596][ T4989] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.547649][ T4989] ? clear_bhb_loop+0x40/0x90 [ 57.547668][ T4989] ? clear_bhb_loop+0x40/0x90 [ 57.547686][ T4989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.547758][ T4989] RIP: 0033:0x7f1bf346e929 [ 57.547772][ T4989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.547786][ T4989] RSP: 002b:00007f1bf1ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.547804][ T4989] RAX: ffffffffffffffda RBX: 00007f1bf3695fa0 RCX: 00007f1bf346e929 [ 57.547815][ T4989] RDX: 00002000000000c0 RSI: 000000000000541c RDI: 000000000000000b [ 57.547827][ T4989] RBP: 00007f1bf1ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.547849][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.547876][ T4989] R13: 0000000000000000 R14: 00007f1bf3695fa0 R15: 00007ffee04897b8 [ 57.547892][ T4989] [ 57.712716][ T4993] loop0: detected capacity change from 0 to 512 [ 57.713343][ T4993] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.717310][ T4993] EXT4-fs (loop0): 1 truncate cleaned up [ 57.717686][ T4993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.796830][ T4996] loop5: detected capacity change from 0 to 128 [ 57.799861][ T4996] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.799881][ T4996] FAT-fs (loop5): Filesystem has been set read-only [ 57.799927][ T4996] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.799941][ T4996] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 57.839235][ T4999] loop5: detected capacity change from 0 to 512 [ 57.853335][ T4999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.857679][ T4999] EXT4-fs (loop5): 1 truncate cleaned up [ 57.858173][ T4999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.061552][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.123457][ T4395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.133455][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.156054][ T5007] bond1: entered promiscuous mode [ 58.161277][ T5007] bond1: entered allmulticast mode [ 58.170719][ T5007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.215146][ T5007] bond1 (unregistering): Released all slaves [ 58.343494][ T5021] loop0: detected capacity change from 0 to 8192 [ 58.376808][ T5021] Buffer I/O error on dev loop0, logical block 57847, async page read [ 58.424275][ T5023] SELinux: failed to load policy [ 58.480844][ T4979] syz.1.437 (4979) used greatest stack depth: 6824 bytes left [ 58.511259][ T5032] program syz.0.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.556753][ T5037] loop0: detected capacity change from 0 to 512 [ 58.563872][ T5037] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 58.585737][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 58.585751][ T29] audit: type=1400 audit(1750386872.674:1289): avc: denied { execute } for pid=5036 comm="syz.0.459" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.637576][ T29] audit: type=1400 audit(1750386872.704:1290): avc: denied { execute_no_trans } for pid=5036 comm="syz.0.459" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.678217][ T29] audit: type=1326 audit(1750386872.724:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41c0be929 code=0x7ffc0000 [ 58.702746][ T29] audit: type=1326 audit(1750386872.724:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41c0be929 code=0x7ffc0000 [ 58.708317][ T5045] FAULT_INJECTION: forcing a failure. [ 58.708317][ T5045] name failslab, interval 1, probability 0, space 0, times 0 [ 58.729439][ T29] audit: type=1326 audit(1750386872.724:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff41c0be929 code=0x7ffc0000 [ 58.744866][ T5045] CPU: 0 UID: 0 PID: 5045 Comm: syz.0.462 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 58.744920][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.744929][ T5045] Call Trace: [ 58.744937][ T5045] [ 58.744944][ T5045] __dump_stack+0x1d/0x30 [ 58.744967][ T5045] dump_stack_lvl+0xe8/0x140 [ 58.744986][ T5045] dump_stack+0x15/0x1b [ 58.745003][ T5045] should_fail_ex+0x265/0x280 [ 58.745064][ T5045] ? alloc_netdev_mqs+0x829/0xab0 [ 58.745095][ T5045] should_failslab+0x8c/0xb0 [ 58.745118][ T5045] __kmalloc_cache_noprof+0x4c/0x320 [ 58.745168][ T5045] alloc_netdev_mqs+0x829/0xab0 [ 58.745199][ T5045] rtnl_create_link+0x239/0x710 [ 58.745299][ T5045] rtnl_newlink_create+0x14c/0x620 [ 58.745325][ T5045] ? security_capable+0x83/0x90 [ 58.745351][ T5045] ? netlink_ns_capable+0x86/0xa0 [ 58.745380][ T5045] rtnl_newlink+0xf29/0x12d0 [ 58.745479][ T5045] ? css_rstat_updated+0xcd/0x5b0 [ 58.745508][ T5045] ? __rcu_read_unlock+0x4f/0x70 [ 58.745559][ T5045] ? __account_obj_stock+0x211/0x350 [ 58.745581][ T5045] ? __rcu_read_unlock+0x4f/0x70 [ 58.745601][ T5045] ? avc_has_perm_noaudit+0x1b1/0x200 [ 58.745649][ T5045] ? selinux_capable+0x1f9/0x270 [ 58.745690][ T5045] ? security_capable+0x83/0x90 [ 58.745761][ T5045] ? ns_capable+0x7d/0xb0 [ 58.745849][ T5045] ? __pfx_rtnl_newlink+0x10/0x10 [ 58.745869][ T5045] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 58.745950][ T5045] ? avc_has_perm_noaudit+0x1b1/0x200 [ 