last executing test programs: 1m56.656049426s ago: executing program 2 (id=6): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02"], 0x3, 0x25a, &(0x7f0000000240)="$eJzs2s9rI2UYB/Bn6sqmXbqp+ItdEF/0oF6Gbc8edpEKYkFRK6yC7KydauyYlE4oRMT2pFf/BM/i0Zsge/TSi3+BB2+99LgHcSRNWtOysIs/mqX7+RySh3nnm7zzvmF4ErL/6refb6zX+XrRj5ksi5nrsRt3s1iImTiyG6+8dPOX5969+cGbN1ZWWuOjSymly8///OGXP7xwp3/p/R8v/3Qx9hY+2j9Y+n3vmb0r+3++92mnTp06dXv9VKTbvV6/uF2Vaa1Tb+QpvV2VRV2mTrcut06Mr1e9zc1BKrpr83ObW2Vdp6I7SBvlIPV7qb81SMUnRaeb8jxP83PBv7H6/d2miYPm8VvRNM3sd3HpTsz/Fu3InkjZk9ezp29lz+5mVw6apn06OjudGfPf+sf7z7kwvqkvv5NSK6L6Znt1e3X0PBxtxY316EQVZVyL2fgjhh+TsVH9+hsry9fSoYX4utoZ53e2Vx87fP3j/GK0Y+He+cVRPh3lL0bE8HFuMr8U7Xjq3vmlU/nR+7fi5Rcn8nm049ePoxdVrMUwGzvjJVj+ajGl195aOZW/engeAMB5k6djw/5t2LSd6N/y/MT4RH80yk/0h+379Ien+qsLcfXCdK+diHrwxUZRVeXW8AveYXF85FEtZieX5UGKo59C/r+JzZzYs4dloRTnuYj4bCp3JM7S35t+31NbZzIhAAAAAAAAAAAAHshZ/J1w2tcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA83P4KAAD//8scwHs=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) ftruncate(r0, 0x2007ffc) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendfile(r1, r1, 0x0, 0x800000009) (fail_nth: 5) 1m55.92735458s ago: executing program 2 (id=15): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x3, 0xff, {{0x6, 0x4, 0x0, 0x22, 0x18, 0x66, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @local, {[@noop]}}}}}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) pread64(r3, &(0x7f0000000f80)=""/155, 0x9b, 0x1) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000ec0)={{r3}, 0x1, &(0x7f0000000180)=[0x34c], 0x4, 0xd, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = fsmount(0xffffffffffffffff, 0x0, 0x70) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="d663c35b7be56cb1db88a8e193e9a87b2f48e191fc9e03d39da8900e64d7e12dbc3bcaf9a56003c3bc1c178332cad787fc77ece38fd7de6ca72fc17991d0dbf64231b5c9892395c091bb38c7075d2bad4e56f76909b883ea793f9e7cdbcd91f65823031d46d48038d8397fab64d7043b0c641fd3c73a400118c06f4f3bfd91a43b69ff3dea54f1995a2ffc644bcf4771bcd56f9d2cd30730b04417f1b528b73e0afd8447c905ea799589c8804654af40ad2bea47294c282d83268017e72519bfbaf5ba042d8224f3005a14a2dee51aee89367c4160a8579c40", @ANYRES8=r2, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r5, @ANYRESOCT, @ANYRES64=r4, @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYRES32=r1], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x36, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000e00)={&(0x7f0000000d00)=""/247, 0xf7, 0x1, 0x5}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSISO7816(r8, 0xc0285443, &(0x7f0000000000)={0x40, 0xbf, 0xddcb, 0x0, 0x347}) fcntl$setstatus(r8, 0x4, 0x2400) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) execveat(r8, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000e40)='\x00', &(0x7f00000001c0)='\xca@', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000440)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000e80)='\x00']}, 0x1000) r9 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r9, &(0x7f0000000880)={0x14, &(0x7f0000000700)={0x0, 0xa, 0xe8, {0xe8, 0x21, "64506f3c0d0083b0809e26b81e0089f0ac26ec63415ea31be9ae3869d45a33234bc57a90293852331161e6ee61c65e66919ab33adbc5601a9a251b3699cec66c61d424516e5c0f35ff78c8daefe631d76920d462a1ddea5a3215d05f5116bd1deffac188b775b2c4f4256d301bb72641ea91418323674a2d77c9991f2a22fd316a1fed739e7a54089e2d3dc58305c42cc6e88a29621364f76195043e81cfeb722aa4e0d0623e93f2fdf72d0255d86d239672838074dff6bd6fcb1a7f896b86a34e62b5300636a6777b123b24a96e3d1666c877e42352dcf07877b0e74c6f10b19a62535d29f3"}}, &(0x7f0000000800)={0x0, 0x3, 0x58, @string={0x58, 0x3, "39f9364144523909dfd30ee66563bc937d493e7ade572b783c2495b4a6570242fdaa0e3673c33d26d300697b681c3279ae61ff94729927563445d25a421fbd4be1f9e3be0b057881b65b22deb236d41e0306e4f8283e"}}}, &(0x7f0000000cc0)={0x34, &(0x7f00000008c0)={0x40, 0xb, 0x8b, "6097485717560638e632cabf0a8413b7ee8f02166e2a590ae7a3de1d8e10fdcdf28bafe552e58cd5bc87442cfda6afc71cfe46259ea5a3f62f856d79e15a8f7a5dfac20e5b5772db65a9fa37886dc2e851947338a56099ff3f37fe914549557384132a68aede55a90898dd768cb7cbd61ec1d2d61fae6abb0942e59d4f41ffa052abbd0d1dabea0a64289b"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000c00)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000c40)={0x40, 0xa0, 0x4, 0x81}, &(0x7f0000000c80)={0xc0, 0xa2, 0x2f, "89ac4a878489a7b6f957b396010cbcb140cd92eea47a6ae6c0d655c31640e9930587fffba6cf44cf9abca91a614d3b"}}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, 0xee00, &(0x7f0000000540)) 1m55.619960887s ago: executing program 4 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x3, 0x55e, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r4, &(0x7f0000000040)=""/225, 0xe1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f00000001c0)="f14a18f6", 0x4) r6 = syz_clone3(&(0x7f0000001880)={0x120000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020307b1af8ffffff0000bfa10000000000000702000005000000b70300000000000085000000060000008500000005000000950000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) tgkill(r6, r6, 0x17) sendfile(r5, r3, 0x0, 0x7ffff000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x8005, 0x10000, 0x80, 0x0}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r7, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat(0xffffffffffffffff, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x2, 0x875, &(0x7f0000001880)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000440), 0x2000) 1m55.370415342s ago: executing program 2 (id=19): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (fail_nth: 2) 1m55.206738095s ago: executing program 2 (id=20): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) fcntl$getown(r0, 0x9) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) creat(&(0x7f0000000340)='./file1\x00', 0x1d5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x0, 0x28, 0x0, 0xffffffff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r8, 0x30, 0x1, @ib={0x1b, 0x8000, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x7}}}, 0xa0) 1m54.934642971s ago: executing program 2 (id=21): bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff004504dea500000003000000850000008900000095000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1m54.743343905s ago: executing program 4 (id=22): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x9}]}, 0x1c}}, 0x0) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES64=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r13, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x38, r14, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d}, 0x4) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) 1m54.549326029s ago: executing program 4 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m54.549030109s ago: executing program 2 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180005000000000000000000000000009500000038739e91"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r4}, 0x10) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}]}, 0x3c}}, 0x0) 1m54.52174288s ago: executing program 32 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180005000000000000000000000000009500000038739e91"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r4}, 0x10) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}]}, 0x3c}}, 0x0) 1m49.399899044s ago: executing program 4 (id=58): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x2000000, 0x3) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x826}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0) sendmsg$tipc(r2, &(0x7f0000001740)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x3}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000380)="8bb76c73850cb7c9230114c1f5005ae8e7776bf8261df10d5aa9f43c7d132779835f2d5d0efd06bf304171778e0246f13ee314fa56eb95eae6b5e342e8f306eb6b01dc072464fdc6f309e35b62768c848f18c03c19cb0f331d1eaf94", 0x5c}, {&(0x7f0000000400)="a298485d6665ee378ddc1dba8ac243a1e073be3d786c1897cbc7fbfde5be27eb380db2ed43eb41fc3b32bdeb0ae45bf29efec839a1e690ce78b2548704acba639a67bf160117", 0x46}, {&(0x7f0000000480)="afe64fbaa647b51c2c16d60acbda22976a76c3c2b117ce524b59bcadcb1c8c93bbaebe60d4caff270151662e7a8bf9a065642f5dff507e37d5d23e00d8b3b813923a096606566ff880c572417cf191fa1e8920046e4de60a6aa3097b779632d6f069a9b86e067c59ba77ca6cf5b4a7b75f0cf4ab00056050725374b8e8c417e1215528ebd9a90de55cc7fdca139099fcbca2347e00569bdbe3d885054463a0d4965aed0b00ed15788f9640abd12d7c46a1a02c", 0xb3}, {&(0x7f0000000540)="ce76abe6a1c6f058b4294d11aaddf03925e65cc3159c1c2e0ea3f4fb6d363a4f79c29c361f8a3da9e402d938aba2b714b0e06fe17da848758b05f034", 0x3c}, {&(0x7f0000000580)="0585150f2e0959d2cbb2d679434b010854c82c1618712b5e0eb823f97873320df235d2258774b1da31166e674f9d5a7a28f05a1aeb38bac65d29b028367fb48ea7a6bd30c9d1b58b3f6030d08416554782b17e97eb4c8967e8b61bdac2d9381931f999c0d0e5c5abc211b3f5f335aacd7c9a58dc54e84dc91d15e83b4c2d5444b92182ea18ea78571a577682737f466e17b91c870bc77fdc2c48ac6fa332c286fcdf5a25de40d4939f33ed2b9455bec45ca79ad02327f2a9e35ad999fd5c5e", 0xbf}, {&(0x7f0000000640)="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", 0x1000}], 0x6, &(0x7f00000016c0)="e590afa35ab4895ece028695e228e70196ddfd31e147d78b0ea3d52b48d75a13d1718d1d0dd08dae24884cc5d0b019aefb14afadf270a05b29602786d30c03a3053763abca669c284a82eb61d34e039b2dd4e379cc2b47f441fcccda027c7f75f0d47f2f9dad44e9f9fe27c34f13", 0x6e, 0x4000004}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 1m49.399473574s ago: executing program 4 (id=59): socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000300), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1m49.236631807s ago: executing program 4 (id=62): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000180)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2000000000000050, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) nanosleep(0x0, 0x0) 1m49.13552816s ago: executing program 33 (id=62): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000180)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2000000000000050, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) nanosleep(0x0, 0x0) 1m7.256137705s ago: executing program 1 (id=677): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100000000007, 0xf1110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x12025, 0x5, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x200d) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020701030000000000000000020000072400078008000240000000030800014000000004080002"], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000f20000ea156a22922eba64ecf818f6ba9eb4d24d212e825e1c769dd1bb837978439e33770900"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='locks_get_lock_context\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r6, 0x0, 0x25, 0x1, @void}, 0x10) stat(0x0, &(0x7f0000000540)) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002dbd7008000000000900020073797a30000000000800410073697700140033006c6f00000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) close(r5) 1m6.945045131s ago: executing program 1 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) get_robust_list(r2, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000300)={&(0x7f00000002c0)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x7, 0x9) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) timerfd_gettime(r7, &(0x7f0000000240)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r8, @ANYBLOB=':00000\b\x00\x00\x0000000000128t']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 1m3.925357893s ago: executing program 1 (id=730): bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1m3.714933277s ago: executing program 1 (id=736): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000640), 0x4) close_range(r0, r1, 0x0) 1m3.571188371s ago: executing program 1 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(0xffffffffffffffff, 0x0, 0x2004c040) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x41, 0x81, 0xa}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = epoll_create1(0x0) r7 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000180)={0x20000005}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m3.339656255s ago: executing program 1 (id=744): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0x0) kcmp(r5, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 1m3.328578255s ago: executing program 34 (id=744): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0x0) kcmp(r5, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 56.884040757s ago: executing program 6 (id=826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200fb00400002800800024000000084080003400000000a080004400000001308000140000000001c000580090001006d657461000000000c00028008000240000000010900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc0000, &(0x7f0000000780)={[{@usrquota}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000180)="$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") (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x80) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r5, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000800) 56.782411839s ago: executing program 6 (id=829): mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc000, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5\x00\x00\x00\x00\x00\x00\x00\bZ\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xcf\xffs\xd4\xc5\xad\b\x1fl,)N6\xd1$I\xa8\xc5!\x86\xc1c\"\xcf\xcd\x16U\xaf\x89x&)\x03\xed\xf8c\xbcE\xf9>K,\x18\x91\xd0D+\x97\xf4\xef\xa3_\f\x04\x16\x8c\x18Ca$\x8c\xc9\xac\x0e*\x87\xf9]\xa6T\x83\xef\xa1\tl,\x8b\xd9\xf2k\x91/\x0e\xe7(\xe0C\xb3\x13\x91\xfd\x02\x8b]!e\xf1<\xaa\xad\xcd9\xac\xc9\xda\xbao2W\x98\xb3\x9c$r\x0e\xfe*\xb4\x9e\xb9\x80\x00B\xcf%6\x8aH\x9d\xfbC}.\x19 \x91k\xc4\x93\x02\xb0\xedr\xe9\xd4\xeb\xa8m\xa0\x82\xef\xb9\xac\xa7\x85`!sqW\xb4_\x0f\xa3\xe5\b\x0f\x91\'\xdd\xa9X\xf2\xfb\xe8\xeba.yu\x9arZ=\xff\xb8/d4\x85\xfb\x84\x94JAC\xcb\xe3\xf3KvC\xec\x95\xdf\x9b\x90\x1el\x0eIh}f\xee\xc3+I\xb5\xc4\x17\xf3l\xb8]yL\xcb\xaf\xb5\x10D\xf4\xd4\x19\ne\xfaj(D\xdeI\xe5\xa0\xd9\x81\x0e\xf8\xe1\xdf\xa5\x8b\x06\r4\xcbO\xd3\xfc\xb4\xec=]\xb67+.\xdb{VfE\xa4!u7\xdf\aH\x90v+\xc4.\xf5\xee\n\xd9W7a\tc\xb3)34\xed\xd0k\x10e\x96\xff\x90\xbf\t#\xc3\x1bB\x0fg\x18lG\xf3WI~\x81\x81H\xf8\xd5U\xcc+\xce\x93b\x8a\xdc\x183\x16\xfb\xb6\x85I\xec-\xc1.}\xa3\xc0\x9e\x92\"5\x95qo\xd1Yl]\xff\xfb\xd7\xd9\x96\xcf\x8eA\nn\x98\xcde0\xc0\xf2<\x7f\xdd\xbb\x8cn\x0e\x92|\xd1\xd2\x94\xd2]\xf7J \xae\xf9k\xa6\a\x9e\x1a\xa5TB\x1a\xb4\x1a\x9e\xd3!\x9a\xd1\x81.\x1a\xb1\xb5\x95\xb3\xa6}3:Q+,\x9e\xf2\x19v\xffM\xba\xe2\xc4\xbf\xc6\xe1U\xeeO\xe4\x84\xca#6\xea\x11\'\xb3\xec\xdb\xde{\r\xbb\xf3(\x94\x88\xf9\x85\\\xbe\xbe\x9b\x04\x17\bF\xe8A\x987X~\x14\xa7\xa0\xf7\xd0&`\x1d\xf2\xf3a\x10\x1a\x9f\x1b,\xf8\xcd\xb1\xf0\b\xed\xbbF\xab\v\x1b\x82\xe6c\'\xe03{\x8a\x9d\t*bl:`\xc0\x93\xfb\xb4,', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) r2 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e23, @remote}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 56.72769619s ago: executing program 6 (id=832): sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)="90bf9c71e0478393c8a4154bd0593918e93cb4c172befde80af4eedd4e98f3cf937dd8", &(0x7f00000005c0)="5b4a56b22e821b0db37754d02a4eb769a7139c8ec98b7b479dd9942a0890baf9cda55bf814d0baa2d7e00a062833", 0xfffffff8, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 55.682573582s ago: executing program 6 (id=856): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@orlov}, {@discard}]}, 0x1, 0x776, &(0x7f0000001180)="$eJzs3c1rHOUfAPDvbJKmTfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBLSJ4EVQ8CHrp2Zd68+rLVf8LD2KpmhYrHiQym9l02+ymSZrsVvfzgck+z8xsnue78/I8u/MwE0DPGk3/5CIOR8T7ScRwNj+JiIF6qj/i5Np6t1aWD8TKcjGJ1dVXf0vq69xcWS5G03tSB7PMoxHx3TsRR3Iby60uLs0UyuXSfJYfr81eGK8uLh09P1uYLk2X5o5PTE4eO/HMieO7F+sfPy4duvbBS09+efKvtx+5+t73SZyMQ9my5jh2y2iMZp/JQPoR3uHF3S6sy5JuV4AdSQ/NvrWjPA7HcPTVUwDAf9mbEbEKAPSYRPsPAD2m8TvAzZXlYmPq7i8SnXX9hYjYvxb/rWxaW9KfXbPbX78OOnQzuePKSBIRI7tQ/mhEfPr165+nU+zRdUiAVt66HBFnR0Y3nv+TDWMWtuupTZbty15H75rv/Aed803a/3m2Vf8vt97/iRb9n8EWx+5O3PP4P7ALhWwi7f89vza27a7+3/qgtZG+LPe/ep9vIDl3vlxKz23/j4ixGBhM8xOblDF24+8b7ZY19/9+//CNz9Ly09fba+R+6R+88z1ThVrhfmJudv1yxGP9reJP1rd/0qb/e3qLZbz83LuftFuWxp/G25g2xh/Z6KS9sXol4omW2//2iLZk0/GJ4/XdYbyxU7Tw1U8fD7Urv3n7p1NafuO7QCek239o8/hHkubxmtXtl/HDleFv2y27d/yt9/99yWv1dKMfcalQq81PROxLXtk4/9jt9zbyjfXT+Mceb338b7b/p98Jz24x/v5rv36x8/j3Vhr/1La2//YTV2/N9LUrf2vbf7KeGsvmbOX8t9UK3s9nBwAAAAAAAAAAAAAAAAAAAAAAAABblYuIQ5Hk8uvpXC6fX3uG98MxlCtXqrUj5yoLc1NRf1b2SAzkGre6HG66H+pEdj/8Rv7YXfmnI+KhiPho8EDSuI/iVJdjBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICGg22e/5/6ebDbtQMA9sz+blcAAOg47T8A9B7tPwD0Hu0/APQe7T8A9B7tPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHvs9KlT6bT658pyMc1PXVxcmKlcPDpVqs7kZxeK+WJl/kJ+ulKZLpfyxcrsvf5fuVK5MBlzC5fGa6Vqbby6uHRmtrIwVztzfrYwXTpTGuhIVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwPdXFpZlCuVyal9hBYvXBqEb3E33Z7vSg1KejieTBqMYuJ7p8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l/gnAAD//xdTIa8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0xa, 0xc741, 0x80, 0x1}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "33672c14f57125c3", "5d900c598f649b894acb17513cbb5f1e", "8ea01cbd", "7fa914a00e4bad80"}, 0x28) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x18, r1, 0x106, 0xfffffffffbfffe64) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x13, 0x1, @tid=r1}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@orlov}, {@discard}]}, 0x1, 0x776, &(0x7f0000001180)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) (async) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0xa, 0xc741, 0x80, 0x1}) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "33672c14f57125c3", "5d900c598f649b894acb17513cbb5f1e", "8ea01cbd", "7fa914a00e4bad80"}, 0x28) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace$cont(0x18, r1, 0x106, 0xfffffffffbfffe64) (async) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x13, 0x1, @tid=r1}) (async) 55.425577787s ago: executing program 6 (id=860): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"/30], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='rxrpc_conn\x00', r5, 0x0, 0xb}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) r9 = getpid() write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) r10 = dup(0xffffffffffffffff) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r10, &(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x7c8) kcmp$KCMP_EPOLL_TFD(r9, r1, 0x7, r2, &(0x7f0000000200)={r10, r6, 0x199e}) write(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) sendfile(r0, r0, 0x0, 0x8000000000000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 55.020075485s ago: executing program 6 (id=864): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 55.004223075s ago: executing program 35 (id=864): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 7.150178354s ago: executing program 7 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.85037312s ago: executing program 7 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.777597983s ago: executing program 8 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000feffff18110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000ff000000b703000008000000b7040000000000008500cfae23c1a921ed98000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000002200000000002acae682ad0f9ebef7be8f8d438b0000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 2.728095643s ago: executing program 8 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 2.725215884s ago: executing program 8 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0x5a8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xd, 0x0, 0x4000, 0x0, 0xfffffffe, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x4100, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffd, 0x0, 0x4, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.665656065s ago: executing program 8 (id=1529): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r0, @ANYBLOB="000000180576191868f3b40056ee884285000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb9}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="4fa8cd7affff7f00000000b400000000181100", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x0, 0xfffffffffffffdae, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405}, 0x4e4a9eaac70c947b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') linkat(r6, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000015001100020000000300000005000000", @ANYRES32=r3, @ANYBLOB='\"\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.605162376s ago: executing program 3 (id=1530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') read$rfkill(r1, 0x0, 0x300) write$ppp(r1, &(0x7f0000000240)="593f85736e16830ea98cd207c8a76d0e31473685f9dd74200f6cde6c72fe9a231016b37e2b2dc0e9a482df89da0bd9d31106cdffa3166d95960d62df0c9ed714d628efcf17c8dc1ba684aa6ea623e7240c3236d74e93c09ce2af97ae60e6932f8db7f200e81b772c297609af526c85c39d19ed3ab05d6512af4c517d28b2579a4d890385b73e", 0x86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001040)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x4, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x2, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0x3ff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x4, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x3, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r4, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/201, 0xc9, 0x0, &(0x7f0000000140)=""/125, 0x7d}}, 0x10) 2.515988648s ago: executing program 3 (id=1531): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)=""/24, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000100)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070000000000060004404e2200000c000280080001407f000001db5840935ba5e5a62b"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000090) 2.505831728s ago: executing program 3 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 2.112946096s ago: executing program 3 (id=1538): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_setup(0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000fdd21a40f30c74933bbc0000000109021b00010000000009040000", @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRESDEC=r0], 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x0, 0x0, 0x40000007}]) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000140)=0x1) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x8, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) r8 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0xe4c, 0x4) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r11, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x808ed3a56aee9e48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) 2.077576847s ago: executing program 5 (id=1540): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 2.064404748s ago: executing program 8 (id=1541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x8801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) getpid() syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) 1.845164882s ago: executing program 7 (id=1542): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000280)=r0) r2 = syz_open_procfs(0x0, 0x0) unshare(0x10000) preadv(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000010a20000000000a05000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0xfd, 0x0, 0x7, 0x48550, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200006, 0x1, @perf_config_ext={0x3ff, 0x2f}, 0x100ab, 0x5, 0x8, 0x6, 0x8, 0x9, 0xb, 0x0, 0xd, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, r0, 0xa) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7c00, 0x0, 0x3) 1.620053776s ago: executing program 7 (id=1543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x80000000000000}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.360081272s ago: executing program 3 (id=1544): sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)="90bf9c71e0478393c8a4154bd0593918e93cb4c172befde80af4eedd4e98f3cf937dd8", &(0x7f00000005c0)="5b4a56b22e821b0db37754d02a4eb769a7139c8ec98b7b479dd9942a0890baf9cda55bf814d0baa2d7e00a062833", 0xfffffff8, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010800000000000000000200000009000200"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1.155425406s ago: executing program 5 (id=1545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.059602998s ago: executing program 8 (id=1547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.058125548s ago: executing program 0 (id=1548): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = dup2(r0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xfffffffffffffe6c, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x478, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PBURST={0x8, 0x7, 0x1c4f}, @TCA_TBF_PARMS={0x28, 0x1, {{0xef, 0x0, 0x79, 0x1, 0x2, 0xffff8001}, {0xb, 0x2, 0x0, 0x8, 0x4, 0x7f}, 0x9, 0x10001, 0xf44}}, @TCA_TBF_RTAB={0x404, 0x2, [0x101, 0x3, 0x0, 0x5, 0xfd90, 0x6, 0x7, 0x7, 0x15, 0x3, 0x0, 0x1, 0x10001, 0xa, 0x6, 0x8, 0x80000000, 0x2, 0xed, 0x7, 0x3, 0x3635, 0x6, 0x3, 0x1008, 0x3aea6292, 0x0, 0xb1f4, 0x8, 0x9, 0x73, 0x5, 0x8bf, 0x9000, 0x2, 0x6, 0xf7, 0x7fff, 0x9, 0x1, 0x7, 0xffffffff, 0x4, 0x101, 0xd, 0x2, 0xef, 0x52, 0x3, 0x3, 0xfffffff6, 0x0, 0x1, 0x7, 0xf, 0xe6b, 0x1, 0x2, 0x7ff, 0x5, 0x3, 0x1, 0x0, 0x11, 0x0, 0x9, 0x1, 0x120000, 0x3ffc000, 0x288, 0x5, 0xfff, 0x4, 0x6, 0x4, 0x1000, 0x8, 0x7f, 0x4, 0xffffffff, 0x8, 0x6c, 0xb825, 0x2, 0xa4e, 0x2, 0x1, 0x7, 0x1ffe0000, 0x9, 0x305, 0x6, 0x101, 0x800, 0x0, 0xfffffffe, 0xe, 0x7, 0x1, 0x800, 0xc, 0x81, 0x3, 0x8000, 0xdb2, 0x1, 0x942, 0xff, 0x6, 0xb4ef, 0x2, 0x71, 0x7, 0xc000000, 0x300, 0x3, 0x2, 0x81, 0x8, 0x8, 0x1, 0x0, 0x9, 0xb, 0xc, 0xfffffff9, 0x9, 0x5, 0x2, 0xffffff80, 0x6, 0x8, 0x10000, 0x1, 0x1212, 0xffffffff, 0x101, 0x3, 0x5, 0x7, 0xb, 0xe6, 0x10, 0x1, 0x7fbffffc, 0x200, 0x5, 0x400000, 0x4, 0xffff8000, 0x7, 0x4, 0x80, 0xeb, 0x3, 0x9, 0x200, 0x7, 0x88, 0x2, 0x7fffffff, 0xfff, 0x9, 0x6, 0x7fffffff, 0x4, 0x40, 0x5, 0x7, 0x9, 0x6, 0xffffffe4, 0xff800, 0xb, 0x8, 0x861d, 0x3, 0x8c1, 0x0, 0x5, 0x1a0, 0x300000, 0x3, 0x3, 0x8, 0x7, 0x0, 0x2, 0xffffffff, 0x8001, 0x4, 0x5, 0x6, 0x3, 0x1, 0xffff, 0x9, 0x18000000, 0x4, 0x8, 0x80, 0x6, 0xffff0000, 0x7f, 0x8, 0x5, 0x6, 0xb2, 0xca7c, 0x4, 0xfff, 0x8a7b, 0xdc, 0xc52, 0x3ff, 0x80000001, 0x0, 0x0, 0x40, 0x2, 0x2, 0x9, 0x9, 0x4, 0x1a6, 0x10, 0xfffffff3, 0x8000, 0x6, 0x8, 0x1800000, 0x5, 0x1, 0x0, 0x4, 0x2, 0x5, 0x4, 0x7de, 0xc980, 0x63376e93, 0x8001, 0x3, 0x79, 0x9, 0x10001, 0x8, 0x6, 0xc, 0x10, 0xfffffffa, 0x4d58, 0x8000, 0x800, 0x10000, 0x9]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd457dc44c41be09a}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x51}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x80045440, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = io_uring_setup(0x7986, &(0x7f0000000480)={0x0, 0x8678, 0x8, 0x5, 0x9c}) r12 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r12, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) close_range(r11, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x80000, 0x8}) 1.037159049s ago: executing program 5 (id=1549): bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 883.446692ms ago: executing program 0 (id=1550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x8, 0x6}, 0x4, 0x10, 0x800000, 0x0, 0x2, 0x2, 0x200, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) shutdown(r1, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x80, 0x2) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) signalfd4(r1, &(0x7f0000000100)={[0x9]}, 0x8, 0x180000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2ec82888", @ANYRES16=r5, @ANYBLOB="070600000000000000002d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4888}, 0x20000804) 843.244182ms ago: executing program 5 (id=1551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000001780)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r2 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r2) io_getevents(r1, 0x2, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000380)={0x0, 0x989680}) ptrace(0x8, r2) wait4(r2, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000000c0), 0x4000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x24}]) 775.626883ms ago: executing program 0 (id=1552): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) (fail_nth: 13) fallocate(r0, 0x0, 0x0, 0x1001f0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0x200000000000006}, 0x18) 775.223884ms ago: executing program 7 (id=1553): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x9}, 0x1c) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x94, 0x0) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc9ffb}]}) getitimer(0x2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) mknodat$null(0xffffffffffffffff, 0x0, 0x4, 0x103) close(0x3) eventfd(0x0) r3 = socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES8, @ANYRES8=r3], 0x0, 0x7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x8100, 0x30, 0x30, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @ib={0x1b, 0xf, 0x10ffb, {"50916300"}, 0x8000000000000001, 0x7, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r5}}, 0xc) r6 = fsmount(r4, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') openat(r6, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) 447.085311ms ago: executing program 5 (id=1554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000400)="f4fffeff0000", 0x6, 0x0, 0x0, 0x2}]) 392.069631ms ago: executing program 0 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000580)=[{&(0x7f0000001180)="15", 0x1}], 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 380.827622ms ago: executing program 0 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a58000000060a0b04138c096ec21ee3e9020000032c000480280001800a00010071800c00014000000000000003ff08000240000000aa8cbffef041797a32000000001400000011000100"/118], 0x80}, 0x1, 0x0, 0x0, 0x2001}, 0x20004090) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x54000000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x7c, &(0x7f0000000480)=""/124, 0x40f00, 0x14, '\x00', r5, 0x25, r3, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x3, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r3, 0xffffffffffffffff, r4], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x5, 0x2, 0x2, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x8, '\x00', r5, @flow_dissector, r2, 0x8, &(0x7f00000001c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000380)=[r2, r2], &(0x7f00000004c0)=[{0x3, 0x5, 0x5, 0xb}, {0x3, 0x1, 0xc, 0x5}, {0x2, 0x1, 0x4, 0x6}, {0x5, 0x3, 0x10, 0x6}, {0x20003, 0x1, 0xf, 0xc}, {0x4, 0x1, 0xa, 0xc}, {0x4, 0x2, 0x1, 0x9}]}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000140)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) pwrite64(r12, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r12, 0x6609) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r13, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000400)="f4fffeff0000", 0x6, 0x0, 0x0, 0x2}]) 350.379482ms ago: executing program 5 (id=1557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1e4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x17c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x120, 0x1, [@m_mirred={0x78, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x5, 0x4, 0x9}, 0x3}}]}, {0x9, 0x6, "d527360c37"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0xa4, 0xa, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0x1, 0x1, 0x7}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x4, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10000, 0x7, 0x8, 0x16}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x3c, 0x1, [@m_ctinfo={0x38, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0xba01}, 0x810) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='ext4_da_release_space\x00', r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x800) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r7, 0x200, &(0x7f0000000480)={0x0}) socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000640)="24c17c30ad50723568b1945578b85fc0d26010aec5f6981fffbfb30fe8529a3e23599fd3041f223e31deade0c7d926dd1a334db3b44147a5fef794e460b430a84ac222715ace788310383475d02089469ef16a58875fbe85a8fcc47c116a12e7bbc6232450597580aae7185d753edae564a515d2084f88bad9363406d18711439df1dfb1ed1d6ad14539a6ea6065", 0x8e, r6}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0xfffffffc, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x3}, {}, {0x6}, {}, {0x20, 0x0, 0xb}, {0xf792}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 323.561353ms ago: executing program 7 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000400)="f4fffeff0000", 0x6, 0x0, 0x0, 0x2}]) (fail_nth: 2) 0s ago: executing program 0 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): etwork [ 95.704595][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.717800][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.759758][ T6648] team0: Port device team_slave_0 added [ 95.774896][ T6648] team0: Port device team_slave_1 added [ 95.807690][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.814755][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.840708][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.861292][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.870065][ T31] IPVS: stop unused estimator thread 0... [ 95.871981][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.882950][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.908972][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.974248][ T6648] hsr_slave_0: entered promiscuous mode [ 95.990388][ T6648] hsr_slave_1: entered promiscuous mode [ 96.000839][ T6648] debugfs: 'hsr0' already exists in 'hsr' [ 96.006587][ T6648] Cannot create hsr debugfs directory [ 96.079052][ T6727] FAULT_INJECTION: forcing a failure. [ 96.079052][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 96.091779][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.0.893 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.091907][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.091956][ T6727] Call Trace: [ 96.091961][ T6727] [ 96.092042][ T6727] __dump_stack+0x1d/0x30 [ 96.092060][ T6727] dump_stack_lvl+0xe8/0x140 [ 96.092077][ T6727] dump_stack+0x15/0x1b [ 96.092124][ T6727] should_fail_ex+0x265/0x280 [ 96.092144][ T6727] should_failslab+0x8c/0xb0 [ 96.092165][ T6727] __kmalloc_noprof+0xa5/0x3e0 [ 96.092261][ T6727] ? p9_client_prepare_req+0x372/0x820 [ 96.092293][ T6727] p9_client_prepare_req+0x372/0x820 [ 96.092320][ T6727] ? kfree+0xd9/0x320 [ 96.092370][ T6727] ? __list_add_valid_or_report+0x38/0xe0 [ 96.092402][ T6727] p9_client_rpc+0xdf/0x6c0 [ 96.092427][ T6727] ? p9_pollwait+0xb1/0xe0 [ 96.092446][ T6727] ? pipe_poll+0x222/0x250 [ 96.092470][ T6727] ? p9_conn_create+0x2eb/0x320 [ 96.092562][ T6727] ? p9_fd_create+0x26a/0x280 [ 96.092582][ T6727] p9_client_create+0x743/0xbc0 [ 96.092612][ T6727] v9fs_session_init+0xf7/0xde0 [ 96.092632][ T6727] ? avc_has_perm_noaudit+0x1b1/0x200 [ 96.092671][ T6727] ? should_fail_ex+0xdb/0x280 [ 96.092689][ T6727] ? v9fs_mount+0x51/0x5c0 [ 96.092748][ T6727] ? should_failslab+0x8c/0xb0 [ 96.092772][ T6727] ? __kmalloc_cache_noprof+0x189/0x320 [ 96.092797][ T6727] v9fs_mount+0x67/0x5c0 [ 96.092880][ T6727] ? selinux_capable+0x31/0x40 [ 96.092971][ T6727] ? __pfx_v9fs_mount+0x10/0x10 [ 96.092996][ T6727] legacy_get_tree+0x75/0xd0 [ 96.093016][ T6727] vfs_get_tree+0x54/0x1d0 [ 96.093039][ T6727] do_new_mount+0x207/0x5e0 [ 96.093133][ T6727] ? security_capable+0x83/0x90 [ 96.093158][ T6727] path_mount+0x4a4/0xb20 [ 96.093180][ T6727] ? user_path_at+0x109/0x130 [ 96.093267][ T6727] __se_sys_mount+0x28f/0x2e0 [ 96.093290][ T6727] ? fput+0x8f/0xc0 [ 96.093321][ T6727] __x64_sys_mount+0x67/0x80 [ 96.093379][ T6727] x64_sys_call+0x2b4d/0x2ff0 [ 96.093397][ T6727] do_syscall_64+0xd2/0x200 [ 96.093424][ T6727] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.093519][ T6727] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.093544][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.093625][ T6727] RIP: 0033:0x7f0bbb59eba9 [ 96.093640][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.093654][ T6727] RSP: 002b:00007f0bb9fff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.093709][ T6727] RAX: ffffffffffffffda RBX: 00007f0bbb7e5fa0 RCX: 00007f0bbb59eba9 [ 96.093733][ T6727] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 96.093777][ T6727] RBP: 00007f0bb9fff090 R08: 0000200000000080 R09: 0000000000000000 [ 96.093787][ T6727] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000002 [ 96.093798][ T6727] R13: 00007f0bbb7e6038 R14: 00007f0bbb7e5fa0 R15: 00007fff747bb088 [ 96.093816][ T6727] [ 96.422075][ T6604] veth0_vlan: entered promiscuous mode [ 96.444201][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.451363][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.478024][ T6738] FAULT_INJECTION: forcing a failure. [ 96.478024][ T6738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.489870][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.491149][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.7.897 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.491181][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.491263][ T6738] Call Trace: [ 96.491296][ T6738] [ 96.491304][ T6738] __dump_stack+0x1d/0x30 [ 96.491325][ T6738] dump_stack_lvl+0xe8/0x140 [ 96.491343][ T6738] dump_stack+0x15/0x1b [ 96.491359][ T6738] should_fail_ex+0x265/0x280 [ 96.491383][ T6738] should_fail+0xb/0x20 [ 96.491403][ T6738] should_fail_usercopy+0x1a/0x20 [ 96.491426][ T6738] _copy_from_user+0x1c/0xb0 [ 96.491454][ T6738] proc_do_submiturb+0x866/0x1d20 [ 96.491483][ T6738] ? proc_do_submiturb+0x1a1/0x1d20 [ 96.491548][ T6738] ? should_fail_ex+0xdb/0x280 [ 96.491571][ T6738] proc_submiturb+0x7b/0xa0 [ 96.491641][ T6738] usbdev_ioctl+0xcc2/0x1710 [ 96.491668][ T6738] ? __pfx_usbdev_ioctl+0x10/0x10 [ 96.491693][ T6738] __se_sys_ioctl+0xce/0x140 [ 96.491737][ T6738] __x64_sys_ioctl+0x43/0x50 [ 96.491754][ T6738] x64_sys_call+0x1816/0x2ff0 [ 96.491774][ T6738] do_syscall_64+0xd2/0x200 [ 96.491803][ T6738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.491826][ T6738] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.491884][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.491904][ T6738] RIP: 0033:0x7fb66e7beba9 [ 96.491919][ T6738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.491988][ T6738] RSP: 002b:00007fb66d21f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.492018][ T6738] RAX: ffffffffffffffda RBX: 00007fb66ea05fa0 RCX: 00007fb66e7beba9 [ 96.492030][ T6738] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000007 [ 96.492042][ T6738] RBP: 00007fb66d21f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.492053][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.492065][ T6738] R13: 00007fb66ea06038 R14: 00007fb66ea05fa0 R15: 00007ffd9ac13268 [ 96.492083][ T6738] [ 96.700934][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.738520][ T2958] lo speed is unknown, defaulting to 1000 [ 96.738548][ T2958] syz2: Port: 1 Link DOWN [ 96.751785][ T112] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.751834][ T112] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.751861][ T112] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.751886][ T112] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.753947][ T6604] veth1_vlan: entered promiscuous mode [ 96.778886][ T6604] veth0_macvtap: entered promiscuous mode [ 96.786767][ T6604] veth1_macvtap: entered promiscuous mode [ 96.791511][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.792857][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.802029][ T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.868578][ T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.868611][ T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.868716][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.988639][ T2958] IPVS: starting estimator thread 0... [ 96.989890][ T6648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.041802][ T6648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.059474][ T6648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.073462][ T6648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.080014][ T6753] IPVS: using max 2688 ests per chain, 134400 per kthread [ 97.097508][ T6755] tipc: Started in network mode [ 97.102461][ T6755] tipc: Node identity ac14140f, cluster identity 4711 [ 97.110085][ T6755] tipc: New replicast peer: 255.255.255.127 [ 97.116213][ T6755] tipc: Enabled bearer , priority 10 [ 97.182717][ T6771] netlink: 348 bytes leftover after parsing attributes in process `syz.8.906'. [ 97.185542][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.206237][ T6648] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.217351][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.224527][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.237483][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.244567][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.263722][ T6648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.274279][ T6648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.381937][ T6779] smc: net device bond0 applied user defined pnetid SYZ0 [ 97.389152][ T6779] smc: net device bond0 erased user defined pnetid SYZ0 [ 97.546187][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.716649][ T6648] veth0_vlan: entered promiscuous mode [ 97.727148][ T6648] veth1_vlan: entered promiscuous mode [ 97.752706][ T6648] veth0_macvtap: entered promiscuous mode [ 97.761286][ T6648] veth1_macvtap: entered promiscuous mode [ 97.771363][ T6739] program syz.3.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.781382][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.791847][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.810677][ T6739] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 97.821426][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.837529][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.884469][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.893653][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.109660][ T9] tipc: Node number set to 2886997007 [ 98.140180][ T6811] FAULT_INJECTION: forcing a failure. [ 98.140180][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 98.152998][ T6811] CPU: 1 UID: 0 PID: 6811 Comm: syz.8.913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.153025][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.153037][ T6811] Call Trace: [ 98.153055][ T6811] [ 98.153063][ T6811] __dump_stack+0x1d/0x30 [ 98.153126][ T6811] dump_stack_lvl+0xe8/0x140 [ 98.153187][ T6811] dump_stack+0x15/0x1b [ 98.153204][ T6811] should_fail_ex+0x265/0x280 [ 98.153229][ T6811] should_failslab+0x8c/0xb0 [ 98.153255][ T6811] kmem_cache_alloc_noprof+0x50/0x310 [ 98.153290][ T6811] ? skb_clone+0x151/0x1f0 [ 98.153322][ T6811] skb_clone+0x151/0x1f0 [ 98.153397][ T6811] __netlink_deliver_tap+0x2c9/0x500 [ 98.153428][ T6811] netlink_unicast+0x66b/0x690 [ 98.153499][ T6811] netlink_sendmsg+0x58b/0x6b0 [ 98.153524][ T6811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.153577][ T6811] __sock_sendmsg+0x142/0x180 [ 98.153609][ T6811] ____sys_sendmsg+0x31e/0x4e0 [ 98.153666][ T6811] ___sys_sendmsg+0x17b/0x1d0 [ 98.153696][ T6811] __x64_sys_sendmsg+0xd4/0x160 [ 98.153799][ T6811] x64_sys_call+0x191e/0x2ff0 [ 98.153818][ T6811] do_syscall_64+0xd2/0x200 [ 98.153849][ T6811] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.153874][ T6811] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.153982][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.154003][ T6811] RIP: 0033:0x7f5f83a0eba9 [ 98.154019][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.154037][ T6811] RSP: 002b:00007f5f82477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.154057][ T6811] RAX: ffffffffffffffda RBX: 00007f5f83c55fa0 RCX: 00007f5f83a0eba9 [ 98.154070][ T6811] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 98.154136][ T6811] RBP: 00007f5f82477090 R08: 0000000000000000 R09: 0000000000000000 [ 98.154149][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.154161][ T6811] R13: 00007f5f83c56038 R14: 00007f5f83c55fa0 R15: 00007fff1cac58d8 [ 98.154180][ T6811] [ 98.313871][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 98.313885][ T29] audit: type=1400 audit(1758028054.227:3768): avc: denied { read append } for pid=6812 comm="syz.0.912" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.392156][ T29] audit: type=1400 audit(1758028054.227:3769): avc: denied { open } for pid=6812 comm="syz.0.912" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.439051][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.446220][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.505267][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.518327][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.618267][ T112] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.631875][ T112] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.656004][ T112] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.665184][ T112] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.847738][ T29] audit: type=1400 audit(1758028054.797:3770): avc: denied { connect } for pid=6830 comm="syz.5.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.867273][ T29] audit: type=1400 audit(1758028054.797:3771): avc: denied { write } for pid=6830 comm="syz.5.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.122558][ T6841] loop5: detected capacity change from 0 to 128 [ 99.160250][ T6841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 99.168172][ T6841] System zones: 1-3, 19-19, 35-36 [ 99.209802][ T6841] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 99.249883][ T6841] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.336197][ T29] audit: type=1400 audit(1758028055.287:3772): avc: denied { ioctl } for pid=6840 comm="syz.5.921" path="/9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop5" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.383966][ T6829] loop8: detected capacity change from 0 to 2048 [ 99.474767][ T6829] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.915: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 99.546242][ T6829] EXT4-fs (loop8): get root inode failed [ 99.552040][ T6829] EXT4-fs (loop8): mount failed [ 99.579889][ T6648] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.763487][ T29] audit: type=1400 audit(1758028055.717:3773): avc: denied { read } for pid=6855 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.309614][ T29] audit: type=1326 audit(1758028056.247:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.3.931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51a627eba9 code=0x0 [ 100.397437][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.933'. [ 100.428463][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.933'. [ 100.552218][ T29] audit: type=1326 audit(1758028056.417:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f83a0eba9 code=0x7ffc0000 [ 100.575644][ T29] audit: type=1326 audit(1758028056.417:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f83a0eba9 code=0x7ffc0000 [ 100.599002][ T29] audit: type=1326 audit(1758028056.417:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.8.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f83a0eba9 code=0x7ffc0000 [ 100.697956][ T6888] netlink: 44 bytes leftover after parsing attributes in process `syz.8.937'. [ 100.707213][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.937'. [ 100.720830][ T6888] loop8: detected capacity change from 0 to 164 [ 100.728184][ T6888] Unable to read rock-ridge attributes [ 100.828476][ T6895] netlink: 104 bytes leftover after parsing attributes in process `syz.8.940'. [ 100.934102][ T6889] program syz.0.936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.943472][ T6889] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 100.986027][ T6898] IPv6: sit1: Disabled Multicast RS [ 100.995686][ T6898] sit1: entered allmulticast mode [ 101.137349][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 101.146296][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.154694][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.201522][ T6906] loop3: detected capacity change from 0 to 512 [ 101.208366][ T6906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.220825][ T6906] EXT4-fs (loop3): 1 truncate cleaned up [ 101.227077][ T6906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.244279][ T6904] ext4: Unknown parameter ' ÀMkê18446744073709551615wz_«eO2IséoJwœ¸3+¾d”¼l9®‡a1»q®zÞ„ [ 101.244279][ T6904] ö–»/q g3Œ´x¯' [ 101.307439][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.357800][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.946'. [ 101.374129][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.946'. [ 101.384100][ T6917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.394774][ T6917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.411938][ T6917] netlink: 'syz.8.946': attribute type 14 has an invalid length. [ 101.693100][ T6937] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.953'. [ 101.702196][ T6937] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.953'. [ 101.990826][ T6944] bridge_slave_1: left allmulticast mode [ 101.996498][ T6944] bridge_slave_1: left promiscuous mode [ 102.002241][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.090798][ T6944] bridge_slave_0: left allmulticast mode [ 102.096478][ T6944] bridge_slave_0: left promiscuous mode [ 102.102275][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.404172][ T6955] IPVS: set_ctl: invalid protocol: 50 172.20.20.19:20001 [ 102.411986][ T6955] FAULT_INJECTION: forcing a failure. [ 102.411986][ T6955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.425291][ T6955] CPU: 0 UID: 0 PID: 6955 Comm: syz.8.957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.425320][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.425332][ T6955] Call Trace: [ 102.425352][ T6955] [ 102.425361][ T6955] __dump_stack+0x1d/0x30 [ 102.425383][ T6955] dump_stack_lvl+0xe8/0x140 [ 102.425403][ T6955] dump_stack+0x15/0x1b [ 102.425419][ T6955] should_fail_ex+0x265/0x280 [ 102.425456][ T6955] should_fail_alloc_page+0xf2/0x100 [ 102.425482][ T6955] __alloc_frozen_pages_noprof+0xff/0x360 [ 102.425527][ T6955] alloc_pages_mpol+0xb3/0x250 [ 102.425559][ T6955] vma_alloc_folio_noprof+0x1aa/0x300 [ 102.425624][ T6955] handle_mm_fault+0xec2/0x2c20 [ 102.425695][ T6955] do_user_addr_fault+0x636/0x1090 [ 102.425729][ T6955] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 102.425759][ T6955] exc_page_fault+0x62/0xa0 [ 102.425788][ T6955] asm_exc_page_fault+0x26/0x30 [ 102.425819][ T6955] RIP: 0033:0x7f5f838d0ba3 [ 102.425834][ T6955] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 102.425851][ T6955] RSP: 002b:00007f5f824764a0 EFLAGS: 00010206 [ 102.425868][ T6955] RAX: 0000000000012000 RBX: 00007f5f82476540 RCX: 00007f5f7a057000 [ 102.425881][ T6955] RDX: 00007f5f824766e0 RSI: 0000000000000001 RDI: 00007f5f824765e0 [ 102.425894][ T6955] RBP: 00000000000000f2 R08: 0000000000000009 R09: 00000000000001ca [ 102.425907][ T6955] R10: 00000000000001de R11: 00007f5f82476540 R12: 0000000000000001 [ 102.425920][ T6955] R13: 00007f5f83aada00 R14: 0000000000000053 R15: 00007f5f824765e0 [ 102.425964][ T6955] [ 102.425974][ T6955] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 102.427836][ T6955] loop8: detected capacity change from 0 to 512 [ 102.428125][ T6955] msdos: Unknown parameter '\Ynodots' [ 102.502096][ T6960] FAULT_INJECTION: forcing a failure. [ 102.502096][ T6960] name failslab, interval 