58.745978][ T5045] netlink_rcv_skb+0x123/0x220 [ 58.746009][ T5045] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.746035][ T5045] rtnetlink_rcv+0x1c/0x30 [ 58.746053][ T5045] netlink_unicast+0x5a1/0x670 [ 58.746138][ T5045] netlink_sendmsg+0x58b/0x6b0 [ 58.746158][ T5045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.746306][ T5045] __sock_sendmsg+0x145/0x180 [ 58.746329][ T5045] ____sys_sendmsg+0x31e/0x4e0 [ 58.746363][ T5045] ___sys_sendmsg+0x17b/0x1d0 [ 58.746406][ T5045] __x64_sys_sendmsg+0xd4/0x160 [ 58.746481][ T5045] x64_sys_call+0x2999/0x2fb0 [ 58.746502][ T5045] do_syscall_64+0xd2/0x200 [ 58.746520][ T5045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.746661][ T5045] ? clear_bhb_loop+0x40/0x90 [ 58.746681][ T5045] ? clear_bhb_loop+0x40/0x90 [ 58.746761][ T5045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.746782][ T5045] RIP: 0033:0x7ff41c0be929 [ 58.746798][ T5045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.746815][ T5045] RSP: 002b:00007ff41a727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.746834][ T5045] RAX: ffffffffffffffda RBX: 00007ff41c2e5fa0 RCX: 00007ff41c0be929 [ 58.746847][ T5045] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000011 [ 58.746859][ T5045] RBP: 00007ff41a727090 R08: 0000000000000000 R09: 0000000000000000 [ 58.746870][ T5045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.746882][ T5045] R13: 0000000000000000 R14: 00007ff41c2e5fa0 R15: 00007ffc9ca6e408 [ 58.746899][ T5045] [ 58.823395][ T5051] netlink: 68 bytes leftover after parsing attributes in process `syz.5.463'. [ 58.826013][ T29] audit: type=1326 audit(1750386872.724:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41c0be929 code=0x7ffc0000 [ 58.826040][ T29] audit: type=1326 audit(1750386872.724:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff41c0be929 code=0x7ffc0000 [ 59.133012][ T29] audit: type=1326 audit(1750386872.724:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41c0be929 code=0x7ffc0000 [ 59.156998][ T29] audit: type=1326 audit(1750386872.724:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff41c0be929 code=0x7ffc0000 [ 59.159625][ T5055] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.180530][ T29] audit: type=1326 audit(1750386872.724:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41c0be929 code=0x7ffc0000 [ 59.190346][ T5055] SELinux: failed to load policy [ 59.252428][ T5056] loop0: detected capacity change from 0 to 8192 [ 59.271468][ T5056] Buffer I/O error on dev loop0, logical block 57847, async page read [ 59.309601][ T5060] FAULT_INJECTION: forcing a failure. [ 59.309601][ T5060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.322775][ T5060] CPU: 1 UID: 0 PID: 5060 Comm: syz.1.468 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 59.322802][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.322814][ T5060] Call Trace: [ 59.322820][ T5060] [ 59.322827][ T5060] __dump_stack+0x1d/0x30 [ 59.322850][ T5060] dump_stack_lvl+0xe8/0x140 [ 59.322947][ T5060] dump_stack+0x15/0x1b [ 59.322960][ T5060] should_fail_ex+0x265/0x280 [ 59.322986][ T5060] should_fail+0xb/0x20 [ 59.323047][ T5060] should_fail_usercopy+0x1a/0x20 [ 59.323080][ T5060] _copy_from_user+0x1c/0xb0 [ 59.323098][ T5060] memdup_user+0x5e/0xd0 [ 59.323184][ T5060] strndup_user+0x68/0xb0 [ 59.323205][ T5060] __se_sys_add_key+0x128/0x350 [ 59.323396][ T5060] __x64_sys_add_key+0x67/0x80 [ 59.323420][ T5060] x64_sys_call+0x1d0d/0x2fb0 [ 59.323441][ T5060] do_syscall_64+0xd2/0x200 [ 59.323456][ T5060] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.323615][ T5060] ? clear_bhb_loop+0x40/0x90 [ 59.323633][ T5060] ? clear_bhb_loop+0x40/0x90 [ 59.323651][ T5060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.323676][ T5060] RIP: 0033:0x7f8b7380e929 [ 59.323692][ T5060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.323709][ T5060] RSP: 002b:00007f8b71e77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 59.323729][ T5060] RAX: ffffffffffffffda RBX: 00007f8b73a35fa0 RCX: 00007f8b7380e929 [ 59.323742][ T5060] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000180 [ 59.323775][ T5060] RBP: 00007f8b71e77090 R08: fffffffffffffffb R09: 0000000000000000 [ 59.323788][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.323800][ T5060] R13: 0000000000000000 R14: 00007f8b73a35fa0 R15: 00007ffcb7e47cb8 [ 59.323817][ T5060] [ 59.325983][ T5062] FAULT_INJECTION: forcing a failure. [ 59.325983][ T5062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.406093][ T5066] FAULT_INJECTION: forcing a failure. [ 59.406093][ T5066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.410569][ T5062] CPU: 0 UID: 0 PID: 5062 Comm: syz.2.469 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 59.410595][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.410645][ T5062] Call Trace: [ 59.410652][ T5062] [ 59.410661][ T5062] __dump_stack+0x1d/0x30 [ 59.410683][ T5062] dump_stack_lvl+0xe8/0x140 [ 59.410701][ T5062] dump_stack+0x15/0x1b [ 59.410717][ T5062] should_fail_ex+0x265/0x280 [ 59.410750][ T5062] should_fail+0xb/0x20 [ 59.410907][ T5062] should_fail_usercopy+0x1a/0x20 [ 59.410983][ T5062] _copy_from_iter+0xcf/0xe40 [ 59.411002][ T5062] ? __build_skb_around+0x1a0/0x200 [ 59.411030][ T5062] ? __alloc_skb+0x223/0x320 [ 59.411058][ T5062] pfkey_sendmsg+0x126/0x900 [ 59.411148][ T5062] ? avc_has_perm+0xd3/0x150 [ 59.411176][ T5062] ? selinux_socket_sendmsg+0x175/0x1b0 [ 59.411210][ T5062] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 59.411297][ T5062] __sock_sendmsg+0x145/0x180 [ 59.411319][ T5062] ____sys_sendmsg+0x31e/0x4e0 [ 59.411425][ T5062] ___sys_sendmsg+0x17b/0x1d0 [ 59.411537][ T5062] __x64_sys_sendmsg+0xd4/0x160 [ 59.411572][ T5062] x64_sys_call+0x2999/0x2fb0 [ 59.411629][ T5062] do_syscall_64+0xd2/0x200 [ 59.411646][ T5062] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.411672][ T5062] ? clear_bhb_loop+0x40/0x90 [ 59.411696][ T5062] ? clear_bhb_loop+0x40/0x90 [ 59.411717][ T5062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.411789][ T5062] RIP: 0033:0x7f1bf346e929 [ 59.411804][ T5062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.411821][ T5062] RSP: 002b:00007f1bf1ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.411982][ T5062] RAX: ffffffffffffffda RBX: 00007f1bf3695fa0 RCX: 00007f1bf346e929 [ 59.412071][ T5062] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 59.412125][ T5062] RBP: 00007f1bf1ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.412162][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.412211][ T5062] R13: 0000000000000000 R14: 00007f1bf3695fa0 R15: 00007ffee04897b8 [ 59.412229][ T5062] [ 59.756845][ T5066] CPU: 1 UID: 0 PID: 5066 Comm: syz.4.473 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 59.756872][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.756882][ T5066] Call Trace: [ 59.756888][ T5066] [ 59.756895][ T5066] __dump_stack+0x1d/0x30 [ 59.756914][ T5066] dump_stack_lvl+0xe8/0x140 [ 59.756933][ T5066] dump_stack+0x15/0x1b [ 59.756985][ T5066] should_fail_ex+0x265/0x280 [ 59.757003][ T5066] should_fail+0xb/0x20 [ 59.757017][ T5066] should_fail_usercopy+0x1a/0x20 [ 59.757034][ T5066] _copy_from_user+0x1c/0xb0 [ 59.757093][ T5066] __sys_bpf+0x178/0x790 [ 59.757113][ T5066] __x64_sys_bpf+0x41/0x50 [ 59.757140][ T5066] x64_sys_call+0x2478/0x2fb0 [ 59.757164][ T5066] do_syscall_64+0xd2/0x200 [ 59.757248][ T5066] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.757271][ T5066] ? clear_bhb_loop+0x40/0x90 [ 59.757288][ T5066] ? clear_bhb_loop+0x40/0x90 [ 59.757306][ T5066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.757373][ T5066] RIP: 0033:0x7f724614e929 [ 59.757434][ T5066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.757450][ T5066] RSP: 002b:00007f72447b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.757468][ T5066] RAX: ffffffffffffffda RBX: 00007f7246375fa0 RCX: 00007f724614e929 [ 59.757493][ T5066] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 0000000000000000 [ 59.757505][ T5066] RBP: 00007f72447b7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.757543][ T5066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.757554][ T5066] R13: 0000000000000000 R14: 00007f7246375fa0 R15: 00007ffde153f1f8 [ 59.757572][ T5066] [ 59.807208][ T5068] loop5: detected capacity change from 0 to 512 [ 59.807834][ T5067] loop1: detected capacity change from 0 to 512 [ 59.808039][ T5067] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 59.864053][ T5078] veth0_to_bond: entered promiscuous mode [ 59.864162][ T5078] macvlan2: entered promiscuous mode [ 59.864210][ T5078] macvlan2: entered allmulticast mode [ 59.864221][ T5078] veth0_to_bond: entered allmulticast mode [ 59.914258][ T5083] netlink: 14 bytes leftover after parsing attributes in process `syz.1.480'. [ 59.996856][ T5089] loop2: detected capacity change from 0 to 8192 [ 60.030911][ T5089] Buffer I/O error on dev loop2, logical block 57847, async page read [ 60.254329][ T5105] netlink: 64 bytes leftover after parsing attributes in process `syz.2.487'. [ 60.256173][ T5105] mmap: syz.2.487 (5105) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.341302][ T5114] FAULT_INJECTION: forcing a failure. [ 60.341302][ T5114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.354602][ T5114] CPU: 0 UID: 0 PID: 5114 Comm: syz.0.490 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 60.354674][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.354774][ T5114] Call Trace: [ 60.354780][ T5114] [ 60.354787][ T5114] __dump_stack+0x1d/0x30 [ 60.354806][ T5114] dump_stack_lvl+0xe8/0x140 [ 60.354881][ T5114] dump_stack+0x15/0x1b [ 60.354896][ T5114] should_fail_ex+0x265/0x280 [ 60.354964][ T5114] should_fail+0xb/0x20 [ 60.354997][ T5114] should_fail_usercopy+0x1a/0x20 [ 60.355026][ T5114] copy_to_user_nofault+0x7f/0x120 [ 60.355045][ T5114] bpf_probe_write_user+0x83/0xc0 [ 60.355073][ T5114] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 60.355097][ T5114] bpf_trace_run2+0x104/0x1c0 [ 60.355185][ T5114] ? __rcu_read_unlock+0x4f/0x70 [ 60.355206][ T5114] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 60.355310][ T5114] __bpf_trace_sys_enter+0x10/0x30 [ 60.355328][ T5114] __traceiter_sys_enter+0x4d/0x80 [ 60.355348][ T5114] trace_sys_enter+0x86/0x110 [ 60.355372][ T5114] syscall_trace_enter+0x13e/0x1e0 [ 60.355395][ T5114] do_syscall_64+0xac/0x200 [ 60.355413][ T5114] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.355478][ T5114] ? clear_bhb_loop+0x40/0x90 [ 60.355543][ T5114] ? clear_bhb_loop+0x40/0x90 [ 60.355564][ T5114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.355582][ T5114] RIP: 0033:0x7ff41c0be929 [ 60.355603][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.355618][ T5114] RSP: 002b:00007ff41a727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.355635][ T5114] RAX: ffffffffffffffda RBX: 00007ff41c2e5fa0 RCX: 00007ff41c0be929 [ 60.355648][ T5114] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 60.355661][ T5114] RBP: 00007ff41a727090 R08: 0000000000000000 R09: 0000000000000000 [ 60.355672][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.355738][ T5114] R13: 0000000000000000 R14: 00007ff41c2e5fa0 R15: 00007ffc9ca6e408 [ 60.355825][ T5114] [ 60.616177][ T5126] FAULT_INJECTION: forcing a failure. [ 60.616177][ T5126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.629395][ T5126] CPU: 0 UID: 0 PID: 5126 Comm: syz.1.496 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 60.629423][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.629510][ T5126] Call Trace: [ 60.629516][ T5126] [ 60.629523][ T5126] __dump_stack+0x1d/0x30 [ 60.629611][ T5126] dump_stack_lvl+0xe8/0x140 [ 60.629631][ T5126] dump_stack+0x15/0x1b [ 60.629703][ T5126] should_fail_ex+0x265/0x280 [ 60.629732][ T5126] should_fail+0xb/0x20 [ 60.629768][ T5126] should_fail_usercopy+0x1a/0x20 [ 60.629794][ T5126] _copy_to_user+0x20/0xa0 [ 60.629815][ T5126] simple_read_from_buffer+0xb5/0x130 [ 60.629848][ T5126] proc_fail_nth_read+0x100/0x140 [ 60.629872][ T5126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.629902][ T5126] vfs_read+0x1a0/0x6f0 [ 60.629938][ T5126] ? __rcu_read_unlock+0x4f/0x70 [ 60.629961][ T5126] ? __rcu_read_unlock+0x4f/0x70 [ 60.630029][ T5126] ? __fget_files+0x184/0x1c0 [ 60.630052][ T5126] ksys_read+0xda/0x1a0 [ 60.630105][ T5126] __x64_sys_read+0x40/0x50 [ 60.630133][ T5126] x64_sys_call+0x2d77/0x2fb0 [ 60.630150][ T5126] do_syscall_64+0xd2/0x200 [ 60.630176][ T5126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.630199][ T5126] ? clear_bhb_loop+0x40/0x90 [ 60.630220][ T5126] ? clear_bhb_loop+0x40/0x90 [ 60.630307][ T5126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.630327][ T5126] RIP: 0033:0x7f8b7380d33c [ 60.630341][ T5126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.630355][ T5126] RSP: 002b:00007f8b71e77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.630395][ T5126] RAX: ffffffffffffffda RBX: 00007f8b73a35fa0 RCX: 00007f8b7380d33c [ 60.630408][ T5126] RDX: 000000000000000f RSI: 00007f8b71e770a0 RDI: 0000000000000004 [ 60.630421][ T5126] RBP: 00007f8b71e77090 R08: 0000000000000000 R09: 0000000000000000 [ 60.630433][ T5126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.630445][ T5126] R13: 0000000000000000 R14: 00007f8b73a35fa0 R15: 00007ffcb7e47cb8 [ 60.630463][ T5126] [ 60.851803][ T5130] Zero length message leads to an empty skb [ 60.881118][ T5137] loop0: detected capacity change from 0 to 128 [ 60.897870][ T5137] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 60.905923][ T5137] FAT-fs (loop0): Filesystem has been set read-only [ 60.931561][ T5137] bio_check_eod: 111 callbacks suppressed [ 60.931577][ T5137] syz.0.500: attempt to access beyond end of device [ 60.931577][ T5137] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 60.983499][ T5137] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 60.991419][ T5137] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 61.046440][ T5137] syz.0.500: attempt to access beyond end of device [ 61.046440][ T5137] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 61.118124][ T5155] loop2: detected capacity change from 0 to 8192 [ 61.150949][ T5164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.511'. [ 61.210436][ T5155] loop2: p1 p2 < > p3 p4 < p5 > [ 61.215469][ T5155] loop2: partition table partially beyond EOD, truncated [ 61.247834][ T5177] loop0: detected capacity change from 0 to 2048 [ 61.258229][ T5155] loop2: p1 size 100663296 extends beyond EOD, truncated [ 61.276490][ T5155] loop2: p2 start 591104 is beyond EOD, truncated [ 61.283198][ T5155] loop2: p3 start 33572980 is beyond EOD, truncated [ 61.284594][ T5179] loop5: detected capacity change from 0 to 1024 [ 61.301513][ T5177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.316043][ T5177] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.511: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 61.332634][ T5177] EXT4-fs (loop0): Remounting filesystem read-only [ 61.341656][ T5155] loop2: p5 size 100663296 extends beyond EOD, truncated [ 61.342094][ T5179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.377691][ T5179] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 61.402492][ T5179] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 61.414957][ T5179] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.414957][ T5179] [ 61.424914][ T5179] EXT4-fs (loop5): Total free blocks count 0 [ 61.431131][ T5179] EXT4-fs (loop5): Free/Dirty block details [ 61.437123][ T5179] EXT4-fs (loop5): free_blocks=68451041280 [ 61.443153][ T5179] EXT4-fs (loop5): dirty_blocks=32 [ 61.448350][ T5179] EXT4-fs (loop5): Block reservation details [ 61.450359][ T5186] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 61.454449][ T5179] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 61.499101][ T5179] FAULT_INJECTION: forcing a failure. [ 61.499101][ T5179] name failslab, interval 1, probability 0, space 0, times 0 [ 61.511836][ T5179] CPU: 0 UID: 0 PID: 5179 Comm: syz.5.513 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 61.511865][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.511970][ T5179] Call Trace: [ 61.512048][ T5179] [ 61.512056][ T5179] __dump_stack+0x1d/0x30 [ 61.512077][ T5179] dump_stack_lvl+0xe8/0x140 [ 61.512180][ T5179] dump_stack+0x15/0x1b [ 61.512257][ T5179] should_fail_ex+0x265/0x280 [ 61.512288][ T5179] should_failslab+0x8c/0xb0 [ 61.512352][ T5179] kmem_cache_alloc_noprof+0x50/0x310 [ 61.512379][ T5179] ? ext4_init_io_end+0x31/0xb0 [ 61.512412][ T5179] ext4_init_io_end+0x31/0xb0 [ 61.512523][ T5179] ext4_do_writepages+0x6ca/0x21c0 [ 61.512549][ T5179] ? should_fail_ex+0x30/0x280 [ 61.512577][ T5179] ? xas_load+0x413/0x430 [ 61.512645][ T5179] ? xa_load+0xb1/0xe0 [ 61.512663][ T5179] ? __account_obj_stock+0x211/0x350 [ 61.512762][ T5179] ? obj_cgroup_charge_account+0x122/0x1a0 [ 61.512792][ T5179] ? should_fail_ex+0x30/0x280 [ 61.512837][ T5179] ? __rcu_read_unlock+0x4f/0x70 [ 61.512859][ T5179] ? avc_has_perm_noaudit+0x1b1/0x200 [ 61.512888][ T5179] ext4_writepages+0x176/0x300 [ 61.512942][ T5179] ? __pfx_ext4_writepages+0x10/0x10 [ 61.513029][ T5179] do_writepages+0x1c6/0x310 [ 61.513052][ T5179] ? ext4_get_group_desc+0x16b/0x190 [ 61.513077][ T5179] ? from_kprojid+0x159/0x380 [ 61.513099][ T5179] ? _raw_spin_unlock+0x26/0x50 [ 61.513121][ T5179] ? wbc_attach_and_unlock_inode+0x91/0x2b0 [ 61.513145][ T5179] filemap_write_and_wait_range+0x144/0x340 [ 61.513201][ T5179] ? __brelse+0x32/0x60 [ 61.513240][ T5179] ext4_insert_range+0x1c1/0x650 [ 61.513272][ T5179] ext4_fallocate+0x43e/0x660 [ 61.513317][ T5179] vfs_fallocate+0x413/0x450 [ 61.513338][ T5179] __x64_sys_fallocate+0x7a/0xd0 [ 61.513380][ T5179] x64_sys_call+0x2b88/0x2fb0 [ 61.513402][ T5179] do_syscall_64+0xd2/0x200 [ 61.513420][ T5179] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.513445][ T5179] ? clear_bhb_loop+0x40/0x90 [ 61.513525][ T5179] ? clear_bhb_loop+0x40/0x90 [ 61.513547][ T5179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.513568][ T5179] RIP: 0033:0x7f1d6b93e929 [ 61.513584][ T5179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.513601][ T5179] RSP: 002b:00007f1d69fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 61.513620][ T5179] RAX: ffffffffffffffda RBX: 00007f1d6bb65fa0 RCX: 00007f1d6b93e929 [ 61.513633][ T5179] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000005 [ 61.513679][ T5179] RBP: 00007f1d69fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.513691][ T5179] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 61.513703][ T5179] R13: 0000000000000000 R14: 00007f1d6bb65fa0 R15: 00007ffdc8946a48 [ 61.513721][ T5179] [ 61.519576][ T5172] netlink: 14 bytes leftover after parsing attributes in process `syz.4.512'. [ 61.623362][ T5187] 9pnet_fd: Insufficient options for proto=fd [ 61.819490][ T5172] hsr_slave_0: left promiscuous mode [ 61.828532][ T5172] hsr_slave_1: left promiscuous mode [ 61.842322][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.851751][ T5190] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.515'. [ 61.865623][ T5193] loop5: detected capacity change from 0 to 1024 [ 61.872824][ T5189] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.515'. [ 61.890763][ T5193] ext2: Unknown parameter 'smackfsroot' [ 61.957444][ T5195] loop0: detected capacity change from 0 to 8192 [ 61.972983][ T5195] +}[@: attempt to access beyond end of device [ 61.972983][ T5195] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 61.985974][ T5195] Buffer I/O error on dev loop0, logical block 57847, async page read [ 62.045960][ T5207] FAULT_INJECTION: forcing a failure. [ 62.045960][ T5207] name failslab, interval 1, probability 0, space 0, times 0 [ 62.056403][ T5208] loop0: detected capacity change from 0 to 128 [ 62.058746][ T5207] CPU: 0 UID: 0 PID: 5207 Comm: syz.2.522 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 62.058801][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.058813][ T5207] Call Trace: [ 62.058820][ T5207] [ 62.058827][ T5207] __dump_stack+0x1d/0x30 [ 62.058849][ T5207] dump_stack_lvl+0xe8/0x140 [ 62.058867][ T5207] dump_stack+0x15/0x1b [ 62.058891][ T5207] should_fail_ex+0x265/0x280 [ 62.058975][ T5207] should_failslab+0x8c/0xb0 [ 62.058997][ T5207] __kmalloc_noprof+0xa5/0x3e0 [ 62.059027][ T5207] ? multiq_tune+0xf7/0x840 [ 62.059079][ T5207] ? up_write+0x18/0x60 [ 