1, probability 0, space 0, times 0 [ 102.502186][ T6960] CPU: 0 UID: 0 PID: 6960 Comm: syz.3.959 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.502208][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.502218][ T6960] Call Trace: [ 102.502223][ T6960] [ 102.502229][ T6960] __dump_stack+0x1d/0x30 [ 102.502247][ T6960] dump_stack_lvl+0xe8/0x140 [ 102.502263][ T6960] dump_stack+0x15/0x1b [ 102.502358][ T6960] should_fail_ex+0x265/0x280 [ 102.502381][ T6960] ? audit_log_d_path+0x8d/0x150 [ 102.502416][ T6960] should_failslab+0x8c/0xb0 [ 102.502486][ T6960] __kmalloc_cache_noprof+0x4c/0x320 [ 102.502515][ T6960] audit_log_d_path+0x8d/0x150 [ 102.502550][ T6960] audit_log_d_path_exe+0x42/0x70 [ 102.502579][ T6960] audit_log_task+0x1e9/0x250 [ 102.502605][ T6960] audit_seccomp+0x61/0x100 [ 102.502666][ T6960] ? __seccomp_filter+0x68c/0x10d0 [ 102.502724][ T6960] __seccomp_filter+0x69d/0x10d0 [ 102.502742][ T6960] ? percpu_counter_add_batch+0xb6/0x130 [ 102.502760][ T6960] ? errseq_sample+0x2f/0x40 [ 102.502822][ T6960] ? file_init_path+0x278/0x2a0 [ 102.502855][ T6960] __secure_computing+0x82/0x150 [ 102.502911][ T6960] syscall_trace_enter+0xcf/0x1e0 [ 102.503016][ T6960] do_syscall_64+0xac/0x200 [ 102.503125][ T6960] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.503148][ T6960] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.503205][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.503224][ T6960] RIP: 0033:0x7f51a627d5bc [ 102.503237][ T6960] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.503253][ T6960] RSP: 002b:00007f51a4ce7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.503269][ T6960] RAX: ffffffffffffffda RBX: 00007f51a64c5fa0 RCX: 00007f51a627d5bc [ 102.503292][ T6960] RDX: 000000000000000f RSI: 00007f51a4ce70a0 RDI: 0000000000000003 [ 102.503304][ T6960] RBP: 00007f51a4ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.503314][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.503325][ T6960] R13: 00007f51a64c6038 R14: 00007f51a64c5fa0 R15: 00007ffc4cb2d788 [ 102.503342][ T6960] [ 102.519591][ T6962] loop5: detected capacity change from 0 to 1024 [ 102.553595][ T6962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.939159][ T6988] program syz.8.966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.040106][ T6988] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 103.150223][ T6648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.294668][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 103.294683][ T29] audit: type=1400 audit(1758028059.247:3978): avc: denied { mount } for pid=7000 comm="syz.0.974" name="/" dev="configfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.350178][ T7002] loop7: detected capacity change from 0 to 128 [ 103.361393][ T29] audit: type=1400 audit(1758028059.247:3979): avc: denied { search } for pid=7000 comm="syz.0.974" name="/" dev="configfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.383660][ T29] audit: type=1400 audit(1758028059.247:3980): avc: denied { search } for pid=7000 comm="syz.0.974" name="/" dev="configfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.392421][ T7002] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.405998][ T29] audit: type=1400 audit(1758028059.247:3981): avc: denied { read open } for pid=7000 comm="syz.0.974" path="/" dev="configfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.440096][ T29] audit: type=1400 audit(1758028059.287:3982): avc: denied { search } for pid=7000 comm="syz.0.974" name="/" dev="configfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.446245][ T7002] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.462213][ T29] audit: type=1400 audit(1758028059.287:3983): avc: denied { search } for pid=7000 comm="syz.0.974" name="/" dev="configfs" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.462237][ T29] audit: type=1400 audit(1758028059.287:3984): avc: denied { add_name } for pid=7000 comm="syz.0.974" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.462256][ T29] audit: type=1400 audit(1758028059.287:3985): avc: denied { create } for pid=7000 comm="syz.0.974" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 103.462274][ T29] audit: type=1326 audit(1758028059.297:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.7.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 103.462302][ T29] audit: type=1326 audit(1758028059.297:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.7.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 103.582632][ T7005] FAULT_INJECTION: forcing a failure. [ 103.582632][ T7005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.595907][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.0.975 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.595965][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.595975][ T7005] Call Trace: [ 103.595981][ T7005] [ 103.595988][ T7005] __dump_stack+0x1d/0x30 [ 103.596006][ T7005] dump_stack_lvl+0xe8/0x140 [ 103.596048][ T7005] dump_stack+0x15/0x1b [ 103.596063][ T7005] should_fail_ex+0x265/0x280 [ 103.596083][ T7005] should_fail_alloc_page+0xf2/0x100 [ 103.596105][ T7005] __alloc_frozen_pages_noprof+0xff/0x360 [ 103.596202][ T7005] alloc_pages_mpol+0xb3/0x250 [ 103.596234][ T7005] alloc_migration_target_by_mpol+0x11b/0x280 [ 103.596259][ T7005] migrate_pages_batch+0x309/0x1ae0 [ 103.596343][ T7005] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 103.596369][ T7005] ? __pfx_remove_migration_pte+0x10/0x10 [ 103.596472][ T7005] migrate_pages+0x1249/0x1770 [ 103.596496][ T7005] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 103.596525][ T7005] __se_sys_mbind+0x975/0xac0 [ 103.596576][ T7005] __x64_sys_mbind+0x78/0x90 [ 103.596605][ T7005] x64_sys_call+0x2932/0x2ff0 [ 103.596625][ T7005] do_syscall_64+0xd2/0x200 [ 103.596654][ T7005] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.596693][ T7005] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.596723][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.596805][ T7005] RIP: 0033:0x7f0bbb59eba9 [ 103.596891][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.596906][ T7005] RSP: 002b:00007f0bb9fff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 103.596922][ T7005] RAX: ffffffffffffffda RBX: 00007f0bbb7e5fa0 RCX: 00007f0bbb59eba9 [ 103.596935][ T7005] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 103.596992][ T7005] RBP: 00007f0bb9fff090 R08: 0000000000000000 R09: 0000000000000002 [ 103.597061][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.597080][ T7005] R13: 00007f0bbb7e6038 R14: 00007f0bbb7e5fa0 R15: 00007fff747bb088 [ 103.597099][ T7005] [ 103.819507][ T1729] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.863888][ T7010] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.895220][ T7013] loop5: detected capacity change from 0 to 128 [ 103.902363][ T7013] vfat: Unknown parameter 'syzkaller' [ 104.154195][ T7046] IPVS: set_ctl: invalid protocol: 50 172.20.20.19:20001 [ 104.164630][ T7046] loop3: detected capacity change from 0 to 512 [ 104.171371][ T7046] msdos: Unknown parameter '\Ynodots' [ 104.947082][ T7081] program syz.7.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.957931][ T7081] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 105.072772][ T7084] lo speed is unknown, defaulting to 1000 [ 105.099558][ T7084] netlink: 'syz.5.1002': attribute type 21 has an invalid length. [ 105.231464][ T7087] Driver unsupported XDP return value 0 on prog (id 1031) dev N/A, expect packet loss! [ 105.373459][ T7091] FAULT_INJECTION: forcing a failure. [ 105.373459][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 105.386118][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.3.1005 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.386204][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.386216][ T7091] Call Trace: [ 105.386222][ T7091] [ 105.386230][ T7091] __dump_stack+0x1d/0x30 [ 105.386251][ T7091] dump_stack_lvl+0xe8/0x140 [ 105.386267][ T7091] dump_stack+0x15/0x1b [ 105.386281][ T7091] should_fail_ex+0x265/0x280 [ 105.386302][ T7091] should_failslab+0x8c/0xb0 [ 105.386342][ T7091] kmem_cache_alloc_node_noprof+0x57/0x320 [ 105.386440][ T7091] ? __alloc_skb+0x101/0x320 [ 105.386465][ T7091] __alloc_skb+0x101/0x320 [ 105.386483][ T7091] nf_tables_commit+0x3f14/0x4940 [ 105.386505][ T7091] ? __list_add_valid_or_report+0x38/0xe0 [ 105.386562][ T7091] ? nf_tables_newobj+0xb0d/0xcc0 [ 105.386595][ T7091] ? skb_pull+0x93/0x110 [ 105.386618][ T7091] nfnetlink_rcv+0x1029/0x1690 [ 105.386678][ T7091] netlink_unicast+0x5c0/0x690 [ 105.386698][ T7091] netlink_sendmsg+0x58b/0x6b0 [ 105.386723][ T7091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.386748][ T7091] __sock_sendmsg+0x142/0x180 [ 105.386798][ T7091] ____sys_sendmsg+0x31e/0x4e0 [ 105.386871][ T7091] ___sys_sendmsg+0x17b/0x1d0 [ 105.386903][ T7091] __x64_sys_sendmsg+0xd4/0x160 [ 105.386995][ T7091] x64_sys_call+0x191e/0x2ff0 [ 105.387074][ T7091] do_syscall_64+0xd2/0x200 [ 105.387102][ T7091] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.387171][ T7091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.387253][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.387332][ T7091] RIP: 0033:0x7f51a627eba9 [ 105.387346][ T7091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.387368][ T7091] RSP: 002b:00007f51a4ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.387387][ T7091] RAX: ffffffffffffffda RBX: 00007f51a64c5fa0 RCX: 00007f51a627eba9 [ 105.387400][ T7091] RDX: 0000000004004000 RSI: 0000200000000240 RDI: 0000000000000006 [ 105.387413][ T7091] RBP: 00007f51a4ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.387452][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.387462][ T7091] R13: 00007f51a64c6038 R14: 00007f51a64c5fa0 R15: 00007ffc4cb2d788 [ 105.387479][ T7091] [ 105.688486][ T7093] bond0: (slave bond_slave_0): Releasing backup interface [ 105.700445][ T7095] netlink: 'syz.5.1006': attribute type 10 has an invalid length. [ 105.708327][ T7095] __nla_validate_parse: 13 callbacks suppressed [ 105.708341][ T7095] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1006'. [ 105.727910][ T7113] loop7: detected capacity change from 0 to 512 [ 105.745967][ T7113] EXT4-fs (loop7): too many log groups per flexible block group [ 105.753780][ T7113] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 105.760979][ T7113] EXT4-fs (loop7): mount failed [ 105.761015][ T7093] bond0: (slave bond_slave_1): Releasing backup interface [ 105.781412][ T7093] team0: Port device team_slave_0 removed [ 105.801519][ T7093] team0: Port device team_slave_1 removed [ 105.809350][ T7093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.816741][ T7093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.832572][ T7093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.840026][ T7093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.862443][ T7095] batman_adv: batadv0: Adding interface: veth1_vlan [ 105.869058][ T7095] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.900220][ T7095] batman_adv: batadv0: Interface activated: veth1_vlan [ 105.981344][ T7128] program syz.7.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.991385][ T7128] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 106.011185][ T7117] FAULT_INJECTION: forcing a failure. [ 106.011185][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 106.024089][ T7117] CPU: 1 UID: 0 PID: 7117 Comm: syz.8.1013 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.024112][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.024149][ T7117] Call Trace: [ 106.024154][ T7117] [ 106.024160][ T7117] __dump_stack+0x1d/0x30 [ 106.024178][ T7117] dump_stack_lvl+0xe8/0x140 [ 106.024234][ T7117] dump_stack+0x15/0x1b [ 106.024247][ T7117] should_fail_ex+0x265/0x280 [ 106.024267][ T7117] should_failslab+0x8c/0xb0 [ 106.024288][ T7117] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 106.024356][ T7117] ? __kthread_create_on_node+0xcb/0x230 [ 106.024475][ T7117] kvasprintf+0x8a/0x110 [ 106.024490][ T7117] ? __kmalloc_cache_noprof+0x189/0x320 [ 106.024592][ T7117] ? __pfx_napi_threaded_poll+0x10/0x10 [ 106.024617][ T7117] __kthread_create_on_node+0xcb/0x230 [ 106.024645][ T7117] ? __pfx_napi_threaded_poll+0x10/0x10 [ 106.024713][ T7117] kthread_create_on_node+0x89/0xc0 [ 106.024740][ T7117] ? netif_napi_add_weight_locked+0x34c/0x580 [ 106.024793][ T7117] ? sk_skb_reason_drop+0xbd/0x270 [ 106.024813][ T7117] ? netif_napi_add_weight_locked+0x2e3/0x580 [ 106.024863][ T7117] netif_napi_add_weight_locked+0x3ef/0x580 [ 106.024890][ T7117] wg_peer_create+0x301/0x430 [ 106.024921][ T7117] wg_set_device+0xa20/0x12e0 [ 106.024950][ T7117] genl_family_rcv_msg_doit+0x143/0x1b0 [ 106.025034][ T7117] genl_rcv_msg+0x422/0x460 [ 106.025058][ T7117] ? __pfx_wg_set_device+0x10/0x10 [ 106.025080][ T7117] netlink_rcv_skb+0x120/0x220 [ 106.025197][ T7117] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.025240][ T7117] genl_rcv+0x28/0x40 [ 106.025263][ T7117] netlink_unicast+0x5c0/0x690 [ 106.025283][ T7117] netlink_sendmsg+0x58b/0x6b0 [ 106.025385][ T7117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.025406][ T7117] __sock_sendmsg+0x142/0x180 [ 106.025458][ T7117] ____sys_sendmsg+0x31e/0x4e0 [ 106.025537][ T7117] ___sys_sendmsg+0x17b/0x1d0 [ 106.025568][ T7117] __x64_sys_sendmsg+0xd4/0x160 [ 106.025638][ T7117] x64_sys_call+0x191e/0x2ff0 [ 106.025655][ T7117] do_syscall_64+0xd2/0x200 [ 106.025680][ T7117] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.025704][ T7117] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.025727][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.025744][ T7117] RIP: 0033:0x7f5f83a0eba9 [ 106.025808][ T7117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.025822][ T7117] RSP: 002b:00007f5f82456038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.025838][ T7117] RAX: ffffffffffffffda RBX: 00007f5f83c56090 RCX: 00007f5f83a0eba9 [ 106.025849][ T7117] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000009 [ 106.025859][ T7117] RBP: 00007f5f82456090 R08: 0000000000000000 R09: 0000000000000000 [ 106.025869][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.025879][ T7117] R13: 00007f5f83c56128 R14: 00007f5f83c56090 R15: 00007fff1cac58d8 [ 106.025974][ T7117] [ 106.026160][ T7117] kthread_run failed with err -12 [ 106.347611][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1021'. [ 106.434522][ T7150] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 106.510637][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1023'. [ 106.714616][ T7160] FAULT_INJECTION: forcing a failure. [ 106.714616][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 106.727358][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.5.1027 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.727402][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.727414][ T7160] Call Trace: [ 106.727421][ T7160] [ 106.727428][ T7160] __dump_stack+0x1d/0x30 [ 106.727449][ T7160] dump_stack_lvl+0xe8/0x140 [ 106.727468][ T7160] dump_stack+0x15/0x1b [ 106.727499][ T7160] should_fail_ex+0x265/0x280 [ 106.727521][ T7160] ? alloc_bprm+0x5c/0x350 [ 106.727542][ T7160] should_failslab+0x8c/0xb0 [ 106.727567][ T7160] __kmalloc_cache_noprof+0x4c/0x320 [ 106.727645][ T7160] alloc_bprm+0x5c/0x350 [ 106.727666][ T7160] do_execveat_common+0x12e/0x750 [ 106.727750][ T7160] ? getname_flags+0x154/0x3b0 [ 106.727801][ T7160] __x64_sys_execveat+0x73/0x90 [ 106.727824][ T7160] x64_sys_call+0x1fec/0x2ff0 [ 106.727843][ T7160] do_syscall_64+0xd2/0x200 [ 106.727872][ T7160] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.727969][ T7160] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.727994][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.728075][ T7160] RIP: 0033:0x7f4c3cd7eba9 [ 106.728088][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.728157][ T7160] RSP: 002b:00007f4c3b7df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 106.728176][ T7160] RAX: ffffffffffffffda RBX: 00007f4c3cfc5fa0 RCX: 00007f4c3cd7eba9 [ 106.728186][ T7160] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 106.728197][ T7160] RBP: 00007f4c3b7df090 R08: 0000000000000000 R09: 0000000000000000 [ 106.728207][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.728219][ T7160] R13: 00007f4c3cfc6038 R14: 00007f4c3cfc5fa0 R15: 00007ffe72b8c528 [ 106.728239][ T7160] [ 106.941815][ T7162] SELinux: policydb version 531 does not match my version range 15-35 [ 106.950932][ T7162] SELinux: failed to load policy [ 106.973477][ T7164] pim6reg1: entered promiscuous mode [ 106.978845][ T7164] pim6reg1: entered allmulticast mode [ 107.057720][ T7172] geneve0: entered allmulticast mode [ 107.295113][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 107.321138][ T7193] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1038'. [ 107.333218][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1038'. [ 107.482547][ T7214] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1046'. [ 107.494118][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 107.554515][ T7218] sd 0:0:1:0: device reset [ 107.562466][ T7218] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1047'. [ 107.573503][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1047'. [ 107.703074][ T7234] program syz.8.