62.059117][ T5207] multiq_tune+0xf7/0x840 [ 62.059138][ T5207] ? multiq_init+0x138/0x1a0 [ 62.059185][ T5207] multiq_init+0x17c/0x1a0 [ 62.059201][ T5207] ? __pfx_multiq_init+0x10/0x10 [ 62.059218][ T5207] qdisc_create+0x58e/0x9e0 [ 62.059348][ T5207] tc_modify_qdisc+0xe2c/0x1380 [ 62.059388][ T5207] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 62.059412][ T5207] rtnetlink_rcv_msg+0x65a/0x6d0 [ 62.059444][ T5207] ? avc_has_perm_noaudit+0x1b1/0x200 [ 62.059475][ T5207] netlink_rcv_skb+0x123/0x220 [ 62.059505][ T5207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.059539][ T5207] rtnetlink_rcv+0x1c/0x30 [ 62.059559][ T5207] netlink_unicast+0x5a1/0x670 [ 62.059590][ T5207] netlink_sendmsg+0x58b/0x6b0 [ 62.059611][ T5207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.059631][ T5207] __sock_sendmsg+0x145/0x180 [ 62.059680][ T5207] ____sys_sendmsg+0x31e/0x4e0 [ 62.059714][ T5207] ___sys_sendmsg+0x17b/0x1d0 [ 62.059758][ T5207] __x64_sys_sendmsg+0xd4/0x160 [ 62.059874][ T5207] x64_sys_call+0x2999/0x2fb0 [ 62.059895][ T5207] do_syscall_64+0xd2/0x200 [ 62.059914][ T5207] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.060003][ T5207] ? clear_bhb_loop+0x40/0x90 [ 62.060024][ T5207] ? clear_bhb_loop+0x40/0x90 [ 62.060046][ T5207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.060065][ T5207] RIP: 0033:0x7f1bf346e929 [ 62.060081][ T5207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.060175][ T5207] RSP: 002b:00007f1bf1ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.060204][ T5207] RAX: ffffffffffffffda RBX: 00007f1bf3695fa0 RCX: 00007f1bf346e929 [ 62.060218][ T5207] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 62.060231][ T5207] RBP: 00007f1bf1ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.060244][ T5207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.060256][ T5207] R13: 0000000000000000 R14: 00007f1bf3695fa0 R15: 00007ffee04897b8 [ 62.060299][ T5207] [ 62.334612][ T5208] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 62.342566][ T5208] FAT-fs (loop0): Filesystem has been set read-only [ 62.349376][ T5208] syz.0.521: attempt to access beyond end of device [ 62.349376][ T5208] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 62.363441][ T5208] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 62.371368][ T5208] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 62.379455][ T5208] syz.0.521: attempt to access beyond end of device [ 62.379455][ T5208] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.392783][ T5208] syz.0.521: attempt to access beyond end of device [ 62.392783][ T5208] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.436883][ T5215] program syz.0.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.456191][ T5213] loop4: detected capacity change from 0 to 8192 [ 62.492562][ T5219] loop0: detected capacity change from 0 to 2048 [ 62.500272][ T3508] loop4: p1 p2 < > p3 p4 < p5 > [ 62.505294][ T3508] loop4: partition table partially beyond EOD, truncated [ 62.512700][ T3508] loop4: p1 size 100663296 extends beyond EOD, truncated [ 62.520470][ T3508] loop4: p2 start 591104 is beyond EOD, truncated [ 62.526988][ T3508] loop4: p3 start 33572980 is beyond EOD, truncated [ 62.534356][ T3508] loop4: p5 size 100663296 extends beyond EOD, truncated [ 62.534829][ T4406] loop0: p1 < > p4 [ 62.560498][ T4406] loop0: p4 size 8388608 extends beyond EOD, truncated [ 62.568113][ T5213] loop4: p1 p2 < > p3 p4 < p5 > [ 62.573137][ T5213] loop4: partition table partially beyond EOD, truncated [ 62.589445][ T5213] loop4: p1 size 100663296 extends beyond EOD, truncated [ 62.598686][ T5213] loop4: p2 start 591104 is beyond EOD, truncated [ 62.605295][ T5213] loop4: p3 start 33572980 is beyond EOD, truncated [ 62.612640][ T5213] loop4: p5 size 100663296 extends beyond EOD, truncated [ 62.627949][ T5219] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 62.670342][ T2998] loop0: p1 < > p4 [ 62.670354][ T5225] FAULT_INJECTION: forcing a failure. [ 62.670354][ T5225] name failslab, interval 1, probability 0, space 0, times 0 [ 62.679240][ T2998] loop0: p4 size 8388608 extends beyond EOD, [ 62.686782][ T5225] CPU: 1 UID: 0 PID: 5225 Comm: syz.0.528 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 62.686889][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.686901][ T5225] Call Trace: [ 62.686908][ T5225] [ 62.686915][ T5225] __dump_stack+0x1d/0x30 [ 62.686937][ T5225] dump_stack_lvl+0xe8/0x140 [ 62.686956][ T5225] dump_stack+0x15/0x1b [ 62.686973][ T5225] should_fail_ex+0x265/0x280 [ 62.687079][ T5225] ? __se_sys_memfd_create+0x1cc/0x590 [ 62.687109][ T5225] should_failslab+0x8c/0xb0 [ 62.687141][ T5225] __kmalloc_cache_noprof+0x4c/0x320 [ 62.687170][ T5225] __se_sys_memfd_create+0x1cc/0x590 [ 62.687256][ T5225] __x64_sys_memfd_create+0x31/0x40 [ 62.687285][ T5225] x64_sys_call+0x122f/0x2fb0 [ 62.687343][ T5225] do_syscall_64+0xd2/0x200 [ 62.687361][ T5225] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.687389][ T5225] ? clear_bhb_loop+0x40/0x90 [ 62.687462][ T5225] ? clear_bhb_loop+0x40/0x90 [ 62.687549][ T5225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.687569][ T5225] RIP: 0033:0x7ff41c0be929 [ 62.687584][ T5225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.687601][ T5225] RSP: 002b:00007ff41a726d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 62.687619][ T5225] RAX: ffffffffffffffda RBX: 000000000000060d RCX: 00007ff41c0be929 [ 62.687680][ T5225] RDX: 00007ff41a726dec RSI: 0000000000000000 RDI: 00007ff41c1414cc [ 62.687691][ T5225] RBP: 0000200000002200 R08: 00007ff41a726b07 R09: 0000000000000000 [ 62.687703][ T5225] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 62.687715][ T5225] R13: 00007ff41a726dec R14: 00007ff41a726df0 R15: 00007ffc9ca6e408 [ 62.687805][ T5225] [ 62.871398][ T2998] truncated [ 62.903712][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 62.926352][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 62.967949][ T5237] loop2: detected capacity change from 0 to 512 [ 62.988085][ T5237] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 62.990192][ T5244] loop0: detected capacity change from 0 to 128 [ 63.029783][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 63.029814][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 63.061352][ T5244] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.069212][ T5244] FAT-fs (loop0): Filesystem has been set read-only [ 63.078149][ T5249] loop8: detected capacity change from 0 to 16384 [ 63.124198][ T5244] syz.0.536: attempt to access beyond end of device [ 63.124198][ T5244] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 63.153670][ T5244] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.161588][ T5244] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 63.180715][ T5244] syz.0.536: attempt to access beyond end of device [ 63.180715][ T5244] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.200055][ T5256] loop2: detected capacity change from 0 to 512 [ 63.208985][ T5256] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 63.225197][ T5255] loop5: detected capacity change from 0 to 1024 [ 63.247663][ T5238] udevd[5238]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 63.248414][ T4406] udevd[4406]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 63.269121][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 63.380136][ T5255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.462673][ T5255] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.539: Abort forced by user [ 63.476274][ T5279] netlink: 14 bytes leftover after parsing attributes in process `syz.4.547'. [ 63.485681][ T5255] EXT4-fs (loop5): Remounting filesystem read-only [ 63.492437][ T5255] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.533418][ T4395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.606324][ T5288] loop5: detected capacity change from 0 to 512 [ 63.616659][ T5288] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 63.674090][ T5293] FAULT_INJECTION: forcing a failure. [ 63.674090][ T5293] name failslab, interval 1, probability 0, space 0, times 0 [ 63.676327][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 63.676340][ T29] audit: type=1326 audit(1750386877.764:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7380e929 code=0x7ffc0000 [ 63.686959][ T5293] CPU: 0 UID: 0 PID: 5293 Comm: syz.2.553 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 63.686989][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.687031][ T5293] Call Trace: [ 63.687037][ T5293] [ 63.687044][ T5293] __dump_stack+0x1d/0x30 [ 63.687066][ T5293] dump_stack_lvl+0xe8/0x140 [ 63.687083][ T5293] dump_stack+0x15/0x1b [ 63.687097][ T5293] should_fail_ex+0x265/0x280 [ 63.687219][ T5293] should_failslab+0x8c/0xb0 [ 63.687325][ T5293] kmem_cache_alloc_noprof+0x50/0x310 [ 63.687351][ T5293] ? __anon_vma_prepare+0x70/0x2f0 [ 63.687402][ T5293] ? pte_alloc_one+0xf8/0x120 [ 63.687430][ T5293] __anon_vma_prepare+0x70/0x2f0 [ 63.687520][ T5293] handle_mm_fault+0x1d19/0x2be0 [ 63.687541][ T5293] ? __rcu_read_unlock+0x4f/0x70 [ 63.687643][ T5293] do_user_addr_fault+0x3fe/0x1090 [ 63.687675][ T5293] ? __rcu_read_unlock+0x4f/0x70 [ 63.687726][ T5293] exc_page_fault+0x62/0xa0 [ 63.687753][ T5293] asm_exc_page_fault+0x26/0x30 [ 63.687772][ T5293] RIP: 0010:__put_user_4+0xd/0x20 [ 63.687803][ T5293] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 77 01 00 90 90 90 90 90 90 90 90 90 90 [ 63.687820][ T5293] RSP: 0018:ffffc9000343fe78 EFLAGS: 00050206 [ 63.687903][ T5293] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 63.687915][ T5293] RDX: ffff88811aad2080 RSI: 0000000000000005 RDI: 0000000000000000 [ 63.687927][ T5293] RBP: 0000000000000004 R08: 0001ffff86848a7f R09: 0000000000000000 [ 63.687939][ T5293] R10: 000188814964fe60 R11: 000188814964fe67 R12: 0000200000000000 [ 63.687993][ T5293] R13: 0000000000000000 R14: 0000000000000018 R15: 0000000000000000 [ 63.688011][ T5293] __sys_socketpair+0xa6/0x430 [ 63.688037][ T5293] ? __bpf_trace_sys_enter+0x10/0x30 [ 63.688137][ T5293] ? trace_sys_enter+0xd0/0x110 [ 63.688163][ T5293] __x64_sys_socketpair+0x52/0x60 [ 63.688189][ T5293] x64_sys_call+0x23f2/0x2fb0 [ 63.688307][ T5293] do_syscall_64+0xd2/0x200 [ 63.688323][ T5293] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.688348][ T5293] ? clear_bhb_loop+0x40/0x90 [ 63.688369][ T5293] ? clear_bhb_loop+0x40/0x90 [ 63.688455][ T5293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.688482][ T5293] RIP: 0033:0x7f1bf346e929 [ 63.688497][ T5293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.688513][ T5293] RSP: 002b:00007f1bf1ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 63.688531][ T5293] RAX: ffffffffffffffda RBX: 00007f1bf3695fa0 RCX: 00007f1bf346e929 [ 63.688542][ T5293] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 63.688554][ T5293] RBP: 00007f1bf1ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.688566][ T5293] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.688577][ T5293] R13: 0000000000000001 R14: 00007f1bf3695fa0 R15: 00007ffee04897b8 [ 63.688655][ T5293] [ 63.780715][ T5295] loop5: detected capacity change from 0 to 128 [ 63.791778][ T29] audit: type=1326 audit(1750386877.834:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b7380e929 code=0x7ffc0000 [ 63.802213][ T5295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 63.805455][ T29] audit: type=1326 audit(1750386877.834:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7380e929 code=0x7ffc0000 [ 63.805497][ T29] audit: type=1326 audit(1750386877.834:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7380e929 code=0x7ffc0000 [ 63.805519][ T29] audit: type=1326 audit(1750386877.834:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b73810847 code=0x7ffc0000 [ 63.810569][ T5295] FAT-fs (loop5): Filesystem has been set read-only [ 63.810946][ T5295] syz.5.555: attempt to access beyond end of device [ 63.810946][ T5295] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 63.815111][ T29] audit: type=1326 audit(1750386877.834:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8b738107bc code=0x7ffc0000 [ 63.829043][ T5295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 63.845355][ T29] audit: type=1326 audit(1750386877.834:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8b738106f4 code=0x7ffc0000 [ 63.851396][ T5295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 63.859464][ T29] audit: type=1326 audit(1750386877.834:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8b738106f4 code=0x7ffc0000 [ 63.933734][ T5295] syz.5.555: attempt to access beyond end of device [ 63.933734][ T5295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.936443][ T29] audit: type=1326 audit(1750386877.834:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8b7380d58a code=0x7ffc0000 [ 64.279655][ T29] audit: type=1326 audit(1750386877.834:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7380e929 code=0x7ffc0000 [ 64.338025][ T5304] loop5: detected capacity change from 0 to 512 [ 64.398277][ T5307] ================================================================== [ 64.406489][ T5307] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 64.413265][ T5307] [ 64.415611][ T5307] write to 0xffff8881042b86f0 of 8 bytes by task 5306 on cpu 0: [ 64.423240][ T5307] vms_clear_ptes+0x18f/0x2d0 [ 64.428107][ T5307] mmap_region+0x6e8/0x1580 [ 64.432601][ T5307] do_mmap+0x9b3/0xbe0 [ 64.436773][ T5307] vm_mmap_pgoff+0x17a/0x2e0 [ 64.441395][ T5307] ksys_mmap_pgoff+0x268/0x310 [ 64.446273][ T5307] x64_sys_call+0x1602/0x2fb0 [ 64.451037][ T5307] do_syscall_64+0xd2/0x200 [ 64.455672][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.461568][ T5307] [ 64.463888][ T5307] read to 0xffff8881042b86f0 of 8 bytes by task 5307 on cpu 1: [ 64.471520][ T5307] getrusage+0xa52/0xbb0 [ 64.475817][ T5307] io_sq_thread+0x5dd/0x1180 [ 64.480411][ T5307] ret_from_fork+0xdd/0x150 [ 64.484926][ T5307] ret_from_fork_asm+0x1a/0x30 [ 64.489708][ T5307] [ 64.492037][ T5307] value changed: 0x00000000000014ea -> 0x00000000000016b4 [ 64.499148][ T5307] [ 64.501477][ T5307] Reported by Kernel Concurrency Sanitizer on: [ 64.507758][ T5307] CPU: 1 UID: 0 PID: 5307 Comm: iou-sqp-5306 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 64.520374][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.530426][ T5307] ================================================================== [ 64.572102][ T5304] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.588995][ T5306] SELinux: failed to load policy [ 64.601079][ T5304] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 64.609115][ T5304] System zones: 0-2, 18-18, 34-34 [ 64.616275][ T5304] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.637158][ T41] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 64.651714][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 64.664415][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.664415][ T41] [ 64.674263][ T41] EXT4-fs (loop5): Total free blocks count 0 [ 64.680274][ T41] EXT4-fs (loop5): Free/Dirty block details [ 64.686164][ T41] EXT4-fs (loop5): free_blocks=39626 [ 64.691520][ T41] EXT4-fs (loop5): dirty_blocks=1 [ 64.696542][ T41] EXT4-fs (loop5): Block reservation details [ 64.703273][ T41] EXT4-fs (loop5): i_reserved_data_blocks=1