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.712573][ T7234] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.274069][ T7261] loop5: detected capacity change from 0 to 164 [ 108.308306][ T7261] syz.5.1062: attempt to access beyond end of device [ 108.308306][ T7261] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 108.339441][ T7261] syz.5.1062: attempt to access beyond end of device [ 108.339441][ T7261] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 108.559274][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 108.565543][ T29] audit: type=1326 audit(1758028064.507:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.597068][ T29] audit: type=1326 audit(1758028064.517:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.620565][ T29] audit: type=1326 audit(1758028064.517:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.644030][ T29] audit: type=1326 audit(1758028064.517:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.667460][ T29] audit: type=1326 audit(1758028064.517:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.690762][ T29] audit: type=1326 audit(1758028064.517:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.714243][ T29] audit: type=1326 audit(1758028064.517:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.737724][ T29] audit: type=1326 audit(1758028064.517:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.761104][ T29] audit: type=1326 audit(1758028064.517:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.784783][ T29] audit: type=1326 audit(1758028064.517:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7272 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 108.820285][ T7282] loop5: detected capacity change from 0 to 512 [ 108.826864][ T7282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.847263][ T7282] journal_path: Non-blockdev passed as './file2' [ 108.853669][ T7282] EXT4-fs: error: could not find journal device path [ 108.948444][ T7289] wireguard0: entered promiscuous mode [ 108.953962][ T7289] wireguard0: entered allmulticast mode [ 109.144647][ T7300] program syz.0.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.154295][ T7300] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.431847][ T7297] loop7: detected capacity change from 0 to 2048 [ 109.451460][ T7297] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.1075: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 109.486294][ T7297] EXT4-fs (loop7): get root inode failed [ 109.492006][ T7297] EXT4-fs (loop7): mount failed [ 109.786308][ T7322] unsupported nla_type 52263 [ 109.834764][ T7326] lo speed is unknown, defaulting to 1000 [ 109.926632][ T7326] FAULT_INJECTION: forcing a failure. [ 109.926632][ T7326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.940010][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.8.1086 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.940115][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.940128][ T7326] Call Trace: [ 109.940135][ T7326] [ 109.940143][ T7326] __dump_stack+0x1d/0x30 [ 109.940177][ T7326] dump_stack_lvl+0xe8/0x140 [ 109.940193][ T7326] dump_stack+0x15/0x1b [ 109.940207][ T7326] should_fail_ex+0x265/0x280 [ 109.940227][ T7326] should_fail_alloc_page+0xf2/0x100 [ 109.940315][ T7326] __alloc_frozen_pages_noprof+0xff/0x360 [ 109.940422][ T7326] alloc_pages_mpol+0xb3/0x250 [ 109.940448][ T7326] vma_alloc_folio_noprof+0x1aa/0x300 [ 109.940492][ T7326] handle_mm_fault+0xec2/0x2c20 [ 109.940524][ T7326] do_user_addr_fault+0x636/0x1090 [ 109.940609][ T7326] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 109.940641][ T7326] exc_page_fault+0x62/0xa0 [ 109.940671][ T7326] asm_exc_page_fault+0x26/0x30 [ 109.940691][ T7326] RIP: 0033:0x7f5f838d0c50 [ 109.940705][ T7326] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 109.940721][ T7326] RSP: 002b:00007f5f824764a0 EFLAGS: 00010286 [ 109.940735][ T7326] RAX: 0000000000001000 RBX: 00007f5f82476540 RCX: 0000000000000001 [ 109.940746][ T7326] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 00007f5f824765e0 [ 109.940756][ T7326] RBP: 00000000000000db R08: 00007f5f7a036000 R09: 00000000000000ff [ 109.940768][ T7326] R10: 0000000000000000 R11: 00007f5f82476550 R12: 0000000000000001 [ 109.940812][ T7326] R13: 00007f5f83aada00 R14: 0000000000000000 R15: 00007f5f824765e0 [ 109.940829][ T7326] [ 109.940837][ T7326] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 110.198413][ T7326] loop8: detected capacity change from 0 to 512 [ 110.243448][ T7326] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1086: error while reading EA inode 32 err=-116 [ 110.263604][ T7326] EXT4-fs (loop8): Remounting filesystem read-only [ 110.270257][ T7326] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 110.305247][ T7326] EXT4-fs (loop8): 1 orphan inode deleted [ 110.321808][ T7326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.352530][ T7326] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.941648][ T7361] IPVS: Error connecting to the multicast addr [ 110.968984][ T7363] bond1: entered promiscuous mode [ 110.974215][ T7363] bond1: entered allmulticast mode [ 110.982083][ T7363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.010623][ T7363] bond1 (unregistering): Released all slaves [ 111.055479][ T7374] program syz.3.1097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.094337][ T7374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.137922][ T7373] __nla_validate_parse: 5 callbacks suppressed [ 111.137936][ T7373] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1099'. [ 111.247332][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 111.391145][ T7383] FAULT_INJECTION: forcing a failure. [ 111.391145][ T7383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.404284][ T7383] CPU: 1 UID: 0 PID: 7383 Comm: syz.5.1102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.404364][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.404376][ T7383] Call Trace: [ 111.404383][ T7383] [ 111.404392][ T7383] __dump_stack+0x1d/0x30 [ 111.404412][ T7383] dump_stack_lvl+0xe8/0x140 [ 111.404432][ T7383] dump_stack+0x15/0x1b [ 111.404513][ T7383] should_fail_ex+0x265/0x280 [ 111.404538][ T7383] should_fail+0xb/0x20 [ 111.404575][ T7383] should_fail_usercopy+0x1a/0x20 [ 111.404599][ T7383] copy_folio_from_iter_atomic+0x278/0x11b0 [ 111.404635][ T7383] ? shmem_write_begin+0xa8/0x190 [ 111.404709][ T7383] ? shmem_write_begin+0xe1/0x190 [ 111.404726][ T7383] generic_perform_write+0x2c2/0x490 [ 111.404799][ T7383] shmem_file_write_iter+0xc5/0xf0 [ 111.404825][ T7383] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 111.404909][ T7383] vfs_write+0x52a/0x960 [ 111.405014][ T7383] ksys_write+0xda/0x1a0 [ 111.405033][ T7383] __x64_sys_write+0x40/0x50 [ 111.405051][ T7383] x64_sys_call+0x27fe/0x2ff0 [ 111.405070][ T7383] do_syscall_64+0xd2/0x200 [ 111.405152][ T7383] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.405172][ T7383] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.405199][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.405292][ T7383] RIP: 0033:0x7f4c3cd7d65f [ 111.405306][ T7383] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 111.405323][ T7383] RSP: 002b:00007f4c3b7dedf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 111.405343][ T7383] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f4c3cd7d65f [ 111.405422][ T7383] RDX: 0000000000040000 RSI: 00007f4c333bf000 RDI: 0000000000000007 [ 111.405434][ T7383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000429 [ 111.405445][ T7383] R10: 0000200000000942 R11: 0000000000000293 R12: 0000000000000007 [ 111.405455][ T7383] R13: 00007f4c3b7deef0 R14: 00007f4c3b7deeb0 R15: 00007f4c333bf000 [ 111.405528][ T7383] [ 111.609355][ T7383] loop5: detected capacity change from 0 to 512 [ 111.622853][ T7383] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.634959][ T7383] EXT4-fs (loop5): 1 truncate cleaned up [ 111.641822][ T7383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.664081][ T7383] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.751294][ T7396] loop5: detected capacity change from 0 to 512 [ 111.799462][ T7396] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.866398][ T7396] EXT4-fs (loop5): 1 truncate cleaned up [ 111.874177][ T7396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.935820][ T7396] EXT4-fs (loop5): shut down requested (2) [ 112.020596][ T6648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.136433][ T7424] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 112.144325][ T7424] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1113'. [ 112.436817][ T7436] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1119'. [ 112.445919][ T7436] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1119'. [ 112.661397][ T7442] program syz.5.1121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.672077][ T7442] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 113.026754][ T7456] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1126'. [ 113.442726][ T7466] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1130'. [ 113.463884][ T7452] Set syz1 is full, maxelem 65536 reached [ 113.465263][ T7466] lo speed is unknown, defaulting to 1000 [ 113.544482][ T7471] FAULT_INJECTION: forcing a failure. [ 113.544482][ T7471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.557892][ T7471] CPU: 1 UID: 0 PID: 7471 Comm: syz.0.1132 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.557917][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.557927][ T7471] Call Trace: [ 113.557934][ T7471] [ 113.557940][ T7471] __dump_stack+0x1d/0x30 [ 113.557959][ T7471] dump_stack_lvl+0xe8/0x140 [ 113.557995][ T7471] dump_stack+0x15/0x1b [ 113.558009][ T7471] should_fail_ex+0x265/0x280 [ 113.558034][ T7471] should_fail_alloc_page+0xf2/0x100 [ 113.558062][ T7471] __alloc_frozen_pages_noprof+0xff/0x360 [ 113.558142][ T7471] alloc_pages_mpol+0xb3/0x250 [ 113.558172][ T7471] folio_alloc_mpol_noprof+0x39/0x80 [ 113.558271][ T7471] shmem_get_folio_gfp+0x3cf/0xd60 [ 113.558303][ T7471] shmem_write_begin+0xa8/0x190 [ 113.558320][ T7471] generic_perform_write+0x181/0x490 [ 113.558344][ T7471] shmem_file_write_iter+0xc5/0xf0 [ 113.558427][ T7471] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 113.558447][ T7471] vfs_write+0x52a/0x960 [ 113.558473][ T7471] ksys_write+0xda/0x1a0 [ 113.558554][ T7471] __x64_sys_write+0x40/0x50 [ 113.558576][ T7471] x64_sys_call+0x27fe/0x2ff0 [ 113.558595][ T7471] do_syscall_64+0xd2/0x200 [ 113.558712][ T7471] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.558735][ T7471] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.558762][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.558783][ T7471] RIP: 0033:0x7f0bbb59eba9 [ 113.558868][ T7471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.558894][ T7471] RSP: 002b:00007f0bb9fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.558927][ T7471] RAX: ffffffffffffffda RBX: 00007f0bbb7e5fa0 RCX: 00007f0bbb59eba9 [ 113.558939][ T7471] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 113.558949][ T7471] RBP: 00007f0bb9fff090 R08: 0000000000000000 R09: 0000000000000000 [ 113.558960][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.558970][ T7471] R13: 00007f0bbb7e6038 R14: 00007f0bbb7e5fa0 R15: 00007fff747bb088 [ 113.558985][ T7471] [ 113.561465][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 113.561477][ T29] audit: type=1326 audit(1758028069.517:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51a627d510 code=0x7ffc0000 [ 113.606443][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1133'. [ 113.608523][ T29] audit: type=1326 audit(1758028069.517:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51a627e7ab code=0x7ffc0000 [ 113.687409][ T7480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 113.690641][ T29] audit: type=1326 audit(1758028069.517:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f51a627d80a code=0x7ffc0000 [ 113.695074][ T7480] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 113.714713][ T29] audit: type=1326 audit(1758028069.517:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f51a627d80a code=0x7ffc0000 [ 113.714747][ T29] audit: type=1326 audit(1758028069.517:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 113.715173][ T29] audit: type=1326 audit(1758028069.537:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 113.723216][ T7480] audit: backlog limit exceeded [ 113.731214][ T29] audit: type=1326 audit(1758028069.537:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51a627d510 code=0x7ffc0000 [ 113.828381][ T7481] loop5: detected capacity change from 0 to 512 [ 113.916204][ T7480] loop8: detected capacity change from 0 to 2048 [ 113.997411][ T7481] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1130: error while reading EA inode 32 err=-116 [ 114.004791][ T7491] FAULT_INJECTION: forcing a failure. [ 114.004791][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.010586][ T7481] EXT4-fs (loop5): Remounting filesystem read-only [ 114.022833][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.3.1139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.022858][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.022870][ T7491] Call Trace: [ 114.022877][ T7491] [ 114.022885][ T7491] __dump_stack+0x1d/0x30 [ 114.022907][ T7491] dump_stack_lvl+0xe8/0x140 [ 114.022978][ T7491] dump_stack+0x15/0x1b [ 114.022994][ T7491] should_fail_ex+0x265/0x280 [ 114.023020][ T7491] should_fail+0xb/0x20 [ 114.023039][ T7491] should_fail_usercopy+0x1a/0x20 [ 114.023128][ T7491] _copy_from_user+0x1c/0xb0 [ 114.023262][ T7491] tcp_v6_parse_md5_keys+0x9a/0x450 [ 114.023298][ T7491] do_tcp_setsockopt+0xf21/0x1670 [ 114.023321][ T7491] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 114.023402][ T7491] tcp_setsockopt+0x51/0xb0 [ 114.023539][ T7491] sock_common_setsockopt+0x66/0x80 [ 114.023569][ T7491] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 114.023601][ T7491] __sys_setsockopt+0x181/0x200 [ 114.023651][ T7491] __x64_sys_setsockopt+0x64/0x80 [ 114.023675][ T7491] x64_sys_call+0x20ec/0x2ff0 [ 114.023712][ T7491] do_syscall_64+0xd2/0x200 [ 114.023756][ T7491] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.023780][ T7491] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.023808][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.023828][ T7491] RIP: 0033:0x7f51a627eba9 [ 114.023842][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.023920][ T7491] RSP: 002b:00007f51a4ce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.023938][ T7491] RAX: ffffffffffffffda RBX: 00007f51a64c5fa0 RCX: 00007f51a627eba9 [ 114.023950][ T7491] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000006 [ 114.023962][ T7491] RBP: 00007f51a4ce7090 R08: 00000000000000d8 R09: 0000000000000000 [ 114.024016][ T7491] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 114.024028][ T7491] R13: 00007f51a64c6038 R14: 00007f51a64c5fa0 R15: 00007ffc4cb2d788 [ 114.024045][ T7491] [ 114.061157][ T7480] loop8: p2 < > p3 < > [ 114.064466][ T7481] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 114.064691][ T7481] EXT4-fs (loop5): 1 orphan inode deleted [ 114.068676][ T7480] loop8: partition table partially beyond EOD, [ 114.073740][ T7481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.077559][ T7480] truncated [ 114.220276][ T7480] loop8: p2 start 4278190080 is beyond EOD, [ 114.233297][ T7481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.235319][ T7480] truncated [ 114.258536][ T7499] program syz.3.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.301813][ T7499] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 114.313564][ T7501] ip6tnl1: entered promiscuous mode [ 114.513790][ T7513] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1144'. [ 114.579803][ T7522] loop5: detected capacity change from 0 to 512 [ 114.586967][ T7522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.656395][ T7529] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1150'. [ 114.669244][ T7522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.684228][ T7522] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.834142][ T7533] loop8: detected capacity change from 0 to 2048 [ 114.860771][ T7533] EXT4-fs (loop8): failed to initialize system zone (-117) [ 114.868104][ T7533] EXT4-fs (loop8): mount failed [ 114.878731][ T7533] netlink: 'syz.8.1151': attribute type 3 has an invalid length. [ 114.910213][ T7538] loop8: detected capacity change from 0 to 1024 [ 114.921604][ T7538] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.934164][ T7538] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.960562][ T6604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.977240][ T7542] FAULT_INJECTION: forcing a failure. [ 114.977240][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 114.990034][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.8.1153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.990062][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.990074][ T7542] Call Trace: [ 114.990080][ T7542] [ 114.990088][ T7542] __dump_stack+0x1d/0x30 [ 114.990149][ T7542] dump_stack_lvl+0xe8/0x140 [ 114.990237][ T7542] dump_stack+0x15/0x1b [ 114.990251][ T7542] should_fail_ex+0x265/0x280 [ 114.990309][ T7542] ? v9fs_mount+0x51/0x5c0 [ 114.990336][ T7542] should_failslab+0x8c/0xb0 [ 114.990361][ T7542] __kmalloc_cache_noprof+0x4c/0x320 [ 114.990416][ T7542] v9fs_mount+0x51/0x5c0 [ 114.990440][ T7542] ? selinux_capable+0x31/0x40 [ 114.990463][ T7542] ? __pfx_v9fs_mount+0x10/0x10 [ 114.990569][ T7542] legacy_get_tree+0x75/0xd0 [ 114.990635][ T7542] vfs_get_tree+0x54/0x1d0 [ 114.990683][ T7542] do_new_mount+0x207/0x5e0 [ 114.990705][ T7542] ? security_capable+0x83/0x90 [ 114.990731][ T7542] path_mount+0x4a4/0xb20 [ 114.990753][ T7542] ? user_path_at+0x109/0x130 [ 114.990794][ T7542] __se_sys_mount+0x28f/0x2e0 [ 114.990816][ T7542] ? fput+0x8f/0xc0 [ 114.990843][ T7542] __x64_sys_mount+0x67/0x80 [ 114.990861][ T7542] x64_sys_call+0x2b4d/0x2ff0 [ 114.990887][ T7542] do_syscall_64+0xd2/0x200 [ 114.990914][ T7542] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.990939][ T7542] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.991005][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.991026][ T7542] RIP: 0033:0x7f5f83a0eba9 [ 114.991038][ T7542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.991056][ T7542] RSP: 002b:00007f5f82477038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.991125][ T7542] RAX: ffffffffffffffda RBX: 00007f5f83c55fa0 RCX: 00007f5f83a0eba9 [ 114.991138][ T7542] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 114.991151][ T7542] RBP: 00007f5f82477090 R08: 0000200000000400 R09: 0000000000000000 [ 114.991213][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.991226][ T7542] R13: 00007f5f83c56038 R14: 00007f5f83c55fa0 R15: 00007fff1cac58d8 [ 114.991245][ T7542] [ 115.278394][ T7544] loop8: detected capacity change from 0 to 128 [ 115.306603][ T7544] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 115.314513][ T7544] FAT-fs (loop8): Filesystem has been set read-only [ 115.323725][ T7544] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 115.340210][ T7544] syz.8.1154: attempt to access beyond end of device [ 115.340210][ T7544] loop8: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 115.404939][ T7554] FAULT_INJECTION: forcing a failure. [ 115.404939][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 115.417750][ T7554] CPU: 0 UID: 0 PID: 7554 Comm: syz.7.1158 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.417778][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.417857][ T7554] Call Trace: [ 115.417863][ T7554] [ 115.417869][ T7554] __dump_stack+0x1d/0x30 [ 115.417887][ T7554] dump_stack_lvl+0xe8/0x140 [ 115.417940][ T7554] dump_stack+0x15/0x1b [ 115.417957][ T7554] should_fail_ex+0x265/0x280 [ 115.418030][ T7554] should_failslab+0x8c/0xb0 [ 115.418056][ T7554] kmem_cache_alloc_noprof+0x50/0x310 [ 115.418079][ T7554] ? skb_clone+0x151/0x1f0 [ 115.418105][ T7554] skb_clone+0x151/0x1f0 [ 115.418171][ T7554] ip_mc_output+0x10d/0x340 [ 115.418199][ T7554] ? __pfx_dst_output+0x10/0x10 [ 115.418227][ T7554] ip_send_skb+0x14e/0x160 [ 115.418319][ T7554] udp_send_skb+0x6e3/0xa40 [ 115.418350][ T7554] udp_sendmsg+0x1050/0x13c0 [ 115.418380][ T7554] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 115.418411][ T7554] ? __pfx_udp_sendmsg+0x10/0x10 [ 115.418476][ T7554] inet_sendmsg+0xac/0xd0 [ 115.418497][ T7554] __sock_sendmsg+0x102/0x180 [ 115.418527][ T7554] ____sys_sendmsg+0x345/0x4e0 [ 115.418626][ T7554] ___sys_sendmsg+0x17b/0x1d0 [ 115.418731][ T7554] __sys_sendmmsg+0x178/0x300 [ 115.418766][ T7554] __x64_sys_sendmmsg+0x57/0x70 [ 115.418827][ T7554] x64_sys_call+0x1c4a/0x2ff0 [ 115.418846][ T7554] do_syscall_64+0xd2/0x200 [ 115.418878][ T7554] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.418903][ T7554] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.418963][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.419060][ T7554] RIP: 0033:0x7fb66e7beba9 [ 115.419074][ T7554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.419092][ T7554] RSP: 002b:00007fb66d21f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.419112][ T7554] RAX: ffffffffffffffda RBX: 00007fb66ea05fa0 RCX: 00007fb66e7beba9 [ 115.419126][ T7554] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 115.419139][ T7554] RBP: 00007fb66d21f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.419180][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.419200][ T7554] R13: 00007fb66ea06038 R14: 00007fb66ea05fa0 R15: 00007ffd9ac13268 [ 115.419217][ T7554] [ 115.655248][ T6648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.795453][ T7572] loop8: detected capacity change from 0 to 1024 [ 115.825153][ T7572] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.831759][ T7572] EXT4-fs: Ignoring removed nobh option [ 115.868052][ T7572] ext4: Unknown parameter 'dioread_no' [ 115.898939][ T7572] loop8: detected capacity change from 0 to 2048 [ 115.924435][ T7572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.988907][ T7584] loop7: detected capacity change from 0 to 512 [ 116.001265][ T7585] program syz.0.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.012453][ T7585] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.060735][ T7584] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.069877][ T7584] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 116.120665][ T7584] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 116.136889][ T7584] System zones: 0-2, 18-18, 34-35 [ 116.199909][ T7584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.237978][ T7572] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.264725][ T6223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.274848][ T7572] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 116.287080][ T7572] EXT4-fs (loop8): This should not happen!! Data will be lost [ 116.287080][ T7572] [ 116.296764][ T7572] EXT4-fs (loop8): Total free blocks count 0 [ 116.302775][ T7572] EXT4-fs (loop8): Free/Dirty block details [ 116.308675][ T7572] EXT4-fs (loop8): free_blocks=2415919104 [ 116.314424][ T7572] EXT4-fs (loop8): dirty_blocks=32 [ 116.319539][ T7572] EXT4-fs (loop8): Block reservation details [ 116.325551][ T7572] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 116.349258][ T167] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 116.646452][ T7614] __nla_validate_parse: 1 callbacks suppressed [ 116.646469][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 116.666012][ T7614] netlink: 'syz.3.1177': attribute type 27 has an invalid length. [ 116.678011][ T7614] 0·: left allmulticast mode [ 116.682902][ T7614] hsr_slave_0: left allmulticast mode [ 116.688750][ T7614] hsr_slave_1: left allmulticast mode [ 116.789238][ T7614] syz_tun: entered allmulticast mode [ 116.807577][ T7626] netlink: 'syz.0.1180': attribute type 6 has an invalid length. [ 116.973672][ T7644] netlink: 'syz.8.1189': attribute type 1 has an invalid length. [ 116.981798][ T7644] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1189'. [ 117.013799][ T7644] loop8: detected capacity change from 0 to 512 [ 117.031117][ T7644] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 117.050808][ T7644] EXT4-fs (loop8): 1 truncate cleaned up [ 117.057082][ T7644] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.101382][ T6604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.133684][ T7651] FAULT_INJECTION: forcing a failure. [ 117.133684][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 117.146411][ T7651] CPU: 1 UID: 0 PID: 7651 Comm: syz.0.1192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.146438][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.146449][ T7651] Call Trace: [ 117.146454][ T7651] [ 117.146459][ T7651] __dump_stack+0x1d/0x30 [ 117.146477][ T7651] dump_stack_lvl+0xe8/0x140 [ 117.146493][ T7651] dump_stack+0x15/0x1b [ 117.146573][ T7651] should_fail_ex+0x265/0x280 [ 117.146596][ T7651] should_failslab+0x8c/0xb0 [ 117.146621][ T7651] kmem_cache_alloc_node_noprof+0x57/0x320 [ 117.146650][ T7651] ? __alloc_skb+0x101/0x320 [ 117.146671][ T7651] __alloc_skb+0x101/0x320 [ 117.146859][ T7651] tc_ctl_action+0x64b/0x830 [ 117.146974][ T7651] ? __pfx_tc_ctl_action+0x10/0x10 [ 117.147071][ T7651] rtnetlink_rcv_msg+0x65a/0x6d0 [ 117.147170][ T7651] ? avc_has_perm_noaudit+0x1b1/0x200 [ 117.147230][ T7651] netlink_rcv_skb+0x120/0x220 [ 117.147253][ T7651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.147290][ T7651] rtnetlink_rcv+0x1c/0x30 [ 117.147350][ T7651] netlink_unicast+0x5c0/0x690 [ 117.147421][ T7651] netlink_sendmsg+0x58b/0x6b0 [ 117.147449][ T7651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.147469][ T7651] __sock_sendmsg+0x142/0x180 [ 117.147497][ T7651] ____sys_sendmsg+0x31e/0x4e0 [ 117.147585][ T7651] ___sys_sendmsg+0x17b/0x1d0 [ 117.147620][ T7651] __x64_sys_sendmsg+0xd4/0x160 [ 117.147651][ T7651] x64_sys_call+0x191e/0x2ff0 [ 117.147669][ T7651] do_syscall_64+0xd2/0x200 [ 117.147785][ T7651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.147805][ T7651] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.147828][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.147849][ T7651] RIP: 0033:0x7f0bbb59eba9 [ 117.147920][ T7651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.147941][ T7651] RSP: 002b:00007f0bb9fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.147957][ T7651] RAX: ffffffffffffffda RBX: 00007f0bbb7e5fa0 RCX: 00007f0bbb59eba9 [ 117.147967][ T7651] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 117.147980][ T7651] RBP: 00007f0bb9fff090 R08: 0000000000000000 R09: 0000000000000000 [ 117.147993][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.148008][ T7651] R13: 00007f0bbb7e6038 R14: 00007f0bbb7e5fa0 R15: 00007fff747bb088 [ 117.148044][ T7651] [ 117.407128][ T7659] SELinux: policydb version 1207 does not match my version range 15-35 [ 117.415833][ T7659] SELinux: failed to load policy [ 117.415898][ T7656] loop5: detected capacity change from 0 to 1024 [ 117.430761][ T7656] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 117.437228][ T7656] EXT4-fs (loop5): mount failed [ 117.496932][ T7671] program syz.8.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.518766][ T7670] syzkaller0: entered promiscuous mode [ 117.519148][ T7671] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 117.524335][ T7670] syzkaller0: entered allmulticast mode [ 117.755089][ T7689] netlink: 'syz.5.1203': attribute type 1 has an invalid length. [ 117.762926][ T7689] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1203'. [ 117.803026][ T7689] loop5: detected capacity change from 0 to 512 [ 117.810657][ T7689] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.823586][ T7689] EXT4-fs (loop5): 1 truncate cleaned up [ 117.829923][ T7689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.885569][ T7697] 9pnet_fd: Insufficient options for proto=fd [ 117.893805][ T6648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.973091][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1208'. [ 117.982060][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1208'. [ 118.151166][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'. [ 118.161776][ T7721] syz_tun: entered allmulticast mode [ 119.234005][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 119.234019][ T29] audit: type=1400 audit(1758028075.187:4733): avc: denied { connect } for pid=7755 comm="syz.7.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.286717][ T29] audit: type=1400 audit(1758028075.237:4734): avc: denied { write } for pid=7755 comm="syz.7.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.515520][ T29] audit: type=1326 audit(1758028075.467:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb59eba9 code=0x7ffc0000 [ 119.557463][ T29] audit: type=1326 audit(1758028075.467:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0bbb59eba9 code=0x7ffc0000 [ 119.580991][ T29] audit: type=1326 audit(1758028075.467:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb59eba9 code=0x7ffc0000 [ 119.604617][ T29] audit: type=1326 audit(1758028075.467:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0bbb59eba9 code=0x7ffc0000 [ 119.628263][ T29] audit: type=1326 audit(1758028075.467:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbb59eba9 code=0x7ffc0000 [ 119.651833][ T29] audit: type=1400 audit(1758028075.497:4740): avc: denied { connect } for pid=7765 comm="syz.8.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.671724][ T29] audit: type=1400 audit(1758028075.557:4741): avc: denied { write } for pid=7765 comm="syz.8.1226" path="socket:[20935]" dev="sockfs" ino=20935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.702734][ T7766] loop8: detected capacity change from 0 to 512 [ 119.709531][ T7766] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 119.731723][ T7766] EXT4-fs (loop8): 1 truncate cleaned up [ 119.737752][ T7766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.776559][ T6604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.804924][ T29] audit: type=1400 audit(1758028075.757:4742): avc: denied { setopt } for pid=7773 comm="syz.5.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.858780][ T7774] vlan2: entered allmulticast mode [ 119.866579][ T7774] dummy0: entered allmulticast mode [ 120.014580][ T7785] loop8: detected capacity change from 0 to 512 [ 120.023549][ T7785] EXT4-fs warning (device loop8): ext4_xattr_inode_get:542: inode #11: comm syz.8.1232: ea_inode file size=4 entry size=6 [ 120.037305][ T7785] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.1232: corrupted inode contents [ 120.050265][ T7785] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #15: comm syz.8.1232: mark_inode_dirty error [ 120.062093][ T7785] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.1232: corrupted inode contents [ 120.106783][ T7789] siw: device registration error -23 [ 120.138678][ T7785] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #15: comm syz.8.1232: mark_inode_dirty error [ 120.150958][ T7785] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #15: comm syz.8.1232: mark inode dirty (error -117) [ 120.154385][ T7791] netlink: 'syz.7.1234': attribute type 1 has an invalid length. [ 120.177096][ T7785] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 120.197083][ T7785] EXT4-fs (loop8): 1 orphan inode deleted [ 120.206047][ T7791] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1234'. [ 120.217831][ T7785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.238327][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7795 comm=syz.5.1236 [ 120.251117][ T7798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7798 comm=syz.5.1236 [ 120.288288][ T6604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.457190][ T7826] sd 0:0:1:0: device reset [ 120.464514][ T7826] loop7: detected capacity change from 0 to 128 [ 120.557062][ T7834] FAULT_INJECTION: forcing a failure. [ 120.557062][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 120.569701][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.8.1249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.569724][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.569738][ T7834] Call Trace: [ 120.569744][ T7834] [ 120.569752][ T7834] __dump_stack+0x1d/0x30 [ 120.569803][ T7834] dump_stack_lvl+0xe8/0x140 [ 120.569823][ T7834] dump_stack+0x15/0x1b [ 120.569836][ T7834] should_fail_ex+0x265/0x280 [ 120.569857][ T7834] should_failslab+0x8c/0xb0 [ 120.569878][ T7834] kmem_cache_alloc_noprof+0x50/0x310 [ 120.569969][ T7834] ? skb_clone+0x151/0x1f0 [ 120.569994][ T7834] ? __bpf_redirect+0x67f/0x990 [ 120.570061][ T7834] skb_clone+0x151/0x1f0 [ 120.570116][ T7834] bpf_clone_redirect+0x7a/0x200 [ 120.570180][ T7834] bpf_prog_6893982b85ceadf7+0x5f/0x68 [ 120.570195][ T7834] ? obj_cgroup_charge_account+0x122/0x1a0 [ 120.570283][ T7834] ? should_fail_ex+0x30/0x280 [ 120.570306][ T7834] ? __rcu_read_unlock+0x4f/0x70 [ 120.570329][ T7834] ? avc_has_perm_noaudit+0x1b1/0x200 [ 120.570353][ T7834] ? avc_has_perm+0xf7/0x180 [ 120.570445][ T7834] ? __rcu_read_unlock+0x4f/0x70 [ 120.570464][ T7834] ? is_bpf_text_address+0x141/0x160 [ 120.570492][ T7834] ? kernel_text_address+0x94/0xb0 [ 120.570595][ T7834] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.570625][ T7834] ? __kernel_text_address+0xd/0x40 [ 120.570650][ T7834] ? unwind_get_return_address+0x16/0x40 [ 120.570795][ T7834] ? arch_stack_walk+0xfc/0x150 [ 120.570839][ T7834] ? filter_irq_stacks+0x1d/0x70 [ 120.570867][ T7834] ? stack_depot_save_flags+0xa93/0xb80 [ 120.570886][ T7834] ? bpf_test_timer_continue+0xc0/0x260 [ 120.570956][ T7834] bpf_test_run+0x1e3/0x490 [ 120.570978][ T7834] ? __list_add_valid_or_report+0x38/0xe0 [ 120.571014][ T7834] ? bpf_test_run+0xf6/0x490 [ 120.571091][ T7834] bpf_prog_test_run_skb+0x834/0xbd0 [ 120.571181][ T7834] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 120.571215][ T7834] bpf_prog_test_run+0x227/0x390 [ 120.571247][ T7834] __sys_bpf+0x4b9/0x7b0 [ 120.571276][ T7834] __x64_sys_bpf+0x41/0x50 [ 120.571310][ T7834] x64_sys_call+0x2aea/0x2ff0 [ 120.571334][ T7834] do_syscall_64+0xd2/0x200 [ 120.571388][ T7834] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.571413][ T7834] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.571442][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.571526][ T7834] RIP: 0033:0x7f5f83a0eba9 [ 120.571563][ T7834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.571580][ T7834] RSP: 002b:00007f5f82477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.571596][ T7834] RAX: ffffffffffffffda RBX: 00007f5f83c55fa0 RCX: 00007f5f83a0eba9 [ 120.571608][ T7834] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 120.571619][ T7834] RBP: 00007f5f82477090 R08: 0000000000000000 R09: 0000000000000000 [ 120.571643][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.571656][ T7834] R13: 00007f5f83c56038 R14: 00007f5f83c55fa0 R15: 00007fff1cac58d8 [ 120.571675][ T7834] [ 120.930237][ T7745] kworker/u8:8: attempt to access beyond end of device [ 120.930237][ T7745] loop7: rw=1, sector=153, nr_sectors = 8 limit=128 [ 120.943733][ T7745] kworker/u8:8: attempt to access beyond end of device [ 120.943733][ T7745] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 120.969358][ T7745] kworker/u8:8: attempt to access beyond end of device [ 120.969358][ T7745] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 121.005952][ T7837] lo speed is unknown, defaulting to 1000 [ 121.019401][ T7745] kworker/u8:8: attempt to access beyond end of device [ 121.019401][ T7745] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 121.109373][ T7745] kworker/u8:8: attempt to access beyond end of device [ 121.109373][ T7745] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 121.129552][ T7745] kworker/u8:8: attempt to access beyond end of device [ 121.129552][ T7745] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 121.143100][ T7745] kworker/u8:8: attempt to access beyond end of device [ 121.143100][ T7745] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 121.166840][ T7745] kworker/u8:8: attempt to access beyond end of device [ 121.166840][ T7745] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 121.202318][ T7841] loop8: detected capacity change from 0 to 512 [ 121.209223][ T7745] kworker/u8:8: attempt to access beyond end of device [ 121.209223][ T7745] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 121.223302][ T7745] kworker/u8:8: attempt to access beyond end of device [ 121.223302][ T7745] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 121.240438][ T7841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.308389][ T7846] FAULT_INJECTION: forcing a failure. [ 121.308389][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 121.321063][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.7.1251 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.321091][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.321103][ T7846] Call Trace: [ 121.321111][ T7846] [ 121.321119][ T7846] __dump_stack+0x1d/0x30 [ 121.321141][ T7846] dump_stack_lvl+0xe8/0x140 [ 121.321166][ T7846] dump_stack+0x15/0x1b [ 121.321183][ T7846] should_fail_ex+0x265/0x280 [ 121.321274][ T7846] ? io_ring_ctx_alloc+0x38/0x6a0 [ 121.321347][ T7846] should_failslab+0x8c/0xb0 [ 121.321521][ T7846] __kmalloc_cache_noprof+0x4c/0x320 [ 121.321550][ T7846] ? avc_has_perm_noaudit+0x1b1/0x200 [ 121.321577][ T7846] io_ring_ctx_alloc+0x38/0x6a0 [ 121.321602][ T7846] ? avc_has_perm+0xf7/0x180 [ 121.321696][ T7846] ? io_uring_fill_params+0x27f/0x300 [ 121.321729][ T7846] io_uring_create+0x10f/0x610 [ 121.321751][ T7846] __se_sys_io_uring_setup+0x1f7/0x210 [ 121.321779][ T7846] __x64_sys_io_uring_setup+0x31/0x40 [ 121.321804][ T7846] x64_sys_call+0x2b21/0x2ff0 [ 121.321862][ T7846] do_syscall_64+0xd2/0x200 [ 121.321888][ T7846] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.321908][ T7846] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.321931][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.321989][ T7846] RIP: 0033:0x7fb66e7beba9 [ 121.322004][ T7846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.322053][ T7846] RSP: 002b:00007fb66d21efc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 121.322084][ T7846] RAX: ffffffffffffffda RBX: 00007fb66ea05fa0 RCX: 00007fb66e7beba9 [ 121.322094][ T7846] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 121.322105][ T7846] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 121.322146][ T7846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 121.322158][ T7846] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 121.322178][ T7846] [ 121.379394][ T7841] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.544402][ T7841] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.1252: corrupted xattr block 19: overlapping e_value [ 121.588795][ T7841] EXT4-fs (loop8): Remounting filesystem read-only [ 121.595410][ T7841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 121.629344][ T7841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 121.648575][ T7841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 121.687368][ T6604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.825617][ T7869] lo speed is unknown, defaulting to 1000 [ 121.863109][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1262'. [ 122.085456][ T7890] program syz.5.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.104547][ T7890] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.424907][ T7902] lo speed is unknown, defaulting to 1000 [ 122.538000][ T7913] loop8: detected capacity change from 0 to 512 [ 122.567628][ T7913] EXT4-fs warning (device loop8): ext4_xattr_inode_get:556: inode #11: comm syz.8.1281: EA inode hash validation failed [ 122.595402][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 122.604430][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 122.629162][ T7913] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.1281: corrupted inode contents [ 122.664729][ T7913] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #15: comm syz.8.1281: mark_inode_dirty error [ 122.780177][ T7913] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.1281: corrupted inode contents [ 122.817079][ T7913] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #15: comm syz.8.1281: mark_inode_dirty error [ 122.872067][ T7913] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #15: comm syz.8.1281: mark inode dirty (error -117) [ 122.915243][ T7913] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 122.956727][ T7913] EXT4-fs (loop8): 1 orphan inode deleted [ 122.964392][ T7913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.009796][ T6604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.245769][ T7924] program syz.3.1284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.307070][ T7924] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.948206][ T7948] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.138416][ T7964] netlink: zone id is out of range [ 124.144118][ T7964] netlink: zone id is out of range [ 124.149362][ T7964] netlink: zone id is out of range [ 124.154354][ T7960] lo speed is unknown, defaulting to 1000 [ 124.154475][ T7964] netlink: zone id is out of range [ 124.166227][ T7964] netlink: zone id is out of range [ 124.171426][ T7964] netlink: zone id is out of range [ 124.176657][ T7964] netlink: zone id is out of range [ 124.182007][ T7964] netlink: zone id is out of range [ 124.187283][ T7964] netlink: zone id is out of range [ 124.192774][ T7964] netlink: zone id is out of range [ 124.858060][ T7974] loop7: detected capacity change from 0 to 512 [ 124.877676][ T7974] EXT4-fs warning (device loop7): ext4_xattr_inode_get:556: inode #11: comm syz.7.1298: EA inode hash validation failed [ 124.909439][ T7974] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.1298: corrupted inode contents [ 124.930427][ T7974] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #15: comm syz.7.1298: mark_inode_dirty error [ 124.965052][ T7974] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.1298: corrupted inode contents [ 124.978307][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 124.978320][ T29] audit: type=1326 audit(1758028080.927:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.044610][ T7974] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #15: comm syz.7.1298: mark_inode_dirty error [ 125.064344][ T29] audit: type=1326 audit(1758028080.927:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.087984][ T29] audit: type=1326 audit(1758028080.927:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.111389][ T29] audit: type=1326 audit(1758028080.927:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.134792][ T29] audit: type=1326 audit(1758028080.927:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.135999][ T7974] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #15: comm syz.7.1298: mark inode dirty (error -117) [ 125.158501][ T29] audit: type=1326 audit(1758028080.927:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.194398][ T29] audit: type=1326 audit(1758028080.927:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.217964][ T29] audit: type=1326 audit(1758028080.927:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.229496][ T7974] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 125.241466][ T29] audit: type=1326 audit(1758028080.927:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.241526][ T29] audit: type=1326 audit(1758028080.927:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 125.298511][ T7974] EXT4-fs (loop7): 1 orphan inode deleted [ 125.319980][ T7974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.332247][ T7986] siw: device registration error -23 [ 125.423067][ T6223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.613151][ T8005] program syz.7.1306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.622677][ T8005] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.707294][ T8006] lo speed is unknown, defaulting to 1000 [ 126.390936][ T8038] loop5: detected capacity change from 0 to 512 [ 126.427280][ T8038] EXT4-fs warning (device loop5): ext4_xattr_inode_get:556: inode #11: comm syz.5.1317: EA inode hash validation failed [ 126.469512][ T8038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.1317: corrupted inode contents [ 126.492238][ T8038] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #15: comm syz.5.1317: mark_inode_dirty error [ 126.506020][ T8038] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.1317: corrupted inode contents [ 126.521697][ T8038] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #15: comm syz.5.1317: mark_inode_dirty error [ 126.534859][ T8038] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #15: comm syz.5.1317: mark inode dirty (error -117) [ 126.570005][ T8038] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 126.579141][ T8038] EXT4-fs (loop5): 1 orphan inode deleted [ 126.595334][ T8038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.619410][ T6648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.808198][ T8065] siw: device registration error -23 [ 126.825556][ T8065] loop7: detected capacity change from 0 to 1024 [ 126.962285][ T8065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.270170][ T8075] program syz.5.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.318527][ T8075] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 127.497189][ T6223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.817092][ T8090] lo speed is unknown, defaulting to 1000 [ 128.147277][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1338'. [ 128.161237][ T8111] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1338'. [ 128.170569][ T8111] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1338'. [ 128.298803][ T8118] program syz.0.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.308881][ T8118] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.318057][ T8121] siw: device registration error -23 [ 128.331328][ T8121] loop5: detected capacity change from 0 to 1024 [ 128.353434][ T8121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.065903][ T6648] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.438699][ T8157] program syz.5.1355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.473841][ T8157] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 129.495476][ T8161] FAULT_INJECTION: forcing a failure. [ 129.495476][ T8161] name failslab, interval 1, probability 0, space 0, times 0 [ 129.508262][ T8161] CPU: 1 UID: 0 PID: 8161 Comm: syz.3.1358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.508290][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.508302][ T8161] Call Trace: [ 129.508308][ T8161] [ 129.508376][ T8161] __dump_stack+0x1d/0x30 [ 129.508395][ T8161] dump_stack_lvl+0xe8/0x140 [ 129.508414][ T8161] dump_stack+0x15/0x1b [ 129.508428][ T8161] should_fail_ex+0x265/0x280 [ 129.508510][ T8161] ? alloc_workqueue_noprof+0x1aa/0x1330 [ 129.508536][ T8161] should_failslab+0x8c/0xb0 [ 129.508562][ T8161] __kmalloc_cache_noprof+0x4c/0x320 [ 129.508629][ T8161] alloc_workqueue_noprof+0x1aa/0x1330 [ 129.508651][ T8161] ? __schedule+0x6b9/0xb30 [ 129.508672][ T8161] ? register_netdevice+0x1e8/0xf00 [ 129.508697][ T8161] bond_init+0x94/0x2a0 [ 129.508742][ T8161] register_netdevice+0x281/0xf00 [ 129.508773][ T8161] bond_newlink+0x47/0xa0 [ 129.508793][ T8161] ? __pfx_bond_newlink+0x10/0x10 [ 129.508813][ T8161] rtnl_newlink_create+0x1b9/0x620 [ 129.508849][ T8161] ? security_capable+0x83/0x90 [ 129.508875][ T8161] ? netlink_ns_capable+0x86/0xa0 [ 129.508898][ T8161] rtnl_newlink+0xf29/0x12d0 [ 129.508978][ T8161] ? __pfx_cmp_ex_search+0x10/0x10 [ 129.508997][ T8161] ? __bpf_get_stackid+0x721/0x800 [ 129.509026][ T8161] ? __rcu_read_unlock+0x4f/0x70 [ 129.509048][ T8161] ? avc_has_perm_noaudit+0x1b1/0x200 [ 129.509151][ T8161] ? cred_has_capability+0x210/0x280 [ 129.509175][ T8161] ? selinux_capable+0x31/0x40 [ 129.509262][ T8161] ? security_capable+0x83/0x90 [ 129.509312][ T8161] ? ns_capable+0x7d/0xb0 [ 129.509332][ T8161] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.509434][ T8161] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 129.509463][ T8161] ? avc_has_perm_noaudit+0x1b1/0x200 [ 129.509485][ T8161] netlink_rcv_skb+0x120/0x220 [ 129.509544][ T8161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.509600][ T8161] rtnetlink_rcv+0x1c/0x30 [ 129.509627][ T8161] netlink_unicast+0x5c0/0x690 [ 129.509650][ T8161] netlink_sendmsg+0x58b/0x6b0 [ 129.509706][ T8161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.509729][ T8161] __sock_sendmsg+0x142/0x180 [ 129.509756][ T8161] ____sys_sendmsg+0x31e/0x4e0 [ 129.509813][ T8161] ___sys_sendmsg+0x17b/0x1d0 [ 129.509852][ T8161] __x64_sys_sendmsg+0xd4/0x160 [ 129.509882][ T8161] x64_sys_call+0x191e/0x2ff0 [ 129.509903][ T8161] do_syscall_64+0xd2/0x200 [ 129.509942][ T8161] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 129.509966][ T8161] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 129.509993][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.510011][ T8161] RIP: 0033:0x7f51a627eba9 [ 129.510035][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.510052][ T8161] RSP: 002b:00007f51a4ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.510072][ T8161] RAX: ffffffffffffffda RBX: 00007f51a64c5fa0 RCX: 00007f51a627eba9 [ 129.510128][ T8161] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 129.510141][ T8161] RBP: 00007f51a4ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.510153][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.510203][ T8161] R13: 00007f51a64c6038 R14: 00007f51a64c5fa0 R15: 00007ffc4cb2d788 [ 129.510223][ T8161] [ 129.890337][ T8163] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1357'. [ 129.913719][ T8163] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1357'. [ 129.924864][ T8163] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1357'. [ 130.293440][ T8186] net_ratelimit: 34 callbacks suppressed [ 130.293452][ T8186] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 130.946331][ T8141] program syz.8.1347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.955767][ T8141] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.052111][ T8196] loop7: detected capacity change from 0 to 512 [ 131.081054][ T8196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.093631][ T8196] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.125686][ T29] kauditd_printk_skb: 1010 callbacks suppressed [ 131.125782][ T29] audit: type=1326 audit(1758028087.062:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.171701][ T8196] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1371: corrupted xattr block 19: overlapping e_value [ 131.210078][ T8196] EXT4-fs (loop7): Remounting filesystem read-only [ 131.216607][ T8196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 131.246728][ T29] audit: type=1326 audit(1758028087.102:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.270256][ T29] audit: type=1326 audit(1758028087.102:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.280115][ T8196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 131.293650][ T29] audit: type=1326 audit(1758028087.102:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.314967][ T8196] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 131.326121][ T29] audit: type=1326 audit(1758028087.102:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.358705][ T29] audit: type=1326 audit(1758028087.102:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.382122][ T29] audit: type=1326 audit(1758028087.102:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.405422][ T29] audit: type=1326 audit(1758028087.102:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.428894][ T29] audit: type=1326 audit(1758028087.102:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.452197][ T29] audit: type=1326 audit(1758028087.102:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.7.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66e7beba9 code=0x7ffc0000 [ 131.500916][ T6223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.540582][ T8216] program syz.7.1373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.549943][ T8216] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.965403][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1381'. [ 131.974923][ T8235] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1381'. [ 131.984216][ T8235] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1381'. [ 132.403264][ T8242] RDS: rds_bind could not find a transport for fe88::108, load rds_tcp or rds_rdma? [ 132.421571][ T8242] program syz.7.1385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.691089][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 133.989030][ T8325] FAULT_INJECTION: forcing a failure. [ 133.989030][ T8325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.002208][ T8325] CPU: 1 UID: 0 PID: 8325 Comm: syz.7.1415 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.002236][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.002246][ T8325] Call Trace: [ 134.002252][ T8325] [ 134.002279][ T8325] __dump_stack+0x1d/0x30 [ 134.002299][ T8325] dump_stack_lvl+0xe8/0x140 [ 134.002319][ T8325] dump_stack+0x15/0x1b [ 134.002336][ T8325] should_fail_ex+0x265/0x280 [ 134.002362][ T8325] should_fail+0xb/0x20 [ 134.002455][ T8325] should_fail_usercopy+0x1a/0x20 [ 134.002477][ T8325] fpu__restore_sig+0x12d/0xaa0 [ 134.002510][ T8325] ? should_fail_ex+0xdb/0x280 [ 134.002540][ T8325] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 134.002613][ T8325] x64_sys_call+0x2d3c/0x2ff0 [ 134.002697][ T8325] do_syscall_64+0xd2/0x200 [ 134.002730][ T8325] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.002822][ T8325] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.002846][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.002923][ T8325] RIP: 0033:0x7fb66e7beba7 [ 134.002938][ T8325] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 134.002955][ T8325] RSP: 002b:00007fb66d21f038 EFLAGS: 00000246 [ 134.002968][ T8325] RAX: 0000000000000049 RBX: 00007fb66ea05fa0 RCX: 00007fb66e7beba9 [ 134.002978][ T8325] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 134.002989][ T8325] RBP: 00007fb66d21f090 R08: 0000000000000000 R09: 0000000000000000 [ 134.002999][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.003012][ T8325] R13: 00007fb66ea06038 R14: 00007fb66ea05fa0 R15: 00007ffd9ac13268 [ 134.003092][ T8325] [ 134.410395][ T8291] program syz.0.1399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.420218][ T8291] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.761045][ T8339] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1420'. [ 134.807063][ T8343] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 134.835719][ T8345] program syz.0.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.845210][ T8345] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 134.945730][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 135.498454][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.519078][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.543309][ T8382] veth0: entered promiscuous mode [ 135.620953][ T8381] veth0: left promiscuous mode [ 135.657172][ T8371] program syz.7.1427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.666726][ T8371] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 135.885574][ T8396] sd 0:0:1:0: device reset [ 136.018786][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1439'. [ 136.036639][ T8417] loop8: detected capacity change from 0 to 2048 [ 136.051396][ T8417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.085432][ T8424] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 136.230965][ T6604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.826456][ T8448] program syz.0.1447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.108908][ T8448] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 137.424301][ T8469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1774 sclass=netlink_route_socket pid=8469 comm=syz.8.1454 [ 137.551861][ T8472] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 137.602274][ T8472] lo speed is unknown, defaulting to 1000 [ 137.617801][ T8476] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 137.756220][ T8480] lo speed is unknown, defaulting to 1000 [ 137.762331][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 137.762342][ T29] audit: type=1400 audit(1758028349.683:6426): avc: denied { create } for pid=8479 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 137.787735][ T29] audit: type=1400 audit(1758028349.683:6427): avc: denied { sys_admin } for pid=8479 comm="+}[@" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 138.065060][ T8499] program syz.5.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.086242][ T8499] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 138.452790][ T8515] program syz.0.1467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.462282][ T8515] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 138.592668][ T8520] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 138.704499][ T8520] lo speed is unknown, defaulting to 1000 [ 139.580127][ T8458] program syz.3.1449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.709343][ T8458] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 140.760701][ T8557] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 140.803050][ T8557] lo speed is unknown, defaulting to 1000 [ 141.006829][ T8566] program syz.7.1492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.016958][ T8566] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 142.402609][ T29] audit: type=1326 audit(1758028354.343:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.5.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd7eba9 code=0x7ffc0000 [ 142.429891][ T8610] loop8: detected capacity change from 0 to 512 [ 142.436731][ T29] audit: type=1326 audit(1758028354.343:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.5.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd7eba9 code=0x7ffc0000 [ 142.437133][ T8610] journal_path: Non-blockdev passed as './bus' [ 142.460175][ T29] audit: type=1326 audit(1758028354.373:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.5.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f4c3cd7eba9 code=0x7ffc0000 [ 142.466292][ T8610] EXT4-fs: error: could not find journal device path [ 142.489666][ T29] audit: type=1326 audit(1758028354.373:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.5.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd7eba9 code=0x7ffc0000 [ 142.519676][ T29] audit: type=1326 audit(1758028354.373:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.5.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd7eba9 code=0x7ffc0000 [ 142.543192][ T29] audit: type=1326 audit(1758028354.373:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.5.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4c3cd7eba9 code=0x7ffc0000 [ 142.691706][ T8619] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 142.700485][ T29] audit: type=1326 audit(1758028354.373:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.5.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd7eba9 code=0x7ffc0000 [ 142.723902][ T29] audit: type=1326 audit(1758028354.373:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.5.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3cd7eba9 code=0x7ffc0000 [ 142.805033][ T8599] program syz.0.1500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.815564][ T8599] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 142.861032][ T8598] program syz.7.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.871816][ T8598] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 143.159694][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 143.159708][ T29] audit: type=1326 audit(1758028355.103:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.322576][ T29] audit: type=1326 audit(1758028355.103:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.346003][ T29] audit: type=1326 audit(1758028355.133:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.369389][ T29] audit: type=1326 audit(1758028355.133:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.392824][ T29] audit: type=1326 audit(1758028355.133:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.416290][ T29] audit: type=1326 audit(1758028355.133:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.439763][ T29] audit: type=1326 audit(1758028355.133:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.463226][ T29] audit: type=1326 audit(1758028355.133:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.486608][ T29] audit: type=1326 audit(1758028355.133:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.510049][ T29] audit: type=1326 audit(1758028355.133:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8631 comm="syz.3.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51a627eba9 code=0x7ffc0000 [ 143.924285][ T8664] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 144.159507][ T8676] program syz.0.1518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.196883][ T8676] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 144.314090][ T8683] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1520'. [ 144.325182][ T8683] C: renamed from team_slave_0 [ 144.348636][ T8683] can0: slcan on ttyS3. [ 144.419479][ T8682] can0 (unregistered): slcan off ttyS3. [ 145.192266][ T8702] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 145.288058][ T8704] loop8: detected capacity change from 0 to 512 [ 145.330331][ T8704] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 145.363787][ T8704] EXT4-fs (loop8): orphan cleanup on readonly fs [ 145.376446][ T8704] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.1529: Block bitmap for bg 0 marked uninitialized [ 145.485162][ T8717] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 145.542027][ T8704] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 145.635894][ T8704] EXT4-fs (loop8): 1 orphan inode deleted [ 145.669610][ T8704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.798583][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.807510][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.842308][ T6604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.109913][ T8740] lo speed is unknown, defaulting to 1000 [ 146.846702][ T8758] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 146.927116][ T8764] program syz.8.1547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.936932][ T8764] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 146.998035][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1544'. [ 147.012778][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1544'. [ 147.188746][ T8773] FAULT_INJECTION: forcing a failure. [ 147.188746][ T8773] name failslab, interval 1, probability 0, space 0, times 0 [ 147.201621][ T8773] CPU: 0 UID: 0 PID: 8773 Comm: syz.0.1552 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.201649][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.201662][ T8773] Call Trace: [ 147.201668][ T8773] [ 147.201675][ T8773] __dump_stack+0x1d/0x30 [ 147.201738][ T8773] dump_stack_lvl+0xe8/0x140 [ 147.201758][ T8773] dump_stack+0x15/0x1b [ 147.201805][ T8773] should_fail_ex+0x265/0x280 [ 147.201831][ T8773] should_failslab+0x8c/0xb0 [ 147.201858][ T8773] __kmalloc_noprof+0xa5/0x3e0 [ 147.201921][ T8773] ? iter_file_splice_write+0xf9/0xa60 [ 147.201944][ T8773] iter_file_splice_write+0xf9/0xa60 [ 147.201964][ T8773] ? atime_needs_update+0x3be/0x3e0 [ 147.202065][ T8773] ? shmem_file_splice_read+0x5c2/0x600 [ 147.202094][ T8773] ? __pfx_iter_file_splice_write+0x10/0x10 [ 147.202116][ T8773] direct_splice_actor+0x153/0x2a0 [ 147.202136][ T8773] ? shmem_file_open+0x1/0x40 [ 147.202175][ T8773] splice_direct_to_actor+0x30f/0x680 [ 147.202192][ T8773] ? __pfx_direct_splice_actor+0x10/0x10 [ 147.202212][ T8773] do_splice_direct+0xda/0x150 [ 147.202228][ T8773] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 147.202249][ T8773] do_sendfile+0x380/0x650 [ 147.202460][ T8773] __x64_sys_sendfile64+0x105/0x150 [ 147.202487][ T8773] x64_sys_call+0x2bb0/0x2ff0 [ 147.202509][ T8773] do_syscall_64+0xd2/0x200 [ 147.202595][ T8773] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.202615][ T8773] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.202685][ T8773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.202702][ T8773] RIP: 0033:0x7f0bbb59eba9 [ 147.202716][ T8773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.202733][ T8773] RSP: 002b:00007f0bb9fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 147.202756][ T8773] RAX: ffffffffffffffda RBX: 00007f0bbb7e5fa0 RCX: 00007f0bbb59eba9 [ 147.202770][ T8773] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 147.202783][ T8773] RBP: 00007f0bb9fff090 R08: 0000000000000000 R09: 0000000000000000 [ 147.202795][ T8773] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000002 [ 147.202807][ T8773] R13: 00007f0bbb7e6038 R14: 00007f0bbb7e5fa0 R15: 00007fff747bb088 [ 147.202823][ T8773] [ 147.524569][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'. [ 147.533614][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'. [ 147.562253][ T8782] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 147.570032][ T8782] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1556'. [ 147.595529][ T8787] FAULT_INJECTION: forcing a failure. [ 147.595529][ T8787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.608680][ T8787] CPU: 1 UID: 0 PID: 8787 Comm: syz.7.1558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.608704][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.608714][ T8787] Call Trace: [ 147.608720][ T8787] [ 147.608727][ T8787] __dump_stack+0x1d/0x30 [ 147.608745][ T8787] dump_stack_lvl+0xe8/0x140 [ 147.608761][ T8787] dump_stack+0x15/0x1b [ 147.608828][ T8787] should_fail_ex+0x265/0x280 [ 147.608923][ T8787] should_fail+0xb/0x20 [ 147.608959][ T8787] should_fail_usercopy+0x1a/0x20 [ 147.608989][ T8787] _copy_from_user+0x1c/0xb0 [ 147.609014][ T8787] io_submit_one+0x52/0x11d0 [ 147.609046][ T8787] __se_sys_io_submit+0xfb/0x280 [ 147.609204][ T8787] __x64_sys_io_submit+0x43/0x50 [ 147.609274][ T8787] x64_sys_call+0x2d5d/0x2ff0 [ 147.609302][ T8787] do_syscall_64+0xd2/0x200 [ 147.609334][ T8787] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.609368][ T8787] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.609397][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.609464][ T8787] RIP: 0033:0x7fb66e7beba9 [ 147.609478][ T8787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.609492][ T8787] RSP: 002b:00007fb66d21f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 147.609564][ T8787] RAX: ffffffffffffffda RBX: 00007fb66ea05fa0 RCX: 00007fb66e7beba9 [ 147.609584][ T8787] RDX: 0000200000000880 RSI: 0000000000000001 RDI: 00007fb66d1db000 [ 147.609624][ T8787] RBP: 00007fb66d21f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.609634][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.609645][ T8787] R13: 00007fb66ea06038 R14: 00007fb66ea05fa0 R15: 00007ffd9ac13268 [ 147.609661][ T8787] [ 147.902422][ T8790] ================================================================== [ 147.910516][ T8790] BUG: KCSAN: data-race in dequeue_signal / ptrace_check_attach [ 147.918144][ T8790] [ 147.920451][ T8790] read-write to 0xffff88810399b6b8 of 8 bytes by task 8791 on cpu 1: [ 147.928490][ T8790] dequeue_signal+0x309/0x3b0 [ 147.933154][ T8790] get_signal+0x377/0xf70 [ 147.937464][ T8790] arch_do_signal_or_restart+0x96/0x480 [ 147.942990][ T8790] exit_to_user_mode_loop+0x7a/0x100 [ 147.948258][ T8790] do_syscall_64+0x1d6/0x200 [ 147.952840][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.958713][ T8790] [ 147.961018][ T8790] read to 0xffff88810399b6b8 of 8 bytes by task 8790 on cpu 0: [ 147.968537][ T8790] ptrace_check_attach+0xaa/0x290 [ 147.973546][ T8790] __se_sys_ptrace+0xd3/0x2c0 [ 147.978208][ T8790] __x64_sys_ptrace+0x55/0x70 [ 147.982865][ T8790] x64_sys_call+0x286c/0x2ff0 [ 147.987525][ T8790] do_syscall_64+0xd2/0x200 [ 147.992023][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.997897][ T8790] [ 148.000198][ T8790] value changed: 0x0000000000000000 -> 0x0000000008010000 [ 148.007291][ T8790] [ 148.009597][ T8790] Reported by Kernel Concurrency Sanitizer on: [ 148.015728][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.5.1557 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.025425][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.035462][ T8790] ==================================================================